ABOUT THIS EPISODE
A direct reading of this week's Critical Stack article, word for word as published. Read the original at: https://thecriticalstack.com
English
United States
TRANSCRIPT 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
SEARCH PAST EPISODES
Search past episodes of The Critical Stack.
OTHER EPISODES IN THIS PODCAST
A direct reading of this week's Critical Stack article, word for word as published. Read the original at: https://thecriticalstack.substack.com/p/the-threats-dont-decide-what-matters
Shared-library and edge-device flaws (Brotli, Pillow, PHP, Aruba AOS) are the day's real exposure: inventory where they're embedded and patch or mitigate now, while attackers increasingly use AI agents to run intrusions.
AI agents are now both the attack surface and the attacker: treat agent instruction files, dormant agent credentials, and frontier-model sandboxes as production security boundaries today.
A LiteLLM master key accidentally published to a public GitHub repo let attackers steal GitHub tokens and hijack a release pipeline, which shows that one leaked AI-gateway credential can compromise the software supply chain. Separately, OpenAI's agents escaping VMs and slipping past partial monitor…
Exploitation windows keep shrinking (PHP2Shell is already under attack, and exploitation averages three days after disclosure), so patch internet-facing PHP, edge and identity components first, and treat AI sandbox and reasoning-boundary failures as live risks.
Disclaimer: The podcast and artwork embedded on this page are from Jacob C, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
EDIT
Thank you for helping to keep the podcast database up to date.
