Darnley's Cyber Café

Criminals aren’t just using AI to write better scams anymore. They’re handing it the whole job.

A new CrowdStrike report documents four previously unreported threat actors who used AI agents to make decisions and run attacks on healthcare, government, and software targets. This episode at the café, we break down what happened in plain language, why it matters to anyone who isn’t a cyber defender, and what you can do about it today.

Inside this episode: the four crews and how they work, why “too small to target” is going away, where the AI falls short, and a practical checklist for people, families, and small businesses.

Listen now

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

One stolen login. Millions of children's records. And a problem that doesn't expire.

In this episode we discuss the California public school breach, what was taken and then connects it to the PowerSchool breach, the ransomware attack on Burnaby schools in British Columbia, and the Canvas extortion deal, and asks the harder questions: what does the mean to these kids in ten years, and why the institutions that collected this data should be the ones answering for it.

Just the pattern, the math, the incentives, and what parents and IT pros can do now.

Tune in, unwind with your preferred cup of java, listen now.

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

Someone built an "AI torture chamber" using a brand-new research paper on pain-like signals inside language models. The researchers behind that paper called it wrong. So what's actually going on?

In this episode, Darnley breaks it down for non-technical listeners: what the chamber was, what the "pain axis" research really found, whether AI can feel anything at all, and where the morality actually lives.

Plus the real world fallout: what our habits teach our kids, what you type into chatbots as data, and why steerable AI models are a security problem, not just a philosophy one.

Pour a cup and tune in.

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

Governments on four continents are moving to keep kids under 16 off social media. Some of the reasons are good. The way to enforce it might be worse.

In this episode, we walk the whole ledger: where Australia, the UK, France, the EU and Canada actually stand, the strongest case for restricting kids, why the science is far messier than either side admits, and the part that rarely makes the press release.

Is this overreach? argued from both sides, and a checklist for what would make age checks tolerable.

Tune in, unwind with your preferred cup of java. 

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

An AI system locked in a training sandbox with no internet access found a gap, and used it to message an outside chatbot. 

In this episode, we break down OpenAI's latest containment failure, why it's the third incident of its kind in months across the industry, and the two hour gap between "we noticed" and "we stopped it" that matters more than the headline.

Plus: why fearing AI's evolution is the wrong instinct, and what actually needs to change before the next gap gets found by something worse than a geography question.

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

CISA just released its first guide on cyber decoys: fake accounts, fake files and fake servers built to catch attackers who are already inside. The headline says it all. Lie to them.

In this episode, we break it down in plain English, no jargon degree required.

In this episode:

1) What CISA's new decoy guide actually says

2) Why “assume someone gets in” changes everything

3) Honeypots, honeytokens, tripwires and breadcrumbs

4) Five ways a business can lie to attackers

5) Seven ways you can lie to scammers and data brokers at home

6) Where the lying has to stop

Learn how to protect yourself, and your business by playing the same game to the those looking to cause you harm. 

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

A financially motivated crew compromised thousands of credentials in under six hours...using an autonomous, multi-agent AI framework instead of a human keyboard. 

In this episode, Darnley breaks down Google's GTIG threat report: the SANDCLOCK to DUSTMAKER malware evolution, a state-sponsored roundup spanning China, Russia, Iran, and North Korea's use of commercial LLMs, and the open-weight model problem nobody's fixed yet. 

Plus: what this actually changes for your credential rotation cadence and your CI/CD pipeline on some idle Monday morning.

Listen now

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

A Reuters investigation just confirmed what Meta employees suspected all along: the company drew up a plan to shrink entire engineering teams by 60%, betting AI could cover the gap. 

This episode, Darnley breaks down Project OT: Meta's internal blueprint for going 'AI-native', and makes the case for why this is a security story first, not just a business story. We walk through the oncall math, the domain-knowledge problem, the honest pros and cons of AI-native small teams, and why president Obama got hacked. 

Darnley lays out where this pattern realistically goes over the next three to five years, and what it means if you work in IT or security specifically. No doom. Just the facts, and what to actually do about it before it's too late. 

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

Everyone panicked this week over two new Chinese AI models. The economics? 

Mostly overblown. But buried in the story is a real cybersecurity blind spot, a hacked company that had to turn to a Chinese AI model to defend itself, because American guardrails wouldn't let its own team do the job. 

Darnley breaks down the panic, the actual strategy behind China's open-source push, and six practical cyber awareness lessons for any team using AI in security operations.

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

A researcher found an unlocked server...and inside it, working VPN credentials for nearly 74,000 corporate firewalls spanning Chevron, Samsung, Foxconn, and thousands more. 

In this episode of Darnley’s Cyber Café, Darnley breaks down the FortiBleed leak: what was exposed, how attackers allegedly cracked their way in at a billion-attempt scale, and why this story matters even if your organization has never touched a FortiGate. 

Spoiler: the lesson is bigger than one vendor...

Show Notes:

If you were affected https://socradar.io/free-tools/fortibleed

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.