The Department of Know: South Korean bank hacks, agents target Wikipedia, ransomware recovery fraud
Summary
Host Rich Straffolino discusses a botnet using GitHub poetry for C2, Meta's rushed fix for Muse VM escapes, and an ASOS breach involving unauthorized push notifications. The panel also covers an FBI contractor breach, AI agents compromising Wikipedia tools, and a DOJ charge against a ransomware recovery CEO who secretly paid hackers. Guests Chris Ray and Derek Fisher analyze the economic imbalance of AI-generated vulnerability reports and the rising threat of autonomous AI agents in cyberattacks.
Topics discussed
Intro, guest priorities, and show housekeeping
Botnet using GitHub poems for C2 and self-hosted AI risks
Meta Muse AI agent virtual machine escape flaws
ASOS data breach and unauthorized push notification
FBI contractor fired over unpatched PeopleSoft breach
Sponsor break: Vanta
AI agents in bank hacks and open source vulnerability floods
Rogue OpenAI agents targeting Wikipedia tools
DOJ charges ransomware recovery CEO for fraud
Outro, guest plugs, and final sponsor mention
Listen ad-free on Castria