Episode Details

On this week’s show special guest co-host Chris Krebs joins Patrick Gray and James Wilson to discuss the week’s cybersecurity news. They cover:

• Oopsie daisy! OpenAI agents went rogue and hacked Hugging Face
• US and China trade AI model ban threats
• Iran has been using SS7 queries to locate and target US troops
• Scattered Spider is having a hard time, not just because of Microsoft’s GDID
• And much, much more!

This week’s show is brought to you by Push Security. Luke Jennings joins Patrick this week to talk about the rise in authorisation phishing, like device code phishing, and what companies like Push are doing about it.

This episode is also available on YouTube.

Show notes

• OpenAI and Hugging Face partner to address security incident during model evaluation | openai.com
• Security incident disclosure — July 2026 | Social Signals
• Hugging Face confirms breach affected internal datasets and credentials, urges users to take action | TechCrunch Security
• Cheating behaviour in frontier model evaluations | AISI Work | Social Signals
• JADEPUFFER: Agentic ransomware for automated database extortion | Sysdig | Social Signals
• Secret Claude tracker shocks users after Anthropic's anti-surveillance stance | Ars Technica
• EXCLUSIVE: Beijing is looking at curbing overseas access to China's top AI models, sources say | reuters.com
• https://www.axios.com/2026/07/20/ai-us-china-open-source-kimi |
• Alibaba to ban employees from using Anthropic's coding tool, source says | reuters.com
• Iran abused mobile networks’ vulnerabilities to locate U.S. military in the Middle East, report says | TechCrunch Security
• Apps Marketed to US Troops Are Shipping Chinese and Russian Code | wired.com
• Trump calls for new election security measures | NBC News Tech
• Scattered Spider hackers sentenced to 5.5 years over £29