ServiceNow vulnerabilities warning, PaperCut zero-day, McKesson healthcare breach
Summary
Steve Prentice covers ServiceNow’s critical AI flaws, a PaperCut 0-day, and a massive McKesson breach claimed by Shiny Hunters. The episode also details a new "Terminal Fix" attack, a Hasbro data leak, and a joint letter from tech giants urging global cyber defense upgrades against AI threats. Finally, Prentice discusses how AI-generated vulnerability reports are driving down bug bounty prices and disrupting the industry.
Topics discussed
Intro: ServiceNow maximum severity vulnerabilities
ServiceNow AI platform security patches
PaperCut 0-day exploited in active attacks
McKesson breach and ShinyHunters claim
TerminalFix: Fake Cloudflare click-fix malware
TerminalFix campaign details and targets
Sponsor: KnowBefore AI security training
Brave Browser adds email aliases for privacy
Hasbro suffers another cyber attack
Hasbreach details and lack of disclosure
Tech firms urge global cyber defense boost
Signatories and demands of the open letter
AI reports drive down bug bounty prices
Impact of AI slop on bug bounty researchers
Outro and feedback information
Listen ad-free on Castria