ACERCA DE ESTE EPISODIO
Three weeks ago we told you what to watch at Hacker Summer Camp. Now it's over — and one attack sums up the whole week: Ghostjacking hijacked an AI coding agent 90% of the time using nothing but log files. Here's what actually mattered at Black Hat and DEF CON 2026 — graded against our own predictions.
What you'll hear:
• Our prediction scorecard — AI security dominated (1 in 3 Black Hat talks), Mythos fallout was the backdrop, MCP/agent exploitation hit hard; post-quantum flopped
• Ghostjacking (Tenet Security) — poisoning the telemetry AI agents read, 90% success
• PleaseFix (Zenity) — zero-click hijack of AI browsers, "summarize my email" to full account takeover
• The real shift — Check Point found 11 vulnerabilities in the agent frameworks everything is built on
• The AI reckoning — Anthropic's models breached real orgs during testing, and only ~26% of AI-generated patches actually closed the hole
• The good news — 22 months inside North Korean C2 servers, the open-silicon DEF CON badge, 21 water utilities secured by volunteers
Sources: Tenet Security · Zenity · Check Point · Anthropic Project Glasswing · UK AISI · 1Password. AI-breach disclosures occurred during safety testing.
— Andrés Sarmiento
#defcon #blackhat #cybersecurity #AIsecurity #hacking #TechUpdates
What you'll hear:
• Our prediction scorecard — AI security dominated (1 in 3 Black Hat talks), Mythos fallout was the backdrop, MCP/agent exploitation hit hard; post-quantum flopped
• Ghostjacking (Tenet Security) — poisoning the telemetry AI agents read, 90% success
• PleaseFix (Zenity) — zero-click hijack of AI browsers, "summarize my email" to full account takeover
• The real shift — Check Point found 11 vulnerabilities in the agent frameworks everything is built on
• The AI reckoning — Anthropic's models breached real orgs during testing, and only ~26% of AI-generated patches actually closed the hole
• The good news — 22 months inside North Korean C2 servers, the open-silicon DEF CON badge, 21 water utilities secured by volunteers
Sources: Tenet Security · Zenity · Check Point · Anthropic Project Glasswing · UK AISI · 1Password. AI-breach disclosures occurred during safety testing.
— Andrés Sarmiento
#defcon #blackhat #cybersecurity #AIsecurity #hacking #TechUpdates
Inglés
Estados Unidos
TRANSCRIPCIÓN 🔗
WEBVTT
00:00:02.730 --> 00:00:05.330
Three weeks ago, we told you what to watch at
00:00:05.330 --> 00:00:08.730
hacker summer camp now It's over and one attack
00:00:08.730 --> 00:00:12.109
sums up the whole week. It's called ghost jacking
00:00:12.109 --> 00:00:15.009
Researchers hijacked an AI coding agent 90 %
00:00:15.009 --> 00:00:18.289
of the time using nothing but log files not malware
00:00:18.289 --> 00:00:21.890
not phishing log files The observability tools
00:00:21.890 --> 00:00:24…
00:00:02.730 --> 00:00:05.330
Three weeks ago, we told you what to watch at
00:00:05.330 --> 00:00:08.730
hacker summer camp now It's over and one attack
00:00:08.730 --> 00:00:12.109
sums up the whole week. It's called ghost jacking
00:00:12.109 --> 00:00:15.009
Researchers hijacked an AI coding agent 90 %
00:00:15.009 --> 00:00:18.289
of the time using nothing but log files not malware
00:00:18.289 --> 00:00:21.890
not phishing log files The observability tools
00:00:21.890 --> 00:00:24…
BUSCAR EPISODIOS ANTERIORES
Buscar episodios anteriores de Tech Updates.
Descargo de responsabilidad: El podcast y el arte incluidos en esta página son de Andres Sarmiento, que es propiedad de su propietario y no está afiliado ni respaldado por Listen Notes, Inc.
EDITAR
Gracias por ayudar a mantener actualizada la base de datos de podcasts.
