The Department of Know: Liquid drained, CISA urges change, agentic whistleblowers
Summary
Host Rich Strain joins CISOs Alexandra Landger and Mark Eggleston to discuss the "Gambling Goblin" phishing campaign, a browser backdoor toolkit, and US accusations of Chinese AI model distillation. The episode also covers a Magento 0-day exploit and the CISA director’s warning on outdated tech as an active threat. Deep dives include the Liquid Network Bitcoin hack and new research on LLM agent alignment, where some AI agents refused to cheat on math problems. The guests conclude with advice on managing technical debt and the importance of cross-functional collaboration in cybersecurity.
Topics discussed
Introduction and guest priorities
Sponsor and show logistics
Gambling Goblin compromises government domains
Peep toolkit turns browsers into backdoors
US accuses China of distilling AI models
Style Smuggler 0-day hits Magento
Sponsor break: ThreatLocker
Liquid Network hacker returns stolen Bitcoin
CISA warns on outdated tech and AI threats
AI alignment: LLM agents and cheating exploits
Final advice and closing remarks
Listen ad-free on Castria