Episode Details

On this week’s show, Patrick Gray, Adam Boileau and James WIlson discuss the week’s cybersecurity news. They cover:

• Low skill actors compromise 600 Fortinets with AI-generated playbooks
• Anthropic calls out Chinese AI firms over model distillation
• Meta’s director of AI safety tells her ClawdBot not to delete her mail… so of course it does
• Peter Williams cops 7 years in jail for selling L3 Harris Trenchant’s exploits to Russia
• Ivanti got hacked in 2021 via… bugs in Ivanti

This episode is sponsored by line-rate network capture system Corelight. CEO Brian Dye joins to discuss what AI can do for defenders, and what it can’t.

This episode is also available on Youtube.

Show notes

• AI-augmented threat actor accesses FortiGate devices at scale
• "this reads to me like: they ran existing tools.... but with a cool dashboard :D"
• Anthropic accuses Chinese labs of trying to illicitly take Claude’s capabilities | CyberScoop
• Detecting and preventing distillation attacks
• Hegseth warns Anthropic to let the military use the company’s AI tech as it sees fit, AP sources say
• Anthropic Rolls Out Embedded Security Scanning for Claude
• AWS's AI Coding Bot Kiro Caused a 13-Hour Outage
• Running OpenClaw safely: identity, isolation, and runtime risk
• Former Adobe, Cisco and Salesforce CISO talks AI pentesting
• History Repeats: Security in the AI Agent Era
• Meta Director of AI Safety Allows AI Agent to Accidentally Delete Her Inbox
• Microsoft says Office bug exposed customers' confidential emails to Copilot AI | TechCrunch
• The (tangential) fix: Microsoft adds Copilot data controls to all storage locations
• Ex-L3Harris executive sentenced to 87 months in prison for selling zero-day exploits to Russian broker

• Listen Now