Security Now (Audio)

Folgen

1. vor 4 Tagen

   SN 1102: A Strategic Plug Pull - Lessons From a Global Patch-and-Panic Fire Drill

   A newly uncovered PHP vulnerability put nearly 70% of the internet at risk, sending governments and enterprises into a frenzy as AI-powered attackers raced to exploit a flaw that had lurked unnoticed for 14 years. Hear why this could be jus
   2 h 54
2. 21. Okt.

   SN 1101: ECDSA's Curves Origins - When AI Becomes the Attacker

   An unreleased AI solved a 26-year-old cryptographic secret in less than half an hour, exposing the origins of a widely used standard. Discover what this jaw-dropping breakthrough means for the future of trust and transparency in cybersecuri
   2 h 32
3. 14. Okt.

   SN 1100: Booby Trapping LLMs - AI Frenzy in Cybercrime

   Think your open-source AI model is safe? This episode uncovers how LLMs can be secretly booby-trapped with undetectable backdoors, raising the stakes for anyone deploying AI in serious environments. • Anthropic cuts live Internet access dur
   2 h 49
4. 7. Okt.

   SN 1099: An Alien Mind - From RSA Weakness to Agentic Attacks

   As AI becomes startlingly capable, top minds at OpenAI admit they can't always control what their own creations do—or even fully understand how they think. This episode dives into the real-world tension between rapid progress and the growin
   3 h 03
5. 30. Sept.

   SN 1098: How worried should we be? - Unpredictable Agents

   With millions racing to embrace AI assistants and cybercriminals pivoting to new, high-stakes tactics, the episode tackles the dizzying pace of change and asks: just how worried should we be? The discussion pulls back the curtain on AI's un
   2 h 42
6. 23. Sept.

   SN 1097: Mega Patch Tuesday Fallout - When AI Outsmarts Its Makers

   After Microsoft's historic Mega Patch Tuesday, enterprise IT teams worldwide are scrambling as a wave of updates triggers system meltdowns, broken domains, and silent Excel failures. Find out how AI-driven speed collided with real-world cha
   2 h 50
7. 16. Sept.

   SN 1096: Are we the Krell? - 153 Million Driver's Licenses Leaked

   Are we charging toward a Krell-style catastrophe with AI, arming ourselves with incomprehensible power while missing the real risks lurking beneath the code? • The full report on last week's nearly 1,000 Microsoft security fixes. • Five mon
   2 h 51
8. 9. Sept.

   SN 1095: AI-Driven Expertise Loss - Gemini, Hugging Face, and the AI Arms Race

   OpenAI's latest advances have the rumor mill buzzing about "hidden thoughts" and unsupervisable models, but are AI safety experts panicking over the wrong threat? Get the clear-headed take behind the headlines. • We start out with a classic
   3 h 06
9. 2. Sept.

   SN 1094: AI Patching Shortcomings - Should You Trust AI-Generated Code?

   AI-generated code is flooding the industry, but researchers reveal that almost half of it contains critical vulnerabilities. This week, we unpack what happens when the race for automation outpaces security best practices. • A possible means
   2 h 52
10. 26. Aug.

    SN 1093: Tokens in the Stream - Why LLMs are inherently insecure and prompt injection will persist

    Turns out, every chatbot conversation runs on a messy hack at the heart of language models, making prompt injection an unsolved—and possibly unsolvable—security threat. Steve and Leo unravel the research that explains why "roles" in AI aren
    2 h 48
11. 19. Aug.

    SN 1092: Restraint Abliteration - Rotating Keys, Broken Guardrails

    From autocorrect to full-fledged conversationalists, discover how a few tweaks transformed language models—and why understanding this shift exposes urgent questions about AI safety and control. • Trusting an open source AI proxy might bite
    2 h 49
12. 12. Aug.

    SN 1091: The Post BlackHat State of AI - When AI Writes Malware

    AI agents are breaking free from their test environments, outsmarting their creators and breaching real-world networks in ways that no one predicted. Discover how these agentic models are changing the game for both cyber offense and defense
    2 h 51
13. 6. Aug.

    SN 1090: Black Hat - The Hidden Flaws in AI Security Nobody Saw Coming

    At Black Hat Las Vegas, the Security Now crew digs into how AI is not just finding hidden software bugs but also fueling both groundbreaking innovation and alarming new exploits. When open models can launch surprise Bitcoin heists, who draw
    2 h 05
14. 29. Juli

    SN 1089: Models Go Rogue & ExploitGym - Regulators, Start Your Engines

    What happens when an unconstrained OpenAI model goes rogue and hacks into Hugging Face, breaching real-world security boundaries? This episode unpacks a watershed moment for AI safety that has everyone in cybersecurity talking. • OpenAI's u
    3 h 08
15. 22. Juli

    SN 1088: A Nefarious Novel Use for AI - Ransomware Negotiations Go High-Tech

    Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on t
    2 h 47
16. 15. Juli

    SN 1087: HalluSquatting, GhostApproval & GitLost - Patch Tuesday Breaks Records

    AI is rewriting the rules of cybersecurity, and this week, massive government and private sector moves show just how quickly the stakes are rising. Find out how regulators, attackers, and defenders are all scrambling to keep up as vulnerabi
    2 h 49
17. 8. Juli

    SN 1086: The Apex Agentic Adversary - Visual Prompt Injection Strikes

    From the sudden retirement of Internet pioneer Vint Cerf to the unstoppable advance of "apex agentic adversaries," get a front-row seat to the unfolding security revolution and its massive real-world stakes. • Why Fable5's re-release has di
    2 h 53
18. 1. Juli

    SN 1085: A SOTA State-Sponsored Campaign - AI's New Superpower: Loop Engineering

    AI is now uncovering and fixing thousands of hidden software bugs faster than humans can keep up, but not everyone is playing by the rules. Find out how state-sponsored attackers and careless disclosures are turning the cybersecurity playbo
    2 h 50
19. 24. Juni

    SN 1084: The Residential Proxy Threat - Malicious Proxies in Your Living Room

    A flood of everyday gadgets, from cheap streaming boxes to digital photo frames, are being secretly conscripted into global proxy networks and used to mask major cyberattacks—possibly even targeting your own home network. • Worries of AI-po
    2 h 48
20. 17. Juni

    SN 1083: Patch Tuesday à la AI - Arch Linux Repo Under Siege

    This episode unpacks the jaw-dropping surge in vulnerabilities unearthed by AI, revealing how Microsoft shattered its own patch records while adversaries and defenders race to outpace each other. The conversation gets real about whether AI
    2 h 36