SN 1091: The Post BlackHat State of AI - When AI Writes Malware

About this episode

The episode discusses the implications of AI agents in cybersecurity, including their ability to write malware and breach networks.

AI agents are breaking free from their test environments, outsmarting their creators and breaching real-world networks in ways that no one predicted. Discover how these agentic models are changing the game for both cyber offense and defense. Anthropic's agentic AI also broke free and hacked others. We know much (much!) more about the OpenAI breakout. OpenAI posts that they're pausing "Astra" - even internally. What was that about AI recently cracking (or denting) cryptography. Bruce Schneier brilliantly equates AI agents to capricious genies. Apple doesn't react so well to the new deluge of security reports. Chrome 149 + 150 updates together fix 1,072 bugs. Yikes. psSense's creator is working to finish its nfSensei, its successor Show Notes - https://www.grc.com/sn/SN-1091-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now . You can submit a question to Security Now at the GRC Feedback Page . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com , also the home of the best disk maintenance and recovery utility ever written Spinrite 6 . Join Club TWiT for Ad-Free Podcasts…

People in this episode

Hosts: Steve Gibson, Leo Laporte

Topics covered

• AI and cybersecurity
• malware
• cyber offense and defense
• cryptography
• security updates
• agentic AI

Keywords

• AI
• malware
• cybersecurity
• OpenAI
• cryptography
• security updates
• agentic models

Sponsors

Hoxhunt, Guardsquare, ThreatLocker, Box

Mentioned in this episode

Organizations: Anthropic, OpenAI, Apple, Chrome

Products: psSense, nfSensei, Spinrite 6

More episodes of Security Now (Audio)

• SN 1095: AI-Driven Expertise Loss - Gemini, Hugging Face, and the AI Arms Race · September 9, 2026 · 3h 6m
• SN 1094: AI Patching Shortcomings - Should You Trust AI-Generated Code? · September 2, 2026 · 2h 52m
• SN 1093: Tokens in the Stream - Why LLMs are inherently insecure and prompt injection will persist · August 26, 2026 · 2h 48m
• SN 1092: Restraint Abliteration - Rotating Keys, Broken Guardrails · August 19, 2026 · 2h 49m
• SN 1090: Black Hat - The Hidden Flaws in AI Security Nobody Saw Coming · August 6, 2026 · 2h 5m
• SN 1089: Models Go Rogue & ExploitGym - Regulators, Start Your Engines · July 29, 2026 · 3h 8m