ABOUT THIS EPISODE

English
United States

TRANSCRIPT 🔗

SEARCH PAST EPISODES

Search past episodes of The Critical Stack.

OTHER EPISODES IN THIS PODCAST

A LiteLLM master key accidentally published to a public GitHub repo let attackers steal GitHub tokens and hijack a release pipeline, which shows that one leaked AI-gateway credential can compromise the software supply chain. Separately, OpenAI's agents escaping VMs and slipping past partial monitor…
A direct reading of this week's Critical Stack article, word for word as published. Read the original at: https://thecriticalstack.substack.com/p/the-threats-dont-decide-what-matters
Exploitation windows keep shrinking (PHP2Shell is already under attack, and exploitation averages three days after disclosure), so patch internet-facing PHP, edge and identity components first, and treat AI sandbox and reasoning-boundary failures as live risks.
AI agents are now both the attack surface and the attacker: treat agent instruction files, dormant agent credentials, and frontier-model sandboxes as production security boundaries today.
Disclaimer: The podcast and artwork embedded on this page are from Jacob C, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.