About this episode

Matt and Chris discuss recent threats in AI security and vulnerabilities in digital infrastructure.

Matt and Chris break down four stories from the week in threat intel: • Zenity researchers observed three campaigns where attackers hijacked internet-exposed AI inference endpoints (Ollama, LiteLLM) as free model backends for offensive operations — including the Strix and HexStrike-AI pentesting frameworks and a Codex agent posing as a "security auditor" — enabled by no-auth defaults and placeholder API keys. • A CISA advisory on Daktronics controllers behind scoreboards, digital billboards and highway signs: unauthenticated path traversal, arbitrary file upload and default admin credentials chaining to root-level control, found and responsibly disclosed by a Princeton undergrad. • Cato's "DuneSlide" (CVE-2026-50548 / CVE-2026-50549) — two critical Cursor flaws where a single prompt injection escapes the terminal sandbox and executes arbitrary commands on a developer's machine; patched in Cursor 3.0. • Anthropic restoring worldwide Claude Fable 5 access after the US Commerce Department lifted emergency export controls triggered by a jailbreak — plus what it means for AI governance, open-source model catch-up and the data center debate.

More episodes of The Cybersecurity Defenders Podcast

• AI Chat: Grok CLI data exfiltration, AI vs. patching, distillation wars & shadow AI [339] · July 14, 2026 · 23 min
• Intel Chat: Dialogflow Rogue Agent, ghost phishing, CISA KEV deadline & HalluSquatting [338] · July 9, 2026 · 34 min
• Ransomware in the age of agentic AI with Behnaz Karimi [337] · July 8, 2026 · 33 min
• Intel Chat: Cisco CUCM exploited, ransomware profiles, Gamaredon & AI agent phishing [335] · July 1, 2026 · 30 min
• The evolving fraud landscape in the age of AI with Tamas Kadar [#334] · June 30, 2026 · 43 min
• Anthropic restriction, ServiceNow incident, Fortinet credential harvesting & Ukraine accesses EU cyber reserve / Intel Chat [#333] · June 28, 2026 · 35 min

Explore listener stats, chart rankings, contacts and more on the The Cybersecurity Defenders Podcast podcast page.