About this episode

Matt and Chris discuss recent developments in threat intelligence, including vulnerabilities in Google Dialogflow, phishing campaigns, and new CISA advisories.

Matt and Chris break down four stories from the week in threat intel: • Varonis Threat Labs' "Rogue Agent" — a permission boundary flaw in Google Dialogflow CX's Code Blocks feature that could let an attacker with a single permission (dialogflow.playbooks.update) inject persistent malicious code into a chatbot's execution pipeline and silently exfiltrate conversations; Google has fully patched it, no customer action required. • The EvilTokens campaign and "ghost phishing" — AES-GCM-encrypted phishing pages that look harmless to URL scanners and only reveal themselves after decrypting in the victim's browser, driving Microsoft device code phishing against Microsoft 365 accounts. • CISA adds four actively exploited flaws to the KEV catalog with a July 10 patch deadline under BOD 26-04: Adobe ColdFusion (CVE-2026-48282, CVSS 10.0), Langflow (CVE-2026-55255, chained with CVE-2026-33017), and Joomla's SP Page Builder (CVE-2026-48908) and Page Builder CK (CVE-2026-56290) extensions. • HalluSquatting — Tel Aviv University researchers show attackers can register the repository names AI coding assistants predictably hallucinate, then ride prompt injection to code execution on developer…

More episodes of The Cybersecurity Defenders Podcast

• AI Chat: Grok CLI data exfiltration, AI vs. patching, distillation wars & shadow AI [339] · July 14, 2026 · 23 min
• Ransomware in the age of agentic AI with Behnaz Karimi [337] · July 8, 2026 · 33 min
• Intel Chat: Hijacked AI backends, billboard hacks, Cursor DuneSlide & Claude export controls [336] · July 3, 2026 · 34 min
• Intel Chat: Cisco CUCM exploited, ransomware profiles, Gamaredon & AI agent phishing [335] · July 1, 2026 · 30 min
• The evolving fraud landscape in the age of AI with Tamas Kadar [#334] · June 30, 2026 · 43 min
• Anthropic restriction, ServiceNow incident, Fortinet credential harvesting & Ukraine accesses EU cyber reserve / Intel Chat [#333] · June 28, 2026 · 35 min

Explore listener stats, chart rankings, contacts and more on the The Cybersecurity Defenders Podcast podcast page.