Skillthropic

Chris Rees
  • 0.0 (0)
  • Technology
  • Weekly

AI security for people who work in tech. Chris Rees, 25+ year security veteran and author of 51 Pluralsight courses, brings you The AI Security Brief, a short rundown of the AI security news that matters, plus a weekly deep dive into one AI or security topic, explained so you can use it at work or on your next certification exam. The briefs are drafted with AI from the day's news, reviewed by Chris before they go out, and narrated in Chris's own voice using an AI voice clone. Formerly My Tech Career.

  1. 8h ago

    Deep Dive: ARTEX: The FBI's Warning About AI Agents That Run the Whole Intrusion

    The FBI's November 13, 2026 FLASH warns that ARTEX, an open-source agentic AI penetration testing framework, is being used to go from first scan to privileged access in under three hours. How it works, the South Korea and ConnectWise campaigns, the intrusion chain, what to look for in your logs, the FBI's mitigations and three things to do today. In this deep dive What ARTEX is: a Go orchestrator that hands an intrusion to AI agents, and why pulling the GitHub repo on October 8 didn't stop it How it works: SI agents in parallel, reasoning rented from Claude, GPT, DeepSeek, GLM, Grok or Kimi, often through API resellers The FBI's five risks, from multi-target operations to a compressed detection window Two campaigns: about 67,000 people's data from South Korean financial institutions, and 2,250+ tenants reached through ConnectWise Cloud Backup's OAuth app The intrusion chain, the lateral movement EDR blocked, and why the initial access flaws were all testable Indicators and three places to detect it: identity, egress to LLM APIs, and the cloud control plane The FBI's mitigations, what it means for Security+, CySA+ and SecAI+, and three actions for today Source: FBI FLASH-20261113-001, "Threat Overview of ARTEX Autonomous Penetration Testing Framework," November 13, 2026 (TLP:CLEAR). The full write-up, with the ATT&CK mapping, the IOCs and both hunting queries, is on the Skillthropic blog. Links FBI FLASH on ARTEX: the full breakdown (Skillthropic blog)Watch the video version on YouTubeInteractive MITRE ATT&CK matrixStudy guides for Security+, CySA+ and SecAI+Report an incident to the FBI (IC3) Transcript and links: https://www.skillthropic.com/podcast/artex-fbi-flash-deep-dive?utm_source=podcast&utm_medium=audio&utm_campaign=artex-fbi-flash-deep-dive Study guides for Security+, CySA+, CISSP, CCSP and CompTIA SecAI+: skillthropic.com

  2. 10h ago

    Deep Dive: Detective vs. Corrective Controls, Explained: Tell Us, Then Fix It

    Why prevention alone isn't enough, the difference between controls that identify a problem and controls that address it, and why collecting logs isn't the same as detecting. From Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight. In this deep dive Why organizations need controls beyond prevention: malware that gets past preventive controls Detective controls: intrusion detection systems and monitoring for unusual sign-ins, file changes and suspicious processes The misconception that collecting logs is detecting, and when detection really happens Corrective controls: removing malware, restoring from a clean backup, patches applied after an incident An endpoint tool that detects and quarantines: one product, two control types This segment is from Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight. Links CompTIA Security+ (SY0-801): General Security Concepts (Pluralsight)All of Chris Rees's Pluralsight coursesWatch this lesson on YouTubeSecurity+ study guides Transcript and links: https://www.skillthropic.com/podcast/detective-vs-corrective-controls-deep-dive?utm_source=podcast&utm_medium=audio&utm_campaign=detective-vs-corrective-controls-deep-dive Study guides for Security+, CySA+, CISSP, CCSP and CompTIA SecAI+: skillthropic.com

  3. 1d ago

    Deep Dive: Strong Encryption, Weak Choices: LastPass and Matching Cryptography to the Requirement

    How unencrypted website addresses and low PBKDF2 iteration counts undid LastPass's encrypted vaults, and why Security+ objective 1.3 is about matching the cryptographic solution to the requirement. From Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight. In this deep dive Why objective 1.3 asks which cryptographic technique fits a requirement, not how to do the math The LastPass breach: encrypted passwords, unencrypted website addresses, and PBKDF2 iteration counts as low as one Why stolen ciphertext doesn't expire, and weak protection is only a matter of time How encryption turns plaintext into ciphertext with an algorithm and a key Why integrity, origin and non-repudiation point past encryption to hashing and digital signatures This segment is from Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight. Links CompTIA Security+ (SY0-801): General Security Concepts (Pluralsight)All of Chris Rees's Pluralsight coursesWatch this lesson on YouTubeSecurity+ study guides Transcript and links: https://www.skillthropic.com/podcast/lastpass-appropriate-cryptography-deep-dive?utm_source=podcast&utm_medium=audio&utm_campaign=lastpass-appropriate-cryptography-deep-dive Study guides for Security+, CySA+, CISSP, CCSP and CompTIA SecAI+: skillthropic.com

  4. 2d ago

    Deep Dive: Transport Encryption, Explained: How TLS Protects Data in Motion

    How HTTPS uses a TLS handshake, a key exchange and symmetric encryption to protect data between systems, and why old SSL and early TLS versions should be out of your environment. From Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight. In this deep dive Transport or communication encryption: protecting data in motion between systems HTTPS as HTTP protected by TLS, and the handshake where the server presents its certificate A key exchange that gives both sides the same session keys without sending them, then symmetric encryption for the session TLS 1.3 (RFC 8446) as the current version, and RFC 8996 formally deprecating TLS 1.0 and 1.1 in March 2021 For the exam: TLS is the default answer for web traffic, and old SSL or TLS 1.0 is a finding This segment is from Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight. Links CompTIA Security+ (SY0-801): General Security Concepts (Pluralsight)All of Chris Rees's Pluralsight coursesWatch this lesson on YouTubeSecurity+ study guides Transcript and links: https://www.skillthropic.com/podcast/transport-encryption-tls-deep-dive?utm_source=podcast&utm_medium=audio&utm_campaign=transport-encryption-tls-deep-dive Study guides for Security+, CySA+, CISSP, CCSP and CompTIA SecAI+: skillthropic.com

  5. 3d ago

    Deep Dive: CrowdStrike, July 2024: Backout, Fail Forward and the Size of the Blast Radius

    What the July 2024 CrowdStrike update teaches about recovery, why a fast revert didn't help machines that had already crashed, and how to choose between backing out and failing forward. From Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight. In this deep dive July 19th, 2024: a routine CrowdStrike content update sends Windows machines running the sensor into a crash loop Why reverting 78 minutes later only protected machines that hadn't crashed yet, and how BitLocker recovery keys stretched recovery into days The staged rollout CrowdStrike moved to: a canary group, early adopters, broad deployment, then everyone When backing out is the safer choice, and when failing forward makes more sense Finding the point of no return before the change starts This segment is from Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight. Links Microsoft: Helping our customers through the CrowdStrike outageCompTIA Security+ (SY0-801): General Security Concepts (Pluralsight)All of Chris Rees's Pluralsight coursesWatch this lesson on YouTubeSecurity+ study guides Transcript and links: https://www.skillthropic.com/podcast/crowdstrike-backout-vs-fail-forward-deep-dive?utm_source=podcast&utm_medium=audio&utm_campaign=crowdstrike-backout-vs-fail-forward-deep-dive Study guides for Security+, CySA+, CISSP, CCSP and CompTIA SecAI+: skillthropic.com

  6. 4d ago

    Deep Dive: Impact Analysis and Test Results, Explained: Evidence First, Then Deployment

    How a harmless-looking certificate swap touches four systems, the four questions an impact analysis asks, and why test results have to reach the approver before a change reaches production. From Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight. In this deep dive A certificate replacement that touches a customer portal, an internal API, a load balancer and a mobile app The impact analysis questions: who's affected, what depends on it, does it change our security exposure, and what would the business feel Why a change can be technically correct and still be a business failure Development, test or staging, and production, and why the test environment has to resemble production Functional tests, compatibility tests and a security scan, and how the results inform the CAB's approval This segment is from Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight. Links CompTIA Security+ (SY0-801): General Security Concepts (Pluralsight)All of Chris Rees's Pluralsight coursesWatch this lesson on YouTubeSecurity+ study guides Transcript and links: https://www.skillthropic.com/podcast/impact-analysis-test-results-deep-dive?utm_source=podcast&utm_medium=audio&utm_campaign=impact-analysis-test-results-deep-dive Study guides for Security+, CySA+, CISSP, CCSP and CompTIA SecAI+: skillthropic.com

  7. 5d ago

    Deep Dive: Defense in Depth, Explained: Layered Controls and the Side Window Nobody Locked

    Why one control is never enough, how layers that prevent, detect and respond work together, and a phishing scenario where any one of three layers can stop the attack. From Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight. In this deep dive The vocabulary objective 1.1 assumes you already have, and why control categories and control types answer two different questions Why a single firewall leaves an attacker relatively unrestricted access once it's bypassed Building layers: perimeter firewall, network segmentation, endpoint protection and MFA, all wrapped around the data Layers that prevent, detect and respond, and why they shouldn't duplicate the same weakness A phished password scenario where MFA, segmentation and monitoring each get a chance to stop the attacker This segment is from Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight. Links CompTIA Security+ (SY0-801): General Security Concepts (Pluralsight)All of Chris Rees's Pluralsight coursesWatch this lesson on YouTubeSecurity+ study guides Transcript and links: https://www.skillthropic.com/podcast/defense-in-depth-deep-dive?utm_source=podcast&utm_medium=audio&utm_campaign=defense-in-depth-deep-dive Study guides for Security+, CySA+, CISSP, CCSP and CompTIA SecAI+: skillthropic.com

  8. 5d ago

    AI Security Brief: GPT-6 Cyber Builds 948 Linux Exploits, Claude Code Leaks Secrets to GitHub

    An AI model builds hundreds of Linux exploits, Claude Code leaks secrets to GitHub, and stolen AI keys push a bad plugin to 5,000 companies. In this episode GPT-6 Cyber builds 948 Linux exploits while fixes lag: AI is finding serious bugs in mature code faster than the industry is patching them. Claude Code's 'don't ask again' leaks secrets to GitHub: Approved commands, passwords included, are being saved to settings files and pushed to public repos. Stolen AI keys chain into a plugin hitting 5,000 companies: A breach at one AI provider rippled through a coding tool into thousands of customers. Researchers bypass ChatGPT Lockdown Mode: A protection built to stop prompt injection exfiltration was sidestepped before it was patched. Claude Code hooks see the checkpoint, not what follows: Agent policy controls judge the request, not the processes and connections it spawns afterward. Prompt adware hides in a Codex jailbreak bundle: A jailbreak rewrites an agent's trusted instructions, proving agent config files are an attack surface. White House AI accord leaves auditors undefined: 'Independently audited' has no shared definition, so customers have to ask the follow-up questions. What to do this week Hunt for leaked agent secrets. Scan repos for Claude Code settings files and rotate any keys or passwords you find. Look past the hook checkpoint. Back agent hooks with endpoint monitoring and track changes to agent config files. Get your patch process ready. AI is finding bugs faster than teams fix them. Plan capacity for a bigger patch queue. Sources GPT-6 Cyber builds 948 Linux exploits while fixes lag (CSO Online)Claude Code's 'don't ask again' leaks secrets to GitHub (The Hacker News)Stolen AI keys chain into a plugin hitting 5,000 companies (The Verge)Researchers bypass ChatGPT Lockdown Mode (The Hacker News)Claude Code hooks see the checkpoint, not what follows (CIO)Prompt adware hides in a Codex jailbreak bundle (The Hacker News)White House AI accord leaves auditors undefined (Crypto Briefing) Transcript and links: https://www.skillthropic.com/podcast/ai-security-brief-2026-11-09?utm_source=podcast&utm_medium=audio&utm_campaign=ai-security-brief-2026-11-09 Study guides for Security+, CySA+, CISSP, CCSP and CompTIA SecAI+: skillthropic.com

See All (18)

About

AI security for people who work in tech. Chris Rees, 25+ year security veteran and author of 51 Pluralsight courses, brings you The AI Security Brief, a short rundown of the AI security news that matters, plus a weekly deep dive into one AI or security topic, explained so you can use it at work or on your next certification exam. The briefs are drafted with AI from the day's news, reviewed by Chris before they go out, and narrated in Chris's own voice using an AI voice clone. Formerly My Tech Career.

Information

  • Creator
    Chris Rees
  • Years Active
    2025 - 2026
  • Episodes
    18
  • Rating
    Clean
  • Copyright
    © 2026 Skillthropic
  • Show Website
    Skillthropic