Alle afleveringen
73 afleveringen, van nieuw naar oud
-
Did the Knicks’ phishing test go too far? Plus, hackers pose as IT in Teams
4 november 2026 · 30 min
Visit Security Intelligence podcast page to get more AI content → https://www.ibm.com/think/podcasts/security-intelligence Lees meer
Click to claim your free Knicks championship ring, and you might end up in security training.
First, MSG sends staff an offer to pick their own championship ring, and everyone who clicks lands in mandatory security training. Timely lures catch real behavior, but the panel debates whether a test this real makes employees wary of the emails they actually need.
Then, Arctic Wolf traces more than 400 incidents of attackers flooding inboxes with sign-up emails, then posing as IT support in Teams chats. As one panelist points out, real IT already has access to your machine, so it should never need you to open a remote session.
Finally, CISA confirms attackers are exploiting two critical PHP flaws, and 263,000 end-of-life instances in the US alone will never get a patch. Do you know which versions you’re running?
0:00 – Intro
1:04 – MSG's championship ring phishing test
8:34 – Hackers pose as IT in Microsoft Teams
19:21 – PHP2Shell flaws exploited in the wild
All that and more on Security Intelligence.
"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."
-
Can you trust your software supply chain?
30 oktober 2026 · 22 min
Visit Security Intelligence podcast page to get more security content → https://www.ibm.com/think/podcasts/security-intelligence Lees meer
It all started with a small server rack in Ukraine.
On this bonus episode of Security Intelligence, host Matt Kosinski talks with Dan Medina, Executive Vice President at Available Infrastructure, about the state of software supply chain security today.
We begin the episode with NotPetya, one of the most devastating cyberattacks in history, and a harbinger of things to come as supply chains have grown more complex. Dan was there when NotPetya landed, and he saw firsthand how it changed the rules of the cybersecurity game.
We explore why even the most mature zero trust environments still depend on some trust, how attackers slip into that gap and why AI agents break the categories our security controls were built for.
Then we dig into sovereign zero trust: knowing what's in your supply chain, who answers for each piece and who has the authority to shut it down when something goes wrong.
Because something will go wrong. The question is whether you'll be ready.
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
-
The PHP bug threatening the web. Plus, who's auditing AI?
28 oktober 2026 · 20 min
Visit Security Intelligence podcast page to get more AI content → https://www.ibm.com/think/podcasts/security-intelligence Lees meer
An AI model helped researchers find two decade-old bugs in the code behind up to 70% of the web. Then the exploit details leaked before the patch did.
This week on Security Intelligence, Nick Bradley, Don Cowan and Jim Guinn join host Patrick Austin to unpack three major cybersecurity stories.
First, PHP2Shell could let attackers take over vulnerable servers without logging in. But you can't patch what you can't find, and PHP is buried in more systems than most teams realize.
Then, Anthropic gives six outside evaluators employee-like access to test its AI models. Should frontier AI labs go further and let their competitors inspect their models?
Finally, attackers hijack 333 Tor exit relays, rerouting traffic to harvest credentials. The way in? A reused password. A reminder that even attackers aren't immune to bad security hygiene.
0:00 – Intro
01:14 – The PHP bug putting the web at risk
08:50 – Anthropic invites outside AI evaluators
16:10 – Hijacked Tor relays steal passwords
All that and more on Security Intelligence.
"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."
-
The patching gap: Hacked fridges, AI ransomware and Mythos finds
21 oktober 2026 · 29 min
Visit Security Intelligence podcast page to get more AI content → https://www.ibm.com/think/podcasts/security-intelligence Lees meer
That melted ice cream might not be the freezer’s fault.
On episode 56 of Security Intelligence, Claire Nunez and MJ Vaidya join host Patrick Austin to break down three cybersecurity stories and what they mean for defenders.
First, attackers hijack refrigeration controllers from Danfoss, Copeland and Dixell at French supermarkets, pushing cases to 50°C. Team82 flagged the flaws and Danfoss shipped a fix, yet thousands of controllers remain exposed online. Is planned downtime the price of staying patched?
Then, a Semperis survey of 1,200 IT professionals links AI to 84% of ransomware attacks. Many of those attacks abuse companies’ own AI agents and identity systems. Should your agents be part of your insider threat model?
Finally, Bank of America brings on 1,000 contractors to patch vulnerabilities found by Anthropic’s Mythos and other AI security models. The panel debates whether AI can fix what it finds, and why patching can’t be a one-time push.
All that and more on Security Intelligence.
00:00 – Intro
01:00 – Hackers hijack supermarket fridges
10:11 – AI linked to 84% of ransomware attacks
19:31 – Bank of America hires 1,000 patchers
"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."
-
AI slop stalls bug bounties, malware hides in IoT and agents hit Wikipedia
14 oktober 2026 · 31 min
Visit Security Intelligence podcast page to get more AI content → https://www.ibm.com/think/podcasts/security-intelligence Lees meer
What happens when AI agents start hacking websites without permission?
On episode 55 of Security Intelligence, Sophie Cunningham, Ian Molloy and Seth Glasgow join host Patrick Austin to break down three cybersecurity stories and what they mean for defenders.
First, Google pauses part of its open-source bug bounty program amid a flood of automated reports. Meanwhile, its own PageBreak AI agent is finding hundreds of vulnerabilities. Could AI ultimately save the bug bounty programs its overwhelming?
Then, ClingSTUN malware exploits unpatched IoT devices and hides behind legitimate network traffic. The attack highlights a persistent security challenge: finding vulnerabilities is getting faster, but patching them isn't.
Finally, OpenAI agents attempt to hack Wikimedia services, potentially contributing to a partial outage. The panel debates who should be held accountable when agents cross security boundaries.
All that and more on Security Intelligence.
00:00 – Intro
01:38 – Google's AI bug bounty problem
13:32 – ClingSTUN Linux malware
21:34 – OpenAI agents target Wikipedia"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."
-
Hiding in plain sight: Fake GPTs, SMTP malware and NetScaler zero-days
7 oktober 2026 · 21 min
Visit Security Intelligence podcast page to get more AI content → https://www.ibm.com/think/podcasts/security-intelligence Lees meer
That ChatGPT ad might not be from OpenAI.
On episode 54 of Security Intelligence, Michelle Alvarez, Giacomo Casoni and Norman Dorsch join our new host Patrick Austin for imposter week: three stories about attackers posing as something you trust.
First, attackers bought sponsored search ads that led to a fake “Plus 5.6” Custom GPT, which steered at least 40 victims toward a ClickFix page and a remote access trojan. The panel digs into why ClickFix keeps working, and whether AI companies should police their GPT marketplaces the way app stores do.
Then: Rapid7 found Linux backdoors, including a new BPFDoor variant and a RAT called AVERAT, hiding on the appliances that screen companies’ email. From there, attackers can see an organization's mail traffic, and their own traffic blends right in. How do you catch an imposter that looks exactly like your security tools?
Finally, suspected state-linked hackers exploit two critical flaws in Citrix NetScaler, hitting dozens of organizations across government, healthcare and critical infrastructure. Some Dutch hospitals took patient portals offline. And patching won’t evict attackers who got in first, which makes a tested playbook essential.
All that and more In Security Intelligence.
00:00 – Intro
1:35 – Fake GPTs as malware lures
7:37 – Backdoors disguised as email
13:51 – Inside the NetScaler attacks
"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."
-
Can you trust your chatbot? Inside three AI-powered cyberattacks
30 september 2026 · 35 min
Visit Security Intelligence podcast page to get more cybersecurity content → https://www.ibm.com/think/podcasts/security-intelligence Lees meer
Ask a chatbot for a customer service number, and you might get a scammer's.
That's the trick behind "Dark Sourcery," a campaign that games AI answer engines into citing phishing links and fake support lines. It's SEO poisoning updated for an AEO world, and it works because so few of us verify what AI tells us before charging ahead.
On episode 53 of Security Intelligence, Kimmie Farrington, Curtis Pitts and Dave McGinnis join hosts Matt Kosinski and Patrick Austin to break down three AI-enabled cyberattacks and what they mean for defenders.
First, the poisoned chatbots: How does Dark Sourcery work, and how do we rethink trust in the AI era?
Then, a threat actor spends months tearing through Ubiquiti, WordPress and Zyxel gear, stealing thousands of government documents. GreyNoise suspects it had an LLM helping write its tools.
Finally, an AI agent swarm breaches hundreds of PaperCut servers. It goes from an empty workspace to a real victim in about four hours, and then ignores its own rules of engagement.
All that and more on Security Intelligence.
00:00 - Intro
1:23 - Dark Sourcery
13:00 - LLM-assisted hacking spree
21:46 - Agent swarm attack
"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."
-
How Costa Rica built a cybersecurity dream team
25 september 2026 · 17 min
Visit Security Intelligence podcast page to get more cybersecurity content → https://www.ibm.com/think/podcasts/security-intelligence Lees meer
People like to say “cybersecurity is a team sport.” But how often do we actually live up to that ideal?
In this bonus episode of Security Intelligence, host Matt Kosinski talks to Joe Xatruch about the Cyber Cluster, a public-private-academic alliance that’s turning Costa Rica into a global hub for cybersecurity talent and services.
Joe shares what inspired the cluster, the obstacles they had to tackle to get it off the ground and the benefits it’s brought to people and organizations across the country. Plus—why the model is spreading, and why that’s great news.
This is what a collaborative approach to cybersecurity really looks like. And it turns out it’s even better than the hype.
All that and more on Security Intelligence.
"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."
-
Are AI labs ignoring cybersecurity experts?
23 september 2026 · 37 min
Visit Security Intelligence podcast page to get more security content → https://www.ibm.com/think/podcasts/security-intelligence Lees meer
Last week, some of the biggest names in AI coalesced around the need to pace development and strengthen security measures. Problem is, many of the biggest names in cybersecurity feel like they haven’t been invited to that conversation.
On episode 52 of Security Intelligence, Jeff Crume, Nikki Robinson and Omari Jones join hosts Matt Kosinski and Patrick Austin to talk about the rising tensions between frontier labs and cybersecurity pros. The former seem to be approaching AI safety as primarily an issue of alignment, while the latter thinks a few good old-fashioned security controls could go a long, long way.
Then: Just as the frontier labs are locking their models down, their open-weight counterparts are letting people pull off sophisticated hacks—like hijacking TikTok users’ cameras—with relative ease. Should open models play a bigger role in our security conversations?
Finally, CISA and the FBI are sick and tired of all the spin, and their latest advisory calls on breach victims to be much more transparent about incidents. We explore what good crisis communications look like and how we get more organizations on board.
All that and more on Security Intelligence
00:00 - Intro
1:30 - The AI cybersecurity shutout
13:53 - Open models hack TikTok
25:45 - CISA’s crisis comms advisory
"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."
-
The vulnpocalypse might not be so bad after all
16 september 2026 · 34 min
Visit Security Intelligence podcast page to get more cybersecurity content → https://www.ibm.com/think/podcasts/security-intelligence Lees meer
Depending on who you ask, the AI-driven vulnpocalypse is either the end of cybersecurity as we know it or a lot of hot air.
This week on Security Intelligence, host Patrick Austin sits down with Giacomo Casoni, Brad Lair and Norman Dorsch to dig into a new report suggesting the AI vulnerability surge might be more manageable than feared—as long as organizations shift their focus from patching to validation.
Then: Researchers caught AI agents secretly turning public wikis into makeshift message boards, apparently coordinating with each other to get around their own restrictions. How can we trust them with critical cybersecurity workflows?
Plus, the ShinyHunters gang proves that old-school vishing can still beat multifactor authentication, no AI required.
Finally, Shweta Jain, Head of Promontory at IBM Consulting, joins the show to talk about her new piece with Stephen Coraggio on why quantum computing and AI-powered threats are forcing banks to rethink cyber resilience. Read the article: https://www.ibm.com/think/insights/next-cyber-crisis-is-already-taking-shape
All that and more, on Security Intelligence.
00:00 - Intro
1:36 - Rethinking the vulnpocalypse
6:20 - AI agents’ secret message boards
13:28 - ShinyHunters go vishing
19:31 - What is cyber resilience, really?
"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."
-
Why won’t AI agents just follow the rules?
9 september 2026 · 35 min
Visit Security Intelligence podcast page to get more cybersecurity content → https://www.ibm.com/think/podcasts/security-intelligence Lees meer
Why bother giving your AI agents rules if they’re just gonna reason around them?
On episode 50 of Security Intelligence, Dustin “EvilMog” Heywood, Seth Glasgow and Nick Bradley join host Matt Kosinski to discuss why AI agents go off-script and whether we can stop them.
Drawing on the HuggingFace hack and an op-ed from Dark Reading, we explore what ethics looks like for a piece of software that has no concept of right and wrong. Is there a way to balance the utility of probabilistic AI with the security of deterministic controls?
Then: The OWASP Top 10 for agentic skills is here, and the list is full of some very basic security hygiene failures. We ask: Why are agentic skills hubs so bad at cybersecurity?
Plus: As AI makes it easier than ever to find vulnerabilities and generate bug reports, bug bounty programs are struggling to keep up. Will AI slop spell the end of independent bug research?
Finally, Itzhak Chimino stops by to show off ThreatXtension, a tool he helped create to detect malicious browser extensions.
All that and more on Security Intelligence.
Segments:
00:00 - Intro
1:26 - Can we really control AI agents?
11:49 - OWASP’s Top 10 for agentic skills
20:37 - AI breaks bug bounties
28:47 - ThreatXtension
"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."
-
Why OpenAI is calling for a ‘cyber defense surge.’ Plus: Find Evil! winners and TeamPCP losers
2 september 2026 · 29 min
IBM, OpenAI and 100 other organizations released an open letter calling for collective action on cyber defense. On episode 49 of Security Intelligence, Michelle Alvarez, Nick Bradley and J.R. Rao join host Matt Kosinski to explore what a “global cyber defense surge” could—and should—look like. Lees meer
And speaking of collective action on cyber defense: The SANS Institute named the winners of its Find Evil! hackathon last week. The five autonomous incident response agents are now available on the SIFT Workstation. We discuss the results and what the hackathon’s success means for the future of autonomous agents in cybersecurity.
Finally: Flare unmasked a couple of the alleged leaders of the notorious hacking gang TeamPCP. We look at how they did it, and what the rest of us can learn from it.
00:00 - INTRO
1:19 - OpenAI’s open letter
12:22 - Find Evil! winners
22:03 - TeamPCP takedown
All that and more on Security Intelligence.
"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."
-
‘That’s not a knife’: Attackers outpace defenders with AI. Here’s how we catch up.
28 augustus 2026 · 16 min
You all know the famous Crocodile Dundee scene, right? “That’s not a knife—this is a knife!” Lees meer
According to Dimple Ahluwalia, IBM Consulting’s Global Offering Lead for CyberDefend, that’s basically the cybersecurity situation today. Except we’re the guys with the switchblades getting clowned on.
On this bonus episode of Security Intelligence, Dimple helps me understand one of the most concerning bits to surface in IBM’s 2026 Cost of a Data Breach Report: AI-generated attacks are up 56%, while 64% of organizations report limited or no use of AI tools in security.
We discuss why the gap exists, how attackers use AI as both a tool and a target and why the key to bringing more AI into security is to stop thinking about AI.
Read the Cost of a Data Breach report: https://www.ibm.com/reports/data-breach
Watch the webinar: https://ibm.webcasts.com/starthere.jsp?ei=1769682&tp_key=2abad1a7b6&sti=web
"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."
-
Who’s afraid of an open-weight model? GLM, context bombing and post-Black Hat attacks
26 augustus 2026 · 27 min
GLM-5.3 is, by some measures, better than GPT Sol and Anthropic’s Mythos at vulnerability discovery and validation. On episode 48 of Security Intelligence, Erblind Morina, Kimmie Farrington and Patrick Fussell join host Matt Kosinski to debate whether this is really cool or really scary, or maybe a little of both. Lees meer
Then: Tracebit researchers have developed a way to use prompt injections as a defensive measure. Called “context bombing,” the technique plants malicious prompts alongside the very assets that attacking AI agents are likely to target.
Finally, Huntress reports on a rash of social engineering attacks on Black Hat conference attendees. They’re not terribly sophisticated, but any concentrated offensive against the cybersecurity community is worth paying attention to. You never know who might be on the other side of those phishing emails.
Segments:
00:00 - Intro
1:14 - GLM-5.3
11:46 - Context bombing
19:12 - Black Hat conference attacks
"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."
-
What should security leaders do with AI? They don’t know.
19 augustus 2026 · 29 min
Cybersecurity leaders are flush with cash—earmarked for AI, mind you—and eager to spend it. What they don’t have is a plan for how. Lees meer
This week on Security Intelligence, Claire Nuñez, Curtis Pitts and Dave Bales join host Matt Kosinski to talk about why so many security teams are experience AI decision fatigue—and what to do about it.
Then, we discuss Tenet Security’s DEFCON presentation on ghostjacking, a new method for sneaking malicious prompts into some of our most trusted data sources (logs, alerts, error reports). Because regular prompt injections are just too vanilla.
Oh, and speaking of how to deploy AI in cybersecurity: Research from 1Password shows LLMs are a lot better at exploiting vulnerabilities than patching them. What does that mean for defenders?
Find out all this—and more—on Security Intelligence.
00:00 - Introduction
1:04 - Cybersecurity’s AI paralysis
10:45 - Ghostjacking
20:53 - Is AI bad at patching?
Agentic AI identity management with IBM: https://www.ibm.com/solutions/agentic-ai-identity-management
"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."
-
The OWASP LLM Top 10 has a few surprises for you
12 augustus 2026 · 29 min
What’s the biggest, baddest, most unruly problem in AI security? Lees meer
Turns out that depends on whether you’re asking practitioners or looking at incident data.
In this episode of IBM Security Intelligence, we break down the OWASP LLM Top 10 for 2026, which took the unusual step of using both community votes and incident databases to inform its rankings. There are some interesting gaps—the data says misinformation is a bigger deal than the pros think, while prompt injections happen less than the headlines might have you believe. But it’s not as simple as “numbers don’t lie and the experts are wrong.”
Then, CISA's 2026 SBOM guidance asks for even more data, but does that actually mean less risk? And our panelists share highlights from Black Hat, including new details on how attackers can use misinformation to hijack agentic browsers.
All that and more on Security Intelligence.
00:00 - Intro
1:26 - OWASP LLM Top 10
12:55 - CISA’s SBOM guidance
20:05 - Black Hat 2026 highlights
"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."
-
Oh look. Anthropic’s AI models also broke containment.
5 augustus 2026 · 35 min
Last week, OpenAI’s models broke out of their sandboxes to cause chaos. This week, it’s Anthropic’s turn. Lees meer
On this episode of Security Intelligence, Diego Matos Martins, Kimmie Farrington and Jeff Crume join host Matt Kosinski to discuss the results of Anthropic’s internal review of testing procedures following the Hugging Face incident last month. Anthropic uncovered three instances of Claude models escaping containment and hacking real companies during what were supposed to be simulations.
Granted, that’s three incidents out of 141,000 reviewed tests, which raises the question:
Just how big a deal is this really?
Then, we talk about research from Zenity into PleaseFix, a class of vulnerabilities that affects every agentic browser on the market. Zenity’s take: In the rush toward agentic functionality, these tools stripped away decades’ worth of browser security fundamentals.
Finally, a so-called “security researcher” has a public GitHub repo of 200+ zero-day exploits. They say it’s to encourage more interest in cybersecurity.
Yeah. Okay. Sure.
All that and more on Security Intelligence.
00:00 - Intro
1:12 - Claude breaks containment
13:13 - Agentic browsers: security nightmares
21:56 - The Exploitarium
Listen to the latest bonus episode: Your data breach plan is missing something major: people. https://www.ibm.com/think/podcasts/security-intelligence/data-breach-plan-people
"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."
-
Your data breach plan is missing something major: people.
31 juli 2026 · 21 min
When a cyberattack hits, your security team knows exactly what to do. What about everyone else? Lees meer
In this episode of Security Intelligence, Limor Kessem, X-Force Cyber Crisis Management Global Lead, explores the side of breach response that most organizations forget: the human side.
From employees posting ransom notes on Facebook to well-meaning staffers accidentally paying ransoms to sanctioned entities, the biggest threats to your crisis response often come from inside the building.
Kessem makes the case for expansive, cross-functional incident response playbooks that arm everyone from HR to the C-suite with exactly what they need to do, hour by hour, when things go sideways. She also digs into crisis leadership, emotional management and the overlooked logistics—like who feeds your team during a 48-hour response sprint—that can make the difference between succumbing to the crisis or coming out on top.
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence
-
The Cost of a Data Breach 2026, and what we can learn from the Hugging Face hack
29 juli 2026 · 32 min
We’re in an AI arms race, and the bad guys might be winning. Lees meer
On this episode of Security Intelligence, Suja Viswesan, Dave McGinnis and Jeff Crume join host Matt Kosinski to dig into IBM’s 2026 Cost of a Data Breach report. This year’s findings suggest that attackers are weaponizing AI faster than defenders can deploy it, leading to some very troubling capability gaps.
But it’s not all doom and gloom. We also look at the very real steps organizations can take to start closing those gaps today. They’re not as hard as you might think!
Then: Hugging Face got hacked. By a rogue AI agent. From OpenAI. It was trying to cheat on a test. We talk about the lessons we can learn, including the vital importance of open-source AI tools and how coalitional approaches to cybersecurity can unlock institutional knowledge that no training dataset can ever bestow on even the most diligent LLM.
Read the Cost of a Data Breach report: https://www.ibm.com/reports/data-breach
"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity."
-
GPT-Red: Can AI red teams stop prompt injections?
22 juli 2026 · 32 min
Cybersecurity researchers have had a heck of a time trying to stop prompt injections. Maybe we should just let the AI handle the problem itself. Lees meer
This week on Security Intelligence, Michelle Alvarez, Nick Bradley and Kimmie Farrington join host Matt Kosinski to discuss OpenAI's GPT-Red, the internal red-teaming tool that helped make GPT-5.6 Sol the company’s most cyber resilient model yet.
Then: ScamBuster, an open-source tool debuting at Black Hat, uses AI to bait email scammers into revealing their own tactics and infrastructure.
Finally, Bruce Schneier's essay on the widening gap between skill and ability in cybersecurity. When AI lets anyone skip the years of training that used to come with real expertise—and the ethics that came with it—what happens to the field?
All that and more on Security Intelligence.
"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity."
-
GLM-5.2: The real security risk? Plus: Vibe hunting, the end of CVSS and updates on Lightwell
15 juli 2026 · 35 min
Z.ai’s GLM-5.2 is, according to some, as good at finding
vulnerabilities as Mythos. Or at least, close to it. And it’s open
weight. Lees meerOn this episode of Security Intelligence, we
dig into how powerful, open AI models are bringing frontier-style
capabilities to more people, all while the proprietary models are
emphasizing safeguards. What does it mean for cybersecurity pros?
Security emergency, or a whole lot of hype?Then,
we explore how CISA’s new BOD 26-04 ditches the old CVSS scoring system
for a four-variable model that could reshape how every security team
prioritizes vulnerabilities. We also unpack “vibe hunting,” the
AI-assisted evolution of threat hunting, and break down the commercial
launch of Red Hat and IBM’s Lightwell.Securing open-source software in the AI era requires new approaches. Learn how Lightwell does it: https://newsroom.ibm.com/2026-07-08-ibm-and-red-hat-expand-lightwell-with-new-commercial-offerings-to-build-the-trust-infrastructure-for-ai-era-open-source
Segments:
00:00 – Intro
01:13 - GLM-5.2
10:26 - The end of CVSS?
19:25 - Vibe hunting
28:01 - Lightwell’s commercial launch
The
opinions expressed in this podcast are solely those of the participants
and do not necessarily reflect the views of IBM or any other
organization or entity.Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence
-
Fable 5, GPT-5.6 and the high stakes of AI safeguards. Plus: Agentic ransomware, and ClickFix reigns supreme
8 juli 2026 · 42 min
Read Itzhak Chimino’s research on UnregStealer → https://www.ibm.com/think/news/unregstealer-human-operated-browser-credential-theft-targeting-brazilian-banking Lees meer
When it comes to Fable 5, Mythos 5, and GPT-5.6 Sol, the real story is in the safeguards.
Last week, Anthropic and OpenAI both rolled out some powerful new models. And for perhaps the first time, the protections surrounding these models got almost as much airtime as the models’ themselves.
On this week’s episode of IBM Security Intelligence, Sophie Cunningham, Diego Matos Martins and Jeff Crume join host Matt Kosinski to talk about an emerging paradigm in frontier models: Safety first. What’s gained and what’s lost when security controls take center stage? And just how effective are the ones we’ve developed?
Then, we dive into Sysdig’s report on JADEPUFFER, the first agentic ransomware. But not every security expert agrees with that conclusion. So where do we land?
Plus: ClickFix is the new king of social engineering schemes—and it’s coming for your developers.
Finally, Senior Threat Researcher Itzhak Chimino shares his technical research into UnregStealer, a credential-theft campaign targeting Latin American banks.
All that and more on Security Intelligence.
Segments:
00:00 -- Introduction
01:38 -- Fable 5 and GPT-5.6
13:26 -- Agentic ransomware. Maybe.
24:08 -- ClickFix: top social engineering attack
32:51-- Analyzing UnregStealer
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Follow the Security Intelligence podcast on your preferred platform → https://www.ibm.com/think/podcasts/security-intelligence
-
The new post-quantum cryptography executive order. Plus: What is Q-Day, really?
1 juli 2026 · 44 min
Learn more about Q-Day → https://www.ibm.com/think/news/q-day-has-already-begun-are-you-ready Lees meer
On June 22, US President Donald Trump signed a pair of executive orders for the quantum computing, and post-quantum future.
On this episode, Mason Molesky breaks down the post-quantum EOs: “Securing the Nation Against Advanced Cryptographic Attack,” which establishes a government‑wide mandate to accelerate the United States’ transition to post‑quantum cryptography. Mason covers what it is, why you should care and what you should do.
Then: Suja Visewesan and Mark Hughes join host Matt Kosinski to discuss Q-Day, the anticipated future day when quantum computing will become “cryptographically relevant” — or put another way: powerful, reliable and accessible enough to make our current approach to public key cryptography obsolete.
But what if Q-Day isn’t a day at all? What if it’s a process—a long, slow evolution rather than a sudden leap? And what if it’s already happening right now, under our noses?
We chat about the risks—and benefits!—of quantum computing to cybersecurity, the reality of and post-quantum cryptography and how organizations can become “crypto-agile” to keep up with the rapid pace of change.
All that and more on Security Intelligence.
00:00 – Introduction
01:23 – Post-quantum cryptography executive order
13:30 – What is Q-Day?
Read Suja and Mark’s article → https://www.ibm.com/think/perspectives/quantum-computers-are-speeding-towards-cryptographic-relevancy
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
-
Patch management is dead. Here’s what’s taking it place
26 juni 2026 · 22 min
Patch management, as most organizations practice it, is fundamentally broken. It treats what should be a strategic, risk-informed decision as a checkbox item. And checkboxes don't get done. Lees meer
The fix isn't better patching. It's exposure management: a risk-based approach that connects your vulnerabilities to your business context, your attack surface and the real-world threat landscape.
In this episode of Security Intelligence, IBM X-Force North America Leader of Incident Response Ryan Anschutz walks us through why patch management fails, what exposure management does differently and what it all means for defenders right now.
Ryan shares war stories from the field, including a firmware vulnerability that turned into a multi-continent ransomware outbreak and a MOVEit response that kept one organization out of the headlines while its competitors made them for all the wrong reasons.
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence
Subscribe to the IBM Think newsletter: https://www.ibm.com/forms/news-mkt-52954
Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence
Learn more about cybersecurity: https://www.ibm.com/think/security
"How IBM Can help" component at the bottom driving to www.ibm.com/products/guardium-ai-security and www.ibm.com/solutions/data-security
-
Have we finally solved social engineering? Plus: World Cup fraud, AI IDs and an IBM/OpenAI collab
24 juni 2026 · 39 min
Read more about IBM joining OpenAI Daybreak → https://newsroom.ibm.com/2026-06-22-ibm-and-openai-bring-frontier-ai-to-cyber-defense-helping-enterprises-keep-pace-with-machine-speed-threats Lees meer
Social engineering has plagued human beings since time immemorial. We’ve simply never been able to stop it. Until now. Maybe.
On this episode of Security Intelligence, panelists Dave Bales, Kimmie Farrington and JR Rao dig into the idea that AI-native operating systems could do to phishing what endpoint protection did to viruses.
Then: the World Cup is here, and so are the scammers. We discuss Operation FanTrap, Cyble Research and Intelligence Labs’ deep dive into 4,000 malicious domains using fraudulent FIFA branding to steal credentials, drain wallets and spread malware.
Plus, Estonia wants to give AI agents their own personal IDs, and IBM joins OpenAI’s Daybreak Cyber Partner Program.
All that and more on Security Intelligence.
00:00 -- Introduction
1:30 -- The end of social engineering?
14:53 -- World Cup fraud
25:08 -- IDs for AI agents
33:02 -- IBM joins OpenAI Daybreak
Visit Security Intelligence podcast page to get more AI content → https://www.ibm.com/think/podcasts/security-intelligence
-
AI agents can manage your passwords. Should we let them? Plus: The biggest Patch Tuesday ever.
17 juni 2026 · 30 min
Apple unveiled an AI agent that can detect if your password’s been compromised and change it for you. Lees meer
The question is: Should you let it?
On this episode of Security Intelligence, Michelle Alvarez, Erblind Morina and Austin Zeizel join host Matt Kosinski to discuss the promise and pitfalls of using AI agents to address the pernicious issue of cybersecurity hygiene. As people, we’re not great at it. But are the agents ready for primetime?
Then, we talk about Microsoft’s biggest Patch Tuesday ever: more than 200 distinct CVEs were covered in the June 2026 release. We talk about why this might just be the beginning of a new era in vulnerability management, and why it matters. Spoiler: It’s not really about the numbers.
Finally, we get into a report that C-suite executives are increasingly willing to take on greater cyber risk in exchange for innovation. Some say it’s a reaction after years of security spending with low ROI—but are they overcorrecting?
All that and more on Security Intelligence.
00:00 -- Intro
1:13 -- AI agents can fix your passwords
10:36 -- The biggest Patch Tuesday ever
19:46 -- Executives embrace cyber risk
Visit Security Intelligence podcast page to get more security content → https://www.ibm.com/think/podcasts/security-intelligence
-
Can you social engineer an AI? Plus: AI worms and the nonhuman identity problem
10 juni 2026 · 33 min
If you just ask an AI nicely enough, you can get it to hand over the keys to a total stranger’s Instagram account. But people can be tricked, too. So what’s the difference? Is there any? Lees meer
This week on IBM’s Security Intelligence, Jeff Crume, Claire Nunez and Nick Bradley join host Matt Kosinski to dig into what happens when social engineering meets AI. We cover the Meta/Instagram prompt injection attack, a new self-replicating AI worm out of the University of Toronto that can reason its way through a network and the Sophos State of Identity Security 2026 report, which found that nonhuman identities (NHIs) are responsible for a sizable chunk of identity-based data breaches.
Are AI agents more gullible than humans? Is the AI worm a genuine leap forward for attackers, or just another proof-of-concept? And why are so few organizations bothering to audit and rotate their nonhuman credentials?
All that and more on Security Intelligence.
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence
-
Project Lightwell brings open source security into the AI era
3 juni 2026 · 35 min
Open source software powers more than 90% of Fortune 500 companies. It also powers a growing number of cyberattacks. Lees meer
This week on Security Intelligence, we dig into IBM and Red Hat's $5 billion answer to that problem: Project Lightwell, a massive investment in AI-augmented engineers and a trusted security clearinghouse designed to shore up the open source ecosystem from the inside out.
We also break down SymJack, a clever new attack technique that turns AI coding agents against themselves by tricking them into overwriting their own configuration files. And the most worrisome part is how it gets around human-in-the-loop checks.
And: LayerX's "State of AI Usage Report 2026" shows AI adoption isn't spreading evenly across organizations. We explore what it means for cybersecurity pros when AI fragments throughout the software supply chain while simultaneously concentrating in the hands of a few power users.
Segments:
00:00 - Intro
1:05 - Project Lightwell
12:51 - SymJack
26:11 - AI usage in 2026The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence
-
Multi-model AI environments are the future. Can we secure them?
29 mei 2026 · 17 min
Today, the average enterprise network is like one big game of Telephone: Critical data flows between apps and assets, software systems and their subcomponents, on-prem laptops and cloud storage buckets. Every single gap between the pieces—every single transaction—is a possible vulnerability, a chance to hackers to get in or data to get scrambled. Lees meer
And the introduction of multiple AI models is only making things trickier. Data passes between models, transforms in ways no one fully understands, and emerges on the other side as something you didn't quite expect.
In this episode of IBM’s Security Intelligence, Vishal Kamat, VP of Data Security at IBM, walks us through the security challenges of the multi-model AI world: the black box problem, the accountability gap, shadow AI, agent session smuggling, and why less than 1% of enterprise data is actually in models today, even as everyone scrambles to build AI applications.
It's Telephone all the way down. But someone has to make sure the message gets through clean.
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence
-
First findings from Project Glasswing
27 mei 2026 · 33 min
While Anthropic has restricted Mythos access to its Project Glasswing partners, it has always maintained that lessons from Glasswing would be shared with the broader cybersecurity community. Now, those lessons are starting to roll out. Lees meer
This week, on Security Intelligence, panelists Dustin “EvilMog” Heywood, Kimmie Farrington and Curtis Pitts discuss Cloudflare’s recent write-up on its adventures with Mythos so far. We discuss what separates Mythos from other AI vulnerability hunters, Cloudflare’s agentic harness and whether “speed” is the wrong way to think about AI cybersecurity tools.
Then: A CISA contractor accidentally exposed a repo full of cloud keys, passwords, tokens and other credentials to the public web on GitHub. It’s a case study in identity and access management mistakes and supply chain vulnerabilities—and there’s a lot to learn from ti.
Finally, we look back on L0pht Day, 1998, when a group of Boston-area hackers warned Congress about the fundamentally inadequate security measures of the early internet. Have we made any progress since then? Maybe not as much as you think.
All that and more, on Security Intelligence.
-
OpenAI’s Daybreak and Mistral’s Mythos competitor
20 mei 2026 · 30 min
Between OpenAI Daybreak, Microsoft MDASH and Mistral’s Mythos competitor, it’s been a big week for AI-powered vulnerability management. But are these tools all they’re cracked up to be? Lees meer
This week on Security Intelligence, Nick Bradley, Diego Matos Martins and Nikki Robinson discuss three bold moves in the AI vulnerability scanner space: OpenAI unveiled Daybreak, its frontier AI for cyber defense program, Microsoft revealed its multi-agent vulnerability hunting system, MDASH, and French AI startup Mistral is reportedly building its own cybersecurity-focused model to fill the gap left by the lack of access to Anthropic’s Mythos in Europe.
Speaking of Mythos: curl developer Daniel Stenberg got to try it himself (sort of), and his verdict was measured, to put it kindly. But despite this—and the fact that AI slop reports drove curl to shut down bug bounties earlier this year—Stenberg is far from anti-AI. We dig into why.
Finally: TeamPCP released the source code for Shai-Hulud, the notorious worm behind a surge of npm supply chain attacks. They're even running a dark web contest to crowdsource new attack variants. What’s it all mean for defenders?
All that and more on Security Intelligence.
Segments:
00:00 -- Intro
1:17 -- Daybreak, MDASH and Mistral
11:31 -- Curl dev tries Mythos
20:57 -- Shai-Hulud goes open source
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence
-
LLMjacking: How hackers steal your AI API keys and stick you with the bill
13 mei 2026 · 31 min
AI tools can turn a team of three developers into a fully functioning company. They can also push that company to the brink of bankruptcy. Lees meer
On this week’s Security Intelligence, we talk LLMjacking: Hackers steal your AI API keys and then rack up massive bills, even blowing past usage caps in some cases. One small startup saw its typical bill balloon from $180 a month to $82,000 in two days.
We chat about what makes AI API keys vulnerable and how we can tighten our defenses to keep these vital credentials safe.
Then we get into how AI is transforming adversary simulation and red teaming, and why the human is still the most important part of the loop.
Finally, CISA is considering cutting the federal patch window from two weeks to three days. Can we actually move that fast?
Segments:
00:00 – Intro
1:15 -- What is LLMjacking?
12:29 -- AI and adversary simulations
22:09 -- Can we patch faster?
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence
-
Claude Security’s public beta, OpenAI’s five-point plan and cybersecurity’s Y2K moment
6 mei 2026 · 30 min
Between Mythos, GPT-5.4-Cyber, Claude Security’s public beta and OpenAI’s new five-point plan for cyber defense, it seems like cybersecurity is top of mind for the major AI players today. Why—and why now? Lees meer
On this week’s episode of IBM Security Intelligence, Dustin “EvilMog” Heywood, Omari Jones and Kimmie Farrington discuss what CrowdStrike has called “cybersecurity’s Y2K moment.” As the major AI players roll out security-focused solutions—and sophisticated AI tools are weaponized by threat actors—we need all-hands on deck to avert disaster. But will we?
Plus: The Coalition for Secure AI’s framework for AI identities and Copy Fail, a newly discovered Linux flaw with a potentially massive blast radius.
All that and more on Security Intelligence.
Segments:
00:00 -- Intro
1:11 - Cybersecurity’s Y2K moment
10:52 -- Framework for AI identity
22:23 -- Copy Fail
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence
-
Is open source safe? Featuring Mixture of Experts
29 april 2026 · 25 min
Is open source good? Bad? Some secret third thing? Is this a silly question to even ask? Lees meer
In this special crossover episode of Security Intelligence and Mixture of Experts, we bring together AI and security experts to address one of the thorniest questions in tech right now: How do you enjoy the unique benefits of open source AI while managing its very real risks?
MoE stalwarts Gabe Goodhart and Martin Keen join SI all-star Jeff Crume to dig into:
Why open source is foundational to AI innovation
Security concerns of both proprietary and open source AI infrastructure
The difference between "secure" and “securable”
And a whole lot more!
Along the way, we hash out a robust, nuanced picture of the relationships between AI, security and open source. Go beyond the buzzwords to what really matters on this week’s episode of Security Intelligence.
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence
-
Web of lies: What’s real and what’s fake on the dark web
29 april 2026 · 11 min
We’ve all heard tales of what lurks on the dark web. Black markets dealing in contraband. Roving criminal gangs. Troves and troves of private data for sale. Much, much worse. Lees meer
Thankfully, most of it’s fake. The real trouble is figuring out what isn’t.
In this episode of Security Intelligence, Senior Threat Intelligence Analyst Robert Gates helps us untangle the web of lies that cybercriminals spin on the dark web—the lies they tell their victims, their customers, and even themselves.
By walking us through a few real-world investigations—including a panicked airline that thought it had been breached and the still-unsolved case of a hacker who may or may not have stockpiled millions of sensitive records—Robert shows us how threat intelligence experts and cybersecurity pros separate fact from fiction.
The dark web can be your most reliable early warning system. But only if you know how to use it.
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence
-
Should you let OpenClaw pen test your system? Plus: Cybersecurity for ephemeral software
22 april 2026 · 36 min
Learn more about how enterprises confront agentic attacks → Lees meer
https://newsroom.ibm.com/2026-04-15-ibm-announces-new-cybersecurity-measures-to-help-enterprises-confront-agentic-attacks
Sophos let OpenClaw run wild on its network (sort of). It wasn’t as bad an idea as it sounds!
With a few guardrails and restrictions in place, the security software firm turned OpenClaw into a serious little pen tester, surfacing “23 actionable, high-quality findings.”
But is this a sustainable model for introducing AI agents to the security process? And how do we deal with the inevitable friction between a model meant to find exploits and the guardrails telling it to do no harm?
This week, host Matt Kosinski and panelists Claire Nuñez, Dave McGinnis and Kimmie Farrington discuss the wisdom and folly of letting an AI agent pen test your system.
Plus: We dig into Bruce Schneier’s thoughts on “security in the age of instant software” and a report from CipherCue that ransomware is growing three times faster than security spending.
All that and more on Security Intelligence.
Segments:
00:00 – Intro
1:07 -- OpenClaw as a pen tester
14:23 -- Cybersecurity for instant software
25:36 -- Ransomware outpaces security spending
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Follow the Security Intelligence podcast on your preferred platform →
https://www.ibm.com/think/podcasts/security-intelligence
-
GPT-5.4-Cyber: What you need to know
16 april 2026 · 12 min
Earlier this week, OpenAI dropped GPT-5.4-Cyber, a “cyber-permissive” variant of GPT-5.4 . Lees meer
Basically: It's lets you do some things in the name of security research and defense that you can’t normally do with a regular GPT model.
But you have to prove you’re a cybersecurity pro with good intentions to get access.
On this bonus episode of Security Intelligence, Jeff Crume and Martin Keen join host Matthew Kosinski to break down what the new model means for cybersecurity and the big picture trends driving the evolution of LLMs.
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence
-
Claude Mythos: Marketing hype or the end of cybersecurity?
15 april 2026 · 30 min
Anthropic says its newest AI model, Claude Mythos, has found thousands of zero-day vulnerabilities across every major OS and web browser. Lees meer
It's so powerful, they won't release it publicly. Instead, they’re restricting access to a handful of trusted partners, who get to experiment with Mythos through a new initiative called Project Glasswing.
Where does that leave the rest of us, who don’t get to tinker with perhaps the most advanced model yet?
This week on Security Intelligence, Sridhar Muppidi, Michelle Alvarez, and Dustin “EvilMog” Heywood join host Matt Kosinski to discuss what Mythos and Glasswing really mean for the average security pro.
How much is hype? How much is the real deal? And how could this limited release backfire?
Then: The FBI’s 2025 Internet Crime Report saw scam losses jump 26%, and Accenture found a 127% increase in malicious hackers trying to recruit the employees of their targets.
All that and more on Security Intelligence.
Segments:
00:00 – Intro
1:22 -- Claude Mythos and Project Glasswing
12:26 -- The 2025 Internet Crime Report
20:19 -- Attackers recruiting more insiders
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Read more about AI raising cybersecurity stakes → https://www.ibm.com/think/news/anthropic-claude-ai-mythos-project-glasswing-raises-stakes-cybersecurity
Follow the Security Intelligence podcast on your preferred platform → https://www.ibm.com/think/podcasts/security-intelligence
-
The Claude Code source code leak: Takeaways for cybersecurity pros
8 april 2026 · 42 min
What happens when one of the world’s most popular AI coding tools falls into the wrong hands? Lees meer
On this episode of Security Intelligence, Nick Bradley, Dave Bales and JR Rao discuss the Claude Code source code leak. Attackers are already using the opportunity to spread malware through fake repos, but the real question is how threat actors might use their newfound knowledge of Claude Code’s internals to wreak havoc on AI agents and the CI/CD pipeline.
Then, we follow up on our old friends TeamPCP, Shiny Hunters and Lapsus$, whose overlapping data breach claims are causing no small amount of confusion and consternation among security pros. We examine the credential rotation problem and the uneven security surface of modern supply chains that helped get us in this mess.
Plus: Threat intelligence usually focuses on attacks that did happen. But what if we started talking about the ones that didn’t? And do cybercriminals have anything to teach us about “mature” AI adoption? Some big names seem to think so.
All that and more on Security Intelligence.
Segments:
00:00 – Intro
1:12 -- The Claude Code leak
11:19 -- TeamPCP’s breach spree
21:21 -- “Close-call” databases
29:28 -- Cybercrime and AI adoption
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence
-
RSA recap, the LiteLLM breach, and the quest to fix AI
1 april 2026 · 49 min
LiteLLM is a nifty little Python library that gives you access to about 100 different AI services through one API. It gets an estimated 3.4 million downloads a day. And last week, it was turned into a Trojan horse, distributing infostealers to hundreds of thousands of devices. (At least, that’s what TeamPCP says—the hackers behind the LiteLLM breach and a slew of other high-profile software supply chain attacks in recent weeks.) Lees meer
Quote Andrej Karpathy: This is “basically the scariest thing imaginable in modern software.”
On this episode of Security Intelligence, Suja Viswesan, Dave McGinnis and Jeff Crume help us break down the LiteLLM breach and the broader campaign TeamPCP is waging. We’re also joined by HashiCorp Field CTO Jake Lundberg in the first segment for a discussion of how organizations are trying—with varying degrees of success—to tackle the agentic AI problem. AI agents are identities—but identities our existing frameworks weren’t built to house. Simply porting existing human and non-human identity management practices onto them won’t cut it. But the question remains: What do we need instead?
All that and more on Security Intelligence.
00:00 – Intro
1:13 – Who will fix AI agent security?
21:17 – RSAC 2026 Recap
29:31 – 2026’s most dangerous cyberattacks
40:45 – The LiteLLM breach
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
-
Cryptocurrency: The most misunderstood technology in cybersecurity
27 maart 2026 · 23 min
Most cybersecurity pros only run into cryptocurrency when they’re dealing with ransomware gangs demanding payouts in Bitcoin. Lees meer
But what if crypto infrastructure were more than just a means of money laundering?
In this episode of IBM’s Security Intelligence podcast, X-Force threat intelligence consultant Austin Zeizel makes the case that blockchain — the decentralized ledger underlying many cryptocurrency systems — has powerful, largely untapped applications for cybersecurity. In fact, Austin makes a pretty convincing argument that blockchain could be the key to a genuinely zero trust architecture.
We also get into how cybercriminals actually exploit cryptocurrency — coin mixers, non-KYC exchanges, the pseudonymous nature of Bitcoin — and why understanding those mechanics matters for defenders.
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence
-
Promptware, cloud security trends for 2026, and what the Xbox One hack means for cybersecurity
25 maart 2026 · 41 min
Follow the Security Intelligence podcast on your preferred platform → https://www.ibm.com/think/podcasts/security-intelligence Lees meer
Someone finally cracked the Xbox One after 13 years. Here’s why security pros should care.
On this episode of Security Intelligence, panelists Ian Molloy, Seth Glasgow and Kimmie Farrington discuss the Xbox One hack presented at RE//verse 2026. More than just a neat story of one hacker’s ingenuity, there are some important takeaways for practitioners here.
But before that, we get into promptware, a new model for understanding attacks on LLMs that goes beyond the basics of prompt injections. Formulated by a handful of prominent cybersecurity researchers, including Bruce Schneier, promptware urges defenders to start thinking about the full AI attack kill chain, not just the front door.
Then we dive into a new analysis of cloud attack trends from IBM X-Force's Omari Jones, which finds that cybercriminals are targeting cloud ecosystems rather than cloud infrastructure. How do we need to shift our own mindsets to counter this?
Meanwhile, Google Threat Intelligence Group and Coveware find ransomware gangs increasingly ditching their flashy external tools in favor of PowerShell and other built-in system utilities—making detection significantly harder.
And Chuck Everette's Dark Reading op-ed raises a question that doesn't get enough airtime: With everyone focused on cutting-edge AI tech, what about the downright ancient OT systems and PLCs that underpin large swaths of American critical infrastructure?
All that and more on Security Intelligence.
In this episode:
00:00 – Introduction
1:01 -- From prompt injection to promptware
11:15 -- Cloud security trends 2026
19:59 -- Ransomware attackers live off the land
28:53 -- OT security: cybersecurity’s “rusting edge”
34:41 -- The Xbox One hackThe opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or e…
-
Perplexity Comet, agentic blabbering, and the shift-left failure
18 maart 2026 · 37 min
When agentic browsers like Perplexity Comet share their reasoning, they give cybercriminals valuable information. Plus: 40-year-old code liabilities, the failure of shift lift, and new X-Force research. Lees meer
Read more about “Slopoly” → https://www.ibm.com/think/x-force/slopoly-start-ai-enhanced-ransomware-attacks
-
The conference that changed our minds about AI
11 maart 2026 · 38 min
Follow the Security Intelligence podcast on your preferred platform → https://www.ibm.com/think/podcasts/security-intelligence Lees meer
Did you miss out on the [un]prompted AI security conference? So did most of us. Except our very own Dustin “Evil Mog” Heywood, who joins us today to share highlights from the event.
And speaking of [un]prompted, we also discuss one of the biggest announcements to come out of the event: the Zero Day Clock. This coalition of experts is arguing that we need to radically rethink vulnerability management in the face of plummeting time-to-exploit values for new vulnerabilities.
Among their demands that might prove to be quite controversial: holding software makers liable for flaws and building more disposable architecture.
Then we talk about some notably nasty AI agent behavior, including manipulating prescriptions and writing mean blog posts about human users.
Finally, we round out the week with a discussion of burnout among cybersecurity pros. We’re working, on average, 10 overtime hours per week. It’s exhausting—and really, really bad for security.
All that and more on Security Intelligence.
00:00 -- Introduction
1:26 -- Report back from [un]prompted
9:07 -- The zero day collapse
21:26 -- AI agents harassing humans
31:26 -- Burnout in cybersecurityThe opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Subscribe to the IBM Think newsletter → https://www.ibm.com/account/reg/us-en/signup?formid=news-urx-52120
-
Is your robot vacuum safe? Here’s why it matters
4 maart 2026 · 53 min
Can IAM handle AI? Find out → https://www.ibm.com/think/podcasts/security-intelligence Lees meer
A consumer just wanted to control his own personal robot vacuum with a PlayStation controller. He ended up controlling thousands of strangers’ vacuums, too.
This week on Security Intelligence, we cover one of the wildest IoT security stories in recent memory: How one user accidentally built an army of 6,700 robot vacuums, and what it means for cybersecurity pros.
Then we turn to TOAD — telephone-oriented attack delivery — a deceptively low-tech social engineering method that's quietly becoming one of attackers' favorite tools. We talk about why it works and what defenders can actually do about an attack that skips most of your defenses entirely.
And finally: healthcare's cybersecurity problems. This season of the hit medical drama The Pitt features a hospital-debilitating ransomware attack, which is perhaps one of the most realistic things to ever happen on a show known for its verisimilitude. We explore why ransomware is so prevalent in healthcare, why patching is rare and what it would actually take to change that.
Segments
00:00 -- Introduction
0:58 -- Rise of the robot vacuum army
10:02 -- Anthropic debuts Claude Code Security
24:39 -- Thwarting distillation attacks
34:23 -- Why hackers love TOADs
44:14 -- Healthcare’s cybersecurity woesThe opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
Explore the Threat Intelligence Index 2026 → https://www.ibm.com/reports/threat-intelligence#sipod
-
The AI agent access problem: Can IAM handle AI?
27 februari 2026 · 19 min
AI agents are coming to the enterprise—but can we actually control them? Lees meer
On this bonus episode of Security Intelligence, IBM Fellow and CTO IBM Security Sridhar Muppidi helps us dig into the rise of agentic AI security risks, from generative AI systems with backend access to autonomous agents that can schedule meetings, call APIs and automate workflows — often with highly privileged access.
Traditionally, identity and access management has (IAM) focused on human beings. Then came service accounts and API credentials. Now? We’re facing an explosion of machine identities, including a brand-new class of AI identities that blend human and machine characteristics.
How do we manage identity and access for software systems that behave like human users?
Join us for a discussion of:
What makes AI identity management different from traditional IAM
Why valid account abuse remains one of the top attack vectors — and how AI could amplify it
The risks of giving generative AI systems the keys to the kingdom
How enterprises should think about AI access control and governance
Why there’s still no clear standard for securing AI and non-human identities
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
-
Exploits of public-facing apps are surging. Why?
25 februari 2026 · 47 min
Explore the Threat Intelligence Index 2026: https://www.ibm.com/reports/threat-intelligence#sipod Lees meer
For years, stolen credentials were king—the hacker’s attack vector of choice. Until now.
The 2026 IBM X-Force Threat Intelligence Index reveals a surge in the exploitation of public-facing applications, overtaking identity-based attacks as the top initial access vector.
Why are threat actors changing their tactics so dramatically—and what does it mean for defenders?
In this episode of Security Intelligence, panelists Claire Nuñez, Chris Caridi and Joe Xatruch break down the biggest findings from the latest Threat Intelligence Index, plus:
Infostealers that grab AI agents’ “souls”
Compromised packages that drop AI agents as malware
The AI infrastructure flaws we can’t seem to fix
Why threat intelligence is so siloed—and what we can do about it
All that and more—on Security Intelligence.
00:00 - Intro
1:17 - Threat Intelligence Index 2026
16:22 - Stealing AI agents’ souls
28:03 - AI infrastructure flaws
36:36 - Threat intelligence made humanThe opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
-
Romance scams: How they work, how they win and what we do about
18 februari 2026 · 37 min
Explore the podcast → https://www.ibm.com/think/podcasts/security-intelligence Lees meer
Valentine’s day might be over, but love is in the air.
The love a scammer has for their victim’s wallet, that is.
In this special episode of Security Intelligence, host Matt Kosinski sits down with Claire Nunez, Suja Viswesan, and Dave Bales to break down how modern romance scams actually work: from the “wrong number” text that starts an innocent chat, to long-con “pig butchering” schemes that use emotion, trust and time to extract money — often through crypto investment bait.
The panel explains why anyone can fall for these scams, how breaches and public records can help scammers build convincing victim profiles and how AI is making the problem worse.
Finally, the team gets practical: how to talk to a loved one who may be caught in a scam, how to remove stigma so people report faster and what organizations can do when a “personal” scam becomes a corporate risk.
Key takeaways: Don’t respond to unknown numbers, treat online “investment opportunities” as a red flag and remember: if this happened to you, you’re not alone.
The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
-
OpenClaw and Claude Opus 4.6: Where is AI agent security headed?
11 februari 2026 · 48 min
Are enterprises moving too fast with AI—and breaking security in the process? Lees meer
In this episode of Security Intelligence, host Matt Kosinski is joined by Sridhar Muppidi, Nick Bradley and Jeff Crume to unpack a pivotal moment in cybersecurity.
The panel dives into the rapid rise of AI agents and the growing risks of shadow AI in the enterprise, comparing open-source agent platforms like OpenClaw with proprietary models such as Claude Opus 4.6 and its new agent teams. We explore how speed-first AI adoption, unsecured agent implementations and weak separation of duties are creating new attack surfaces—and why executives may be unintentionally fueling the problem.
The conversation also examines the recent Notepad++ supply chain breach as a warning sign of broader software inventory and supplier risk failures, and analyzes DragonForce’s attempt to reinvent ransomware as a scalable cartel business.
Along the way, we keep returning to a key theme: Have we optimized for velocity at the expense of security?
00:00 -- Introduction
01:18 -- OpenClaw vs. Claude Opus 4.6
15:05 -- Move fast. Break security?
27:29 -- Notepad++ breach
38:55 -- DragonForce ransomware cartelThe opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.
-
What cybersecurity pros need to know about OpenClaw and Moltbook
4 februari 2026 · 45 min
OpenClaw and Moltbook are extremely cool. They're also extremely dangerous. And they tell us just how far AI agent security has to go. Lees meer
In this episode of Security Intelligence, Dave McGinnis, Seth Glasgow and Evelyn Anderson unpack how locally run AI agents are becoming a brand-new attack surface, and why defenders may be underestimating the risks. From misconfigured agent databases leaking API keys, to malicious “skills” that can quietly hijack trusted systems, we explore what happens when powerful AI tools are treated like just another app.
We also dig into a growing signal problem across cybersecurity:
Why AI-generated “slop” is overwhelming bug bounty programs.
Why NIST may stop enriching vulnerabilities in the National Vulnerability Database.
Along the way, our panel debates a deeper question: Is AI a gift or a curse for security pros?
All that and more on Security Intelligence
Segments:
00:00 - Introduction
01:03 - OpenClaw and the AI agent attack surface
16:49 - Will AI slop end bug bounties?
26:49 - Big changes to NIST’s NVD
35:27 - The problem with vibe coded malwareThe opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.