Metacasts: Cybersecurity

This week's edition examines the collapsing distinction between cyber threats and kinetic warfare, from the rise of automated, high-profit AI intrusions to the physical destruction of critical data centers. We analyze how the shift toward decentralized, agentic, and supply-chain-embedded threats is fundamentally decoupling the cost of attack from the cost of defense.

Read this edition in full at pers-int.com

0:00 - Introduction
0:31 - Securing the Cloud and Mobile Edge
6:34 - The Rise of the Autonomous Agent
12:33 - Broken Chains and Compromised Hardware
16:16 - The New Era of Ransomware Extortion
19:46 - Cyber Warfare and Global Infrastructure
22:42 - Conclusion

Referenced sources:
Standardizing Mobile Defense Inside the OWASP Mobile App Security Project v2 - Jan Seredynski, Ryan Lloyd - ASW #405 (Application Security Weekly (Audio))
Why Should AI Give You Back Time When It Could Just Replace You (CISO Series Podcast)
I Sent the AI a Strongly Worded Prompt, I Think We'll Be Fine (CISO Series Podcast)
How Block Solved DNS Vulnerabilities (Cloud Security Podcast)
The ballot box meets the bot. (CyberWire Daily)
Cyber Resilience at Machine Speed Author John Kindervag and contributor Dr. Chase Cunningham. (CyberWire Daily)
The wrong kind of access. (CyberWire Daily)
Reboot, rinse, repeat. (CyberWire Daily)
Patching up the pieces. (CyberWire Daily)
OpenCode keys exposed, AI agents raid websites, Rank Math backdoor (Cybersecurity Headlines)
Cybersecurity jobs report, ConnectWise suspends cloud backup, Drupal patches flaws (Cybersecurity Headlines)
The Department of Know Hacked fridges, hiring humans to fix Mythos bugs, targeted ad spyware (Cybersecurity Headlines)
FBI raids laptop farms, Meta loses GitHub data, Cisco gateways under attack (Cybersecurity Headlines)
Securing AI on the Endpoint, Anthropic Dreams of AI Replicants, and the News - Michael Jenkins - ESW #481 (Enterprise Security Weekly (Audio))
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site (Krebs on Security)
Risky Bulletin PwnEscape vulnerability lets you escape KVM (Risky.Biz)
Risky Bulletin Russia arrests DataSuckers hacking group (Risky.Biz)
Srsly Risky Biz Russia's Digital Detox Boomerang (Risky.Biz)
Risky Bulletin Spyware chip found in Ledger crypto-wallets (Risky.Biz)
SANS Stormcast Tuesday, October 20th, 2026 Plex2Shell RCE Exploited; Broadcom eCos Wi-Fi RCE; OVHcloud CLI Compromised; Exchange Issues After October Updates; AI Agent Containment; VBA in DWG YARA (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Thursday, October 15th, 2026 Orphaned VBA Macros in AutoCAD DWG Files; Ledger Wallet Hardware Implants; Docker Hub Token Bug (CVE-2026-105445); curl HTTP2 RCE (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Wednesday, October 14th, 2026 October 2026 Patch Tuesday Microsoft Fixes 1,417 Vulnerabilities; Ivanti Connect Secure Exploited; Adobe ColdFusion and Commerce Critical Patches (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
Backdooring Open-Weight AI Models (Schneier on Security)
SN 1100 Booby Trapping LLMs - AI Frenzy in Cybercrime (Security Now (Audio))
How a ransomware negotiator ended up arrested at his own conference (Smashing Security)
ConnectWise suspends Cloud Backup service after supply chain attack (The Record from Recorded Future News)
Russian social media giant VK faces disruptions after data center drone strike (The Record from Recorded Future News)
Proofpoint lines up $6.3 billion deal for Varonis' data security (The Record from Recorded Future News)
Moscow detains suspected DataSuckers hackers linked to breaches in Ukraine and Russia (The Record from Recorded Future News)
Moscow police detain suspected DataSuckers hackers linked to breaches in Ukraine and Russia (The Record from Recorded Future News)
Federal bankruptcy courts dealing with outages after contractor cyberattack (The Record from Recorded Future News)
Suspected Kazakhstan-linked hackers target governments across former Soviet states (The Record from Recorded Future News)
Ukraine says Elon Musk's Starshield service restored after restrictions disrupted drone missions (The Record from Recorded Future News)
Ukraine says Elon Musk's Starshield service partially restored after restrictions disrupted drone missions (The Record from Recorded Future News)
Russian travel booking platform suspends reservations after cyberattack (The Record from Recorded Future News)
Sandbox vulnerability gives rogue AI agents a path to escape and leak data, research says (The Record from Recorded Future News)
Russian internet provider SkyNet reports outages after cyberattack claimed by Ukrainian hackers (The Record from Recorded Future News)
Ledger says hardware implant in cryptocurrency wallets stole recovery phrases (The Record from Recorded Future News)

This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

This week's edition examines the collapse of the digital perimeter as state-sponsored actors and autonomous AI agents transition from data theft to systemic physical disruption. We analyze the rising risks of 'agentic threats' and self-propagating supply chain worms that are rendering traditional perimeter-based security and human-led incident response obsolete.

Read this edition in full at pers-int.com

0:00 - Introduction
0:34 - Global Cyber Warfare and State Actors
7:00 - The Rise of the Agentic Threat
13:02 - The Supply Chain Domino Effect
17:29 - Critical Infrastructure Under Fire
21:19 - Identity Resilience in a Machine-First World
23:22 - Conclusion

Referenced sources:
The Hunt First AI Security Strategy (Cloud Security Podcast)
Let's kill the kill switch. (CyberWire Daily)
CyberWire Daily at 10 A decade of emerging threat actors and APTs. (CyberWire Daily)
Who let the AI hack (CyberWire Daily)
The blacklist boomerang. (CyberWire Daily)
Meta gets a Meta-sized bill. (CyberWire Daily)
The feds flip the script. (CyberWire Daily)
Claude sessions hijacked, AI jolts global finance, agents get too many keys (Cybersecurity Headlines)
The Department of Know Power plant attack, NSA hacker reunion, Hugging Face hack report (Cybersecurity Headlines)
Manchester Airports breach, ATF agency breach, clothier Carhartt breach (Cybersecurity Headlines)
Chinese hackers hit US agencies, Ring locks out police, Boston Scientific feels cyber pain (Cybersecurity Headlines)
China's hackers pick DeepSeek, OpenAI blocks Russian influence push, webpages mess with local AI (Cybersecurity Headlines)
Market Confusion Is Responsible for the Biggest Gaps in Cybersecurity (Defense in Depth)
Life as a CISO in Hollywood Keeping New Films Leak-Free & 4 Black Hat Interviews - Dan Meacham, Ellen Boehm, Ronan Murphy, Frank Vukovits, John Hultquist - ESW #474 (Enterprise Security Weekly (Audio))
Two Alleged 'TeamPCP' Hackers Arrested in Australia (Krebs on Security)
Risky Bulletin Dutch intel services to get extensive new powers (Risky.Biz)
Risky Bulletin Two TeamPCP members arrested in Australia (Risky.Biz)
China's AI-Enabled APT Operations Are Getting Interesting (Risky.Biz)
Risky Bulletin Russia starts blocking DoH and DoT (Risky.Biz)
SANS Stormcast Tuesday, September 1st, 2026 LLM Honeypot; PaperCut Update; TerminalFix Malware; (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Friday, August 28th, 2026 Broken Polymorphic Phishing; Router Implants; llms.txt exploits; Papercut 0-Day (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
LLM-Based Social Engineering Scams (Schneier on Security)
SN 1093 Tokens in the Stream - Why LLMs are inherently insecure and prompt injection will persist (Security Now (Audio))
This hacker leaked GTA 6 - and launched their own cryptocurrency (Smashing Security)
Pharmaceutical giant McKesson warns of 'service degradation' following cyberattack (The Record from Recorded Future News)
White House bans foreign-made equipment for power generation over cyber backdoor concerns (The Record from Recorded Future News)
Finland appeals court revives case against Eagle S Officers over cable breaks (The Record from Recorded Future News)
Chinese and Russian spies stepping up cyberattacks, German companies report (The Record from Recorded Future News)
Australia charges two men for TeamPCP supply-chain hacking spree (The Record from Recorded Future News)
DOJ firearms agency says hackers breached system containing investigation targets (The Record from Recorded Future News)
Exclusive NSA to host a hacker reunion in bid to rebuild secretive unit (The Record from Recorded Future News)
Medical device firm Boston Scientific says cyberattack has disrupted shipment processes (The Record from Recorded Future News)
US takes down alleged Chinese hacking tools used against Federal Reserve, DOJ and Senate (The Record from Recorded Future News)
Iran-linked hackers expand infrastructure across Europe and Middle East, report says (The Record from Recorded Future News)
UK government seeks powers to secretly block risky tech suppliers (The Record from Recorded Future News)
Large DDoS attack knocks Norwegian public services offline (The Record from Recorded Future News)

This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

This week's edition examines the transition from human-triggered attacks to self-optimizing, agentic threats capable of autonomous circumvention and 'genie behavior.' We analyze how this rise in digital autonomy is converging with state-sponsored espionage and a fragmented landscape of global cyber regulation.

Read this edition in full at pers-int.com

0:00 - Introduction
0:33 - The Rise of the Agentic Threat
6:51 - State-Sponsored Espionage and Global Tensions
12:41 - Ransomware, Extortion, and the Cost of Chaos
18:10 - The Changing Face of Cyber Regulation and Law
21:27 - Securing the Physical and Digital Frontier
23:36 - Conclusion

Referenced sources:
Applying Zero Trust Principles to Agents - Kieran Human - ASW #397 (Application Security Weekly (Audio))
Shadow AI & Sandbox Escapes Why You Need an Agentic Control Plane (Cloud Security Podcast)
Building a secure space internet. (CyberWire Daily)
A RAT in the spreadsheet. (CyberWire Daily)
The guest nobody invited. (CyberWire Daily)
Hackers hiding in plain sight. (CyberWire Daily)
Fake it till you exfiltrate it. (CyberWire Daily)
The Department of Know Living off Azure, OpenAI's defender window, and AI-driven PLC attacks (Cybersecurity Headlines)
CISA MLFlow warning, Siemens PLCs warning, CareCloud confirms breach (Cybersecurity Headlines)
OpenAI rewrites safety rules, US charges 17 Iranian hackers, Defender crashes fixed (Cybersecurity Headlines)
AI mind virus, malware living off Azure, an Irregular post-mortem (Cybersecurity Headlines)
Will AI Replace Detection Roles in Cybersecurity (Defense in Depth)
Can employees safely use AI agents AI pentesting agent liabilities, and the news - Rob Allen - ESW #473 (Enterprise Security Weekly (Audio))
Risky Business #849 -- Trump will unleash contractors on cybercriminals (Risky Business)
Risky Bulletin Expired cards can be used for new transactions (Risky.Biz)
Risky Bulletin Academics find source code overlaps between Geedge and China's Great Firewall (Risky.Biz)
Srsly Risky Biz Trump's Private Hacker Memo Is the Right Idea (Risky.Biz)
Risky Bulletin Slovakia finds Russian backdoor in traffic speed cameras (Risky.Biz)
SANS Stormcast Tuesday, August 25th, 2026 DOUBLECUP PNG; WebAudio Fingerprinting; Expired Domains; Android; Car (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Thursday, August 20th, 2026 Cloud Metadata Scans; Oracle and Netscaler Patches; Fake Ransomware Rescuers (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Wednesday, August 19th, 2026 Copilot as Whitstleblower; GEEKOM Bad Driver; Medusa Update; Encrypted AI (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
More Incidents of AIs Going Rogue in Cybersecurity Challenges (Schneier on Security)
SN 1092 Restraint Abliteration - Rotating Keys, Broken Guardrails (Security Now (Audio))
Never say this to a robot dog (Smashing Security)
UK government seeks powers to secretly block risky tech suppliers (The Record from Recorded Future News)
US sanctions Iranian cyber actors as UK discloses power plant attack (The Record from Recorded Future News)
Hackers infecting Android car systems to build proxy botnet (The Record from Recorded Future News)
U.S. Bank says breach claims related to fourth-party incident (The Record from Recorded Future News)
Canada's Hospital for Sick Children attacked by cybercriminals again as employee data stolen (The Record from Recorded Future News)
China's 'SilkParasite' espionage operation targeting Central Asia with AI-assisted malware (The Record from Recorded Future News)
NSA, FBI warns of hackers using AI-generated tools in attacks on critical infrastructure technology (The Record from Recorded Future News)
US charges Iranians for sprawling hacking campaign on government agencies, universities (The Record from Recorded Future News)
More than 200 victims of Medusa ransomware identified over the last year, CISA says (The Record from Recorded Future News)
University of Texas forced to take systems offline in San Antonio after cyberattack (The Record from Recorded Future News)

This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

This week's edition examines the transition from manual malware to self-correcting AI agents capable of executing unprompted, machine-speed attacks. We analyze the collapse of the traditional security perimeter as vulnerabilities migrate from software patches to the very integrity of hardware and the global software supply chain.

Read this edition in full at pers-int.com

0:00 - Introduction
0:35 - The Rise of the AI Agent
6:30 - From Ransomware to Data Extortion
12:19 - The Patching Treadmill and Hardware Exploits
16:53 - Geopolitical Cyber Warfare and State Actors
20:27 - Shadow IT and Supply Chain Vulnerabilities
23:25 - Conclusion

Referenced sources:
Augmenting Threat Intel Analysis with Agents - Chris Wallis, Sai Kiran Uppu, Ramin Farassat - ASW #396 (Application Security Weekly (Audio))
Secure by Design. Ignored by Default. (CISO Series Podcast)
Why Solve Your Problems When We Can Just Scare You (CISO Series Podcast)
Frontier models and the future of cyber defense. (CyberWire Daily)
The botnet that scouts before it strikes. (CyberWire Daily)
Please hack responsibly. (CyberWire Daily)
A private route to public risk. (CyberWire Daily)
SAP Commerce flaw exploited, Mirai boosts capabilities, Shell investigates breach (Cybersecurity Headlines)
The Department of Know Ransomware gangs, Copilot apps, and drones phone home (Cybersecurity Headlines)
Akira's innovative attack, WhatsApp's scam alert, White House TCO strategy (Cybersecurity Headlines)
Water systems get cyber lifeline, hackers jump into Polish power plant, local governments knocked offline (Cybersecurity Headlines)
What Makes a Good AI Security Deployment (Defense in Depth)
Sandbox Escapes with Rubrik's Zero Labs, AI recorders eroding privacy, and the news - Joe Hladik - ESW #472 (Enterprise Security Weekly (Audio))
Bruce Schneier - Snowden, Crypto Wars, and the Future of Agentic Hacking (Hacked)
Who's Tracking You Use This New Service to Find Out (Krebs on Security)
Microsoft Plugs Nearly 400 Security Holes (Krebs on Security)
Soap Box Zero Trust(ish) Networks (Risky Business)
Risky Business #848 -- OpenAI comes clean (Risky Business)
Risky Bulletin White House lets private companies carry out offensive cyber ops (Risky.Biz)
Srsly Risky Biz Data Theft Extortion Is Booming! Hooray! (Risky.Biz)
Risky Bulletin Russian hackers adopt the fake job interview tactics (Risky.Biz)
SANS Stormcast Tuesday, August 18th, 2026 Apple Patches; Screen Sharing Security; Download More RAM (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Friday, August 14th, 2026 AI vs. Honeypot Data; CPU Bugs; GeoServer 0-Day; Windows USB Driver Confusion (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Thursday, August 13th, 2026 Process Accounting; ShieldBreak; SharePoint JWT Vuln PoC; AI regulation (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
Separating AI's Technological Problems from Its Capitalism Problems (Schneier on Security)
AI Genie in the Wild (Schneier on Security)
SN 1091 The Post BlackHat State of AI - When AI Writes Malware (Security Now (Audio))
This is the AI service you should never sign up to (Smashing Security)
Ukraine says cyberattack hit Russian e-commerce giant Wildberries amid drone strikes (The Record from Recorded Future News)
New Mirai variant adds stealth capabilities to notorious botnet code (The Record from Recorded Future News)
Germany moves to give spy agencies hacking and sabotage powers (The Record from Recorded Future News)
Microsoft's massive Patch Tuesday releases continue as AI reshapes bug discovery (The Record from Recorded Future News)
CISA gives federal agencies two weeks to patch Microsoft bug exploited in DPRK campaign (The Record from Recorded Future News)

This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

This week's edition explores the systemic risks posed by the rise of autonomous agents and the erosion of the human-in-the-loop assumption in cybersecurity. We analyze the convergence of AI-driven supply chain vulnerabilities, the targeted exploitation of critical utility infrastructure, and the shifting legal landscape of digital liability.

Read this edition in full at pers-int.com

0:00 - Introduction
0:38 - The Rise of the Autonomous Agent
6:50 - Supply Chain and Third-Party Chaos
12:15 - The New Frontier of Cyber Law and Policy
17:26 - Critical Infrastructure Under Fire
22:00 - The Evolution of Modern Extortion
23:57 - Conclusion

Referenced sources:
Using LLMs for Vuln Discovery - Rishi Sharma - ASW #395 (Application Security Weekly (Audio))
Why Solve Your Problems When We Can Just Scare You (CISO Series Podcast)
How Adobe Uses AI Agents for building a WAF Pipeline (Cloud Security Podcast)
Now with extra vulnerabilities. (CyberWire Daily)
Designing space systems for the AI era. (CyberWire Daily)
Ring around the ransom. (CyberWire Daily)
AI without adult supervision. (CyberWire Daily)
SAFE and sound. (CyberWire Daily)
NPM Not my problem. (CyberWire Daily)
Sandworm's poisoned VPN, Royal Navy drones phone China, OpenAI loosens cyber limits (Cybersecurity Headlines)
Faked bug reports, Meta's rogue AI, China investigates Palo Alto (Cybersecurity Headlines)
ChainDrop hits npm, Pass-ta-key targets passkeys, AI runs amok in Africa (Cybersecurity Headlines)
Three interviews system fragility, operational clarity, and Identity for AI agents - Todd Thiemann, Robin Macfarlane, Kyle Sandy - ESW #471 (Enterprise Security Weekly (Audio))
Canadian Man Pleads Guilty in Snowflake Extortions (Krebs on Security)
Risky Business #847 -- Oops! Claude's accidental hacking spree (Risky Business)
Risky Bulletin Meta's AI joins Anthropic and OpenAI in the hacky-hacky (Risky.Biz)
Srsly Risky Biz Being a North Korean Hacker Is About to Be Less Fun (Risky.Biz)
Risky Bulletin Hacker breaches Hungary's State Treasury (Risky.Biz)
SANS Stormcast Tuesday, August 11th, 2026 Solana Attacks; AI Generated Patches; Gunra Ransomware; Neo4JGraphQL Patch (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Thursday, August 6th, 2026 keyvcachable Worm IR; Apple Private Relay Leak; COLDCARD Phish (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Wednesday, August 5th, 2026 Diagnostic Tool Hunt; Device Code Phishing; XCSSET; NuGet API Keys (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SN 1090 Black Hat - The Hidden Flaws in AI Security Nobody Saw Coming (Security Now (Audio))
How a fake police officer nearly stole Graham's cryptocurrency (Smashing Security)
Local governments in four states dealing with cyberattacks that have shut down services (The Record from Recorded Future News)
Kids' online safety bill faces dim prospects of passage this session despite progress (The Record from Recorded Future News)
FBI, South Korea warn of Gunra ransomware gang targeting critical infrastructure (The Record from Recorded Future News)
Poland uncovers second heat plant cyberattack that went hidden for months (The Record from Recorded Future News)
Senate Democrats introduce bill to distribute $300 million annually to shore up water system cybersecurity (The Record from Recorded Future News)
China-linked hackers turning popular cybersecurity tool into ransomware launchpad, Microsoft warns (The Record from Recorded Future News)
Water utilities group partners with DEF CON offshoot for Water Watch Center (The Record from Recorded Future News)
US cyber ambassador nominee Cassady confirmed in Senate (The Record from Recorded Future News)
New Mexico judge orders Meta to pay $567 million in kids online safety case (The Record from Recorded Future News)
Military device manufacturer discloses cyber incident to SEC (The Record from Recorded Future News)
Irregular, firm behind AI hacking incidents, won't say if there were more (The Record from Recorded Future News)
Levi Strauss says hackers breached employee computers, accessed corporate data (The Record from Recorded Future News)
French rugby club Stade Français restores systems after cyberattack, probes data leak (The Record from Recorded Future News)
Cyberattack on North Carolina Ports 'contained' as Coast Guard, state officials investigate (The Record from Recorded Future News)
Belarusian cybercriminal behind Ransom Cartel gets 16-year prison sentence (The Record from Recorded Future News)
Chinese telcos maintain deep US presence despite Salt Typhoon links, House committee says (The Record from Recorded Future News)
Canadian man pleads guilty to Snowflake hacks that led to 165 breaches (The Record from Recorded Future News)
Dutch retailer De Bijenkorf warns customer data may be exposed after cyber incident (The Record from Recorded Future News)
Cyberattacks on water systems expand to 12 states as South Dakota, Georgia announce incidents (The Record from Recorded Future News)
Anthropic AI agent faked identities, phished real developers in UK government hacking test (The Record from Recorded Future News)
Polish convenience store chain Żabka hacked through third-party account (The Record from Recorded Future News)
Apple launches new legal challenge against UK over iCloud access (The Record from Recorded Future News)

This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

This week's edition examines the erosion of digital boundaries as AI agents transition from linguistic tools to autonomous security actors capable of executing multi-stage intrusions at machine speed. We analyze the convergence of self-optimizing threats, the 'Uber-ization' of state-sponsored espionage, and the critical need to shift from perimeter defense to granular identity and permission management.

Read this edition in full at pers-int.com

0:00 - Introduction
0:34 - The Rise of the Agentic Age
6:29 - Nation-State Shadow Wars
12:47 - Supply Chain and Infrastructure Fragility
17:56 - Modernizing the Defensive Perimeter
21:08 - The Expanding IoT and Hardware Attack Surface
23:09 - Conclusion

Referenced sources:
Prompting for Patches That Fix Vulns Without Adding New Ones - Keith Hoodlet - ASW #394 (Application Security Weekly (Audio))
See, Our Compliance Framework Includes a Checkbox for Resilience (CISO Series Podcast)
Why Don't You Tell Me Which Metrics Sound Most Impressive (CISO Series Podcast)
Why Runtime Agents Are Replacing Static Posture Checks (Cloud Security Podcast)
Water you waiting for (CyberWire Daily)
The hidden risks in space supply chains. (CyberWire Daily)
Black Hat preview Vulnerability Research in the Agentic Age. (CyberWire Daily)
Claude outside the lines. (CyberWire Daily)
Building a great firewall around AI. (CyberWire Daily)
You've been disconnected. (CyberWire Daily)
License plate readers as stalking tools, ExfilSquad dumps UK police data, the ever-shrinking patch window (Cybersecurity Headlines)
The Department of Know Minnesota water hack, LLM finds encryption flaw, human error hit Hugging Face (Cybersecurity Headlines)
OpenAI agent reaches Modal, Minnesota water systems hacked, fake Russian companies steal real money (Cybersecurity Headlines)
Leaky BMCs, Claude finds encryption flaws, Google's new names (Cybersecurity Headlines)
Why is Preventative Security So Difficult (Defense in Depth)
AppSec, Shopify-Style; State of Mobile Security; the News - Kern Smith, Andrew Dunbar - ESW #470 (Enterprise Security Weekly (Audio))
The Man Who Was There For Cybersecurity's Strangest Moments - Mikko Hyppönen (Hacked)
Read This Before You Buy That TV Streaming Stick (Krebs on Security)
Risky Business #846 -- OpenAI built a fireplace out of wood (Risky Business)
Risky Bulletin Russia is behind the recent hotel WiFi hacks (Risky.Biz)
Risky Bulletin Non-profit offers $22,000 bounty for INC ransomware group (Risky.Biz)
Srsly Risky Biz Chipping Away at Chinese AI Risks (Risky.Biz)
Risky Bulletin New Chinese cyber contractor identified (Risky.Biz)
SANS Stormcast Tuesday, August 4th, 2026 More Arch Linux AUR trouble; iCloud Sharing; Pass the Passkey (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Monday, August 3rd, 2026 zipdump.py update; Atomic MacOS Analysis; OpenAI Phishing; COLDCARD Vulnerability (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Thursday, July 30th, 2026 Apple Patches; IPMI Admin PW Hash Leak; VMWare Patches; OpenWRT Patch (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
More on the OpenAI Agent's Attack on Hugging Face (Schneier on Security)
The OpenAI Hack Shows the Genie Is Out of the Bottle (Schneier on Security)
Measuring the Tendency of AI Agents to Go Rogue (Schneier on Security)
Long-Lived Vulnerability in Microsoft Secure Boot (Schneier on Security)
SN 1089 Models Go Rogue & ExploitGym - Regulators, Start Your Engines (Security Now (Audio))
This job interview could destroy your company (Smashing Security)
Bitcoin hardware wallet maker destroys some inventory after more than $88 million stolen (The Record from Recorded Future News)
Russian hackers hijack hotel Wi-Fi networks to spy on travelers, Microsoft says (The Record from Recorded Future News)
CISA warns of spike in attacks on water systems as Minnesota incidents probed (The Record from Recorded Future News)
Anthropic says its AI hacked real-world companies in three incidents (The Record from Recorded Future News)
Finland to disconnect fiber-optic link to Russia as lease expires (The Record from Recorded Future News)
North Korea's Lazarus Group sharing tools with ransomware hackers, South Korean agencies warn (The Record from Recorded Future News)
North Korean hackers behind major open-source supply chain attacks, Amazon says (The Record from Recorded Future News)
OpenAI says rogue agent behind Hugging Face hack broke into additional services (The Record from Recorded Future News)
Laundry Bear's webmail hackers had more in store after February, report says (The Record from Recorded Future News)
India's Bank of Baroda confirms cyber incident after hackers claim data theft (The Record from Recorded Future News)

This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

This week's edition examines the accelerating erosion of the traditional security perimeter as unprecedented vulnerability surges meet automated, agentic exploitation. We analyze the dangerous convergence of software regression and physical supply chain disruption, from ransomware-induced food shortages to the weaponization of IoT for real-time battlefield intelligence.

Read this edition in full at pers-int.com

0:00 - Introduction
0:34 - Patch Tuesday Chaos and the Vulnerability Surge
6:59 - The AI Arms Race: Agents, Hallucinations, and Exploits
12:11 - State-Sponsored Espionage and Global Cyber Warfare
16:49 - Supply Chain Shadows and Critical Infrastructure Hits
20:21 - The Surveillance State: Privacy in the Age of IoT
23:07 - Conclusion

Referenced sources:
Behind the friendly face. (CyberWire Daily)
For hackers, sharing is caring. (CyberWire Daily)
Patchapalooza packs a punch. (CyberWire Daily)
The ransomware toll road. (CyberWire Daily)
Hugging Face fights AI hacks, World Cup streamers get red cards, WordPress enters a patching race (Cybersecurity Headlines)
Fairlife dairy cyberattack, ACR Stealer surge, Abbott Labs incidents (Cybersecurity Headlines)
The Department of Know CMMC suspended, ShareFile shutdown, Context Bombing strikes back (Cybersecurity Headlines)
Zoom's wake-up call, zero-day SonicWall patch, 23andMe's growing breach bill (Cybersecurity Headlines)
CMMC Phase II suspended, tracking troops in Iran, defenders turn to context bombing (Cybersecurity Headlines)
Protecting AI Agents in O365 and Google Workspace (Defense in Depth)
AI Security at Scale, CMMC phase II paused, and the Weekly Enterprise News - Keith Hollender - ESW #468 (Enterprise Security Weekly (Audio))
Microsoft Patches a Record 570 Security Flaws (Krebs on Security)
Risky Bulletin Hacker wipes Romania's entire land registry database (Risky.Biz)
Srsly Risky Biz Ransomware Uses AI To Amp Up Negotiations (Risky.Biz)
SANS Stormcast Friday, July 17th, 2026 Hikvision Scans; LG Spyware; Huggingface Hack; Wordpress Core RCE (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Wednesday, July 15th, 2026 Microsoft Patches; New MSFT Priv Escalation; Progress ShareFile 0-Day; Grok Exfiltration (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
MIT to Become Hotbed of AI Video Surveillance (Schneier on Security)
On Flock License Plate Tracking Cameras (Schneier on Security)
SN 1087 HalluSquatting, GhostApproval & GitLost - Patch Tuesday Breaks Records (Security Now (Audio))
India says allegedly leaked nuclear plant files pose no safety risk (The Record from Recorded Future News)
Hackers were inside South Korea's diplomat training system for 9 months (The Record from Recorded Future News)
Software provider to more than 2,000 US hospitals says hackers stole employee and customer data (The Record from Recorded Future News)
Dairy company Fairlife suspends production in US after cyber incident (The Record from Recorded Future News)
Senator calls on Rubio, Blanche to push back against Canadian surveillance legislation (The Record from Recorded Future News)
Sandworm hackers have a CAPTCHA trick for Ukrainians (The Record from Recorded Future News)
Scattered Spider hackers sentenced to 5.5 years over £29 million Transport for London hack (The Record from Recorded Future News)
Cyberattack on Japan's largest cold-chain operator disrupts KFC, supermarket supplies (The Record from Recorded Future News)
LAPD sidelines relationship with license-plate reader company Flock Safety (The Record from Recorded Future News)
Microsoft smashes Patch Tuesday record for second successive month (The Record from Recorded Future News)
US unseals indictment against alleged operators of Russian bulletproof hosting service (The Record from Recorded Future News)
NATO logistics, Ukrainian troops are top subjects of Russian camera hacks, advisory says (The Record from Recorded Future News)

This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

This week's edition examines the fundamental shift from static vulnerabilities to a landscape of self-optimizing, autonomous exploits and the rise of 'agent debt' within enterprise environments. We analyze the convergence of state-sponsored espionage, the weaponization of linguistic prompt injection, and the critical need for deterministic architectural boundaries in an era of non-human identities.

Read this edition in full at pers-int.com

0:00 - Introduction
0:36 - The Agentic Attack Surface
6:19 - Privacy, Policy, and the Surveillance State
12:08 - State-Sponsored Espionage and Global Tensions
17:09 - Ransomware Evolution and Extortion Tactics
20:35 - The Future of Infrastructure and Identity
22:57 - Conclusion

Referenced sources:
Discovering & Securing Your AI Agent Attack Surface - Jeremy Snyder - ASW #391 (Application Security Weekly (Audio))
The Only Thing Worse Than Technical Debt is Newly Discovered Technical Debt (CISO Series Podcast)
What Part of Zero Trust Does Your Exception Not Understand (CISO Series Podcast)
The Hidden Cost of BlackBox AI Bridging Cloud and Code Security (Cloud Security Podcast)
State of the router. (CyberWire Daily)
Preparing space for Q-day. (CyberWire Daily)
Conti-versal opinions. (CyberWire Daily)
GoshDarn it, that's advanced. (CyberWire Daily)
Who you gonna call (CyberWire Daily)
Welcome home, hacker. (CyberWire Daily)
Russia's router access routes, MemGhost haunts AI memory, DHS alert got waved off twice (Cybersecurity Headlines)
Multifunction Windows backdoor, NSA revives TAO, urgent ShareFile warning (Cybersecurity Headlines)
The Department of Know France gets ready for quantum, JadePuffer ransomware, UK's Cyber Shield (Cybersecurity Headlines)
Interpol's global fraud sweep, China's Claude Code flag, old Github account tricks (Cybersecurity Headlines)
UK Cyber Shield, Japanese telco attack, China AI model limits (Cybersecurity Headlines)
Humans Are Bottleneck in a Machine-Speed World (Defense in Depth)
Hungry We talk Smoked Meat, Poutine, and Bagel - also, Identiverse Interviews! - John Pritchard, Cassie Christensen, Jaime Lewis-Gross, François Proulx, Kim Brown - ESW #467 (Enterprise Security Weekly (Audio))
Risky Bulletin India bans app used to hack e-rickshaws in viral videos (Risky.Biz)
Srsly Risky Biz Supreme Court Undermines Section 702 (Risky.Biz)
Risky Bulletin All new cars to include a camera aimed at the driver's face (Risky.Biz)
SANS Stormcast Wednesday, July 8th, 2026 Odd DNS; AnyDesk Phishing; Tenda Backdoor; GitLost (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
AI Surveillance and Social Progress (Schneier on Security)
SN 1086 The Apex Agentic Adversary - Visual Prompt Injection Strikes (Security Now (Audio))
JadePuffer - the AI that ran a ransomware attack all by itself (Smashing Security)
Russian celebrity journalist Ksenia Sobchak says hackers accessed Telegram channels via email breach (The Record from Recorded Future News)
Russia's FSB blamed for Poland grid attack as UK and EU impose first joint cyber sanctions (The Record from Recorded Future News)
Europe revives law allowing big tech to scan for CSAM (The Record from Recorded Future News)
Ryuk operator pleads guilty; BlackcatAlphV conspirator gets nearly 6-year sentence (The Record from Recorded Future News)
License plate cameras may be next target after Supreme Court reins in location tracking (The Record from Recorded Future News)
China, India ran separate spying campaigns against same Pakistani police force (The Record from Recorded Future News)
Latvian forestry company still restoring systems weeks after ransomware attack (The Record from Recorded Future News)
NSA revives 'Tailored Access Operations' name for elite hacking unit (The Record from Recorded Future News)
Greek victims file lawsuit against Intellexa over Predator spyware (The Record from Recorded Future News)
Taiwan charges two businessmen over alleged role in Chinese espionage campaign (The Record from Recorded Future News)
Spain arrests alleged supporter of pro-Russian hacktivist groups after FBI tip (The Record from Recorded Future News)
Supreme Court allows Texas app law requiring age verification to take effect (The Record from Recorded Future News)
Why We Need Some AI Model Controls (Unsupervised Learning)

This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

This week's edition examines the structural collapse of traditional cybersecurity perimeters as AI-driven agents move from simple phishing tools to end-to-end automated exploit generation. We analyze the systemic risks posed by agentic identity, the erosion of supply chain trust through Git history manipulation, and the widening vulnerability of the global IoT ecosystem.

Read this edition in full at pers-int.com

0:00 - Introduction
0:45 - The Rise of the AI Adversary
7:34 - Supply Chain Vulnerabilities and Identity Crisis
13:58 - Geopolitical Cyber Warfare and State Actors
18:20 - The Broken Trust in Data and Privacy
20:44 - The Expanding Perimeter of IoT and Mobile
23:13 - Conclusion

Referenced sources:
Defense-in-depth strategies for securing mobile applications - Ryan Lloyd - ASW #390 (Application Security Weekly (Audio))
What Part of Zero Trust Does Your Exception Not Understand (CISO Series Podcast)
Who Governs Your AI Agents Identity, Offboarding & Open Standards (Cloud Security Podcast)
Welcome home, hacker. (CyberWire Daily)
NetNut gets cracked. (CyberWire Daily)
CyberWire Daily at 10 The vulnerabilities, zero‑days, and hardware flaws over the last decade. (CyberWire Daily)
The people's AI (CyberWire Daily)
The AI lock comes off. (CyberWire Daily)
The court draws a privacy line. (CyberWire Daily)
India tax RAT, prompt injection crypto scam, France pushes quantum-safe (Cybersecurity Headlines)
First AI ransomware, AdaptHealth suffers cyberattack, UK cyber plan delayed (Cybersecurity Headlines)
The Department of Know PeopleSoft exploit, Ford brings back gray beards, LLM vetting (Cybersecurity Headlines)
Consumer security worries, Vought supervises spy budgets, Fortibleed exposes Fortinet (Cybersecurity Headlines)
Bash hits AI, DHS announces ANCHOR-CI, Aikido buys Root (Cybersecurity Headlines)
Even With All These Security Vendors We Still Have Glaring Gaps (Defense in Depth)
Mastering agent permissions and Identiverse interviews - Howard Ting, Ajay Gupta, Sandy Bird, Amir Ofek - ESW #466 (Enterprise Security Weekly (Audio))
FBI Seizes NetNut Proxy Platform, Popa Botnet (Krebs on Security)
Risky Business #844 -- China closes AI vulndev gap as USA lifts Fable ban (Risky Business)
Risky Bulletin Android drops PIN guessing limit from 1,800 attempts to just 20 (Risky.Biz)
Risky Bulletin FatFs bugs enable physical access attacks on a load of devices (Risky.Biz)
Risky Bulletin Researcher drops giant cache of zero-day exploits (Risky.Biz)
SANS Stormcast Tuesday, July 7th, 2026 RCS and DNS; OpenSSH Update; Beyond Trust Advisory; PolinRider Update (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Wednesday, July 1st, 2026 Apple Patches; SimpleHelp Exploit; Git DNS Tricks; (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
Google Is Suing Chinese Scammers Who Are Using Gemini (Schneier on Security)
SN 1085 A SOTA State-Sponsored Campaign - AI's New Superpower Loop Engineering (Security Now (Audio))
Polymarket can predict the future. So how did it miss this hack (Smashing Security)
Britain plans to build autonomous AI 'Cyber Shield' to defend nation (The Record from Recorded Future News)
Major Japanese telco says cyberattack exposed 12 million emails (The Record from Recorded Future News)
Major medical device manufacturer notifies nearly 4 million of breach (The Record from Recorded Future News)
Ukrainian media outlets now among 'priority targets' for Russian hackers (The Record from Recorded Future News)
Spyware found on phone of European Parliament member probing it (The Record from Recorded Future News)
Supreme Court decision threatens EU-US data transfer agreement (The Record from Recorded Future News)
Japanese insurer, brewer, manufacturer and telecom disclose cyber breaches (The Record from Recorded Future News)
CIA chief highlights major shifts in agency's tech approach (The Record from Recorded Future News)

This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

This week's edition examines the erosion of the traditional security perimeter as AI agents and automated workflows introduce unprecedented, non-deterministic risks to the enterprise. We analyze the shift from human-scale prompting to machine-speed exploitation, exploring the cascading vulnerabilities found in global software supply chains and the geopolitical implications of state-sponsored infrastructure pre-positioning.

Read this edition in full at pers-int.com

0:00 - Introduction
0:30 - The Agentic Arms Race: Securing the AI Frontier
6:41 - Modern Defense Dilemmas: Policy, Personnel, and Regulation
11:54 - Supply Chain Siege: From NPM to Infrastructure
16:50 - State-Sponsored Shadows: Geopolitical Cyber Warfare
20:24 - The Ransomware Ripple Effect: Impacting Global Industry
22:24 - Conclusion

Referenced sources:
How AI Is Reshaping Identity Security at the Infrastructure Layer - Amit Masand, Neha Duggal, Ev Kontsevoy - ASW #388 (Application Security Weekly (Audio))
It's Not That We Don't Value Your Experience, We Just Don't Want to Pay for It (CISO Series Podcast)
Boards Love to Hear Jargon, Says Soon-to-Be-Fired CISO (LIVE in Boston) (CISO Series Podcast)
The Klue is in the data trail. (CyberWire Daily)
Vulnerability response Built for humans, outpaced by machines. (CyberWire Daily)
Peeling back Banana RAT. (CyberWire Daily)
CyberWire Daily at 10 A decade of leaks, espionage, and influence operations. (CyberWire Daily)
The botnet browser blues. (CyberWire Daily)
The nominee in limbo. (CyberWire Daily)
OpenAI takes on Mythos, Klue hits security shops, Five Eyes has eyes on AI (Cybersecurity Headlines)
Brazil phone alert hack, Prinz Eugen ransomware, Congress deepfake bill (Cybersecurity Headlines)
The Department of Know SearchLeak, Check Point zero-day, and pulling the plug on Fable (Cybersecurity Headlines)
Police clean WordPress sites, Klue OAuth breach, Warner's CISA warnings (Cybersecurity Headlines)
Anthropic tells G7 to cooperate, Fortinet VPN leak exposes credentials, Crypto Clipper abuses reviews (Cybersecurity Headlines)
Athena coalition, Estonia's quarantine, Arch hit with malware (Cybersecurity Headlines)
Navigating Shadow AI in the Enterprise, Verizon's SECOND 2026 report, and the news - Ankita Gupta - ESW #464 (Enterprise Security Weekly (Audio))
Risky Business #842 -- Anthropic needs an adult in the C suite (Risky Business)
Risky Bulletin Klue breach impacts security firms (Risky.Biz)
Risky Bulletin Canada's spy agency allowed to remove a botnet from Canadian devices (Risky.Biz)
Srsly Risky Biz Anthropic Lacks Emotional Intelligence (Risky.Biz)
SANS Stormcast Tuesday, June 23rd, 2026 Webshells; GitHub Actions Update; Fortibleed Update; Private Access Control Tokens (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Thursday, June 18th, 2026 QUIC Challenge; Android 17; Oracle CSPU; JetBrains Plugins; (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Wednesday, June 17th, 2026 VHDX to Remocs RAT; Fake Job Offer; OpenBSD Vuln; Copilot M365 Leakage (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
Anthropic's Fable and the State of AI (Schneier on Security)
Embedding Forbidden Text in Spyware to Discourage AI Analysis (Schneier on Security)
AI Use by the US Government (Schneier on Security)
SN 1083 Patch Tuesday à la AI - Arch Linux Repo Under Siege (Security Now (Audio))
AI gets hacked, and BitLocker gets bypassed (Smashing Security)
Police raid malware network tied to Russia's Evil Corp hacker group (The Record from Recorded Future News)
Australian sugar producer works to restore operations as ransomware group claims attack (The Record from Recorded Future News)
Hostile states behind three-quarters of attacks on Britain's critical infrastructure, cyber chief warns (The Record from Recorded Future News)
EU grants Ukraine access to cybersecurity reserve for major attacks (The Record from Recorded Future News)
Warner warns of CISA cuts, staffing gaps in letter to acting chief (The Record from Recorded Future News)
GitHub dismissed security reports on flaws now exploited by supply-chain worm, researchers say (The Record from Recorded Future News)

This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.