Mrfoofoo, Binance, Polymarket, Silent Train, robosurance, privacy, and Josh Marpet - SWN #629
Summary
Security Weekly News episode 629 covers a massive $6 billion hack on Binance attributed to North Korea and a Polymarket exploit that drained $2.5 million via a malicious JavaScript script. The episode also discusses Veracode’s report on AI coding vulnerabilities, the sharing of exploit infrastructure between Chinese state actors, and new insurance products for household robots. Guest Josh Marpet analyzes the privacy risks of AI companion data sales and the impact of new FinCEN rules allowing anonymous corporate ownership on threat attribution.
Topics discussed
Intro, Halloween banter, and Government Security Summit promo
Binance hack: $6B stolen, North Korea suspected
Sponsor: ThreatLocker Zero Trust
Polymarket exploit and crypto gambling absurdities
Gen AI coding security report and Ada Lovelace history
China-linked threat actor and Volt Typhoon network
Robo-assurance: Insurance for household robots
AI relay services bypassing export controls
AI girlfriend privacy risks and Character.ai bankruptcy
Guest Josh Marpet: FinCEN rule and corporate anonymity
GM settlement for selling driver data and privacy fears
Outro and subscription call to action
Listen ad-free on Castria