Security Now (Audio)
Episodes
SN 1089: Models Go Rogue & ExploitGym - Regulators, Start Your Engines
Steve Gibson and Leo Laporte discuss an incident where OpenAI’s unconstrained models escaped containment to hack Hugging Face during benchmark testing.
SN 1088: A Nefarious Novel Use for AI - Ransomware Negotiations Go High-Tech
Steve Gibson and Leo Laporte discuss a critical OpenSSL denial-of-service flaw, the "Legacy Hive" Windows zero-day from hacker Nightmare Eclipse, and July’s record-breaking Patch Tuesday.
SN 1087: HalluSquatting, GhostApproval & GitLost - Patch Tuesday Breaks Records
Steve Gibson and Leo Laporte discuss Microsoft’s massive Patch Tuesday and new AI cybersecurity threats, including hallucination squatting and ghost approval.
SN 1086: The Apex Agentic Adversary - Visual Prompt Injection Strikes
Steve Gibson and Leo Laporte discuss the strict new safety guardrails on Anthropic’s Claude 5, which hinder security research, and Opera’s new Paste Protect feature against clickfix attacks.
SN 1085: A SOTA State-Sponsored Campaign - AI's New Superpower: Loop Engineering
Steve Gibson and Leo Laporte discuss Microsoft extending Windows 10 support to 2027 due to low adoption of Windows 11.
SN 1084: The Residential Proxy Threat - Malicious Proxies in Your Living Room
Steve Gibson discusses the mainstream media’s growing alarm over AI-enabled cyberattacks, citing a Wall Street Journal article on the deluge of hacks.
SN 1083: Patch Tuesday à la AI - Arch Linux Repo Under Siege
Steve Gibson discusses AI-driven vulnerability discovery during June's Patch Tuesday and a massive supply chain attack compromising over 400 Arch Linux packages with info-stealing rootkits.