Épisodes

  • All Your RAM Now Belong to SAM - 2026-11-02

    All Your RAM Now Belong to SAM - 2026-11-02
    Nov 4 2026
    Join us LIVE on Mondays, 4:30pm ET.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — Shock Site Value(10:39) - All Your RAM Now Belong To Sam -2026-11-02(14:42) - Proton’s Reported “Loser Thinking” Response to Security Testing(21:04) - Linux MPTCP Vulnerability and Patching Concerns(24:16) - Telegram Android Flaw: Code Execution Through Voice Calls(24:56) - Reported Binance Hack: Hot Wallets and Exchange Security(34:20) - Sam Altman’s RAM Comments Spark Backlash(38:35) - Oracle Remote Code Execution & Cisco SD-WAN Flaw(38:52) - PHP2Shell and Node2Shell Follow-Up(39:12) - Windows Kerberos Delegation Abuse(39:53) - Pwn2Own: Chaining Four Microsoft Edge Logic Bugs(40:30) - AI-Assisted Vulnerability Research: Costs and Expertise(45:33) - Reddit’s Reported Move Toward Login-Required Access(46:31) - Google AI Summaries and Accuracy Concerns(49:00) - Data Center Cargo Theft and GPS Spoofing(54:35) - Repurposing Consumer GPUs for AI Infrastructure(55:43) - Doc Blackburn’s Introductory Cryptography Course — December 4(56:40) - Post-Quantum Cryptography and Long-Term Data Protection(59:12) - Election Day Reminder and Ballot Tracking(59:33) - Wade Wells’ Upcoming Conference Update(01:00:53) - John Strand’s Core Skills in the Age of AI — November 10–11(01:02:26) - Discord Message Discoverability and Privacy Settings(01:09:15) - Proposed EU Changes to AI Training and Data ConsentLinksProton’s Reported “Loser Thinking” Response to Security TestingLinux MPTCP Vulnerability and Patching ConcernsTelegram Android Flaw: Code Execution Through Voice CallsReported Binance Hack: Hot Wallets and Exchange SecuritySam Altman’s RAM Comments Spark BacklashOracle Remote Code Execution & Cisco SD-WAN FlawWindows Kerberos Delegation AbusePwn2Own: Chaining Four Microsoft Edge Logic BugsReddit’s Reported Move Toward Login-Required AccessGoogle AI Summaries and Accuracy ConcernsData Center Cargo Theft and GPS SpoofingRepurposing Consumer GPUs for AI InfrastructureDoc Blackburn’s Introductory Cryptography Course — December 4Post-Quantum Cryptography and Long-Term Data ProtectionJohn Strand’s Core Skills in the Age of AI — November 10–11Discord Message Discoverability and Privacy SettingsProposed EU Changes to AI Training and Data ConsentCreators & Guests Corey Ham - HostRalph May - HostWade Wells - HostBronwen Aker - HostDoc Blackburn - GuestAisling nic Lynne "siriciryel" - GuestRyan Poirier - ProducerClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    Afficher plus Afficher moins
    1 h et 11 min
  • PHP2Shell Causes Hell on a Friday 2026-10-26

    PHP2Shell Causes Hell on a Friday 2026-10-26
    Oct 29 2026
    The BHIS crew breaks down PHP2Shell, the challenges of emergency patching, and how AI-assisted vulnerability discovery is changing incident response. They discuss weak eMudhra certificate keys, Node2Shell and Brotli vulnerabilities, and security issues involving Plex, LiteLLM, GitLab, Broadcom Wi-Fi, and Popcorn Time. Other topics include AI agent frameworks used in attacks, research into self-propagating agents, context bombing as a defensive tactic, and the security and privacy implications of AI-assisted smart TV hacking.Join us LIVE on Mondays, 4:30pm ET.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — Ryan Fixes Audio(04:57) - PHP2Shell Causes Hell on a Friday 2026-10-26(07:12) - PHP2Shell: AI-discovered vulnerabilities and emergency patching(16:47) - Azure incident response workshop and Denver training(25:19) - Weak eMudhra certificate keys and certificate trust failures(31:08) - Doc Blackburn’s encryption fundamentals workshop — December 4(37:13) - Rapid-fire roundup: Plex, LiteLLM, and GitLab(38:37) - Storm-0940: AI agent frameworks and the ConnectWise compromise(40:23) - Research into self-propagating AI agents and botnets(42:34) - AI-assisted smart TV hacking and restrictions on security research(47:59) - Context bombing: Triggering AI guardrails to disrupt attacks(51:46) - John Strand’s Information Security Core Skills in the Era of AI — November 10–11(52:02) - December Antisyphon summit: What in the Actual Cyber(52:46) - Broadcom Wi-Fi flaw: WPS memory exposure and stolen passwords(54:15) - OpenAI agent incidents and containment challenges(56:54) - Popcorn Time updater and supply chain attack risksLinksPHP2Shell: AI-discovered vulnerabilities and emergency patchingAzure incident response workshop...and Denver trainingWeak eMudhra certificate keys and certificate trust failuresDoc Blackburn’s encryption fundamentals workshop — December 4Node2Shell: Brotli vulnerabilities and downstream patchingRapid-fire roundup: Plex, LiteLLM, and GitLabStorm-0940: AI agent frameworks and the ConnectWise compromiseResearch into self-propagating AI agents and botnetsPeople are vibe coding their way to better TVsContext bombing: Triggering AI guardrails to disrupt attacksJohn Strand’s Information Security Core Skills in the Era of AI — November 10–11December Antisyphon summit: What in the Actual CyberBroadcom Wi-Fi flaw: WPS memory exposure and stolen passwordsOpenAI agent incidents and containment challengesPopcorn Time updater and supply chain attack risksCreators & Guests Corey Ham - HostChed "cheddar" Wiggins - GuestRalph May - HostBronwen Aker - HostDoc Blackburn - GuestGerard Johansen - GuestRyan Poirier - ProducerClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    Afficher plus Afficher moins
    59 min
  • ConnectWise SkyKick Compromise Causes Panic in MSP Space - 2026-10-19

    ConnectWise SkyKick Compromise Causes Panic in MSP Space - 2026-10-19
    Oct 21 2026
    The BHIS crew examines the ConnectWise/SkyKick compromise, its implications for Microsoft Entra tenants, and the consequences for MSPs and their customers. They discuss privileged application access, attacker persistence, and why clear incident communication matters. Other stories include the Cairn framework’s use of AI agents against retail websites, research into prompt injection in HTTP headers, exposed MCP servers, Citizen Lab’s reporting on advertising-delivered zero-click spyware, and an alleged listening device installation at OpenAI. Along the way, the team explores deception, proactive security assessments, and reducing attack surface as automated attacks become cheaper and easier to scale.Join us LIVE on Mondays, 4:30pm ET.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — One decent flying car.(06:55) - ConnectWise SkyKick Compromise Causes Panic in MSP Space - 2026-10-19(10:22) - ConnectWise/SkyKick Compromise and Microsoft Entra Tenant Access(41:23) - Cairn: AI Agents Automating Attacks Against Retail Websites(53:41) - Research: Prompt Injection in HTTP Response Headers(55:06) - Exposed MCP Servers and the Risk of AI Inference Theft(58:09) - Adfection: Zero-Click Spyware Delivered Through AdvertisementsLinksConnectWise/SkyKick Compromise and Microsoft Entra Tenant AccessCairn: AI Agents Automating Attacks Against Retail WebsitesResearch: Prompt Injection in HTTP Response HeadersExposed MCP Servers and the Risk of AI Inference TheftAdfection: Zero-Click Spyware Delivered Through AdvertisementsAlleged Listening Device Installation at OpenAIAntisyphon Pay What You Can Training: November 10–11DeathCon Tickets in San DiegoCreators & Guests Alex Minster "Belouve" - GuestJohn Strand - HostBronwen Aker - HostWade Wells - HostCorey Ham - HostHayden Covington - HostEric Capuano - GuestRyan Poirier - ProducerClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    Afficher plus Afficher moins
    1 h et 10 min
  • Russian Data Centers Bombed - 2026-10-12

    Russian Data Centers Bombed - 2026-10-12
    Oct 14 2026
    The BHIS crew discusses MonsterCloud’s ransomware decryption fraud, a Canadian cybersecurity executive’s arrest, and strikes on Russian data centers linked to a sharp decline in Yandex bot traffic. AI reverse engineering takes center stage as the team explores game recreations, commercial software clones, Linux vulnerability discovery, and the changing economics of software. They also examine AI-powered threat hunting and deception, a cyberattack on French supermarket refrigeration, fake Claude Code installers, and a controversial critique of passkeys. The episode closes with a preview of questions about AI-generated mathematics and encryption security.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — Less Boty on the Internet(08:10) - Russian Data Centers Bombed - 2026-10-12(11:05) - MonsterCloud’s Ransomware Decryption Fraud(15:24) - Canadian Cybersecurity Executive Arrested in Ransomware Case(19:15) - Russian Data Center Strikes and the Drop in Yandex Bot Traffic(24:41) - Drone Threats Prompt B-1 Bomber Withdrawal from the UK(27:22) - AI Reverse Engineers PlayStation 2 Games(28:45) - AI Software Recreations and Linux Zero-Day Discovery(57:22) - Kip Boyle’s “Owning AI Risk” Training and Discount Code(01:00:36) - Cyberattack Disrupts French Supermarket Refrigeration(01:03:17) - ClickFix Campaigns Use Fake Claude Code Installers(01:05:32) - Kip Boyle’s New Book: Gears Don’t Guess(01:07:08) - “Passkeys Are a Trap”: Examining a Controversial Article(01:08:11) - AI Math Breakthroughs and Potential Encryption Risks(01:09:48) - Ashley’s October 28 Webcast: Using AI for Research and Learning(01:13:13) - BHIS Penetration Testing and Incident Response Services(01:14:22) - Bronwen's Proposed Local LLM WorkshopLinksPublix Hurricane cakes are a long-standing tradition of hurricanesStorm passes as Publix discontinues controversial hurricane cakesMonsterCloud’s Ransomware Decryption FraudCanadian Cybersecurity Executive Arrested in Ransomware CaseRussian Data Center Strikes and the Drop in Yandex Bot TrafficDrone Threats Prompt B-1 Bomber Withdrawal from the UKAI Reverse Engineers Classic GamesAI Software Recreations and Linux Zero-Day DiscoveryKip Boyle’s “Owning AI Risk” Training and Discount CodeCyberattack Disrupts French Supermarket RefrigerationClickFix Campaigns Use Fake Claude Code InstallersKip Boyle’s New Book: Gears Don’t Guess“Passkeys Are a Trap”: Examining a Controversial ArticleAI Math Breakthroughs and Potential Encryption RisksAshley’s October 28 Webcast: Using AI for Research and LearningWWHF Mile High Conference 2027Creators & Guests Kip Boyle - GuestAshley Knowles - GuestJohn Strand - HostRalph May - HostWade Wells - HostRyan Poirier - ProducerCorey Ham - HostBronwen Aker - HostClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    Afficher plus Afficher moins
    1 h et 15 min
  • Live From WWHF Deadwood '26 - 2026-10-07

    Live From WWHF Deadwood '26 - 2026-10-07
    Oct 13 2026
    Recorded live at Wild West Hackin’ Fest, the BHIS crew debates AI agent sandbox escapes, OpenAI’s frontier model decisions, and accountability for the Hugging Face hack. Other stories include the dismissal of OpenAI safety researchers, the FBI–Accenture breach, ShinyHunters arrests, Oracle’s medical records breach, and recurring Citrix vulnerabilities. The panel explores corporate scapegoating, stolen authentication tokens, patching challenges, and Anthropic’s expanding cybersecurity access—asking who takes responsibility when security controls fail.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - Live From WWHF Deadwood '26 - 2026-10-07(01:13) - OpenAI’s Frontier Model Pause and AI Sandbox Escapes(05:42) - OpenAI Dismisses Three Safety Researchers(07:20) - FBI–Accenture Breach and Blaming Individual Employees(09:33) - Oracle’s Medical Records Breach and Cloud Responsibility(11:12) - ShinyHunters Arrests and the FBI Breach(16:54) - Critical Citrix Vulnerabilities and Incomplete Patches(19:28) - Selling Stolen VPN Access and Authentication Tokens(22:49) - Anthropic Expands Its Cyber Verification Program(27:23) - Lawsuit Over the Hugging Face Hack and AI AccountabilityLinksOpenAI’s Frontier Model Pause and AI Sandbox EscapesOpenAI Dismisses Three Safety ResearchersFBI–Accenture Breach and Blaming Individual EmployeesOracle’s Medical Records Breach and Cloud ResponsibilityShinyHunters Arrests and the FBI BreachCritical Citrix Vulnerabilities and Incomplete PatchesAnthropic Expands Its Cyber Verification ProgramLawsuit Over the Hugging Face Hack and AI AccountabilityCreators & Guests Jake Williams - GuestJohn Strand - HostRalph May - HostBronwen Aker - HostAndy Pettit "Nerf" - GuestCorey Ham - HostClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    Afficher plus Afficher moins
    42 min
  • AI Agents Go Rogue: Where’s the Accountability? 2026-09-28

    AI Agents Go Rogue: Where’s the Accountability? 2026-09-28
    Sep 29 2026

    This week, the BHIS crew starts with an Nvidia-branded trailer stolen for its presumed GPUs—only to turn out to be full of sand. They then examine reports of OpenAI agents accessing Australian and U.S. government sites, the unanswered questions about what happened, and Nvidia’s proposed agent safety framework. The conversation moves to the EvilTokens phishing service takedown, recent vulnerability patches, and prompt injection attacks against AI agents handling Salesforce contact forms. The episode closes with a reported F-35 component shipment rerouted to China and concerns about cyber incidents affecting ships and maritime systems.

    Join us LIVE on Mondays, 4:30pm EST.
    A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.
    https://www.youtube.com/@BlackHillsInformationSecurity

    Chat with us on Discord! -
    https://discord.gg/bhis
    🔴live-chat


    Chapters

    • (00:00) - PreShow Banter™ — Doing Bulldozer Stuff
    • (09:05) - AI Agents Go Rogue: Where’s the Accountability? 2026-09-28
    • (12:16) - Nvidia-branded trailer stolen—and found full of sand
    • (15:09) - OpenAI agents access Australian and U.S. government sites
    • (30:55) - Nvidia’s OpenShell agent safety framework
    • (37:06) - EvilTokens phishing service disrupted
    • (46:16) - Citrix, WordPress, F5, and Roundcube vulnerability roundup
    • (47:27) - Prompt injection through Salesforce web-to-lead forms
    • (52:45) - F-35 components reportedly rerouted to China
    • (55:20) - LNG tanker incident and maritime OT security
    • (59:52) - Wild West Hackin’ Fest Deadwood and upcoming classes
    • (01:01:00) - Offense for Defense and penetration testing classes
    • (01:01:47) - Android pentesting and satellite security classes
    • (01:03:26) - DEATHCon: detection engineering and threat hunting
    • (01:06:58) - On Logos and Cables

    Links

    Creators & Guests

    • Tim Medin - Guest
    • Kent Ickler - Guest
    • John Strand - Host
    • Ralph May - Host
    • Wade Wells - Host
    • Corey Ham - Host
    • Hayden Covington - Host

    Click here to watch this episode on YouTube.

    Click here to view the episode transcript.

    🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits

    https://poweredbybhis.com


    Brought to you by:

    Black Hills Information Security

    https://www.blackhillsinfosec.com


    ☯️ Introducing BHIS Fusion Penetration Testing
    https://www.blackhillsinfosec.com/fusion-penetration-testing/

    Antisyphon Training

    https://www.antisyphontraining.com/


    Active Countermeasures

    https://www.activecountermeasures.com


    Wild West Hackin Fest

    https://wildwesthackinfest.com
    Afficher plus Afficher moins
    1 h et 9 min
  • Google’s Gemini Agent Escapes Containment - 2026-09-21

    Google’s Gemini Agent Escapes Containment - 2026-09-21
    Sep 22 2026
    This week, the crew examines Google’s reported Gemini containment failure, Anthropic’s new biology lab, Snickers-branded prompt injection, AI-assisted social engineering, and Claude’s access to financial data. They also cover major Linux, Cisco, Check Point, and Docker vulnerabilities; weak oversight of Flock surveillance searches; privacy concerns surrounding Waymo vehicles; continuing ransomware disruption at an Australian chicken producer; and the escalating conflict between ShinyHunters and Clop.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — Justifying Our Existence(03:27) - Google’s Gemini Agent Escapes Containment - 2026-09-21(06:45) - Google’s Gemini Hacks 3 Real Companies During Test(10:05) - Anthropic Builds a Bay Area Biology Lab(13:22) - Snickers Turns Prompt Injection into an Ad Campaign(19:41) - Iranian Social Engineering Uses Fake MRI Scans(25:10) - Claude Requests Access to Financial Accounts(28:50) - Meta’s Agentic AI and Its Personal-Data Advantage(30:57) - OpenAI Introduces In-Platform Advertising(34:47) - Linux Local Privilege-Escalation Vulnerabilities(35:32) - Cisco Secure Email Gateway Exploited by Nation-States(37:28) - Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root(37:53) - Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files(38:27) - CISA Ends Its Weekly Cybersecurity Bulletin(40:53) - Flock Surveillance Searches and Weak Oversight(49:10) - Waymo Detects a Firearm and Calls Police(57:40) - Upcoming Events, Workshops, and Training(57:51) - Alethe's Physical-Assessment Training(59:02) - Andy’s XDRCLI Talk at Wild West Hackin’ Fest(59:52) - Jake’s Hands-On AI Risk-Assessment Training(01:01:27) - Wade’s San Diego AI-Detection Event(01:03:00) - Ransomware Continues Disrupting an Australian Chicken Producer(01:05:34) - ShinyHunters Compromises Clop’s Dark-Web SiteLinksGoogle’s Gemini Hacks 3 Real Companies During TestAnthropic Builds a Bay Area Biology LabSnickers Turns Prompt Injection into an Ad Campaignhttps://www.snickers.com/digitalsnickersIranian Social Engineering Uses Fake MRI ScansClaude Requests Access to Financial AccountsOpenAI Introduces In-Platform AdvertisingLinux Local Privilege-Escalation VulnerabilitiesCisco Secure Email Gateway Exploited by Nation-StatesCritical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as RootCritical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host FilesCISA Ends Its Weekly Cybersecurity BulletinFlock Surveillance Searches and Weak OversightWaymo Detects a Firearm and Calls PoliceAlethe’s Physical-Assessment TrainingAndy’s XDRCLI Talk at Wild West Hackin’ FestJake’s Hands-On AI Risk-Assessment TrainingWade’s San Diego AI-Detection EventRansomware Continues Disrupting an Australian Chicken ProducerShinyHunters Compromises Clop’s Dark-Web SiteCreators & Guests Alethe Denis - GuestCorey Ham - HostAndy Pettit "Nerf" - GuestWade Wells - HostBronwen Aker - HostRyan Poirier - ProducerJake Williams - GuestClick here to watch this episode on YouTube. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    Afficher plus Afficher moins
    1 h et 9 min
  • World Leaders Reject Calls to Slow Down AI Development - 2026-09-14

    World Leaders Reject Calls to Slow Down AI Development - 2026-09-14
    Sep 16 2026
    This week, the team examines AI agents targeting RubyGems, Anthropic’s warnings about dangerous AI misuse, human review of ChatGPT conversations, predictive policing, and LG smart-TV privacy. They also cover passkey-themed phishing, ScreenConnect abuse, Microsoft Defender patch bypasses, and upcoming cybersecurity workshops, webcasts, and Wild West Hackin’ Fest training.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters(00:00) - PreShow Banter™ — A Protected Class(05:20) - World Leaders Reject Calls to Slow Down AI Development - 2026-09-14(07:58) - OpenAI Agent Swarm Targets RubyGems(16:12) - Anthropic Warns About Claude Misuse and Calls for Slower AI Development(31:38) - OpenAI’s Project Lily and Human Review of ChatGPT Conversations(38:54) - “Minority Report” Predictive Policing Using Financial Data(42:11) - LG Smart TVs Accused of Spying on Viewers(46:49) - Passkey-Themed Phishing Campaigns(47:20) - ConnectWise Patches ScreenConnect After Worm-Like Abuse(47:47) - Microsoft Defender “Shield Break” Patch Bypassed(54:19) - News Wrap-Up and Community Discussion(01:00:04) - Kip Boyle’s Book, Fire Doesn’t Innovate(01:00:27) - “Hunting Shadow AI” Workshop — September 25(01:01:05) - “Playbooks for Owning AI Risk” Live Training(01:03:01) - Wild West Hackin’ Fest and Karaoke(01:03:51) - Webcast: Attacking MCP and N8N Servers(01:04:10) - Webcast: Safely Using Offensive AI in Security Assessments(01:05:17) - Wild West Hackin’ Fest Satellite and SOC ClassesLinksOpenAI Agent Swarm Targets RubyGemsAnthropic Warns About Claude Misuse and Calls for Slower AI DevelopmentOpenAI’s Project Lily and Human Review of ChatGPT Conversations“Minority Report” Predictive Policing Using Financial DataLG Smart TVs Accused of Spying on ViewersPasskey-Themed Phishing CampaignsConnectWise Patches ScreenConnect After Worm-Like AbuseMicrosoft Defender “Shield Break” Patch BypassedKip Boyle’s Book, Fire Doesn’t Innovate“Hunting Shadow AI” Workshop — September 25“Playbooks for Owning AI Risk” Live TrainingWild West Hackin’ Fest and KaraokeWebcast: Attacking MCP and N8N ServersWebcast: Safely Using Offensive AI in Security AssessmentsWild West Hackin’ Fest Satellite Class...and SOC ClassesCreators & Guests Kip Boyle - GuestCorey Ham - HostJohn Strand - HostRalph May - HostBronwen Aker - HostCharles "bsdbandit" - GuestRyan Poirier - ProducerHayden Covington - HostClick here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
    Afficher plus Afficher moins
    1 h et 14 min