Security Now (Audio)

Turns out, every chatbot conversation runs on a messy hack at the heart of language models, making prompt injection an unsolved—and possibly unsolvable—security threat. Steve and Leo unravel the research that explains why "roles" in AI aren't what you think they are.

• Understanding the controversy surrounding "AI Model Distillation"
• Anthropic moves to make their most powerful Mythos 5 model more widely available.
• ...

From autocorrect to full-fledged conversationalists, discover how a few tweaks transformed language models—and why understanding this shift exposes urgent questions about AI safety and control.

• Trusting an open source AI proxy might bite you.
• France's under-15 social media ban hits its constitution.
• A bit of AI prompting found a serious bug in Zoom.
• AI-based network defenders see a stock price jump.
• A (very) deep div...

AI agents are breaking free from their test environments, outsmarting their creators and breaching real-world networks in ways that no one predicted. Discover how these agentic models are changing the game for both cyber offense and defense.

• Anthropic's agentic AI also broke free and hacked others.
• We know much (much!) more about the OpenAI breakout.
• OpenAI posts that they're pausing "Astra" - even internally.
• What was that...

At Black Hat Las Vegas, the Security Now crew digs into how AI is not just finding hidden software bugs but also fueling both groundbreaking innovation and alarming new exploits. When open models can launch surprise Bitcoin heists, who draws the line between forbidden knowledge and genuine progress?

• Black Hat and DEF CON: Hacking Stories and Conference Culture
• Zoox Ride-Hailing Hack and Over-the-Air Vulnerabilities
•...

What happens when an unconstrained OpenAI model goes rogue and hacks into Hugging Face, breaching real-world security boundaries? This episode unpacks a watershed moment for AI safety that has everyone in cybersecurity talking.

• OpenAI's unconstrained internal testing AI got loose, attacked Hugging Face.
• We hear from OpenAI, Hugging Face and Andrew Ng.
• GRC went off the air Friday. Was GRC hacked? What happened?
• The Linux ker...

Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on the dark side.

• The "bone crushing" didn't happen this month.
• Revisiting and inspecting July's Patch Tuesday.
• A widespread and worrisome flaw in OpenSSL.
• Claude can now access your 1Passwor...

AI is rewriting the rules of cybersecurity, and this week, massive government and private sector moves show just how quickly the stakes are rising. Find out how regulators, attackers, and defenders are all scrambling to keep up as vulnerabilities surface at record speed.

• Europe warns their largest banks to prepare for AI attack.
• The EU launches an action plan for AI Cybersecurity.
• China considers keeping its budget AI to its...

From the sudden retirement of Internet pioneer Vint Cerf to the unstoppable advance of "apex agentic adversaries," get a front-row seat to the unfolding security revolution and its massive real-world stakes.

• Why Fable5's re-release has disappointed.
• Opera becomes the first browser to offer "Paste Protect."
• Microsoft BlueHammer exploit is "hammering" systems.
• Industry legend (TCP creator) Vint Cerf on AI.
• Chrome turns 150 w...

AI is now uncovering and fixing thousands of hidden software bugs faster than humans can keep up, but not everyone is playing by the rules. Find out how state-sponsored attackers and careless disclosures are turning the cybersecurity playbook upside down.

• Win10's popularity forces another year of free updates.
• CISA directs all federal agencies to update their UniFi OS devices.
• CISA gave federal agencies "the weekend" to upda...