Episode Details

On this week’s show Patrick Gray, and James Wilson are joined by bearded man of leisure Adam Boileau to discuss the week’s cybersecurity news, including:

• Accidental AI agent hacking sprees have the world’s media freaking out, but we think it’s all pretty funny
• The bugpocalypse is so chaotic, Microsoft can’t patch fast enough
• A ColdCard wallet flaw led to millions in Bitcoin theft, but the back story behind the bug is bonkers
• Iran hacks and disrupts water infrastructure in multiple American states
• North Korea’s state-backed hackers turn criminal. Or their criminals turn into state-backed hackers. Or something. It’s all a bit confusing, actually.
• Much, much more!

This week’s show is brought to you by Sondera. Co-founder Josh Devon joins Patrick and James to talk through some absolutely hilarious LLM horror stories.

This episode is also available on YouTube

Show notes

• OpenAI says rogue agent behind Hugging Face hack broke into additional services | therecord.media
• Anthropic Says Claude Hacked Real Systems During Cybersecurity Tests | wired.com
• Claude uploaded malware to PyPI in Anthropic's botched test | BleepingComputer
• Nobody Knows if OpenAI’s and Anthropic’s AI Hacking Sprees Are Illegal | wired.com
• Scanning 7.6 Petabytes of HuggingFace Training Data for Secrets Truffle Security Co. |
• Anthropic’s New AI Model Can Identify More Software Bugs Than Ever. Microsoft Is Struggling to Fix Them Fast Enough. | Social Signals
• Chrome Needs Twice-a-Week Patching Thanks to AI Bug Hunting | wired.com
• Google says it fixed more Chrome bugs in June than over the past two years, thanks to AI | TechCrunch Security
• Mythos uncovers crypto weaknesses that went unknown for years | arstechnica.com
• COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft | BleepingComputer
• Chris Masterjohn (@ChrisMasterjohn) on X | X (formerly Twitter)
• wale.moca 🐳 (@waleswoosh) on X | X (formerly Twitter)

• Listen Now