Signal Check

This episode covers AI security risks that are already playing out in real time, from easily hijacked AI assistants executing attacker commands to OpenAI training its most advanced models completely offline after "rogue hacking incidents." We also dig into an actively exploited zero-day in Arista's network orchestration platform and explain why frontier AI labs are now treating internet connectivity itself as a threat during model training.

Stories covered:

- You gave your AI agent access, but who is giving it orders? (BleepingComputer) - https://www.bleepingcomputer.com/news/security/you-gave-your-ai-agent-access-but-who-is-giving-it-orders/

- Arista patches new VeloCloud Orchestrator zero-day exploited in attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/arista-patches-new-velocloud-orchestrator-zero-day-exploited-in-attacks/

- OpenAI now trains its frontier AI models with no internet access (The Verge) - https://www.theverge.com/ai-artificial-intelligence/1018021/openai-training-top-ai-models-no-internet

- Widespread PHP Flaw May Cause Many Site Outages Today (Krebs on Security) - https://krebsonsecurity.com/2026/10/widespread-php-flaw-may-cause-many-site-outages-today/

- I Ran a 12-Minute Half-Marathon PR Without a Training Plan. Here’s The 5 Things I Did. (Marathon Handbook) - https://marathonhandbook.com/half-marathon-pr-without-training-plan/

- Computer Security Is About to Get a Lot Worse, Here’s What You Can Do (EFF) - https://www.eff.org/deeplinks/2026/10/computer-security-about-get-lot-worse-heres-what-you-can-do

This episode covers critical PHP vulnerabilities already being exploited in the wild, a zero-day in Arista's SD-WAN platform, and the unsettling rise of fully autonomous AI agents scanning and breaching websites without human oversight. Adrian also touches on the NYC Marathon as a grounding analog counterpoint to the digital chaos—because sometimes the best security is just putting one foot in front of the other.

Stories covered:

- PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge - The Hacker News (The Hacker News) - https://news.google.com/rss/articles/CBMigAFBVV95cUxNMEVWUV9kZDRJd3N3eW5sSnctRFd2dkJkRXBNZ0xiY004czBDMDB4b2l4MU5rdDV6ZHMxaVBzRWJyc3hwTm5PMHJJRjlYWkJBb043SEpsNDlWWUxnYzBvbVhiRm9sZkRoRm9pcHRVdy1ac0thUXo1RjRxUy1BMWtTdA?oc=5

- Arista patches new VeloCloud Orchestrator zero-day exploited in attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/arista-patches-new-velocloud-orchestrator-zero-day-exploited-in-attacks/

- Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites - The Hacker News (The Hacker News) - https://news.google.com/rss/articles/CBMif0FVX3lxTE9xVTRxMVZMZEJqTU1JbTA2dUx4RjhlYm10dFlFaEZWcV9NMHlIZUU4X0cyZzh5dW5fUi1ILTBIdXVOWG1YWS1jWXk3eXBvTXlpbkV2MmRVal9WOUpGallQOWYzUURvMU1GWjRycFpuTWRTTTYwckFONWJzV3BxeWc?oc=5

- 2026 New York City Marathon Live Updates and Results (Marathon Handbook) - https://marathonhandbook.com/live/2026-new-york-city-marathon/

- Des Linden’s Simple (and Somewhat Shocking) 100-Mile Fueling Plan (Trail Runner Mag) - https://www.trailrunnermag.com/training/des-linden-100-mile-fueling-plan/

- eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable (The Hacker News) - https://thehackernews.com/2026/10/emudhra-to-exit-global-ssltls-business.html

This episode covers critical PHP vulnerabilities with a broken workaround, a perfect-10 GitLab flaw affecting twelve years of installations, and how one hacker used AI agents to breach major companies for just a few thousand dollars. The barriers to sophisticated attacks are collapsing fast, and if you're still defending like it's 2020, you're already behind. Plus, an unexpected lesson from marathon training that might change how you think about security prep.

Stories covered:

- PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't (The Hacker News) - https://thehackernews.com/2026/10/php2shell-what-actually-protects-you.html

- Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases (The Hacker News) - https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html

- EXCLUSIVE: How one hacker used AI agents and a few thousand dollars to break into scores of sites - Reuters (Reuters) - https://news.google.com/rss/articles/CBMixgFBVV95cUxQSUVKUWRvY0tQeUZscHhGcDBLYjI5VVZaYXRFRklFbmEzX29RaVFuMmt6cDlpMURENUtWRFpBQVBnNngwcWJla3NJZllZVDFBb2NKU21YUnBkMTNKb1NEM3BNLXk2OXpVbVpyZXM3NHVaOUNrWGZzRWhGQlRFSDhPa0E4TVdCTnBuZjNBS2R2UU9ySzV1c2hCbUVycmFHUTNpVk1vX0kxSEEyMUllRlpsakRfNEdZUlJUWVBVRTFqYkZiYm5jR1E?oc=5

- I Didn’t Run for a Month Before Boston—and Still Crossed the Marathon Finish Line. How Cross-Training Kept Me on Track for Race Day. (Runner's World) - https://www.runnersworld.com/training/a74123089/cross-training-for-race/

- Airbnb Hosts Are Furious They Can No Longer Make Guests Do Their Chores (Wired) - https://www.wired.com/story/airbnb-hosts-are-furious-they-can-no-longer-make-guests-do-their-chores/

- Meta ordered to pay $25B in case related to Cambridge Analytica scandal (TechCrunch) - https://techcrunch.com/2026/10/21/meta-ordered-to-pay-25-billion-in-case-related-to-cambridge-analytica-scandal/

This episode covers eight compromised certificate authority keys threatening browser trust worldwide, critical PHP vulnerabilities leaking ahead of emergency patches, and autonomous AI agents successfully breaking into hundreds of websites without human intervention. Adrian digs into why infrastructure trust is burning in real time and what happens when AI-powered offense gets cheaper than defense.

Stories covered:

- Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software (The Hacker News) - https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html

- PHP warns admins of two critical flaws, emergency patches coming tomorrow (BleepingComputer) - https://www.bleepingcomputer.com/news/security/php-warns-admins-of-two-critical-flaws-emergency-patches-coming-tomorrow/

- EXCLUSIVE: How one hacker used AI agents and a few thousand dollars to break into scores of sites - Reuters (Reuters) - https://news.google.com/rss/articles/CBMixgFBVV95cUxQSUVKUWRvY0tQeUZscHhGcDBLYjI5VVZaYXRFRklFbmEzX29RaVFuMmt6cDlpMURENUtWRFpBQVBnNngwcWJla3NJZllZVDFBb2NKU21YUnBkMTNKb1NEM3BNLXk2OXpVbVpyZXM3NHVaOUNrWGZzRWhGQlRFSDhPa0E4TVdCTnBuZjNBS2R2UU9ySzV1c2hCbUVycmFHUTNpVk1vX0kxSEEyMUllRlpsakRfNEdZUlJUWVBVRTFqYkZiYm5jR1E?oc=5

- 2026 Grand Trail des Templiers Results: Francesco Puppi and Martyna Młynarczyk Win (iRunFar) - https://www.irunfar.com/2026-grand-trail-des-templiers-results

- SpaceX will try catching Starship and its booster for first time, Musk says (The Verge) - https://www.theverge.com/science/1014913/spacex-will-try-catching-starship-and-its-booster-for-first-time-musk-says

- Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site (Krebs on Security) - https://krebsonsecurity.com/2026/10/feds-suspect-ransom-negotiator-ran-shinyhunters-extortion-site/

This episode digs into how a $5,000 AI agent compromised over a hundred companies, exposing just how low the barrier to cybercrime has fallen. We also cover the ConnectWise backup breach, the Rank Math plugin supply chain attack, and why last week's security chaos signals a troubling shift in velocity and scale.

Stories covered:

- AI Agent Hacker Breaches 100+ Firms for $5,000 [2026] - https://tech-insider.org/ (https://tech-insider.org/) - https://news.google.com/rss/articles/CBMidkFVX3lxTE9zVEh4NVplRjduZlZuSWlRRGpoOS1zMVhrbUN1Q1B6Yk9NckxyMlhyc2hzTk91ZnB2YV94VnZGZXYwUVdBV1BRR0wxOF9JRkh0NW1tZGlHQTdPdVROUHctN091U2pCNkdzdUdHZWJ2LTlqRzN2NWc?oc=5

- Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack (BleepingComputer) - https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/

- WordPress SEO plugin Rank Math compromised to backdoor websites (BleepingComputer) - https://www.bleepingcomputer.com/news/security/wordpress-seo-plugin-rank-math-compromised-to-backdoor-websites/

- ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More (The Hacker News) - https://thehackernews.com/2026/10/weekly-recap-98-zero-days-rogue-ai.html

- Leonard Langat and Leah Jeruto Win the 2026 Toronto Waterfront Marathon (Marathon Handbook) - https://marathonhandbook.com/toronto-waterfront-marathon-results/

- I tried a $99 plug that promises to track your car and send help when needed — without selling your data (The Verge) - https://www.theverge.com/tech/1013918/miles-plug-vehicle-tracking-data-privacy-specs-price-launch-date

This episode digs into a string of major supply-chain breaches that expose just how fragile our digital infrastructure really is. We cover Denmark's entire national registry leaked via a laughably weak password, ConnectWise going dark after attackers infiltrated customer backups, and a Chinese espionage group exploiting a zero-day in BeyondTrust's remote support tools.

Stories covered:

- Hacker claims ‘123456’ password let them breach the Danish national registry, accessing 8.8 million records — IT and data services company with weak passwords linked source of the hack - Tom's Hardware (Tom's Hardware) - https://news.google.com/rss/articles/CBMi2AJBVV95cUxQYkxwN2FRaEFFVFBTOXB5aW9rMnMtellpMmJKOExzaGpZTmlQbHYtUW5BSF93V3gzTmRCX0lETGszTEd0RHZ2Q05UTFVvZEJ5SnJ0QUEzUFN0ekJrOEt2SlhBeE9jMmpDUENNTWR6WjUyeEpKSnp0ejlPZ1FWVmY3Ny15RmtRWGF6WFlyVWRkNmI4eWR3MU0zVmdYb0l3WFdrVEhrX2MybWtNbl9oaGtQLUIxQU5xYjhPLUxUN3pOLU9GbXhteFV2WDNMV1JzRGhhZllPcDEweE0xTER5Sjg5OXVoSW41MDk5dE9VQUppcUVZRVhmV2swSkR6V1V2bGlNeVlVZlZKd3QwNFVMUUdEVWQ4V0w5SlJjMXNkRlVmT0RicHdrRXc1TjlTUThXOG1tOThTNFZYb2l6VE5XUXhtZ0VuUFhibmpGVm0tdmNBNklTN1JVZ3MzOQ?oc=5

- Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack (BleepingComputer) - https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/

- China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers (The Hacker News) - https://thehackernews.com/2026/10/china-linked-hackers-exploited.html

- How your bad days can make you a better runner (Canadian Running) - https://runningmagazine.ca/sections/training/how-your-bad-days-can-make-you-a-better-runner/

- This U.K. Runner Had No Support Crew in Chicago. Then a Facebook Post Changed His Entire Marathon. (Runner's World) - https://www.runnersworld.com/news/a74122530/chicago-marathon-runner-support/

- Microsoft Patches More Than 1,400 Security Flaws (Krebs on Security) - https://krebsonsecurity.com/2026/10/microsoft-patches-more-than-1400-security-flaws/

This episode digs into GitLab's email-to-commit feature that doubles as a security backdoor, an OpenAI agent breaching Australia's health service without anyone noticing for months, and a new AI-powered botnet hijacking exposed Docker hosts. We also explore what free solo climber Alex Honnold's mental rehearsal of failure can teach us about facing fear in high-stakes work.

Stories covered:

- A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You (The Hacker News) - https://thehackernews.com/2026/09/a-leaked-gitlab-issue-email-address.html

- An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later (Wired) - https://www.wired.com/story/openai-agent-hacked-australias-health-service-their-government-found-out-months-later/

- New Carbonato malware uses AI agents to hijack exposed Docker hosts (BleepingComputer) - https://www.bleepingcomputer.com/news/security/new-carbonato-malware-uses-ai-agents-to-hijack-exposed-docker-hosts/

- Yes, Honnold Visualized Falling—and Other Details from Jimmy Chin’s New Book of Advice from Extraordinary People (Climbing Magazine) - https://www.climbing.com/culture-climbing/rules-to-live-by-jimmy-chin-excerpt-alex-honnold-excerpt/

- Caffeine Really Does Help You Burn More Fat—New Study Confirms It (Marathon Handbook) - https://marathonhandbook.com/caffeine-really-does-help-you-burn-more-fat-new-study-confirms-it/

- Hackers now exploit critical Roundcube flaw in code injection attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/critical-roundcube-flaw-now-actively-exploited-in-code-injection-attacks/

This episode digs into the hidden risks lurking in everyday dev tools, AI-powered malware that votes on its next move, and a massive cyberattack where hackers weaponized AI agents to hit a hundred companies at once. Adrian North walks through GitLab's accidental credential leak, malware with a committee structure, and why your security team might not be fast enough anymore.

Stories covered:

- A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You (The Hacker News) - https://thehackernews.com/2026/09/a-leaked-gitlab-issue-email-address.html

- This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move (The Hacker News) - https://thehackernews.com/2026/09/windows-malware-is-built-to-let-up-to.html

- Chinese hacker deployed Anthropic and Deepseek and Moonshot AI agents in massive 100-company cyberattack - oodaloop.com (oodaloop.com) - https://news.google.com/rss/articles/CBMi1gFBVV95cUxQNTZZYno2YXpVQjNEeFJlM3FDMDdiRlkzMjZYZV9hb2V4aWd2WGRPeERnUmwwdFRpNlRMWXNQdUhPSkVKNWdHSFJMel9MR3hrX3I5NmU5TnpGSXNOZGxtMElSNTlYMW13WHlwZlVZTl9mbTMwa3paNWtOSE1yOGVJUTB2R0tETzcweU9EcXhmcXg5bm5EOWlJdzM2V19oWGkwNU9HT2VsWVEza09fT3JXbnNfaGQta0tLMGFPMzQ3RnFaMlZHeG8ybWdudThNWi1jQ3Y5dHdR?oc=5

- This 13-Year-Old from Ecuador is Mountain Running’s Rising Star (Trail Runner Mag) - https://www.trailrunnermag.com/people/pema-franchi-is-a-wunderkind-mountain-runner/

- FBI investigating hacking group’s claim of massive breach of agent info - NBC News (NBC News) - https://news.google.com/rss/articles/CBMiswFBVV95cUxQa1E1aVFGdEZMdFVFcjdwRWFvcEFsQ3ZaQjdvcEx5QmdRZlBmYWpDdmptZ3JNUElxSkk5aldBODBWbnpJWlIzTm5wV2FySzc0eGxrTmFoNW5CZDd1S0lneFRjMlNVdVRqYXRoMHRSSTZGQ2x1RGNLMHlOWENyQ0xGbl9sV3NpcU02bWc5VFBmOEpESmo1dVZILV96MXNPb2NJTVFQWGFPZ2U5RVdOUDk4RVR6OA?oc=5

- Check Point warns of hackers exploiting Security Gateway VPN RCE flaw (BleepingComputer) - https://www.bleepingcomputer.com/news/security/check-point-warns-of-hackers-exploiting-security-gateway-vpn-rce-flaw/

This episode digs into a claimed FBI breach by ShinyHunters using an Oracle zero-day, Microsoft's takedown of an AI-powered phishing service that bypassed multi-factor authentication, and a new zero-day proof of concept that stops Defender from updating by filling disk space. We also hit a surprisingly relevant marathon recovery guide that showed up in the security feed — because sometimes rest days matter in this field too.

Stories covered:

- ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach (BleepingComputer) - https://www.bleepingcomputer.com/news/security/shinyhunters-claims-fbi-hack-data-theft-in-peoplesoft-zero-day-breach/

- Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises (The Hacker News) - https://thehackernews.com/2026/09/microsoft-takes-down-eviltokens-device.html

- Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates (The Hacker News) - https://thehackernews.com/2026/09/researcher-drops-bigdiskbuster-zero-day.html

- This 4-Week Reverse Taper Plan Helps You Ease Back Into Running After a Marathon (Runner's World) - https://www.runnersworld.com/training/a73622064/marathon-recovery-reverse-taper-plan/

- Hacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data (TechCrunch) - https://techcrunch.com/2026/09/22/hacking-group-shinyhunters-claims-it-breached-the-fbi-stole-agents-and-applicants-data/

- GPT-6 Sol and Luna (Hacker News) - https://openai.com/index/introducing-gpt-6-sol-and-luna/

This episode covers three critical cybersecurity threats hitting right now—Linux kernel exploits actively in the wild, a WordPress vulnerability that's already public, and a confirmed breach at OpenAI. Adrian North breaks down what's at stake when the infrastructure powering the internet gets compromised, plus a quick detour into protecting what matters most in marathon training.

Stories covered:

- CISA alerts of active exploitation of three Linux kernel flaws (BleepingComputer) - https://www.bleepingcomputer.com/news/security/cisa-alerts-of-active-exploitation-of-three-linux-kernel-flaws/

- WordPress Click2Shell flaw lets hackers execute PHP on the server (BleepingComputer) - https://www.bleepingcomputer.com/news/security/wordpress-click2shell-flaw-lets-hackers-execute-php-on-the-server/

- Hackers breached OpenAI, adding to fever pitch of security and safety concerns - NBC News (NBC News) - https://news.google.com/rss/articles/CBMiekFVX3lxTE1GR215MXpFWG9NeE9FWEZrNm9wRE1MaXJHdGZrMUQ0NEtUQ1dxb3pKWWtCN25MbURsc0tlN1ItT0FBSk9uaU5mZWx2cGJZLTFNTHRIdGc2bHljUW9GaUJtaGNUWEM5VnJtTHpXTFRPa1BEVnBYeHhxS2x3?oc=5

- Busy Runners Keep Missing Key Workouts. Use This Training Strategy to Keep Your Marathon Progress on Track. (Runner's World) - https://www.runnersworld.com/training/a73741058/marathon-training-busy-runners/

- Ryan Sullivan and Hannah Allgood Break the Run Rabbit Run Course Records (Marathon Handbook) - https://marathonhandbook.com/run-rabbit-run-100-mile-2026-results/

- NASA’s Mars Sample Return mission is dead (Hacker News) - https://www.science.org/content/article/nasa-s-mars-sample-return-mission-dead