About this episode

This episode discusses the impact of AI on software vulnerabilities and patching, highlighting recent developments and security challenges.

This episode unpacks the jaw-dropping surge in vulnerabilities unearthed by AI, revealing how Microsoft shattered its own patch records while adversaries and defenders race to outpace each other. The conversation gets real about whether AI is fixing our broken software or just making attacks easier for everyone. Rootkits found in more than 400 ArchLinux User Repository packages. The US government requests Anthropic to remove Mythos and Fable. CISA responds to AI-driven attacks with new patching requirements. NPM to switch to more secure install defaults. Will it help. Our listeners react to last week's PHP commentary. June shows that AI has arrived for vulnerability discover Show Notes - https://www.grc.com/sn/SN-1083-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now . You can submit a question to Security Now at the GRC Feedback Page . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com , also the home of the best disk maintenance and recovery utility ever written Spinrite 6 . Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video…

People in this episode

Hosts: Steve Gibson, Leo Laporte

Topics covered

• AI vulnerabilities
• software patching
• Arch Linux security
• CISA requirements
• NPM security defaults
• PHP commentary
• AI in cybersecurity

Keywords

• AI
• vulnerabilities
• patching
• Arch Linux
• CISA
• NPM
• security
• rootkits
• software attacks
• PHP

Sponsors

meter.com, canary.tools, joindeleteme.com, zscaler.com, adaptivesecurity.com

Mentioned in this episode

Organizations: Microsoft, CISA, Anthropic, NPM, ArchLinux User Repository

Products: Spinrite 6

More episodes of Security Now (Audio)

• SN 1087: HalluSquatting, GhostApproval & GitLost - Patch Tuesday Breaks Records · July 14, 2026 · 2h 49m
• SN 1086: The Apex Agentic Adversary - Visual Prompt Injection Strikes · July 7, 2026 · 2h 53m
• SN 1085: A SOTA State-Sponsored Campaign - AI's New Superpower: Loop Engineering · June 30, 2026 · 2h 50m
• SN 1084: The Residential Proxy Threat - Malicious Proxies in Your Living Room · June 23, 2026 · 2h 48m

Explore listener stats, chart rankings, contacts and more on the Security Now (Audio) podcast page.