Episode Details

In this session, Aaron Cole and Lauren Mitchell break down the guilty plea of Connor Riley Moucka, the threat actor known as 'Judische' who orchestrated the 2024 Snowflake extortion campaign. The discussion moves to the alarming exposure of thousands of Rockwell Automation PLCs, specifically the MicroLogix 1400 and 1100 series, and the implications for US water utility security. We also dive into the 'NatJack' vulnerability class affecting Windows and Linux NAT implementations and why a new study suggests AI-driven patching might currently be a 'net-negative' for security teams due to high defect rates in autonomous code generation.

Topics Covered

• 🔒 Connor Riley Moucka's guilty plea in the Snowflake extortion campaign and the impact on 165 organizations.
• 🌐 The exposure of 4,407 Rockwell PLCs and its correlation with recent cyberattacks on US water infrastructure.
• 🔐 The Windows Hello for Business bypass and Entra ID persistence techniques disclosed by researcher Dirk-jan Mollema.
• 🛡️ Analysis of the 'NatJack' attack class (CVE-2026-56181 and CVE-2026-63913) for TCP session hijacking.
• 📊 Empirical data from 1Password on the 26% success rate of AI-generated security patches.

Disclaimer: Prime Cyber Insights is for informational purposes for cybersecurity practitioners. It does not constitute legal or professional advice.

Neural Newscast is AI-assisted, human reviewed. View our AI Transparency Policy at NeuralNewscast.com.

• (00:10) - Introduction
• (00:22) - The Snowflake Extortion Guilty Plea
• (00:34) - Exposed Rockwell PLCs and Water Infrastructure
• (02:43) - Conclusion