About this episode

This episode discusses various cybersecurity threats and vulnerabilities, including AI coding agents and hijacked npm packages.

Top Headlines: welivesecurity | Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances: https://www.welivesecurity.com/en/eset-research/gamaredon-2025-leveraging-tunnels-workers-dead-drops-new-alliances/ Adversa AI | AI coding agents vulnerability: GuardFall shell injeciton: https://adversa.ai/blog/opensource-ai-coding-agents-shell-injection-vulnerability/ JFrog Security Research | Hijacked npm Packages Use Novel VSCode Autorun and Blockchain Dead Drops to Deploy a Credential/Crypto Stealer: https://research.jfrog.com/post/hijacked-npm-vscode-tasks-blockchain/ Blackpoint Cyber | A Djinn in the Machine: TaskWeaver’s Node.js Intrusion Chain: https://blackpointcyber.com/blog/a-djinn-in-the-machine-taskweavers-node-js-intrusion-chain/ ---------- Stay in Touch! Twitter: https://twitter.com/Intel471Inc LinkedIn: https://www.linkedin.com/company/intel-471/ YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg Discord: https://discord.gg/DR4mcW4zBr Facebook: https://www.facebook.com/Intel471Inc/

More episodes of Out of the Woods: The Threat Hunting Podcast

• S4 Ep8: We’re Going Threat Hunting Through the Quad Into the Gymnasium · July 17, 2026 · 43 min
• S4 Ep7: Threat Report - Q2 2026 · July 9, 2026 · 39 min
• S4 Ep5: Forti Shades of Breach · June 25, 2026 · 53 min
• S4 Ep4: Old Flaws, New Attacks · June 16, 2026 · 46 min

Explore listener stats, chart rankings, contacts and more on the Out of the Woods: The Threat Hunting Podcast podcast page.