https://media.blubrry.com/1463551/content.blubrry.com/1463551/Defensive_Security_Podcast_Episode_360.mp3 Podcast: Play in new window | Download | Embed Subscribe: RSS Please consider supporting the DefSec podcast here. 1. AI agents broke into 395 organisations, including ones their operator ruled out https://www.helpnetsecurity.com/2026/09/11/ai-agents-papercut-ng-mf-attack-campaign/ 2. A nuclear agency lost reactor data to an ownCloud bug patched two years earlier https://www.darkreading.com/cyberattacks-data-breaches/old-unpatched-flaws-attackers-philippines-nuclear-agency 3. One in ten exposed AI gateways still accept the example key from the setup guide https://thehackernews.com/2026/09/nearly-1-in-10-exposed-litellm-gateways.html 4. Click rate falls when your phishing tests get easier, not when your people get better https://www.helpnetsecurity.com/2026/09/11/pistachio-employee-phishing-risk-report/ 5. Microsoft ships 974 fixes, and the bottleneck moves to whoever has to test them https://krebsonsecurity.com/2026/09/microsoft-plugs-nearly-1000-security-holes/ ### Share this: * Share on X (Opens in new window) X * Share on Facebook (Opens in new window) Facebook * Share on LinkedIn (Opens in new window) LinkedIn * ### _Related_

https://media.blubrry.com/1463551/content.blubrry.com/1463551/Defensive_Security_Podcast_Episode_359.mp3 Podcast: Play in new window | Download | Embed Subscribe: RSS Please consider supporting the DefSec podcast here. 1. CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing https://thehackernews.com/2026/08/cisa-red-team-compromised-two-critical.html 2. CISA: Most exploited vulnerabilities should have been eradicated decades ago https://www.theregister.com/security/2026/08/28/cisa-most-exploited-vulnerabilities-should-have-been-eradicated-decades-ago/5293194 3. North Korean Fake Employees Move Into Sales, Marketing and Healthcare Roles https://www.helpnetsecurity.com/2026/08/28/north-korean-remote-workers-jobs-sales-and-marketing/ 4. Unit 42 says one attacker chained 50 vulns and attack paths in 10 hours https://www.cybersecuritydive.com/news/frontier-ai-tipping-scales-cyber-adversaries/829088/ 5. AI Bug Report Flood Is Cratering Bounty Prices and Triage Queues https://www.darkreading.com/vulnerabilities-threats/vulnpocalypse-repricing-bug-bounty-economy ### Share this: * Share on X (Opens in new window) X * Share on Facebook (Opens in new window) Facebook * Share on LinkedIn (Opens in new window) LinkedIn * ### _Related_

16 channels of DDR5, 5 GHz clock speeds, and support for CXL 3.1 memory god boxes? What's not to like?

https://media.blubrry.com/1463551/content.blubrry.com/1463551/Defensive_Security_Podcast_Episode_357.mp4 Podcast: Play in new window | Download | Embed Subscribe: RSS Please consider supporting the DefSec podcast here. Stories: 1. Ransomware Gangs Bypass the CEO, Target the 40-Something IT Manager https://www.theregister.com/security/2026/08/09/ransomware-gangs-skip-the-ceo-head-straight-for-the-40-something-it-manager/5284499 2. Ransomware Attacks Spike While Industry Attention Shifts to AI https://www.theregister.com/security/2026/08/07/ransomware-attacks-spike-as-world-distracted-by-ai/5284934 3. ChainDrop supply chain compromise: Anatomy of a self-propagating worm https://www.microsoft.com/en-us/security/blog/2026/08/04/chaindrop-supply-chain-compromise-anatomy-self-propagating-worm/ 4. AI Agent Tried to Backdoor a Real Open-Source Repo During a Security Test https://thehackernews.com/2026/08/claude-mythos-5-tried-to-backdoor-real.html 5. Cloudflare Ditches Most Third-Party Security Tools — But Says Don’t Copy Them https://www.theregister.com/security/2026/08/04/cloudflare-has-mostly-ditched-third-party-security-tools-suggests-not-trying-that-at-home/5282600 ### Share this: * Share on X (Opens in new window) X * Share on Facebook (Opens in new window) Facebook * Share on LinkedIn (Opens in new window) LinkedIn * ### _Related_

https://media.blubrry.com/1463551/content.blubrry.com/1463551/Defensive_Security_Podcast_Episode_356.mp3 Podcast: Play in new window | Download | Embed Subscribe: RSS Please consider supporting the DefSec podcast here. Stories: * https://www.cybersecuritydive.com/news/anthropic-claude-ai-hacking-test/826708 * https://thecybersecguru.com/news/openai-ai-agent-containment-escapes-hugging-face-investigation/ * https://www.bleepingcomputer.com/news/security/after-the-break-in-what-attackers-do-once-theyre-already-inside/ * https://www.darkreading.com/endpoint-security/why-resetting-passwords-no-longer-stop-attacks * https://cybersecuritynews.com/adform-advertising-platform-compromised/ ### Share this: * Share on X (Opens in new window) X * Share on Facebook (Opens in new window) Facebook * Share on LinkedIn (Opens in new window) LinkedIn * ### _Related_

https://media.blubrry.com/1463551/content.blubrry.com/1463551/Defensive_Security_Podcast_Episode_355.mp3 Podcast: Play in new window | Download | Embed Subscribe: RSS https://www.helpnetsecurity.com/2026/07/21/sonicwall-sma-zero-days-exploited-cve-2026-15409-cve-2026-15410/ https://thehackernews.com/2026/07/qilin-ransomware-attackers-exploit-pan.html https://thehackernews.com/2026/07/worlds-largest-ai-model-repository.html https://openai.com/index/hugging-face-model-evaluation-security-incident/ https://www.darkreading.com/identity-access-management-security/identity-attacks-overtake-exploits-top-ransomware-cause https://www.helpnetsecurity.com/2026/07/21/estee-lauder-data-breach-oracle-ebs/ ### Share this: * Share on X (Opens in new window) X * Share on Facebook (Opens in new window) Facebook * Share on LinkedIn (Opens in new window) LinkedIn * ### _Related_

Microsoft, SpaceX, Palantir, alongside dozens of other tech companies from the U.S. and Europe, have joined the Open Secure AI Alliance.