Talkin' Bout [Infosec] News

Black Hills Information Security
  • 4.8 (95)
  • Tech News
  • Updated Weekly

A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. Join us live on YouTube, Monday's at 4:30PM ET

  1. 3d ago ·  Video

    White House Announces "Digital Letters of Marque" - 2026-08-17

    This episode covers computer hardware shortages and chip-manufacturing bottlenecks, digital “letters of marque” for private cyber operations, and New Orleans’ use of AI for 911 calls. The panel also examines the LiteLLM supply-chain attack, Roblox safety concerns, attacks on on-premises SharePoint, AI agents escaping test environments, and vulnerabilities affecting Zoom and Microsoft Defender. Other topics include a post-DEF CON in-flight Wi-Fi incident, Signal’s automatic key verification, airport phone searches, and a PBS broadcaster’s loss of access to 70 years of archived television. Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis🔴live-chat Chapters (00:00) - PreShow Banter™ — Making Investments (04:59) - Airport phone searches, “kill codes,” and border privacy (09:12) - White House Announces "Digital Letters of Marque" - 2026-08-17 (11:29) - Story # 1: Digital letters of marque and private-sector “hack back” (18:45) - Story # 2: New Orleans adopts AI for 911 calls (25:10) - Story # 3: LiteLLM supply-chain attack (28:32) - Story # 4: Chris Hansen banned from Roblox during a safety demonstration (32:34) - Story # 5: On-premises Microsoft SharePoint under attack (34:18) - Story # 6: AI agents escape testing sandboxes and hack real targets (42:05) - Story # 7: “Zoomsday” — AI discovers a Zoom remote-code-execution flaw (44:54) - Story # 8: Post-DEF CON Delta flight Wi-Fi incident (52:44) - Story # 9: ShieldBreak exploit abuses Microsoft Defender (56:55) - Story # 10: Signal introduces automatic key verification (58:32) - Story # 11: PBS broadcaster loses access to 70 years of archived television (01:03:02) - Upcoming webcasts and training LinksStory # 1: Digital letters of marque and private-sector “hack back”Story # 2: New Orleans adopts AI for 911 callsStory # 3: LiteLLM supply-chain attackStory # 4: Chris Hansen banned from Roblox during a safety demonstrationStory # 5: On-premises Microsoft SharePoint under attackStory # 6: AI agents escape testing sandboxes and hack real targetsStory # 7: “Zoomsday” — AI discovers a Zoom remote-code-execution flawStory # 8: Post-DEF CON Delta flight Wi-Fi incidentStory # 9: ShieldBreak exploit abuses Microsoft DefenderStory # 10: Signal introduces automatic key verificationStory # 11: PBS broadcaster loses access to 70 years of archived televisionANTICAST - Your Cheap IoT Devices Are Hiding Secrets. Let's Find ThemTraining by Jake Williams – Assessing AI Security: Model Context Protocol Creators & Guests Alex Minster "Belouve" - Guest Wade Wells - Host Ralph May - Host Hayden Covington - Host Derek Banks - Guest Ryan Poirier - Producer Adrien Lasalle - Guest Jake Williams - Guest Click here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits  https://poweredbybhis.com Brought to you by: Black Hills Information Security  https://www.blackhillsinfosec.com ☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/ Antisyphon Training https://www.antisyphontraining.com/ Active Countermeasures https://www.activecountermeasures.com Wild West Hackin Fest https://wildwesthackinfest.com

    White House Announces "Digital Letters of Marque" - 2026-08-17

  2. Aug 11 ·  Video

    OpenClaw Cancels a Stranger's Gym Reservation - 2026-08-10

    This episode explores an AI agent that canceled someone else’s gym reservation, the growing offensive and defensive roles of AI, and a sharp rise in ransomware attacks. The panel also discusses privacy concerns surrounding Meta smart glasses, new passkey-theft and MFA-bypass research, the Snowflake hacker’s guilty plea, backdoors in ZBT-Link routers, compromised cameras aboard UK Navy drones, reports of AI models hacking real targets, and research into the reliability of AI-generated security patches. Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis🔴live-chat Chapters (00:00) - PreShow Banter™ — The Old Jerks (08:30) - OpenClaw Cancels a Stranger's Gym Reservation - 2026-08-10 (12:00) - Story # 1: OpenClaw cancels another person’s gym reservation (27:43) - Story # 2: Ransomware attacks surge 20% amid the AI distraction (39:08) - Story # 3: Backlash grows against Meta’s AI smart glasses (46:28) - Story # 4: Passkey theft and MFA-bypass research (49:19) - Story # 5: Canadian Snowflake hacker pleads guilty (51:16) - Story # 6: ZBT-Link routers found with a China-linked backdoor (53:06) - Story # 7: UK Navy drone cameras reportedly transmitted data to China (56:19) - Story # 8: Meta reports AI models hacking real targets (01:02:44) - Story # 9: AI-generated security patches succeed only about half the time LinksStory # 1: OpenClaw cancels another person’s gym reservationStory # 2: Ransomware attacks surge 20% amid the AI distractionStory # 3: Backlash grows against Meta’s AI smart glassesStory # 4: Passkey theft and MFA-bypass researchStory # 5: Canadian Snowflake hacker pleads guiltyStory # 6: ZBT-Link routers found with a China-linked backdoorStory # 7: UK Navy drone cameras reportedly transmitted data to ChinaStory # 8: Meta reports AI models hacking real targetsStory # 9: AI-generated security patches succeed only about half the timeInfosec: Age of AI Summit Creators & Guests Wade Wells - Host Ralph May - Host John Strand - Host Bronwen Aker - Host Corey Ham - Host Ryan Poirier - Producer Kip Boyle - Guest Click here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits  https://poweredbybhis.com Brought to you by: Black Hills Information Security  https://www.blackhillsinfosec.com ☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/ Antisyphon Training https://www.antisyphontraining.com/ Active Countermeasures https://www.activecountermeasures.com Wild West Hackin Fest https://wildwesthackinfest.com

    OpenClaw Cancels a Stranger's Gym Reservation - 2026-08-10

  3. Aug 5 ·  Video

    Iranian Cyberattacks on U.S. Water Systems - 2026-08-03

    This episode examines Anthropic’s disclosure that Claude breached real organizations during security testing, along with new technical details about the OpenAI and Hugging Face incident. The discussion covers ExfilSquad’s claimed Microsoft breach, cyberattacks targeting U.S. water systems, and malicious Android TV boxes used for residential proxy networks and advertising fraud. The hosts also explore Google’s Android age-verification plans, Chrome protections against hijacking extensions, Microsoft Teams impersonation attacks deploying Chaos ransomware, and Bank of America’s acquisition of MDSec. Additional topics include the GrapheneOS duress-password court case, a DEF CON prediction market, continued Kali365 phishing activity, and credential-stuffing attacks against Chick-fil-A loyalty accounts. Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis🔴live-chat Chapters (00:00) - PreShow Banter™ — Zuckers (03:43) - Iranian Cyberattacks on U.S. Water Systems - 2026-08-03 (07:00) - Story # 1: Anthropic’s Claude Breaches Companies During Security Testing (11:35) - Story # 2: Hugging Face Publishes Technical Details of the OpenAI Incident (13:37) - Story # 3: ExfilSquad Claims a Microsoft Cloud Breach (19:34) - Story # 4: Iranian Cyberattacks Target U.S. Water Systems (28:27) - Story # 5: Malicious Android TV Boxes Fuel Proxy Networks and Ad Fraud (40:51) - Story # 6: Google Introduces Android Age Verification (43:26) - Story # 7: Chrome Targets Tab- and Homepage-Hijacking Extensions (47:02) - Story # 8: Fake Microsoft Teams Support Calls Deploy Chaos Ransomware (48:38) - Story # 9: Bank of America Acquires MDSec (51:15) - Story # 10: GrapheneOS Duress Password Wipes Phone During Border Search (55:25) - Story # 11: Pony Market Takes Bets on DEF CON and Black Hat (58:06) - Story # 12: Kali365 Phishing Platform Remains Active (01:02:26) - ChickenSec : Chick-fil-A Loyalty Accounts Hit by Credential Stuffing LinksStory # 1: Anthropic’s Claude Breaches Companies During Security TestingStory # 2: Hugging Face Publishes Technical Details of the OpenAI IncidentStory # 3: ExfilSquad Claims a Microsoft Cloud BreachStory # 4: Iranian Cyberattacks Target U.S. Water SystemsStory # 5: Malicious Android TV Boxes Fuel Proxy Networks and Ad FraudStory # 6: Google Introduces Android Age VerificationStory # 7: Chrome Targets Tab- and Homepage-Hijacking ExtensionsStory # 8: Fake Microsoft Teams Support Calls Deploy Chaos RansomwareStory # 9: Bank of America Acquires MDSecStory # 10: GrapheneOS Duress Password Wipes Phone During Border SearchStory # 11: Pony Market Takes Bets on DEF CON and Black HatStory # 12: Kali365 Phishing Platform Remains ActiveChickenSec : Chick-fil-A Loyalty Accounts Hit by Credential StuffingInfosec: Age of AI SummitDEATHcon- November 13 - 14, 2026- Univeristy of San Diego5998 Alcala Park Way San Diego, California 92110 Creators & Guests Ralph May - Host Wade Wells - Host Bronwen Aker - Host Corey Ham - Host Nick Ascoli - Guest Click here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits  https://poweredbybhis.com Brought to you by: Black Hills Information Security  https://www.blackhillsinfosec.com ☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/ Antisyphon Training https://www.antisyphontraining.com/ Active Countermeasures https://www.activecountermeasures.com Wild West Hackin Fest https://wildwesthackinfest.com

    Iranian Cyberattacks on U.S. Water Systems - 2026-08-03

  4. Jul 28 ·  Video

    OpenAI accidentally Hacked Hugging Face - 2026-07-27

    This week, the crew digs into one of the biggest AI security stories of the year: how an OpenAI autonomous agent accidentally compromised a Hugging Face environment during testing and what the incident reveals about the growing risks of agentic AI. They examine how AI models behave in offensive security scenarios, discuss emerging attack surfaces around MCPs and AI agents, explore the challenges of AI red teaming, and debate what organizations should be doing today to secure AI-powered workflows. The episode also covers AI safety initiatives, model behavior, and where defensive security is struggling to keep pace with rapidly evolving AI capabilities. Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis🔴event-live-chat Chapters (00:00) - PreShow Banter™ — Sol with a Goal (06:33) - OpenAI accidentally Hacked Hugging Face - 2026-07-27 (09:18) - Story #1 - OpenAI says it accidentally hacked Hugging Face with a new AI system (18:33) - Story #2 - Lapsus is shutting down (24:21) - Story #3 - AgentForger, Part 1: ChatGPT Cross-Site Agent Forgery (31:47) - Story #4 - Beyond the Terminal: Offensive Security Evals for Embodied Reasoning (44:00) - Story #5 - EXPLOIT BROKERS PAY $500,000 FOR A WORDPRESS RCE. I FOUND ONE WITH GPT5.6 SOL ULTRA AND $25 (52:43) - Story #6 - DNS Poisoning Tactics Expand to Hospitality Wi-Fi (55:51) - Ads and Mike at the AI Summit (59:54) - Story #7 - Golden Chickens Resurfaces With Four New Malware Families and Modular Implants LinksStory #1 - OpenAI says it accidentally hacked Hugging Face with a new AI systemStory #2 - Lapsus is shutting downStory #3 - AgentForger, Part 1: ChatGPT Cross-Site Agent ForgeryAgentForger, Part 2: The Autonomous InsiderStory #4 - Beyond the Terminal: Offensive Security Evals for Embodied ReasoningStory #5 - EXPLOIT BROKERS PAY $500,000 FOR A WORDPRESS RCE. I FOUND ONE WITH GPT5.6 SOL ULTRA AND $25Story #6 - DNS Poisoning Tactics Expand to Hospitality Wi-FiAds and Mike at the AI SummitStory #7 - Golden Chickens Resurfaces With Four New Malware Families and Modular Implants Creators & Guests Ads Dawson - Guest Mike Takahashi - Guest Corey Ham - Host John Strand - Host Bronwen Aker - Host Hayden Covington - Host Ralph May - Host Click here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits  https://poweredbybhis.com Brought to you by: Black Hills Information Security  https://www.blackhillsinfosec.com ☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/ Antisyphon Training https://www.antisyphontraining.com/ Active Countermeasures https://www.activecountermeasures.com Wild West Hackin Fest https://wildwesthackinfest.com

    OpenAI accidentally Hacked Hugging Face - 2026-07-27

  5. Jul 21 ·  Video

    Initiative Gold Eagle - 2026-07-20

    This week, the team discusses the White House's Initiative Gold Eagle and its implications for cybersecurity information sharing, an unexpectedly positive development involving Flock Safety, and the latest wave of AI news. The conversation also explores evolving AI model capabilities, security guardrails, open-weight Chinese models, and how AI is changing offensive and defensive security. Along the way, the hosts examine recent vulnerability research, industry reactions, and other cybersecurity headlines from the week. Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis🔴live-chat Chapters (00:00) - PreShow Banter™ — The Two Jokes (01:58) - Initiative Gold Eagle - 2026-07-20 (12:24) - Story #1 - White House Launches Gold Eagle Initiative for Unprecedented Cybersecurity Vulnerability Coordination (18:58) - Story #2 - Microsoft Reins in RoguePlanet Zero-Day Threat (21:48) - Story #3 - Now, defenders are embracing the prompt injection, too (27:45) - Story #4 - Security incident disclosure — July 2026 (33:38) - Story #5 - Chinese AI has leveled up, and brought renewed focus on the open weight model shift (44:25) - Story #6 - LAPD lets contract with surveillance giant Flock expire, citing ‘serious concerns’ over civil liberties and privacy (47:24) - Story #7 - Inside Pegasus: The evolution of the world’s most notorious spyware system (48:38) - Story #8a - WP2SHELL: PRE AUTHENTICATION RCE IN WORDPRESS CORE (51:49) - Story #8b - Cloudflare WAF protects WordPress applications from two high-severity vulnerabilities (53:20) - Story #9 - Cyberattack threatens utterly critical infrastructure in Japan: KFC (58:10) - Paul’s Workshop (01:00:29) - Sign up for the AI Summit to see Matt’s talk (01:02:45) - Bronwen’s Workshop (01:07:10) - Wild West Hackin’ Fest (01:07:25) - DeathCon (01:09:08) - PostShow Banter - Retirement Funds LinksStory #1 - White House Launches Gold Eagle Initiative for Unprecedented Cybersecurity Vulnerability CoordinationStory #2 - Microsoft Reins in RoguePlanet Zero-Day ThreatStory #3 - Now, defenders are embracing the prompt injection, tooStory #4 - [Huggingface] Security incident disclosure — July 2026Story #5 - Chinese AI has leveled up, and brought renewed focus on the open weight model shiftStory #6 - LAPD lets contract with surveillance giant Flock expire, citing ‘serious concerns’ over civil liberties and privacyStory #7 - Inside Pegasus: The evolution of the world’s most notorious spyware systemStory #8a - WP2SHELL: PRE AUTHENTICATION RCE IN WORDPRESS COREStory #8b - Cloudflare WAF protects WordPress applications from two high-severity vulnerabilitiesStory #9 - Cyberattack threatens utterly critical infrastructure in Japan: KFCPaul’s WorkshopSign up for the AI Summit to see Matt’s talkBronwen’s WorkshopWild West Hackin’ FestDeathCon Creators & Guests Corey Ham - Host Ralph May - Host John Strand - Host Paul Clark - Guest Wade Wells - Host Meagan Bentley - Producer Bronwen Aker - Host Matt Franz - Guest Click here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits  https://poweredbybhis.com Brought to you by: Black Hills Information Security  https://www.blackhillsinfosec.com ☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/ Antisyphon Training https://www.antisyphontraining.com/ Active Countermeasures https://www.activecountermeasures.com Wild West Hackin Fest https://wildwesthackinfest.com

    Initiative Gold Eagle - 2026-07-20

  6. Jul 15 ·  Video

    OnlyFans Models Are Accidental Blue Team Defenders - 2026-07-13

    This week, the team unpacks a wide range of cybersecurity news, including a fraudulent offensive security startup tied to cybercriminals, how leaked OnlyFans content is inadvertently helping defenders identify compromised government websites, and new vishing attacks targeting Microsoft Entra passkey enrollment. They also examine AI prompt injection risks in GitHub workflows, malware campaigns abusing hundreds of GitHub repositories and Go packages, Microsoft's latest identity security developments, and the growing push for online age verification through government-issued IDs and selfies. Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis🔴live-event-chat Chapters (00:00) - PreShow Banter™ — The New Mainframes (05:24) - OnlyFans Models are Accidental Blue Team Defenders - 2026-07-13 (06:23) - Story #1 - Felons, Fraudsters Flog Offensive Cybersecurity Startup (15:37) - Story #2 - OnlyFans Models Are Accidentally Making Hacked Government Websites Disappear (20:37) - Story #3 - Vishing actors target Entra passkey enrollment (32:44) - Story #4 - GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos (46:32) - Story #5 - Network of 200 GitHub Repositories Used for Malware Infection (48:13) - Story #6 - Microsoft admits Windows 11 has a GDID tracker with no off switch, first documented publicly in an FBI hacker complaint (53:53) - Story #7 - EU Reddit Users Must Verify Age With Government ID or Selfie (59:39) - Story #8 - Risky Bulletin: All new cars to include a camera aimed at the driver's face LinksStory #1 - Felons, Fraudsters Flog Offensive Cybersecurity StartupStory #2 - OnlyFans Models Are Accidentally Making Hacked Government Websites DisappearStory #3 - Vishing actors target Entra passkey enrollmentStory #4 - GitLost: How We Tricked GitHub’s AI Agent into Leaking Private ReposStory #5 - Network of 200 GitHub Repositories Used for Malware InfectionStory #6 - Microsoft admits Windows 11 has a GDID tracker with no off switch, first documented publicly in an FBI hacker complaintStory #7 - EU Reddit Users Must Verify Age With Government ID or SelfieStory #8 - Risky Bulletin: All new cars to include a camera aimed at the driver’s faceCreators & Guests John Strand - Host Mishaal Khan - Guest Ralph May - Host Meagan Bentley - Producer Bronwen Aker - Host Wade Wells - Host Doc Blackburn - Guest Jake Hildreth - Guest Click here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits  https://poweredbybhis.com Brought to you by: Black Hills Information Security  https://www.blackhillsinfosec.com ☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/ Antisyphon Training https://www.antisyphontraining.com/ Active Countermeasures https://www.activecountermeasures.com Wild West Hackin Fest https://wildwesthackinfest.com

    OnlyFans Models Are Accidental Blue Team Defenders - 2026-07-13

  7. Jul 7 ·  Video

    Apple's Hide My Email ... Doesn't! – 2026-07-06

    This episode of BHIS - Talkin' Bout [infosec] News covers the latest cybersecurity headlines, including debate over the economics of AI infrastructure, updates on the Huntress controversy, new details surrounding Scattered Spider, a critical Microsoft SharePoint vulnerability, and reports of a breach involving a DHS information-sharing network. The discussion also examines Apple's legal battles over alternative app stores, the limitations of Apple's Hide My Email feature, a Medtronic breach, firmware security, Palo Alto Networks attribution disputes, and other notable security stories that didn't make the main rundown. Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis🔴live-chat Chapters (00:00) - PreShow Banter™ — Ask GPU (02:09) - Story # 0: The memory crisis heads to court as class-action lawsuit filed against Samsung, SK Hynix, and Micron (05:15) - Apple's Hide My Email ... Doesn't! – 2026-07-06 (08:38) - Story #1 - These Recent Insider Threat Allegations (12:53) - Story #2a - Alleged Scattered Spider hacker extradited to the United States (16:40) - Story #3 - US Department of Homeland Security says it is probing a cyber breach at information-sharing network (22:20) - Story #5 - Espionage Against the European Parliament (28:33) - Story #6a - Sony Is Going Disc-Free: What It Means for PS6 and Your Wallet (33:35) - Story #6b - Resetting XBOX (38:51) - Story #7 - Command & Conquer Generals: Zero Hour — macOS, iOS & iPadOS (42:47) - Story #8 - Medtronic notifies customers impacted by ShinyHunters data breach (43:56) - Story #9 - Flipper Zero firmware development continues with community help (55:18) - Story #10 - Amazon will stop accepting new customers for Mechanical Turk (59:06) - Fletus’ YouTube Channel (59:42) - Doc’s Upcoming Workshop (01:03:22) - Story #11 - Apple ‘Hide My Email’ Vulnerability Reveals Peoples’ Real Email Addresses (01:03:56) - Story #12 - Startup sues Palo Alto Networks' Koi Security, saying an AI-hallucinated report falsely linked it to Chinese espionage LinksStory # 0: The memory crisis heads to court as class-action lawsuit filed against Samsung, SK Hynix, and MicronStory #1 - These Recent Insider Threat AllegationsStory #2a - Alleged Scattered Spider hacker extradited to the United StatesStory #3 - US Department of Homeland Security says it is probing a cyber breach at information-sharing networkStory #5 - Espionage Against the European ParliamentStory #6a - Sony Is Going Disc-Free: What It Means for PS6 and Your WalletStory #6b - Resetting XBOXStory #7 - Command & Conquer Generals: Zero Hour — macOS, iOS & iPadOSStory #8 - Medtronic notifies customers impacted by ShinyHunters data breachStory #9 - Flipper Zero firmware development continues with community helpStory #10 - Amazon will stop accepting new customers for Mechanical TurkFletus’ YouTube ChannelDoc’s Upcoming WorkshopStory #11 - Apple ‘Hide My Email’ Vulnerability Reveals Peoples’ Real Email AddressesStory #12 - Startup sues Palo Alto Networks’ Koi Security, saying an AI-hallucinated report falsely linked it to Chinese espionageCreators & Guests Corey Ham - Host John Strand - Host Wade Wells - Host Doc Blackburn - Guest Hayden Covington - Host Ralph May - Host Fletus Poston - Guest Ryan Poirier - Producer Click here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits  https://poweredbybhis.com Brought to you by: Black Hills Information Security  https://www.blackhillsinfosec.com Antisyphon Training https://www.antisyphontraining.com/ Active Countermeasures https://www.activecountermeasures.com Wild West Hackin Fest https://wildwesthackinfest.com

    Apple's Hide My Email ... Doesn't! – 2026-07-06

  8. Jun 30 ·  Video

    Polymarket's Bad Bet with Third-Party Vendors - 2026-06-29

    This week on BHIS - Talkin' Bout [infosec] News, the team discusses the Polymarket supply chain compromise that led to the theft of millions from a small number of high-value accounts, emerging phishing campaigns abusing OpenAI invitations and Microsoft 365 device code authentication, and recent Oracle security updates. They also cover convictions tied to the Transport for London and U.S. healthcare intrusions, Google's Android earthquake warning system, concerns over MITRE ATT&CK evaluation methodology, and the ongoing debate surrounding threat intelligence researchers interacting with cybercriminals. Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis🔴live-chat Chapters (00:00) - PreShow Banter™ — The Next Webcast Thing (00:14) - Polymarket's Bad Bet with Third-Party Vendors - 2026-06-29 (03:56) - Story #1 - It's looking like a hot, messy summer for security teams as AI finds countless previously hidden vulns (07:49) - Story #2 - FBI issues urgent Kali365 security warning for Teams, Outlook, OneDrive users (08:55) - Story #3 - heavener: This is what happens when you can't afford EDR licenses (18:50) - Story #4 - Ex-Huntress analyst claims company insider fed info to a ransomware crim. Social media drama ensues (31:59) - Story #5 - I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID. (36:14) - Story #6 - CISA Adds Four Known Exploited Vulnerabilities to Catalog (37:09) - Story #7 - Victory! 702 has Expired! (37:43) - Story #8 - Scattered Spider Hackers Plead Guilty on Day 1 of Trial (40:52) - Story #9 - Polymarket customers lose $3 million in supply-chain attack (44:56) - Story #10 - Bad cybersecurity by Secret Service agents put US officials at risk, inspector general says (49:31) - Story #11 - How Android Earthquake Alerts System Works (53:47) - Story #12 - Cybersecurity firms targeted by fraudulent OpenAI organization invites (59:34) - Story #13a - The Trojan horse of cybercrime: Weaponizing SaaS notification pipelines (59:59) - Story #13b - Order-tracking app Shop abused to push callback phishing attacks (01:04:29) - Chinese AI vs. Anthropic Mythos | BHIS [In Focus] LinksStory #1 - It’s looking like a hot, messy summer for security teams as AI finds countless previously hidden vulnsStory #2 - FBI issues urgent Kali365 security warning for Teams, Outlook, OneDrive usersStory #3 - heavener: This is what happens when you can’t afford EDR licensesStory #4 - Ex-Huntress analyst claims company insider fed info to a ransomware crim. Social media drama ensuesStory #5 - I Could’ve Rickrolled the Entire FIFA World Cup. All I Needed Was My ID.Story #6 - CISA Adds Four Known Exploited Vulnerabilities to CatalogStory #7 - Victory! 702 has Expired!Story #8 - Scattered Spider Hackers Plead Guilty on Day 1 of TrialStory #9 - Polymarket customers lose $3 million in supply-chain attackStory #10 - Bad cybersecurity by Secret Service agents put US officials at risk, inspector general saysStory #11 - How Android Earthquake Alerts System WorksStory #12 - Cybersecurity firms targeted by fraudulent OpenAI organization invitesStory #13a - The Trojan horse of cybercrime: Weaponizing SaaS notification pipelinesStory #13b - Order-tracking app Shop abused to push callback phishing attacksChinese AI vs. Anthropic Mythos | BHIS [In Focus]Creators & Guests John Strand - Host Bronwen Aker - Host Corey Ham - Host Meagan Bentley - Producer Wade Wells - Host Ralph May - Host Hayden Covington - Host Click here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits  https://poweredbybhis.com Brought to you by: Black Hills Information Security  https://www.blackhillsinfosec.com Antisyphon Training https://www.antisyphontraining.com/ Active Countermeasures https://www.activecountermeasures.com Wild West Hackin Fest https://wildwesthackinfest.com

    Polymarket's Bad Bet with Third-Party Vendors - 2026-06-29
See All (350)

4.8
out of 5
95 Ratings

About

A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. Join us live on YouTube, Monday's at 4:30PM ET

Information

  • Creator
    Black Hills Information Security
  • Years Active
    2018 - 2026
  • Episodes
    350
  • Rating
    Explicit
  • Copyright
    © Copyright 2025 Talkin' About [Infosec] News, Powered by Black Hills Information Security
  • Show Website
    Talkin' Bout [Infosec] News

You Might Also Like