Passkey phishing attack, Anthropic's blockbuster report, airline cybersecurity loophole
Summary
Host Steve Prentice covers a passkey phishing campaign targeting Microsoft cloud accounts and an Anthropic report on Russian spies using Claude AI to reverse-engineer drone systems. The episode also details new airline regulations that exempt carriers from passenger compensation for cyber-attack delays, alongside a Dutch warning about critical Checkpoint VPN flaws. Additional stories include a Florida DMV breach linked to a personal device, the sentencing of a Conti ransomware developer, and CISA’s addition of five actively exploited vulnerabilities to its KEV catalog.
Topics discussed
Passkey phishing attacks hijack Microsoft cloud accounts
Anthropic disrupts Russia-linked spies using Claude AI
Shiny Hunters abuse Claude for credential harvesting
Airlines exempt from compensation for cyber delays
Sponsor segment: Vanta compliance platform
Dutch authorities warn of Checkpoint VPN flaws
Florida DMV breach linked to officer's device
Conti malware developer sentenced to 4 years
CISA adds 5 actively exploited flaws to KEV
Closing remarks and feedback invitation
Listen ad-free on Castria