9/11 at 25, OfferLoader, Gemini CLI, Liquid, 10% Doom, Josh Marpet, and More - SWN #615
Summary
Security Weekly News episode 615 marks the 25th anniversary of 9/11 while covering critical security shifts, including how AI coding agents have moved the "shift left" boundary and a CVSS 10 vulnerability in Gemini CLI that bypassed standard controls. The episode details a massive malware operation hiding in gaming videos, a $263 million Bitcoin sidechain theft with partial refunds, and the first US sentencing under the Take It Down Act. It also addresses a Veradigm data breach and features Anthropic’s alignment lead discussing the risks of future superintelligence.
Topics discussed
Intro and 25th Anniversary of 9/11
Reflections on 9/11 and its impact on security
Shift Left and AI Coding Agents
10,000 Malware Loaders in Gaming Videos
Sponsored Segment: ThreatLocker
Google AI Threat Tracker: Agentic Workflows
Gemini CLI RCE Vulnerability (CVSS 10)
First Take It Down Act Sentencing
Bitcoin Sidechain Theft and Return
Sponsored Segment: Tanium Atlas
Veradigm Data Breach and SEC 8-K
Anthropic Lead on AI Existential Risk
Outro and Final Shoutouts
Listen ad-free on Castria