BU BÖLÜM HAKKINDA
Three weeks ago we told you what to watch at Hacker Summer Camp. Now it's over — and one attack sums up the whole week: Ghostjacking hijacked an AI coding agent 90% of the time using nothing but log files. Here's what actually mattered at Black Hat and DEF CON 2026 — graded against our own predictions.
What you'll hear:
• Our prediction scorecard — AI security dominated (1 in 3 Black Hat talks), Mythos fallout was the backdrop, MCP/agent exploitation hit hard; post-quantum flopped
• Ghostjacking (Tenet Security) — poisoning the telemetry AI agents read, 90% success
• PleaseFix (Zenity) — zero-click hijack of AI browsers, "summarize my email" to full account takeover
• The real shift — Check Point found 11 vulnerabilities in the agent frameworks everything is built on
• The AI reckoning — Anthropic's models breached real orgs during testing, and only ~26% of AI-generated patches actually closed the hole
• The good news — 22 months inside North Korean C2 servers, the open-silicon DEF CON badge, 21 water utilities secured by volunteers
Sources: Tenet Security · Zenity · Check Point · Anthropic Project Glasswing · UK AISI · 1Password. AI-breach disclosures occurred during safety testing.
— Andrés Sarmiento
#defcon #blackhat #cybersecurity #AIsecurity #hacking #TechUpdates
What you'll hear:
• Our prediction scorecard — AI security dominated (1 in 3 Black Hat talks), Mythos fallout was the backdrop, MCP/agent exploitation hit hard; post-quantum flopped
• Ghostjacking (Tenet Security) — poisoning the telemetry AI agents read, 90% success
• PleaseFix (Zenity) — zero-click hijack of AI browsers, "summarize my email" to full account takeover
• The real shift — Check Point found 11 vulnerabilities in the agent frameworks everything is built on
• The AI reckoning — Anthropic's models breached real orgs during testing, and only ~26% of AI-generated patches actually closed the hole
• The good news — 22 months inside North Korean C2 servers, the open-silicon DEF CON badge, 21 water utilities secured by volunteers
Sources: Tenet Security · Zenity · Check Point · Anthropic Project Glasswing · UK AISI · 1Password. AI-breach disclosures occurred during safety testing.
— Andrés Sarmiento
#defcon #blackhat #cybersecurity #AIsecurity #hacking #TechUpdates
ingilizce
Amerika Birleşik Devletleri
TRANSKRİPT 🔗
WEBVTT
00:00:02.730 --> 00:00:05.330
Three weeks ago, we told you what to watch at
00:00:05.330 --> 00:00:08.730
hacker summer camp now It's over and one attack
00:00:08.730 --> 00:00:12.109
sums up the whole week. It's called ghost jacking
00:00:12.109 --> 00:00:15.009
Researchers hijacked an AI coding agent 90 %
00:00:15.009 --> 00:00:18.289
of the time using nothing but log files not malware
00:00:18.289 --> 00:00:21.890
not phishing log files The observability tools
00:00:21.890 --> 00:00:24…
00:00:02.730 --> 00:00:05.330
Three weeks ago, we told you what to watch at
00:00:05.330 --> 00:00:08.730
hacker summer camp now It's over and one attack
00:00:08.730 --> 00:00:12.109
sums up the whole week. It's called ghost jacking
00:00:12.109 --> 00:00:15.009
Researchers hijacked an AI coding agent 90 %
00:00:15.009 --> 00:00:18.289
of the time using nothing but log files not malware
00:00:18.289 --> 00:00:21.890
not phishing log files The observability tools
00:00:21.890 --> 00:00:24…
SON BÖLÜMLERİ ARA
Tech Updates için geçmiş bölümleri ara.
Feragatname: Bu sayfaya yerleştirilmiş podcast ve sanat eserleri, sahibinin mülkiyetinde olan ve Listen Notes, Inc.'e bağlı olmayan veya tarafından onaylanmayan Andres Sarmiento'e aittir.
DÜZENLE
Podcast veritabanını güncel tutmaya yardımcı olduğunuz için teşekkür ederiz.
