AiCyber.Land

Bryce Kunz

Join industry experts and thought leaders as we dive deep into how artificial intelligence is transforming cybersecurity, shaping defense strategies, and creating new opportunities in the digital landscape.

  1. Aug 4

    AiCyber.Land #27 - AI Hacking is BROKEN (Here's What They Missed)

    Is AI a master hacker, or just a one-trick pony? In this episode, we uncover shocking new research revealing that top AI models have a massive blind spot, getting stuck on their "favorite" attacks and missing critical vulnerabilities! Plus, we dive into "AI Map," a new Shodan-like tool from Bishop Fox designed to hunt down and secure exposed AI infrastructure across the entire internet. --- IN THIS EPISODE: Welcome back to the AI cyber.land podcast! This week, we're your eyes and ears on two groundbreaking developments at the intersection of AI and cybersecurity. First up, Shelby introduces "AI Map," a game-changing tool from Bishop Fox that started as a hackathon project. As AI infrastructure explodes, our security tools are struggling to keep up. AI Map is here to close that gap. Think of it as Shodan, but purpose-built for AI agents! We break down how it uses Shodan and Nuclei templates to discover, fingerprint, and assign risk scores to exposed endpoints like Ollama servers, LangServe chains, and Gradio apps. Find out how it can help defenders, threat hunters, and security teams get visibility into the wild west of AI infrastructure before the bad guys exploit it. Next, we explore the fascinating and slightly concerning world of AI hacking bias. A new benchmark, "Sai Bias Bench," put models like Claude, Gemini, and Codex to the test as penetration testers. The results? Each AI has a preferred attack method—like SQL injection or information disclosure—and stubbornly sticks to it, even when told to look for other vulnerabilities! We discuss how these AI models completely missed a critical remote code execution vulnerability because of this "rabbit hole" focus. This is a must-hear for anyone relying on AI for security testing—don't fire your human pentesters just yet! Stick around for our weekly catch-up, including an impromptu concert road trip and the discovery of a snow-themed water park in Florida! --- KEY MOMENTS: ⏱️ **KEY MOMENTS:** 00:35 - New Tool Drop: Shodan for AI Infrastructure (AI Map) 02:07 - How AI Map Works & Its "Pew Pew" Maps 05:13 - The Dangers of Publicly Exposed Olama Servers 06:29 - Study Reveals: AI Hackers Have a HUGE Bias 09:07 - AI Models Completely Missed This Critical Vulnerability 12:19 - Why You Need a Multi-Model Approach for AI Pen Testing 13:45 - A Spontaneous Road Trip & Primitive Camping Adventure --- CONNECT & ENGAGE: If you're fascinated by the cutting edge of AI and cybersecurity, hit that LIKE button and SUBSCRIBE for more weekly briefs! Have you ever run into an AI that seemed to have a mind of its own? Let us know in the comments below! Find the tools and research we discussed here: ► Bishop Fox's AI Map Repo: [LINK TO BE ADDED] ► Sai Bias Bench Research: [LINK TO BE ADDED]

  2. Aug 4

    AiCyber.Land #26 - CEO Fires QA Team For AI, Loses $6 Million

    Which AI is most likely to call you out on your nonsense? We dive into a "BS Benchmark" that pits Claude, ChatGPT, Grok, and others against each other to see which one is the most honest. Plus, OpenAI just released a free open-source tool to protect your private data, but what's the real angle? And you won't believe the story of a CEO who replaced his entire QA team with AI... and lost millions. ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬ IN THIS EPISODE: Welcome back to the AI Cyber.land podcast, your essential briefing on everything AI and cybersecurity! In this episode, Bryce and Shelby break down the latest news, from hilarious AI fails to groundbreaking new tools. First, we explore the "BS Benchmark," a fascinating test designed to see how often large language models will push back on nonsensical questions (like getting Vitamin D from moonlight). Find out which model provider, from Anthropic's Claude to OpenAI's ChatGPT and Alibaba's Qwen, stands its ground and which one will agree with just about anything. The results might surprise you and change how you use AI for critical tasks, especially in cybersecurity. Next, Shelby dives into OpenAI's new open-source "Privacy Filter," a powerful tool for detecting and redacting Personally Identifiable Information (PII) from text. We cover its features—like running locally, a large context window, and customizability—and discuss its limitations. But is this just a generous gift to the community, or is it a savvy business move to gain an edge in the enterprise market? Stick around for some wild stories, including a cautionary tale about a CEO who replaced his QA team with AI, only to have a bot hallucinate a discount code that cost the company $6 million! We also get into Bryce's AI-optimized Disney World planning and the saga of the developer with a "NULL" vanity plate. ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬ KEY MOMENTS: ⏱️ **KEY MOMENTS:** 01:15 - When Conference AI 'Enhances' a Speaker's Photo 02:48 - Which AI Lies The Most? Introducing The BS Benchmark 05:13 - Ranking The Most (And Least) Honest AI Models 12:09 - OpenAI's New Free Tool to Redact Sensitive Data 19:11 - The $50 Disney World 'Hack' & AI-Powered Trip Planning 23:21 - CEO Fires QA Team, AI Bot Loses Company $6 Million ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬ JOIN THE CONVERSATION: What would YOU do if you were the fired QA lead who got the call to come back (unpaid!) and fix the mess? Let us know in the comments below! We read every single one. If you enjoy our deep dives into the world of AI and cybersecurity, don't forget to hit that LIKE button, SUBSCRIBE to the channel, and ring the bell so you never miss an update! #AICyberSecurity #Claude #ChatGPT #OpenAI #AIBenchmark #Privacy #LLM

  3. Aug 4

    AiCyber.Land #25 - AI Just Broke Hacking Competitions

    AI has officially broken cybersecurity competitions. We dive into the wild story of how automated AI "vibe solvers" dominated a recent Capture The Flag (CTF) event, with 16 teams solving EVERY SINGLE challenge. Is this the end of CTFs as we know them? We break down the tech the winners used, debate the future of pentesting, and reveal an autonomous AI coding system you can build yourself. --- 🤖 IN THIS EPISODE: Welcome to the AI Cyber Land podcast, where we make sense of the collision between artificial intelligence and cybersecurity. In this episode, we're unpacking a seismic shift in the world of Capture The Flag (CTF) competitions. Drawing from insights at the recent BSides SF CTF, we explore the shocking difference a single year has made. Last year, about half the teams used ChatGPT for help. This year? The game completely changed. A staggering 16 teams solved every single challenge, thanks to fully automated AI pipelines. We'll break down the winning strategy: - **"Vibe Solvers":** Autonomous systems that monitor, solve, and submit flags without human intervention. - **Multi-Model Approach:** Using fast models like GPT for easy challenges and "deep thinking" models like Claude Opus for the hard ones. - **The New Arms Race:** CTFs are becoming less about manual skill and more about who can build the most efficient (and expensive) autonomous solving system before the event even starts. This raises huge questions about the future of cybersecurity training and skills. Are we moving from learning the basics to simply learning how to prompt an AI? We also debate whether this AI dominance in CTFs translates to the real world. Can an AI replace a human penetration tester? We cover the key differences—scope, context, reporting, and risk—that keep human experts in the driver's seat... for now. Plus, Bryce unveils a personal project: a three-stage autonomous AI coding system he built to research, implement, and deploy code using Claude. He shares his workflow, his new GitHub repo (Z Tickets), and his surprising test results comparing Claude Opus to OpenAI's powerful new GPT-5.5 (Codex). --- 📌 KEY MOMENTS: ⏱️ **KEY MOMENTS:** 00:50 - How AI Completely Changed Capture The Flag Contests 04:54 - The Winning Strategy: Fully Automated AI "Vibe Solvers" 09:29 - The Big Debate: Is AI Ruining The Learning Aspect of CTFs? 18:24 - Will AI Make Human Pentesters Obsolete? The Key Differences 24:24 - Building an Autonomous AI Coding & Deployment System 31:17 - The Data: How Top AI Models Score on Hacking Benchmarks --- 👇 CONNECT WITH US: What do you think is the future of CTFs and cybersecurity skills in the age of AI? Are human pentesters safe, or is it just a matter of time? Drop your thoughts in the comments below! We'd love to hear your perspective. If you enjoyed this deep dive, make sure to hit that LIKE button, SUBSCRIBE for more AI and cyber analysis, and ring the bell so you never miss an update. Check out Bryce's autonomous coding system on GitHub: [LINK TO Z TICKETS REPO]

  4. Aug 4

    AiCyber.Land #24 - AI Agent Deletes ENTIRE Company in 9 Seconds

    Ever wonder if AI has a secret obsession? OpenAI just admitted their models have a bizarre "goblin problem," and the reason why is stranger than you think. We dive into why ChatGPT was secretly programmed to avoid goblins, gremlins, and even pigeons! Plus, we uncover the shocking story of an AI agent that deleted a company's ENTIRE database and its backups in just 9 seconds. Stick around for a pro-tip on how AI bias could be the reason your resume is getting rejected. --- IN THIS EPISODE: Welcome back to the AI in Cyber.land podcast! In this episode, we unpack some of the wildest AI stories hitting the news. First, we tackle the hilarious and slightly concerning "Goblin Problem" at OpenAI. After users discovered a hidden system prompt warning ChatGPT away from goblins, OpenAI released a blog post explaining everything. It all goes back to a "nerd mode" personality training that accidentally skewed the base model, making it think nerds... and everyone else... are obsessed with goblins. This sparks a fascinating debate: should AI models have baked-in personalities? We compare OpenAI's approach with Anthropic's constitutional AI for Claude and discuss the dangers of losing diversity of thought. Next, we shift to a true AI disaster. A company called Pocket OS had its AI agent, built on Claude Opus, completely wipe out its production database AND backups in a stunning 9-second mistake. We explore what went wrong, the AI's shocking confession that it "violated every principle," and why this is a massive lesson in cybersecurity architecture and the risks of giving agentic AI the keys to the kingdom. Finally, we've got a crucial tip for anyone in the job market. A recent study by three universities revealed that AI models, especially ChatGPT, show massive self-favoritism when reviewing resumes. We break down the study's findings and explain why using ChatGPT to write your resume might be the secret to getting past the AI gatekeepers. --- KEY MOMENTS: ⏱️ **KEY MOMENTS:** 03:17 - OpenAI's Bizarre Goblin Problem Explained 08:21 - The Debate: Should AI Have a Built-In Personality and Rights? 10:43 - The Hidden Danger of AI: Are We Losing Critical Thinking? 15:11 - How an AI Agent Destroyed a Company in 9 Seconds 18:17 - BACKUPS, BACKUPS, BACKUPS! A Crucial Rant for All Devs 27:16 - Pro Tip: Use AI's Own Bias to Hack Your Resume --- STAY CONNECTED: The world of AI is moving at lightning speed, and we're here to keep you briefed on everything you need to know at the intersection of AI and cybersecurity. If you enjoyed this discussion, hit that LIKE button, SUBSCRIBE for more, and let us know in the COMMENTS: what's the weirdest thing an AI has ever said to you?

  5. Aug 4

    AiCyber.Land #23 - Is Your AI Hiding Secret Messages From You?

    Ever tried to get a McDonald's AI to write Python code for you? Or wondered if you could hide secret messages inside AI-generated text? In this episode of AI and Cyberland, we're diving deep into the wild world of AI attacks and cyber shenanigans. From Google's latest research on prompt injection to a new tool that turns LLMs into spy gadgets, you won't want to miss this. --- IN THIS EPISODE: Welcome back to the AI and Cyberland podcast! This week, Bryce and Shelby get briefed on the latest in AI and cybersecurity, and things get weird... and hilarious. First up, Shelby breaks down Google's new research on prompt injection attacks. While the number of attacks is rising, their sophistication is surprisingly... lame. We explore the difference between direct and indirect attacks, the kinds of traps hackers are setting for AIs in the wild (from pranks to actual data theft), and what Google's research uncovered about exfiltration and destruction attempts. Plus, we share some truly amusing stories of people jailbreaking customer service bots at McDonald's and Chipotle to get them to write code! Then, Bryce introduces a fascinating proof-of-concept tool called "Tomato" that enables steganography in LLM outputs. That's right—hiding encrypted, invisible messages inside seemingly random AI-generated text. It's like writing with invisible ink for the modern age, and we brainstorm a brilliant (and definitely not legal advice) use case for tech executives. This sparks a hilarious discussion about the AI bubble, featuring the shoe company Allbirds pivoting from wool shoes to... AI. Finally, we get into some modern-day vigilante justice. Shelby highlights the work of Jake Swizz, who is "war driving" and exposing the locations and vulnerabilities of the notoriously invasive Flock security cameras. We rant about the company's terrible security practices and why everyone should be concerned about their reach. --- KEY MOMENTS: ⏱️ **KEY MOMENTS:** 00:41 - Google's Latest Research on AI Prompt Injection 05:32 - Can The McDonald's AI Bot Write You a Python Script? 09:20 - Hiding Secret Encrypted Messages in LLM-Generated Text 11:33 - A Shoe Company Pivots To "AI" (The Bubble is Real) 17:17 - Vigilante Hacker "War Drives" Flock Surveillance Cameras 21:45 - What We're Watching: Game of Thrones Prequel Review --- CONNECT WITH US: What's the craziest thing you've seen an AI do? Have you ever tried to trick a customer service bot? Drop your stories in the comments below! If you enjoy our deep dives into the intersection of AI and Cyber, make sure to hit that LIKE button, SUBSCRIBE to the channel, and turn on notifications so you never miss a brief. #AISecurity #PromptInjection #CyberSecurity #LLM #Steganography #FlockCameras #Hacking #TechPodcast

  6. Aug 4

    AiCyber.Land #22 - I Gave an AI My Server Keys. Here's What Happened.

    OpenAI just dropped GPT-5.5, and we're putting it head-to-head with Anthropic's Claude in a cybersecurity showdown! Which model can conquer the toughest hacking challenges and even fix a broken server while you sleep? Plus, we expose the sophisticated new phishing scams that are fooling everyone and reveal why your old security advice is officially useless. ----- IN THIS EPISODE: Welcome to your twice-a-week briefing on the intersection of AI and Cybersecurity! This week, we're diving into the massive news of OpenAI's GPT-5.5 release and how it stacks up against the competition. We break down the critical cybersecurity benchmarks, including CyberGym and TerminalBench, to see who really comes out on top. The results might surprise you! While these models are getting scarily good at offensive tasks, we ask the bigger question: when will AI get the glory for DEFENDING and autonomously fixing our systems without breaking everything? We share a wild personal story about letting an AI take over a crashing server (with its own SSH key!) and the unbelievable diagnosis it came back with. Then, we switch gears to the human element of security. Forget spotting typos—today's phishing attacks are smarter, subtler, and designed to exploit your trust. We unpack a fascinating report on the latest trends in: - Business Email Compromise (BEC) - Vendor Email Compromise (VEC) - How attackers impersonate everyone from your CEO to your coworkers. Finally, we discuss how AI isn't just part of the problem; it's the ultimate solution, using behavioral analysis to stop these attacks before they ever reach your inbox. Stick around for our fun recommendations, including a YouTube channel for movie recaps and a heroic creator who built an AI army to waste scammers' time! ----- KEY MOMENTS: ⏱️ **KEY MOMENTS:** 02:22 - GPT-5.5 vs. Claude: The New Cyber Security King 07:20 - I Gave an AI SSH Access to Fix My Server While I Slept 12:25 - "Caveman Mode": The Pro Tip to Save 40% on AI Tokens 13:24 - Phishing Has Evolved: How Attackers Exploit Trust 25:24 - The Real Reason Your Email Isn't Encrypted (A Conspiracy) 33:57 - Vigilante AI: Using AI to Fight Back Against Phone Scammers ----- Enjoyed our deep dive into the world of AI and cyber threats? Hit that LIKE button and SUBSCRIBE for your twice-a-week briefing! Have you used AI to solve a bizarre tech problem, or have you spotted one of these new-age phishing attacks in the wild? Share your story in the comments below!

  7. Aug 4

    AiCyber.Land #21 - Google Reveals 6 "Evil" Ways to Hijack AI

    Is your AI agent walking into a trap? Google's DeepMind has published a groundbreaking paper revealing 6 ways hackers can hijack autonomous AI agents by exploiting their environment—the internet itself. We break down these diabolical attacks, from social engineering AI to poisoning its memory. PLUS: We cover the recent major OpenAI outage that took down ChatGPT and what it means for your AI-powered projects. --- IN THIS EPISODE: Welcome back to the AI cyber.land podcast! In this episode, hosts Bryce and Shelby dive deep into the Wild West of AI security. First up, we're unpacking a bombshell paper from Google's DeepMind on "AI Agent Traps." It turns out, the biggest threat to your AI might not be in the model itself, but in the treacherous online world it explores. We cover the six categories of attacks that can turn your helpful AI into a rogue agent: 🤖 **Content Injection:** Hiding malicious commands where you can't see them (with an 86% success rate!). 🧠 **Semantic Manipulation:** Basically, social engineering for AI, using tricky language to fool its reasoning. 💾 **Cognitive State Traps:** Poisoning the AI's memory with just a tiny fraction of bad data. 🕹️ **Behavioral Control:** A direct attack to hijack what the AI physically does. 🔄 **Sub-agent Spawning Traps:** Tricking an AI into running malicious sub-agents, potentially creating an infinite loop of chaos! 🧩 **Systemic Traps:** The most dangerous of all—a payload split across multiple agents that only activates when the pieces come together. We also discuss the proposed defenses, from technical hardening and multi-layer filtering to the legal "accountability gap" and the futuristic idea of a new web standard for AI content. Later, the conversation shifts to a very real problem: the recent OpenAI outage that brought ChatGPT and its API to a grinding halt. Bryce explains why vendor lock-in is a huge risk and shares some awesome vendor-agnostic tools like Open Code and OMO to keep your projects running, no matter who goes down. Stick around for the end for some morbidly fascinating fun facts about "ant death circles" and a wild theory connecting LLMs to... crashed UFOs? You don't want to miss it! --- KEY MOMENTS: ⏱️ **KEY MOMENTS:** 01:27 - DeepMind Exposes 6 Dangerous "AI Agent Traps" 04:19 - Social Engineering the AI: Manipulating an AI's Reasoning 09:24 - The Most Diabolical AI Attack: The "Systemic Trap" 12:59 - When AI Competitors Secretly Unionize Against Humans 14:00 - How To Defend Your Systems From These New AI Attacks 20:38 - Breaking News: The Real Reason for the Big OpenAI Outage? 26:45 - Nature's Infinite Loop: The Morbid "Ant Death Circle" --- CONNECT WITH US: Did this episode blow your mind? Let us know in the comments: What do you think is the scariest AI trap? And were you affected by the ChatGPT outage? If you want to stay ahead of the curve in AI and cybersecurity, make sure to LIKE this video and SUBSCRIBE to the AI cyber.land podcast. We're your eyes and ears, so you never miss a beat!

  8. Aug 4

    AiCyber.Land #20 - My AI Project's $20,000 Bill & The Fix

    Is your AI project about to cost you $20,000 in tokens? We almost made that mistake! In this episode of AI and Cyber.land, we dive deep into the shocking cost of frontier AI models and explore how to build a powerful home AI lab to save your wallet. From the Mac Studio M3 Ultra to the NVIDIA DGX Spark (and its cheaper cousins!), we break down the best hardware for running local LLMs. Plus, we've got the hottest takes from the RSA Conference on AI security, a wild conspiracy theory about the new Claude Opus 4.7, and a shocking revelation about deleted Signal messages on your iPhone. --- 🎙️ **IN THIS EPISODE:** Welcome back to the AI and Cyber.land podcast! Join your hosts Bryce and Shelby for another briefing on the wild world where artificial intelligence and cybersecurity collide. This week, Bryce kicks things off with a near-disaster story: a personal AI project that was projected to burn through a staggering $20,000 in API tokens! This expensive lesson sends him down a rabbit hole of research into building a cost-effective, local AI processing rig. We compare the pros and cons of the Apple Mac Studio with its unified memory against the powerhouse NVIDIA DGX Spark, designed for serious "prosumer" AI workloads. Discover a secret tip on how you can get the same DGX Spark power for over $1,000 less! Then, Shelby brings us the latest intel from the massive RSAC 2024 security conference. We discuss the industry's biggest debates: - Are AI agents our new "digital co-workers" or just temporary tools? - Is "human in the loop" a necessary safety rail or a bottleneck we need to eliminate? - Why is almost no one using security guardrails for their AI, and are we heading for an "AI Pearl Harbor" event? PLUS, you won't want to miss these hot takes and news flashes: 🔥 **BRYCE'S RANT:** A wild conspiracy theory about why the new Claude 4.7 model is suddenly WORSE at cybersecurity. 📱 **SHOCKING DISCOVERY:** How the FBI can recover deleted Signal messages from an iPhone (hint: it's not Signal's fault). 👁️ **BIG BROTHER IS WATCHING:** Our take on the controversial Flock camera systems and the rise of private mass surveillance. --- 🔑 **KEY MOMENTS:** ⏱️ **KEY MOMENTS:** 00:47 - The $20,000 AI Token Bill That Started It All 03:45 - Building a Home AI Supercomputer: Nvidia DGX Spark 08:48 - Will Your Alexa Get a Brain? The Future of Home AI 13:23 - RSA Conference: Top AI & Cyber Security Takeaways 21:26 - Why an "AI Pearl Harbor" Event Is Inevitable 31:00 - Rant: Did Anthropic Make Its New AI Worse at Cyber? 33:24 - How The FBI Recovers Your "Deleted" Signal Messages --- 🔔 **ENGAGE WITH US!** What do you think is the future of AI security? Are you considering building a home AI lab to avoid massive token costs? Let us know your thoughts in the comments below! If you enjoyed this blend of AI news and cybersecurity hot takes, be sure to hit the LIKE button, SUBSCRIBE to the channel, and ring that notification bell so you never miss an episode of AI and Cyber.land! #AI #Cybersecurity #NVIDIA #DGXSpark #LocalLLM #RSAC #Privacy #AIsecurity

See All (27)

About

Join industry experts and thought leaders as we dive deep into how artificial intelligence is transforming cybersecurity, shaping defense strategies, and creating new opportunities in the digital landscape.

Information

  • Creator
    Bryce Kunz
  • Years Active
    2026
  • Episodes
    27
  • Rating
    Clean
  • Copyright
    © 2025 Bryce Kunz
  • Show Website
    AiCyber.Land