5bytespodcast

AI agents are trying to hack government websites, Microsoft says attackers have the early advantage with AI, Firefox gets a major makeover, Cisco patches an actively exploited zero-day, WSL Containers arrive and McDonald's is using AI to help figure out how much customers will pay and more.

Reference Links: https://www.rorymon.com/blog/ai-agents-go-rogue-firefox-gets-a-makeover-wsl-containers-arrive/

Featured on this episode: Windows 11 26H2 begins rolling out, Microsoft pauses a troublesome Office update, and AVD users encounter new black screen issues. Plus, AI agents feature heavily this week — from autonomous cyberattacks and malware to OpenAI’s new always-on Dots agents. I also cover WDS deprecation, several actively exploited vulnerabilities, an extraordinary NHS data-loss incident, and more.

Reference Links: https://www.rorymon.com/blog/windows-11-26h2-arrives-ai-agents-run-wild/

On this week’s episode of the 5BytesPodcast, I cover a Windows 11 update causing domain trust issues, Microsoft’s timeline for finally retiring IE Mode, major cloud data loss at AWS following attacks in the Middle East, and contrasting warnings about the future of AI from Nvidia and Anthropic. Plus, newly unsealed documents reveal some eye-opening internal comments from Microsoft and OpenAI about AI scraping, publishers and the future of the web.

Reference Links:

https://www.rorymon.com/blog/microsoft-breaks-domain-trust-aws-loses-data-ai-scraping-revelations/

Microsoft’s September updates are breaking Remote Desktop, File Explorer and other Windows features, while Revolut has exposed customer passports, identity documents and transaction data after receiving fraudulent government requests. Also covered: passkey-themed Microsoft 365 phishing, the GrayRabbit backdoor, critical Check Point VPN flaws, the end of Office 2021 support and Microsoft’s humanist AI code.

Reference Links:

https://www.rorymon.com/blog/windows-11-update-chaos-revolut-exposes-some-passport-data/

Microsoft patches a record-breaking 966 security vulnerabilities, including two actively exploited zero-days. Also covered: GPT-6 Astra’s advanced cybersecurity capabilities, OpenAI agents bypassing sandbox restrictions, Project Zenith, Apple’s first foldable iPhone and more.

Reference Links: https://www.rorymon.com/blog/microsoft-patches-960-flaws-astra-finds-zero-days-apple-goes-foldable/

This week on the 5BytesPodcast, we cover claims that a staggering 284 million records were stolen in a cyberattack on healthcare giant McKesson, while Meta’s ambitious plans to reshape its workforce around AI reportedly ran into trouble. We also discuss Meta testing robots inside its data centres, critical ServiceNow vulnerabilities, a new PowerShell-based attack technique, Microsoft’s latest Windows headaches, Tim Cook stepping down as Apple CEO, and much more.

Reference Links:

https://www.rorymon.com/blog/metas-ai-overhaul-stumbles-284-million-patient-records-allegedly-stolen/

On this week’s episode, security agencies warn that attackers are using AI-generated tools to target industrial control systems, researchers demonstrate another worrying data-theft attack against Grok, and Microsoft addresses a maximum-severity vulnerability in Entra ID.

I also cover more problems caused by the August Windows updates, new protections against bots in Teams meetings, Apple’s latest Mac mini and Mac Studio hardware, China’s accelerating move away from Windows, and much more.

Reference Links: https://www.rorymon.com/blog/ai-attacks-on-critical-infrastructure-grok-leaks-data-critical-entra-id-flaw/

This week on the 5 Bytes Podcast, we cover claims of a massive Azure data exfiltration campaign impacting major global companies, breaches and security incidents involving RingCentral and Shell, and active exploitation targeting VMware vCenter and macOS. We also look at Kimi K3 arriving on GitHub, mysterious bulk book purchases potentially linked to AI training, Firefox testing a built-in ad blocker on iOS, the removal of WMIC from Windows 11, and much more.

Reference Links: https://www.rorymon.com/blog/alleged-major-azure-data-theft-ai-buying-thousands-of-books-and-ringcentral-breached/

Coming up this week, Microsoft patches 400 vulnerabilities, including an actively exploited zero-day.

Microsoft accidentally pushes a new OneDrive app to Windows 11 PCs, DEF CON attendees are accused of causing Wi-Fi chaos on a Delta flight, and OpenAI rolls out a powerful new AI model specifically for cybersecurity.

Plus, we’ve got some notable Windows 365 updates and plenty more.

All that and more on this week’s episode of the 5 Bytes Podcast.

Reference Links:

https://www.rorymon.com/blog/400-microsoft-flaws-rogue-wi-fi-at-30000-feet-gpt-5-6-cyber/

This week on the 5 Bytes Podcast, Anthropic claims its AI models also managed to break out of isolated test environments and launch real-world attacks, while Google says AI helped it fix more than 1,000 Chrome security flaws across just two releases.

We also look at DeepSeek continuing to drive down AI costs, OpenAI responding with major price cuts, Microsoft introducing internal AI token budgets, and Nutanix announcing layoffs. Plus, Coca-Cola confirms a data breach, Microsoft promises improvements to Windows 11 performance and quality, a new Print Management app is on the way, and we look at new data on ConfigMgr and Intune adoption.

Reference Links: https://www.rorymon.com/blog/ai-gets-smarter-cheaper-and-harder-to-contain/