This episode digs into the legendary Phineas Fisher, the still-unidentified hacker who exposed two major spyware companies and disappeared without a trace. We also cover the unsettling case of an AI agent running a cyberattack on full autopilot, and GitHub's new time-delay feature designed to slow down supply chain attacks before they spread.

Stories covered:

- The hacker who humiliated spyware makers and was never caught (TechCrunch) - https://techcrunch.com/2026/07/25/the-hacker-who-humiliated-spyware-makers-and-was-never-caught/

- Hermes AI agent used to automate attack on Thai Finance Ministry (BleepingComputer) - https://www.bleepingcomputer.com/news/security/hermes-ai-agent-used-to-automate-attack-on-thai-finance-ministry/

- GitHub, PyPI add time-based defenses against supply chain attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/github-pypi-add-time-absed-defenses-against-supply-chain-attacks/

- This 64-Year-Old Mom and Son Made History at the Hardrock 100 (Trail Runner Mag) - https://www.trailrunnermag.com/people/64-year-old-mom-and-son-made-history-at-the-hardrock-100/

- Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts (BleepingComputer) - https://www.bleepingcomputer.com/news/security/hackers-hijack-hotel-wi-fi-dns-to-steal-microsoft-365-accounts/

- The OpenAI Models That Hacked Hugging Face Were ‘Active on the Internet’ for Days (Wired) - https://www.wired.com/story/security-news-this-week-the-openai-models-that-hacked-hugging-face-were-active-on-the-internet-for-days/