Metacasts: Cybersecurity

This week's edition examines the collapse of the temporal defense window as autonomous agents shrink the patch-to-exploit cycle to mere minutes. We analyze the strategic shift from perimeter defense to automated triage in the face of agentic worms, supply chain poisoning, and the weaponization of orbital infrastructure.

Read this edition in full at pers-int.com

0:00 - Introduction
0:33 - The AI Arms Race: From Coding Assistants to Agentic Threats
6:21 - Patching at the Speed of Light: Navigating the Vulnerability Surge
12:10 - Geopolitical Cyber Warfare: Espionage and Infrastructure Sabotage
18:45 - Supply Chain Siege: Protecting the Software Factory
21:00 - The New Digital Frontier: Securing Space and Satellite Assets
23:00 - Conclusion

Referenced sources:
Why Does It Matter Who or What Created the Code - Matias Madou - ASW #387 (Application Security Weekly (Audio))
Boards Love to Hear Jargon, Says Soon-to-Be-Fired CISO (LIVE in Boston) (CISO Series Podcast)
The fable ends before it begins. (CyberWire Daily)
Securing satellites already in space, with journalist Shaun Waterman. (CyberWire Daily)
Vulnerability management at AI speed. (CyberWire Daily)
Deadline-driven defense. (CyberWire Daily)
The court calls Google's bluff. (CyberWire Daily)
A checkmark for trust, a payload for theft. (CyberWire Daily)
Anthropic models defended, FBI shuts down massive phishing service, 1Password acquires Apono (Cybersecurity Headlines)
The Department of Know CISA's quick patch, Miasma attacks, judge finds AI guilty (Cybersecurity Headlines)
Fortinet patches FortiSandbox, GitHub disables npm scripts, Nottingham University breach (Cybersecurity Headlines)
Big Patch Tuesday, 'Nightmare Eclipse' drops Windows 0-day, Claude Fable restricted at Microsoft (Cybersecurity Headlines)
Fable 5, Tchap hacked, CISA priorities (Cybersecurity Headlines)
Safe AI at scale, what happens after initial access, and the weekly enterprise news - Albert Estevez Polo, Shiva Pillay - ESW #463 (Enterprise Security Weekly (Audio))
A Record-Breaking Patch Tuesday for June 2026 (Krebs on Security)
Risky Business #841 -- Microsoft gets owned and 0day'd (Risky Business)
Risky Bulletin Arch Linux supply chain attack spreads to 1,900+ AUR packages (Risky.Biz)
Risky Bulletin In the age of AI, CISA changes federal patching rules (Risky.Biz)
Risky Bulletin Meta says NSO violated court order with new campaign targeting WhatsApp (Risky.Biz)
SANS Stormcast Monday, June 15th, 2026 Arch Linux Malicious User Packages; Splunk Vuln and Exploit; Exploiting AI Coding Agents (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Friday, June 12th, 2026 Bitlocker Trouble; Ivanti and Oracle Exploited; macOS Malicious Installers (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Thursday, June 11th, 2026 Framing Protections; npm improvements; Adobe Patches; New Defender 0-day (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SN 1082 The Malicious Use of AI - Anthropic's Red Team Report (Security Now (Audio))
This AI worm just rewrote its own rules (Smashing Security)
Estonia to quarantine emails sent from Russian .ru domain before they reach government officials (The Record from Recorded Future News)
Cyberattack on Russian tech firm Astral disrupts business, government services for week (The Record from Recorded Future News)
Finland brings charges against cargo ship officers for cutting submarine cables (The Record from Recorded Future News)
Belarus-linked hackers target Gmail accounts of Polish public figures and their families (The Record from Recorded Future News)
British high school sends students home following cyberattack (The Record from Recorded Future News)
Hacker linked to Void Blizzard faces charges over cyberespionage campaign (The Record from Recorded Future News)
CISA to require federal agencies to patch some cyber vulnerabilities within 3 days (The Record from Recorded Future News)
Cyberattack shuts down major Australian sugar mills, disrupting harvest (The Record from Recorded Future News)
Microsoft ships largest Patch Tuesday on record, with one bug under active attack (The Record from Recorded Future News)
UK weakens proposed telecoms defenses against Chinese hackers after industry pushback (The Record from Recorded Future News)
CISA to transform how it assesses cyber vulnerabilities and risks, Andersen says (The Record from Recorded Future News)
Hackers pose as women seeking romance to spy on Russian soldiers (The Record from Recorded Future News)

This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

This week's edition examines the systemic collapse of digital borders as geopolitical warfare and agentic AI converge to eliminate the concept of a secure zone. We analyze the transition from reactive patching to a necessity for autonomous, multi-agent defense in an era of automated, high-frequency exploitation.

Read this edition in full at pers-int.com

0:00 - Introduction
0:34 - Geopolitical Cyber Warfare and Digital Sovereignty
8:12 - The AI Arms Race: From Agentic Defense to Automated Exploits
15:40 - The Human Element: Social Engineering and Identity Theft
18:37 - Shadows in the Supply Chain: Vulnerabilities in the Modern Stack
20:41 - Conclusion

Referenced sources:
Scanner Results Are a Starting Point. Here's What Comes Next. - Federico Kirschbaum - ASW #386 (Application Security Weekly (Audio))
You've been muted...permanently. (CyberWire Daily)
The NSA gets an AI upgrade. (CyberWire Daily)
Not every headhunter is hiring. (CyberWire Daily)
The AI race gets a referee. (CyberWire Daily)
The bugs are piling up faster than the fixes. (CyberWire Daily)
Claude & Gemini malware, Mythos sneaky flaws, Instagram AI abuse (Cybersecurity Headlines)
CISA Palantir Director, EU tech sovereignty, SolarWinds Serv-U flaw (Cybersecurity Headlines)
The Department of Know NVD audit, Meta's leaky AI, Microsoft is closer to quantum (Cybersecurity Headlines)
Chinese cybercrime group, Cisco CM flaw, CISA faces changes (Cybersecurity Headlines)
Illegal streamers, EU digital sovereignty, cost of a cyber force (Cybersecurity Headlines)
Russia claims officials' surveillance, Project Glasswing expands, CISA flags two-year-old Oracle flaw (Cybersecurity Headlines)
The State of AI in SecOps, the Unintended Consequences of Vulnmaxxing, and the News - Filip Stojkovski - ESW #462 (Enterprise Security Weekly (Audio))
Soap Box Detection and response in the AI age (Risky Business)
Risky Business #840 -- Microsoft walks back researcher threats (Risky Business)
Risky Bulletin RubyGems adds dependency cooldowns to counter supply chain attacks (Risky.Biz)
Risky Bulletin The EU debuts digital sovereignty plan (Risky.Biz)
Srsly Risky Biz NATO's Cyber Approach Needs Change (Risky.Biz)
Risky Bulletin A tenth of all new domains last year were malicious (Risky.Biz)
SANS Stormcast Tuesday, June 9th, 2026 Azure Repos Infected; Checkpoint VPN 0-Day; Verizon VoLTE missing IPSec integrity prot. (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Friday, June 5th, 2026 Coreutils for Windows; Cisco Unified Comm Manager Fix and Exploit; OAuth Orphans (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Wednesday, June 3rd, 2026 SVG Phishing; Android Patches; Poly Voice Vuln; Ivanti Neurons Priv Escelation (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
The Intersection of Encryption and AI (Schneier on Security)
SN 1081 AI Captured the Flag - Personal AI Productivity Superpower or Privacy Threat (Security Now (Audio))
This AI security flaw might be impossible to fix (Smashing Security)
Armenia's pro-Europe party wins election despite Russia-linked disinformation (The Record from Recorded Future News)
WhatsApp says NSO targeted users with spearfishing attacks in violation of court order (The Record from Recorded Future News)
Russia upgrades rules for its digital spy system to better track citizens online (The Record from Recorded Future News)
EU unveils tech sovereignty package to cut reliance on US, Chinese suppliers (The Record from Recorded Future News)
Apple removes Russia's state-backed messaging app Max from its store (The Record from Recorded Future News)
Trump considers Palantir exec to lead CISA (The Record from Recorded Future News)
Russia seeks to label two anti-Kremlin hacker groups as 'extremist' (The Record from Recorded Future News)

This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

This week's edition examines the fundamental shift in cybersecurity from defending static network boundaries to managing the volatile logic of autonomous AI agents. We analyze how the rise of agentic workflows and the erosion of the traditional perimeter are transforming the core mission of the CISO from vulnerability patching to the auditing of delegated authority.

Read this edition in full at pers-int.com

0:00 - Introduction
0:34 - The AI Arms Race: Agents, Prompts, and Prompt Injection
8:17 - The Vulnpocalypse: Managing the Growing Patch Backlog
15:16 - State-Sponsored Shadows: Geopolitics and Global Cyber Warfare
18:44 - Identity Under Siege: OAuth, Social Engineering, and MFA Bypasses
20:47 - Beyond the Perimeter: Securing the Modern Enterprise Ecosystem
22:38 - Conclusion

Referenced sources:
BadHost, Dead CTFs, Exploding NPMs, and the Verizon DBIR - ASW #385 (Application Security Weekly (Audio))
Our Data Security Policy Is Transparent in That It Doesn't Exist (CISO Series Podcast)
Not every headhunter is hiring. (CyberWire Daily)
The AI race gets a referee. (CyberWire Daily)
The bugs are piling up faster than the fixes. (CyberWire Daily)
The skills pay the bills. (CyberWire Daily)
Mind the gap between IT and OT. (CyberWire Daily)
Chinese cybercrime group, Cisco CM flaw, CISA faces changes (Cybersecurity Headlines)
Illegal streamers, EU digital sovereignty, cost of a cyber force (Cybersecurity Headlines)
Russia claims officials' surveillance, Project Glasswing expands, CISA flags two-year-old Oracle flaw (Cybersecurity Headlines)
Meta AI hands over Instagram access, Dutch police dismantle botnet, RedHat packages backdoored (Cybersecurity Headlines)
GlobalProtect VPN exploited, ChatGPT share links exploits, Feds criticize NIST (Cybersecurity Headlines)
The Department of Know Google's CodeMender, CISA's big leak, Torvalds open-source warning (Cybersecurity Headlines)
Soap Box Detection and response in the AI age (Risky Business)
Risky Business #840 -- Microsoft walks back researcher threats (Risky Business)
SANS Stormcast Friday, June 5th, 2026 Coreutils for Windows; Cisco Unified Comm Manager Fix and Exploit; OAuth Orphans (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SANS Stormcast Thursday, June 4th, 2026 swagger.json Scans; Android Fake Call Detection; Anthropic Dashboard (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast))
SN 1081 AI Captured the Flag - Personal AI Productivity Superpower or Privacy Threat (Security Now (Audio))
This AI security flaw might be impossible to fix (Smashing Security)

This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.