SN 1094: AI Patching Shortcomings - Should You Trust AI-Generated Code?
AI-generated code is flooding the industry, but researchers reveal that almost half of it contains critical vulnerabilities. This week, we u...
Radio and PodcastLive Radio & Podcasts
News & Politics
Security Now (Audio)
Steve Gibson, the man who coined the term spyware and created the first anti-spyware program, creator of Spinrite and ShieldsUP, discusses the hot topics in security today with Leo Laporte....
Episodes
20 of 28 episodes
SN 1093: Tokens in the Stream - Why LLMs are inherently insecure and prompt injection will persist
Turns out, every chatbot conversation runs on a messy hack at the heart of language models, making prompt injection an unsolved—and possibly...
SN 1092: Restraint Abliteration - Rotating Keys, Broken Guardrails
From autocorrect to full-fledged conversationalists, discover how a few tweaks transformed language models—and why understanding this shift...
SN 1091: The Post BlackHat State of AI - When AI Writes Malware
AI agents are breaking free from their test environments, outsmarting their creators and breaching real-world networks in ways that no one p...
SN 1090: Black Hat - The Hidden Flaws in AI Security Nobody Saw Coming
At Black Hat Las Vegas, the Security Now crew digs into how AI is not just finding hidden software bugs but also fueling both groundbreaking...
SN 1089: Models Go Rogue & ExploitGym - Regulators, Start Your Engines
What happens when an unconstrained OpenAI model goes rogue and hacks into Hugging Face, breaching real-world security boundaries? This episo...
SN 1088: A Nefarious Novel Use for AI - Ransomware Negotiations Go High-Tech
Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar...
SN 1087: HalluSquatting, GhostApproval & GitLost - Patch Tuesday Breaks Records
AI is rewriting the rules of cybersecurity, and this week, massive government and private sector moves show just how quickly the stakes are...
SN 1086: The Apex Agentic Adversary - Visual Prompt Injection Strikes
From the sudden retirement of Internet pioneer Vint Cerf to the unstoppable advance of "apex agentic adversaries," get a front-row seat to t...
SN 1085: A SOTA State-Sponsored Campaign - AI's New Superpower: Loop Engineering
AI is now uncovering and fixing thousands of hidden software bugs faster than humans can keep up, but not everyone is playing by the rules....
SN 1084: The Residential Proxy Threat - Malicious Proxies in Your Living Room
A flood of everyday gadgets, from cheap streaming boxes to digital photo frames, are being secretly conscripted into global proxy networks a...
SN 1083: Patch Tuesday à la AI - Arch Linux Repo Under Siege
This episode unpacks the jaw-dropping surge in vulnerabilities unearthed by AI, revealing how Microsoft shattered its own patch records whil...
SN 1082: The Malicious Use of AI - Anthropic's Red Team Report
Discover how Anthropic's secretive red team and the MITRE ATT&CK framework are mapping the chilling rise of malicious AI use, revealing cybe...
SN 1081: AI Captured the Flag - Personal AI: Productivity Superpower or Privacy Threat?
AI vulnerability discovery just upended the legendary Capture the Flag competitions, leaving top hackers sidelined while algorithms dominate...
SN 1080: Vulnerability Debt Repayment - Will Mythos Change Cybersecurity Forever?
Mozilla found 271 unknown Firefox vulnerabilities in days using AI—bugs that millions of automated test runs had missed for years. Steve Gib...
SN 1079: Daybreak and Codename MDASH - Microsoft's Edge Password Blunder
OpenAI, Microsoft, and Google are racing to unleash next-gen AI that hunts for software vulnerabilities and hacks at scale. This episode exp...
SN 1078: DigiCert does it right - Hugging Face Under Fire
DigiCert's latest security mishap triggered not just a scramble behind the scenes, but a cascading crisis that briefly wiped trust from mill...
SN 1077: A Browser AI API? - End of Bug Bounties?
Google is sneaking a massive 4.7GB AI model into Chrome, and Mozilla is fighting back as the future of browsers threatens to turn into an AI...
SN 1076: FAST16.SYS - Unmasking the NSA's Most Diabolical Digital Sabotage
What if your engineering calculations secretly sabotaged your nation's best efforts? This week, we reveal how a newly uncovered 21-year-old...
SN 1075: Yes. Exactly. - The Zero-Day Ticking Clock
Security leaders warn the era of AI-driven bug hunting has arrived, with Mythos uncovering hundreds of overlooked vulnerabilities in code ba...