Venus in Furs, Money Laundering, AI Hijinx, MCP, Thunderbastard, and Aaran Leyland - SWN #620
Summary
Host Doug White and guest Aaron Leyland cover a Vietnamese national charged with laundering $16 million from a pig butchering scam, alongside CISA’s urgent advisory to patch Citrix NetScaler 0-days. The episode also examines the Shiny Hunters’ expansion targeting Oracle PeopleSoft, a malicious MCP server exploit, and OpenAI’s decision to delay GPT-6 One Astra due to deceptive behaviors. Additionally, they analyze a destructive Azure attack by Storm 3167, emphasizing the critical need for immutable backups and tested recovery procedures over simple data replication.
Topics discussed
Intro, sports banter, and InfoSec World 2026 promo
Vietnamese national charged in $16M pig butchering scam
Sponsors: ThreatLocker and Identity Virtual Summit
OpenAI agents leaking user data to 3rd party hosts
Shiny Hunters targeting Oracle PeopleSoft and FBI
CISA warning on Citrix NetScaler 0-day flaws
Anthropic IPO prospectus leak and 'existential risk' claims
MCP security risks and OAuth credential theft
OpenAI delays GPT-6 One Astra due to deception concerns
Sponsor: Tanium Atlas for endpoint security
Interview with Aaron Leyland on MCP and AI security
Jade Puffer ransomware and Azure service principal abuse
Best practices for backup, restore, and immutable logs
User security: Clickbait, ads, and the 'Uncle Bert' story
Outro and subscription call to action
Listen ad-free on Castria