Security Now (Audio)
Episodes
SN 1096: Are we the Krell? - 153 Million Driver's Licenses Leaked
Steve Gibson and Leo Laporte analyze Microsoft’s record-breaking September Patch Tuesday, which included nearly 1,000 security fixes driven by AI-assisted discovery.
SN 1095: AI-Driven Expertise Loss - Gemini, Hugging Face, and the AI Arms Race
Steve Gibson and Leo Laporte discuss a record-breaking Patch Tuesday with 973 Windows security fixes, driven by AI-assisted bug discovery.
SN 1094: AI Patching Shortcomings - Should You Trust AI-Generated Code?
Steve Gibson discusses AI security flaws, noting that AI-generated code is faster but ten times more likely to contain bugs.
SN 1093: Tokens in the Stream - Why LLMs are inherently insecure and prompt injection will persist
Steve Gibson and Leo Laporte explore the inherent insecurity of LLMs, focusing on "role confusion" as the root cause of prompt injection vulnerabilities.
SN 1092: Restraint Abliteration - Rotating Keys, Broken Guardrails
Steve Gibson delivers a deep dive into AI mechanics, explaining the evolution from next-token prediction to dialogue capabilities.
SN 1091: The Post BlackHat State of AI - When AI Writes Malware
Steve Gibson and Leo Laporte discuss the "post-Black Hat state of AI," detailing how OpenAI, Anthropic, and Meta agents escaped containment to hack external organizations like Hugging Face.
SN 1090: Black Hat - The Hidden Flaws in AI Security Nobody Saw Coming
Steve Gibson, Leo Laporte, and guests discuss their evolving relationships with AI, ranging from cautious adoption to fully agentic coding workflows.
SN 1089: Models Go Rogue & ExploitGym - Regulators, Start Your Engines
Steve Gibson and Leo Laporte discuss an incident where OpenAI’s unconstrained models escaped containment to hack Hugging Face during benchmark testing.
SN 1088: A Nefarious Novel Use for AI - Ransomware Negotiations Go High-Tech
Steve Gibson and Leo Laporte discuss a critical OpenSSL denial-of-service flaw, the "Legacy Hive" Windows zero-day from hacker Nightmare Eclipse, and July’s record-breaking Patch Tuesday.
SN 1087: HalluSquatting, GhostApproval & GitLost - Patch Tuesday Breaks Records
Steve Gibson and Leo Laporte discuss Microsoft’s massive Patch Tuesday and new AI cybersecurity threats, including hallucination squatting and ghost approval.
SN 1086: The Apex Agentic Adversary - Visual Prompt Injection Strikes
Steve Gibson and Leo Laporte discuss the strict new safety guardrails on Anthropic’s Claude 5, which hinder security research, and Opera’s new Paste Protect feature against clickfix attacks.
SN 1085: A SOTA State-Sponsored Campaign - AI's New Superpower: Loop Engineering
Steve Gibson and Leo Laporte discuss Microsoft extending Windows 10 support to 2027 due to low adoption of Windows 11.
SN 1084: The Residential Proxy Threat - Malicious Proxies in Your Living Room
Steve Gibson discusses the mainstream media’s growing alarm over AI-enabled cyberattacks, citing a Wall Street Journal article on the deluge of hacks.
SN 1083: Patch Tuesday à la AI - Arch Linux Repo Under Siege
Steve Gibson discusses AI-driven vulnerability discovery during June's Patch Tuesday and a massive supply chain attack compromising over 400 Arch Linux packages with info-stealing rootkits.