Episode Details

In today’s briefing, we analyze a significant shift in threat delivery as Microsoft warns that AI chatbot recommendations are being poisoned to redirect users to cryptojacking sites. This evolution from traditional SEO poisoning highlights a new frontier for social engineering targeting high-performance GPU systems. We also examine the 'Megalodon' campaign, which backdoored over 5,500 GitHub repositories in a six-hour window, and a critical SQL injection flaw in Ghost CMS affecting over 700 domains, including prestigious academic institutions. Our coverage concludes with attribution updates regarding Iranian-backed attacks on Los Angeles transit and law enforcement actions in the Netherlands.

Topics Covered

• 🚨 AI Search Poisoning: How LLM chatbots are being manipulated to serve malicious software downloads.
• 🔒 Ghost CMS Vulnerability: Exploitation of CVE-2026-26980 in widespread ClickFix social engineering attacks.
• 🦈 Megalodon Campaign: The rapid poisoning of 5,500+ GitHub repositories targeting developer secrets.
• 🌐 Infrastructure Attribution: Linking the LA transit breach to Iranian intelligence and the Ajax hacker arrest.
• 🛡️ Strategic Resilience: Reflecting on twenty years of cybersecurity evolution from perimeters to AI-native security.

The information provided in this podcast is for educational and informational purposes only and does not constitute professional security advice.

Neural Newscast is AI-assisted, human reviewed. View our AI Transparency Policy at NeuralNewscast.com.

• (00:11) - Introduction
• (00:26) - Megalodon and GitHub Supply Chain Risks
• (00:26) - AI Search Poisoning and Ghost CMS Exploits