This episode digs into how AI is reshaping both sides of the cybersecurity battlefield — from automated attack agents running unattended breaches to malware that builds itself inside your browser using legitimate dev tools. Adrian North breaks down emerging threats like slopsquatting, where hackers exploit AI-hallucinated package names to slip malicious code into automated pipelines. It's a sharp look at what happens when trust, automation, and adversarial innovation collide.

Stories covered:

- Hermes AI agent used to automate attack on Thai Finance Ministry (BleepingComputer) - https://www.bleepingcomputer.com/news/security/hermes-ai-agent-used-to-automate-attack-on-thai-finance-ministry/

- Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable (The Hacker News) - https://thehackernews.com/2026/07/malvertising-sends-malware-in-pieces.html

- Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack (BleepingComputer) - https://www.bleepingcomputer.com/news/security/slopsquatting-phantom-domains-and-hallusquatting-are-the-same-ai-attack/

- The hacker who humiliated spyware makers and was never caught - TechCrunch (TechCrunch) - https://news.google.com/rss/articles/CBMinAFBVV95cUxOaWRWUUxvOHI3SWVzcDJYemNiMU91X19HX2pkeVlhNXpGOTdieDdqOWtQYk9wZ2FuQ3JscXJOa2JiemJUZUhUV3E1NFE3TFZxQl96Yy1DWmhVYlZHZ2hfVUE1dnEzUVZrdTJfekZ0Zk9HU1VOaTIzUGdqODl3MWRVZEVMb2lKR1ZVdlNXcnRYV1dHQXFDaHIxYm1acmw?oc=5

- How Many Electrolytes Should You Be Taking, and Can You Have Too Many? (Wired) - https://www.wired.com/story/how-many-electrolytes-should-you-be-taking-and-can-you-have-too-many/

- DeepSeek pause fundraise after comments on compute gap to US leaked (transcript) [pdf] (Hacker News) - https://github.com/demo-zexuan/liang-wenfeng-investor-meeting-2026-7-22/blob/master/%E6%A2%81%E6%96%87%E9%94%8B%E6%8A%95%E8%B5%84%E8%80%85%E4%BA%A4%E6%B5%81%E4%BC%9A-%E6%96%87%E5%AD%97%E7%A8%BF_1_18_translate_20260723201651.pdf