Initial Access

In this episode, we break down four security stories: 

• Jensen Huang resigning as Nvidia CEO after reports he was a foreign intelligence target 
• N-able’s N-central zero-day dumps, including a new chain exploited within hours 
• CVE-2026-19868, a SonicWall SSL VPN flaw that bypasses SAML-enforced MFA 
• Chainalysis confirming live session tokens for every user were exposed 

We also cover Bishop Fox research on a root-level flaw in the Proofpoint ITM macOS agent, how restricted guests in Microsoft Entra ID can still map a tenant's applications, and a six-step standard for full-stack AI security assessments. 

Security Headlines: 

• Nvidia CEO Jensen Huang admits affair as company launches investigation into foreign spy accusations, CNN 
• N-able takes cloud platform offline after 30+ "zero-days" published, BleepingComputer 
• SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks, BleepingComputer 
• Updated Nov 10: Chainalysis Security Incident Information, Chainalysis 

Also mentioned: 

• Virtual Session: Attacking AI: Real-World Paths to Compromise (open to FS-ISAC members) 
• Blog: Proofpoint ITM | 4.4.3.148–5.0.1 
• Blog: Inside Cirro: Enumeration as a Restricted Guest 
• Blog: AI Security Assessment: A Six-Step Full-Stack Evaluation Standard 

Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit. 

In this episode, we break down four security stories: 

• How a fake job interview led to the $6.36 billion Binance hack 
• Warp Panda's zero-day use of a VMware ESX logging flaw rated 2.7 
• TeamViewer and UEFI PXE boot flaws that turn support tools against technicians 
• An unreleased Anthropic AI model chaining bugs into five working exploits 

We also cover Bishop Fox research on how agent harness design shapes the results of AI security tools, and why AI-generated vulnerability findings are cheap to produce but costly to verify. 

Security Headlines: 

• North Korea Steals USD 6.36 Billion From Binance in the Largest Hack in History, TRM Labs 
• Binance's $6.3 billion hack began with a fake job interview, and a campaign 'built over many months', CoinDesk 
• EIP-7702 Phishing Attack, arXiv 
• Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day, SecurityWeek 
• TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians' Machines, SecurityWeek 
• CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers, Security Affairs 
• Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits, The Hacker News 

Also mentioned: 

• Workshop: iOS Game Hacking: From Zero to God Mode 
• Virtual Session: Healthcare Security at Machine Speed: $17M Ransomware & AI Adversaries 
• Virtual Session: Attacking AI: Real-World Paths to Compromise 
• Events: API Cybersecurity Conference 2026 
• Blog: What Is an Agent Harness? How AI Security Tools Work 
• Blog: AI Findings are Cheap to Find & Costly to Trust 

Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit. 

In this special Direct Access episode, we sit down with Farzan Karimi, Deputy CISO at Moderna, to talk about how his team built an AI threat model agent that cut first-pass security reviews from days to minutes.

We cover:

• Why application inventory and a 50-question questionnaire mattered more than the agent itself
• How Moderna ran 687 security reviews in one month with only 16.7% of tickets canceled for agent error
• What happened when the bottleneck shifted to remediation, and the seven new roles that followed
• How an agent reading a refrigerator's manuals turned up default credentials
• What separates useful AI security tools from snake oil
• Why safety-critical healthcare environments need a more surgical approach to AI-driven testing

Also mentioned:

• Virtual Session: Healthcare Security at Machine Speed: $17M Ransomware & AI Adversaries

Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit.

In this episode, we break down three security stories: 

• PHP2Shell one week later: working shells, a KEV listing, and exploit noise 
• Node2Shell, a Brotli flaw whose public fix went unreleased for eight months 
• Mimori ransomware claims against OpenText and AVEVA, and what's actually confirmed 

We also cover Bishop Fox research on which PHP configurations turn PHP2Shell into remote code execution, and what Claude revealed about its own sandbox when a researcher started asking questions. 

Security Headlines: 

• CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution, The Hacker News 
• Brotli bug reaches far beyond Node.js (CVE-2026-111497), Help Net Security 
• Mimori Ransomware Research Shows Attackers Going After vCenter, ESXi and Backups, Red Tiger Security 

Also mentioned:   

• Events: API Cybersecurity Conference 2026 
• Blog: Responder Guidance for PHP2Shell (CVE-2026-109618 and CVE-2026-109619) 
• Blog: A Journey into Claude's Sandbox 

Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit. 

In this episode, we break down one security story: 

• PHP2Shell: two critical PHP RCE flaws reaching back to PHP 5.4 
• How a leaked demo video broke PHP's coordinated disclosure 
• Why AI turns every public detail into an exploit shortcut 
• What defenders should patch, check, and monitor right now 

We also cover Bishop Fox research on the true blast radius of an AI attack, and how far a manipulated agent can reach when it acts inside enterprise systems. 

Security Headlines: 

• PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge, The Hacker News 
• php2shell: A tale of two PHP remote vulnerabilities, Calif 
• Frequently Asked Questions About PHP Remote Code Execution (PHP2Shell CVE-2026-109618 & CVE-2026-109619), watchTowr 

Also mentioned:   

• Workshop: iOS Game Hacking: From Zero to God Mode 
• Virtual Session: Healthcare Security at Machine Speed: $17M Ransomware & AI Adversaries 
• Blog: The True Blast Radius of an AI Attack 

Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit.

In this episode, we break down four security stories: 

• A cyberattack that hijacked Danfoss refrigeration controllers at hundreds of French supermarkets 
• An OpenAI engineer charged over a recording device hidden in an executive conference room 
• Meta Muse VM escape flaws and the dossiers Muse builds on users and non-users 
• ARTEX AI and Claude Code in South Korean bank attacks, and Anthropic pulling its AI tests offline 

We also cover Bishop Fox research on a zero-click XSS in Siemens Teamcenter, how physical penetration testing protects confidential meetings, and how to scope an AI security assessment around real risk decisions. 

Security Headlines: 

• Cyberattack shuts down refrigerators at French supermarkets, BleepingComputer 
• FBI arrests Saudi OpenAI employee who allegedly planted recording device in conference room, CNBC 
• Meta Rushed to Fix Muse ‘VM Escape' Vulnerability Soon Before Launch, 404 Media 
• Meta’s Muse AI Agent Is Building a Dossier On You, TIME 
• ARTEX AI, Claude agents used in cyberattacks on South Korean banks, BleepingComputer 
• Anthropic takes risky AI tests offline after models breach govt sites, BleepingComputer 

Also mentioned: 

• Events: Health-ISAC 2026 Health Sector Security Workshop, BSides Peoria 2026 
• Blog: Submit and Execute: Weaponizing Reflected XSS in Siemens Teamcenter's Login Redirect (CVE-2026-58113) 
• Blog: Behind Closed Doors: How Physical Penetration Testing Secures Sensitive Conversations 
• Blog: AI Security Scoping: Define What To Test In Your Deployment 

Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit. 

In this episode, we break down three security stories: 

• CVE-2026-88779, a third exploited NetScaler zero-day labeled denial-of-service 
• About 8 million Danish CPR records stolen through a company's lawful access 
• Google pausing its OSS VRP after a flood of invalid AI-generated reports 

Plus, we sit down with Andrew Crotty of the Ginger Hacker Initiative to talk about how newcomers actually break into cybersecurity in 2026, from choosing a path to building a resume that gets past the first screen. We also cover Bishop Fox research on how the AI attack surface extends across your full stack and what offensive testing reveals about healthcare security. 

Security Headlines: 

• Citrix patches NetScaler SAML zero-day exploited in attacks, BleepingComputer 
• Hackers steal 8 million citizens’ records from Danish government database, TechCrunch 
• Google halts open-source bug bounty program amid AI spam surge, BleepingComputer 

Also mentioned:   

• Events: No Hat 2026, HackMex 2026 
• Blog: Why the AI Attack Surface Extends Your Stack 
• Guide: Healthcare Security: A Guide to Offensive Testing 
• Andrew Crotty’s The Ginger Hacker Initiative Discord server. 

Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit.

In this episode, we break down four security stories: 

• A ShinyHunters PeopleSoft WAF bypass that hinges on one URL-encoded character 
• The arrest of an alleged ShinyHunters leader days before the group's FBI claim 
• Nearly 400,000 DC Medicaid records left readable behind a public report 
• OpenAI scrapping GPT-6.1 Astra over scope, authorization, and honesty 

We also cover Bishop Fox research on three practical risk questions: unauthenticated root RCE in Check Point management, Kubernetes namespace takeover in Zilliz Attu, and why an 85 percent jump in CVE disclosures does not automatically mean an 85 percent jump in real-world risk. 

Security Headlines: 

• Google Warns of ShinyHunters' Fresh Oracle PeopleSoft Campaign, SecurityWeek 
• Dutch police arrest suspected member of group that claimed FBI hack, BBC 
• DC Health Agency Exposes 400,000 Beneficiary Records, SecurityWeek 
• OpenAI scraps rollout of new AI model over safety concerns, BBC 

Also mentioned:   

• Workshop: Weaponizing CloudFormation (available in English and Spanish)   
• Events: SecureWorld Dallas 2026, VetsinTech NatSec + Space Innovation Summit 2026 
• Blog: One Port to Root: Weaponizing Check Point Management CVE-2026-93616  
• Blog: Zilliz / Attu | 2.6.5 
• Blog: Separating Signal from Slop: Triaging CVEs in the Age of AI Security Research 

Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit. 

This episode breaks down:

• A zero-click Exchange Server RCE triggered by a Visio attachment
• AI agents compromising online retailers for about $25 a target
• ShinyHunters' unverified claim that it breached the FBI
• OpenAI's six new misalignment disclosures

Plus, we sit-down with Bishop Fox's Emilio Gallegos on MikroTick, a RouterOS exploit chain attackers used before defenders knew it existed.

Security Headlines:

• Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days, Security Week
• Autonomous AI Agents are breaking into hundreds of Online Retailers for $25 a target in an ongoing campaign, Gambit Security
• FBI investigating claim hackers have stolen details of all its agents, BBC
• OpenAI Discloses Six New Incidents of ‘Concerning’ A.I. Behavior, The New York Times

Also mentioned:  

• Workshop: Weaponizing CloudFormation (available in English and Spanish)  
• Virtual Session: AI & Cybersecurity Priorities for 2027: Executive Chat
• Events: BSides Cleveland 2026, Ekoparty 2026, No Hat 2026, Wild West Hackin' Fest Deadwood 2026
• Blog: MikroTrick: Inside the RouteOS Takeover Chain 
• Blog: Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
• Blog: Master Key Included: Detecting SolarWinds ARM CVE-2026-28326

Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit.

This episode covers an AI agent fleet that compressed two weeks of red team work into ten hours, a two-CVE chain giving attackers full admin on MikroTik routers, and a fraudulent government request that walked Revolut's verification checks straight out the door, plus a sit-down with Bishop Fox's Jon Williams on a critical NetScaler auth bypass and the detection tool built to prove you're patched. 

Security Headlines: 

• An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation, Unit 42 

• Your MikroTik Router May Already Be Compromised: Look for SSH User "-2", Security Affairs 

• Revolut Confirms Customer Data Breach Through Fake Government Requests, TechCrunch 

Also mentioned:  

• Workshop: Weaponizing CloudFormation (available in English and Spanish)  

• Virtual Session: AI & Cybersecurity Priorities for 2027: Executive Chat

• Event: BSides Cleveland 2026  

• Blog: Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490 

• Blog: MikroTrick: Inside the RouteOS Takeover Chain 

Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit.