OM DENNE EPISODE
Three weeks ago we told you what to watch at Hacker Summer Camp. Now it's over — and one attack sums up the whole week: Ghostjacking hijacked an AI coding agent 90% of the time using nothing but log files. Here's what actually mattered at Black Hat and DEF CON 2026 — graded against our own predictions.
What you'll hear:
• Our prediction scorecard — AI security dominated (1 in 3 Black Hat talks), Mythos fallout was the backdrop, MCP/agent exploitation hit hard; post-quantum flopped
• Ghostjacking (Tenet Security) — poisoning the telemetry AI agents read, 90% success
• PleaseFix (Zenity) — zero-click hijack of AI browsers, "summarize my email" to full account takeover
• The real shift — Check Point found 11 vulnerabilities in the agent frameworks everything is built on
• The AI reckoning — Anthropic's models breached real orgs during testing, and only ~26% of AI-generated patches actually closed the hole
• The good news — 22 months inside North Korean C2 servers, the open-silicon DEF CON badge, 21 water utilities secured by volunteers
Sources: Tenet Security · Zenity · Check Point · Anthropic Project Glasswing · UK AISI · 1Password. AI-breach disclosures occurred during safety testing.
— Andrés Sarmiento
#defcon #blackhat #cybersecurity #AIsecurity #hacking #TechUpdates
What you'll hear:
• Our prediction scorecard — AI security dominated (1 in 3 Black Hat talks), Mythos fallout was the backdrop, MCP/agent exploitation hit hard; post-quantum flopped
• Ghostjacking (Tenet Security) — poisoning the telemetry AI agents read, 90% success
• PleaseFix (Zenity) — zero-click hijack of AI browsers, "summarize my email" to full account takeover
• The real shift — Check Point found 11 vulnerabilities in the agent frameworks everything is built on
• The AI reckoning — Anthropic's models breached real orgs during testing, and only ~26% of AI-generated patches actually closed the hole
• The good news — 22 months inside North Korean C2 servers, the open-silicon DEF CON badge, 21 water utilities secured by volunteers
Sources: Tenet Security · Zenity · Check Point · Anthropic Project Glasswing · UK AISI · 1Password. AI-breach disclosures occurred during safety testing.
— Andrés Sarmiento
#defcon #blackhat #cybersecurity #AIsecurity #hacking #TechUpdates
Engelsk
USA
UDSKRIFT 🔗
WEBVTT
00:00:02.730 --> 00:00:05.330
Three weeks ago, we told you what to watch at
00:00:05.330 --> 00:00:08.730
hacker summer camp now It's over and one attack
00:00:08.730 --> 00:00:12.109
sums up the whole week. It's called ghost jacking
00:00:12.109 --> 00:00:15.009
Researchers hijacked an AI coding agent 90 %
00:00:15.009 --> 00:00:18.289
of the time using nothing but log files not malware
00:00:18.289 --> 00:00:21.890
not phishing log files The observability tools
00:00:21.890 --> 00:00:24…
00:00:02.730 --> 00:00:05.330
Three weeks ago, we told you what to watch at
00:00:05.330 --> 00:00:08.730
hacker summer camp now It's over and one attack
00:00:08.730 --> 00:00:12.109
sums up the whole week. It's called ghost jacking
00:00:12.109 --> 00:00:15.009
Researchers hijacked an AI coding agent 90 %
00:00:15.009 --> 00:00:18.289
of the time using nothing but log files not malware
00:00:18.289 --> 00:00:21.890
not phishing log files The observability tools
00:00:21.890 --> 00:00:24…
SØG BLANDT TIDLIGERE EPISODER
Søg efter gamle afsnit af Tech Updates.
Ansvarsfraskrivelse: Podcasten og kunstværket, der er indlejret på denne side, er fra Andres Sarmiento, som tilhører dens ejer og ikke er tilknyttet eller godkendt af Listen Notes, Inc.
REDIG
Tak fordi du hjælper med at holde podcast-databasen opdateret.
