Mostly Security

Wedding day week for Eric, and Jon may have a 7th hive (NB: Nope, didn't happen). Mythos + MacOS == 55 page hand delivered report to Apple Park, a contractor at CISA dumps creds in an open GitHub repo, and Cloudflare runs Mythos for exploit PoC generation. Journalists found the answer for K4 by Journalisting, and arXiv announces publishing bans for AI slop.

• 0:00 - Intro
• 6:30 - 55 Pages, Hand Delivered
• 10:27 - Private-CISA
• 13:11 - Cloudflare + Mythos
• 20:28 - Journalists vs. K4
• 24:21 - Slop Ban

Eric experiences the good, the bad, and the indifferent, while Jon is full on into spring chores. Firefox is the first (?) company to fix a massive haul of mythos identified vulnerabilities and Cloudflare posts an interesting response to Copy Fail. Scorpions incorporate metal into their stingers and pincers, and the clearest map to date of > 164,000 galaxies from the JWST.

• 0:00 - Intro
• 9:43 - Mythos + Firefox
• 14:40 - Cloudflare vs Copy Fail
• 19:27 - Heavy Metal Scorpions
• 23:10 - 164,000 Galaxies

Eric enjoys Taco Cinco de Mayo Tuesday. Jon get unexpected bees. The AccountDumpling Gang is out and about. DAEMON Tools and Instructure have a bad day. Eric spells random words with Landsat and Jon finds a world with an unexpected atmosphere.

• 0:00 - Introduction
• 10:08 - AccountDumpling Gang
• 14:44 - DAEMON Tools Bad Day
• 18:58 - Instructure's Bad Day
• 24:17 - Landsat Letters
• 27:18 - Unexpected Atmospheres

Eric preps for an exciting week and it's all Bees in Jon's world at the moment. Will mythos overwhelming matter to the already overwhelmed, GitHub push options unescaped, and LiteLLM under active exploit hours after disclosure. Will OpenAI succeed in an AI-first phone, and detecting insect varieties with AI.

• 0:00 - Intro
• 13:19 - Little* Less Scary
• 19:50 - Little Bobby Push Options
• 24:13 - LiteLLM Exploit
• 28:04 - AI Phone
• 34:50 - Wingbeat Radar

Eric kicked off talking about the latest wedding prep and Jon awaits his bees. A fake crypto app stole $9.5 million right off the Apple App Store, plus a review of 2026's nastiest cyberattacks. On the science side, Eric shared the wild discovery of trees secretly sparking with invisible UV light during storms, and Jon wrapped up by theorizing how the JWST found unexpected, thick water-ice clouds on a cold super-Jupiter exoplanet.

• 0:00 - Introduction
• 7:26 - Fake Crypto App
• 12:34 - 2026 Cyberattacks so far
• 18:19 - Sparking Trees
• 21:14 - Water-ice Clouds

Jon gets stopped by a Coffee Cop and Eric prepares some cardboard for a wedding in a couple of weeks. The Fed worries about Mythos, spear phishing is getting real, RCE of an agent builder, and Google starts rolling out device bound sessions. For fun we have a Bee documentary (but not from Jon), a book that may or may not turn out great, and improved opportunities to (someday) deploy CRISPR.

• 0:00 - Intro
• 10:30 - Mythos Preview + Banks
• 11:29 - Efficiency Explosion
• 15:59 - Flowise RCE
• 18:21 - Device Bound Sessions
• 21:42 - Eric Fun
• 23:22 - The Will of the Many
• 28:32 - Smaller and CRISPR

Jon has bee disappointments and Eric geeks out over the Artemis II mission. AI Agents are the attack surface. The ClickFix macOS abuse evolves. Anthropic's new AI Model is apparently pretty smart. Sandstorm found on Mars. Finally, mapping neuron connections using RNA barcodes?

• 0:00 - Introduction
• 8:24 - Artemis II
• 13:32 - AI Agent Dangers
• 19:33 - ClickFix Evolution
• 24:31 - Anthropic's New Model
• 29:04 - Sandstorm on Mars
• 32:04 - RNA Barcodes

Eric releases updated apps, and Jon's back from vacation. Autonomous jailbreaks, a malicious release of a popular npm package, and Anthropic accidentally releases source maps for claude code. The Artemis II launched successfully, and an opportunistic visit to bronze age burial cairns.

• 0:00 - Intro
• 17:18 - AI, Attack Thy Brethren
• 22:04 - Malicious Axios Package
• 26:58 - Claude Code Leak
• 35:21 - To The Moon!
• 37:40 - Clava Cairns

Spring Break! Jon shares a couple fun notes before heading out and Eric pulls a few favorites from the archives. Enjoy Something Fun!

• 0:00 - Spring Break!
• 0:29 - Hidden Water Beneath Mars
• 2:36 - Chickpeas Grown in Simulated Moon Soil
• 4:43 - Episode 403: Commodore 64
• 8:51 - Episode 403: Really Old Honey
• 12:48 - Episode 378: Woolly Mammoth Mouse
• 16:15 - Episode 378: Greenland Sharks
• 21:48 - Episode 397: Aardwolfs and Numbats

Eric enjoys Mozart's Requiem and Antigravity. Jon goes fishing. Amazon Kuiper is now Leo. Claude vulnerabilities are chained to do bad things. Google releases the H1 2026 Cloud Threat Horizons Report. Ravens are smart. Spiral Galaxies are cool.

• 0:00 - Introduction
• 8:13 - Amazon Leo
• 10:46 - Claudy Day
• 15:27 - Google Cloud Threat Report
• 21:31 - Wolf-Predicting Ravens
• 23:10 - Spiral Galaxy