SN 1082: The Malicious Use of AI - Anthropic's Red Team Report

About this episode

The episode discusses the rise of malicious AI use and various cybersecurity threats, including a ransom payment case and vulnerabilities in software.

Discover how Anthropic's secretive red team and the MITRE ATT&CK framework are mapping the chilling rise of malicious AI use, revealing cyber threats that now move faster than defenders can respond. Was a U.S. law firm right to pay a $20 million ransom. Could Cisco have yet another SD-WAN 0-day in the wild. Why is it so difficult to author secure PHP code. Teens use "WeedHack" to spy and attack each other. Researchers create the first AI-enabled Internet worm. Google Chrome pops-up "Shop with confidence." What... The discovered and irresponsibly disclosed HTTP/2 Bomb. What Anthropic learns from their past year of Claude abuse: It's bad Show Notes - https://www.grc.com/sn/SN-1082-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now . You can submit a question to Security Now at the GRC Feedback Page . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com , also the home of the best disk maintenance and recovery utility ever written Spinrite 6 . Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and…

People in this episode

Hosts: Steve Gibson, Leo Laporte

Topics covered

• malicious AI
• cybersecurity
• ransomware
• software vulnerabilities
• AI research
• internet security

Keywords

• malicious AI
• ransomware
• Cisco SD-WAN
• HTTP/2 Bomb
• AI worm
• WeedHack
• secure PHP code

Sponsors

ThreatLocker, OutSystems, Guardsquare, Doppel, CyberHoot

Mentioned in this episode

Organizations: Anthropic, MITRE, Cisco, Google, GRC

Products: Claude, Spinrite 6, WeedHack

More episodes of Security Now (Video)

• SN 1081: AI Captured the Flag - Personal AI: Productivity Superpower or Privacy Threat? · June 3, 2026 · 3h 20m
• SN 1080: Vulnerability Debt Repayment - Will Mythos Change Cybersecurity Forever? · May 27, 2026 · 2h 44m
• SN 1079: Daybreak and Codename MDASH - Microsoft's Edge Password Blunder · May 20, 2026 · 2h 52m
• SN 1078: DigiCert does it right - Hugging Face Under Fire · May 13, 2026 · 2h 41m
• SN 1077: A Browser AI API? - End of Bug Bounties? · May 6, 2026 · 2h 35m
• SN 1076: FAST16.SYS - Unmasking the NSA's Most Diabolical Digital Sabotage · April 29, 2026 · 2h 35m