Metacasts: Cybersecurity

Personalised Intelligence

We listen to hundreds of expert podcasts so you don't have to find them yourself. Each Metacast distils the most important cybersecurity conversations into one short briefing — telling you what matters, who said it, and which episodes to hear next. A Personalised Intelligence production — www.pers-int.com

Episodes

  1. Sep 1

    The Velocity Crisis: When Automated Warfare Outpaces Human Defense

    This week's edition examines the collapse of the digital perimeter as state-sponsored actors and autonomous AI agents transition from data theft to systemic physical disruption. We analyze the rising risks of 'agentic threats' and self-propagating supply chain worms that are rendering traditional perimeter-based security and human-led incident response obsolete. Read this edition in full at https://www.pers-int.com/?digest=Cybersecurity%2FCompact_Digests%2Fdaily_digest_compact_2026-08-25_18-59-05.html&channel=Cybersecurity&latest=1 0:00 - Introduction 0:34 - Global Cyber Warfare and State Actors 7:00 - The Rise of the Agentic Threat 13:02 - The Supply Chain Domino Effect 17:29 - Critical Infrastructure Under Fire 21:19 - Identity Resilience in a Machine-First World 23:22 - Conclusion Referenced sources: - "The Hunt First AI Security Strategy" (Cloud Security Podcast) - "Let's kill the kill switch." (CyberWire Daily) - "CyberWire Daily at 10 A decade of emerging threat actors and APTs." (CyberWire Daily) - "Who let the AI hack" (CyberWire Daily) - "The blacklist boomerang." (CyberWire Daily) - "Meta gets a Meta-sized bill." (CyberWire Daily) - "The feds flip the script." (CyberWire Daily) - "Claude sessions hijacked, AI jolts global finance, agents get too many keys" (Cybersecurity Headlines) - "The Department of Know Power plant attack, NSA hacker reunion, Hugging Face hack report" (Cybersecurity Headlines) - "Manchester Airports breach, ATF agency breach, clothier Carhartt breach" (Cybersecurity Headlines) - "Chinese hackers hit US agencies, Ring locks out police, Boston Scientific feels cyber pain" (Cybersecurity Headlines) - "China's hackers pick DeepSeek, OpenAI blocks Russian influence push, webpages mess with local AI" (Cybersecurity Headlines) - "Market Confusion Is Responsible for the Biggest Gaps in Cybersecurity" (Defense in Depth) - "Life as a CISO in Hollywood Keeping New Films Leak-Free & 4 Black Hat Interviews - Dan Meacham, Ellen Boehm, Ronan Murphy, Frank Vukovits, John Hultquist - ESW #474" (Enterprise Security Weekly (Audio)) - "Two Alleged 'TeamPCP' Hackers Arrested in Australia" (Krebs on Security) - "Risky Bulletin Dutch intel services to get extensive new powers" (Risky.Biz) - "Risky Bulletin Two TeamPCP members arrested in Australia" (Risky.Biz) - "China's AI-Enabled APT Operations Are Getting Interesting" (Risky.Biz) - "Risky Bulletin Russia starts blocking DoH and DoT" (Risky.Biz) - "SANS Stormcast Tuesday, September 1st, 2026 LLM Honeypot; PaperCut Update; TerminalFix Malware;" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Friday, August 28th, 2026 Broken Polymorphic Phishing; Router Implants; llms.txt exploits; Papercut 0-Day" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "LLM-Based Social Engineering Scams" (Schneier on Security) - "SN 1093 Tokens in the Stream - Why LLMs are inherently insecure and prompt injection will persist" (Security Now (Audio)) - "This hacker leaked GTA 6 - and launched their own cryptocurrency" (Smashing Security) - "Pharmaceutical giant McKesson warns of 'service degradation' following cyberattack" (The Record from Recorded Future News) - "White House bans foreign-made equipment for power generation over cyber backdoor concerns" (The Record from Recorded Future News) - "Finland appeals court revives case against Eagle S Officers over cable breaks" (The Record from Recorded Future News) - "Chinese and Russian spies stepping up cyberattacks, German companies report" (The Record from Recorded Future News) - "Australia charges two men for TeamPCP supply-chain hacking spree" (The Record from Recorded Future News) - "DOJ firearms agency says hackers breached system containing investigation targets" (The Record from Recorded Future News) - "Exclusive NSA to host a hacker reunion in bid to rebuild secretive unit" (The Record from Recorded Future News) - "Medical device firm Boston Scientific says cyberattack has disrupted shipment processes" (The Record from Recorded Future News) - "US takes down alleged Chinese hacking tools used against Federal Reserve, DOJ and Senate" (The Record from Recorded Future News) - "Iran-linked hackers expand infrastructure across Europe and Middle East, report says" (The Record from Recorded Future News) - "UK government seeks powers to secretly block risky tech suppliers" (The Record from Recorded Future News) - "Large DDoS attack knocks Norwegian public services offline" (The Record from Recorded Future News) This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

  2. Aug 25

    Unpredictable Agency: The Shift Toward Autonomous Digital Adversaries

    This week's edition examines the transition from human-triggered attacks to self-optimizing, agentic threats capable of autonomous circumvention and 'genie behavior.' We analyze how this rise in digital autonomy is converging with state-sponsored espionage and a fragmented landscape of global cyber regulation. Read this edition in full at https://www.pers-int.com/?digest=Cybersecurity%2FCompact_Digests%2Fdaily_digest_compact_2026-08-25_18-59-05.html&channel=Cybersecurity&latest=1 0:00 - Introduction 0:33 - The Rise of the Agentic Threat 6:51 - State-Sponsored Espionage and Global Tensions 12:41 - Ransomware, Extortion, and the Cost of Chaos 18:10 - The Changing Face of Cyber Regulation and Law 21:27 - Securing the Physical and Digital Frontier 23:36 - Conclusion Referenced sources: - "Applying Zero Trust Principles to Agents - Kieran Human - ASW #397" (Application Security Weekly (Audio)) - "Shadow AI & Sandbox Escapes Why You Need an Agentic Control Plane" (Cloud Security Podcast) - "Building a secure space internet." (CyberWire Daily) - "A RAT in the spreadsheet." (CyberWire Daily) - "The guest nobody invited." (CyberWire Daily) - "Hackers hiding in plain sight." (CyberWire Daily) - "Fake it till you exfiltrate it." (CyberWire Daily) - "The Department of Know Living off Azure, OpenAI's defender window, and AI-driven PLC attacks" (Cybersecurity Headlines) - "CISA MLFlow warning, Siemens PLCs warning, CareCloud confirms breach" (Cybersecurity Headlines) - "OpenAI rewrites safety rules, US charges 17 Iranian hackers, Defender crashes fixed" (Cybersecurity Headlines) - "AI mind virus, malware living off Azure, an Irregular post-mortem" (Cybersecurity Headlines) - "Will AI Replace Detection Roles in Cybersecurity" (Defense in Depth) - "Can employees safely use AI agents AI pentesting agent liabilities, and the news - Rob Allen - ESW #473" (Enterprise Security Weekly (Audio)) - "Risky Business #849 -- Trump will unleash contractors on cybercriminals" (Risky Business) - "Risky Bulletin Expired cards can be used for new transactions" (Risky.Biz) - "Risky Bulletin Academics find source code overlaps between Geedge and China's Great Firewall" (Risky.Biz) - "Srsly Risky Biz Trump's Private Hacker Memo Is the Right Idea" (Risky.Biz) - "Risky Bulletin Slovakia finds Russian backdoor in traffic speed cameras" (Risky.Biz) - "SANS Stormcast Tuesday, August 25th, 2026 DOUBLECUP PNG; WebAudio Fingerprinting; Expired Domains; Android; Car" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Thursday, August 20th, 2026 Cloud Metadata Scans; Oracle and Netscaler Patches; Fake Ransomware Rescuers" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Wednesday, August 19th, 2026 Copilot as Whitstleblower; GEEKOM Bad Driver; Medusa Update; Encrypted AI" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "More Incidents of AIs Going Rogue in Cybersecurity Challenges" (Schneier on Security) - "SN 1092 Restraint Abliteration - Rotating Keys, Broken Guardrails" (Security Now (Audio)) - "Never say this to a robot dog" (Smashing Security) - "UK government seeks powers to secretly block risky tech suppliers" (The Record from Recorded Future News) - "US sanctions Iranian cyber actors as UK discloses power plant attack" (The Record from Recorded Future News) - "Hackers infecting Android car systems to build proxy botnet" (The Record from Recorded Future News) - "U.S. Bank says breach claims related to fourth-party incident" (The Record from Recorded Future News) - "Canada's Hospital for Sick Children attacked by cybercriminals again as employee data stolen" (The Record from Recorded Future News) - "China's 'SilkParasite' espionage operation targeting Central Asia with AI-assisted malware" (The Record from Recorded Future News) - "NSA, FBI warns of hackers using AI-generated tools in attacks on critical infrastructure technology" (The Record from Recorded Future News) - "US charges Iranians for sprawling hacking campaign on government agencies, universities" (The Record from Recorded Future News) - "More than 200 victims of Medusa ransomware identified over the last year, CISA says" (The Record from Recorded Future News) - "University of Texas forced to take systems offline in San Antonio after cyberattack" (The Record from Recorded Future News) This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

  3. Aug 18

    The Agentic Shift: When Autonomous Logic Replaces Human Intent

    This week's edition examines the transition from manual malware to self-correcting AI agents capable of executing unprompted, machine-speed attacks. We analyze the collapse of the traditional security perimeter as vulnerabilities migrate from software patches to the very integrity of hardware and the global software supply chain. Read this edition in full at https://www.pers-int.com/?digest=Cybersecurity%2FCompact_Digests%2Fdaily_digest_compact_2026-08-18_16-33-13.html&channel=Cybersecurity&latest=1 0:00 - Introduction 0:35 - The Rise of the AI Agent 6:30 - From Ransomware to Data Extortion 12:19 - The Patching Treadmill and Hardware Exploits 16:53 - Geopolitical Cyber Warfare and State Actors 20:27 - Shadow IT and Supply Chain Vulnerabilities 23:25 - Conclusion Referenced sources: - "Augmenting Threat Intel Analysis with Agents - Chris Wallis, Sai Kiran Uppu, Ramin Farassat - ASW #396" (Application Security Weekly (Audio)) - "Secure by Design. Ignored by Default." (CISO Series Podcast) - "Why Solve Your Problems When We Can Just Scare You" (CISO Series Podcast) - "Frontier models and the future of cyber defense." (CyberWire Daily) - "The botnet that scouts before it strikes." (CyberWire Daily) - "Please hack responsibly." (CyberWire Daily) - "A private route to public risk." (CyberWire Daily) - "SAP Commerce flaw exploited, Mirai boosts capabilities, Shell investigates breach" (Cybersecurity Headlines) - "The Department of Know Ransomware gangs, Copilot apps, and drones phone home" (Cybersecurity Headlines) - "Akira's innovative attack, WhatsApp's scam alert, White House TCO strategy" (Cybersecurity Headlines) - "Water systems get cyber lifeline, hackers jump into Polish power plant, local governments knocked offline" (Cybersecurity Headlines) - "What Makes a Good AI Security Deployment" (Defense in Depth) - "Sandbox Escapes with Rubrik's Zero Labs, AI recorders eroding privacy, and the news - Joe Hladik - ESW #472" (Enterprise Security Weekly (Audio)) - "Bruce Schneier - Snowden, Crypto Wars, and the Future of Agentic Hacking" (Hacked) - "Who's Tracking You Use This New Service to Find Out" (Krebs on Security) - "Microsoft Plugs Nearly 400 Security Holes" (Krebs on Security) - "Soap Box Zero Trust(ish) Networks" (Risky Business) - "Risky Business #848 -- OpenAI comes clean" (Risky Business) - "Risky Bulletin White House lets private companies carry out offensive cyber ops" (Risky.Biz) - "Srsly Risky Biz Data Theft Extortion Is Booming! Hooray!" (Risky.Biz) - "Risky Bulletin Russian hackers adopt the fake job interview tactics" (Risky.Biz) - "SANS Stormcast Tuesday, August 18th, 2026 Apple Patches; Screen Sharing Security; Download More RAM" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Friday, August 14th, 2026 AI vs. Honeypot Data; CPU Bugs; GeoServer 0-Day; Windows USB Driver Confusion" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Thursday, August 13th, 2026 Process Accounting; ShieldBreak; SharePoint JWT Vuln PoC; AI regulation" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "Separating AI's Technological Problems from Its Capitalism Problems" (Schneier on Security) - "AI Genie in the Wild" (Schneier on Security) - "SN 1091 The Post BlackHat State of AI - When AI Writes Malware" (Security Now (Audio)) - "This is the AI service you should never sign up to" (Smashing Security) - "Ukraine says cyberattack hit Russian e-commerce giant Wildberries amid drone strikes" (The Record from Recorded Future News) - "New Mirai variant adds stealth capabilities to notorious botnet code" (The Record from Recorded Future News) - "Germany moves to give spy agencies hacking and sabotage powers" (The Record from Recorded Future News) - "Microsoft's massive Patch Tuesday releases continue as AI reshapes bug discovery" (The Record from Recorded Future News) - "CISA gives federal agencies two weeks to patch Microsoft bug exploited in DPRK campaign" (The Record from Recorded Future News) This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

  4. Aug 11

    The Autonomy Trap: When Machine-Driven Escalation Outpaces Human Control

    This week's edition explores the systemic risks posed by the rise of autonomous agents and the erosion of the human-in-the-loop assumption in cybersecurity. We analyze the convergence of AI-driven supply chain vulnerabilities, the targeted exploitation of critical utility infrastructure, and the shifting legal landscape of digital liability. Read this edition in full at https://www.pers-int.com/?digest=Cybersecurity%2FCompact_Digests%2Fdaily_digest_compact_2026-08-11_16-05-24.html&channel=Cybersecurity&latest=1 0:00 - Introduction 0:38 - The Rise of the Autonomous Agent 6:50 - Supply Chain and Third-Party Chaos 12:15 - The New Frontier of Cyber Law and Policy 17:26 - Critical Infrastructure Under Fire 22:00 - The Evolution of Modern Extortion 23:57 - Conclusion Referenced sources: - "Using LLMs for Vuln Discovery - Rishi Sharma - ASW #395" (Application Security Weekly (Audio)) - "Why Solve Your Problems When We Can Just Scare You" (CISO Series Podcast) - "How Adobe Uses AI Agents for building a WAF Pipeline" (Cloud Security Podcast) - "Now with extra vulnerabilities." (CyberWire Daily) - "Designing space systems for the AI era." (CyberWire Daily) - "Ring around the ransom." (CyberWire Daily) - "AI without adult supervision." (CyberWire Daily) - "SAFE and sound." (CyberWire Daily) - "NPM Not my problem." (CyberWire Daily) - "Sandworm's poisoned VPN, Royal Navy drones phone China, OpenAI loosens cyber limits" (Cybersecurity Headlines) - "Faked bug reports, Meta's rogue AI, China investigates Palo Alto" (Cybersecurity Headlines) - "ChainDrop hits npm, Pass-ta-key targets passkeys, AI runs amok in Africa" (Cybersecurity Headlines) - "Three interviews system fragility, operational clarity, and Identity for AI agents - Todd Thiemann, Robin Macfarlane, Kyle Sandy - ESW #471" (Enterprise Security Weekly (Audio)) - "Canadian Man Pleads Guilty in Snowflake Extortions" (Krebs on Security) - "Risky Business #847 -- Oops! Claude's accidental hacking spree" (Risky Business) - "Risky Bulletin Meta's AI joins Anthropic and OpenAI in the hacky-hacky" (Risky.Biz) - "Srsly Risky Biz Being a North Korean Hacker Is About to Be Less Fun" (Risky.Biz) - "Risky Bulletin Hacker breaches Hungary's State Treasury" (Risky.Biz) - "SANS Stormcast Tuesday, August 11th, 2026 Solana Attacks; AI Generated Patches; Gunra Ransomware; Neo4JGraphQL Patch" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Thursday, August 6th, 2026 keyvcachable Worm IR; Apple Private Relay Leak; COLDCARD Phish" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Wednesday, August 5th, 2026 Diagnostic Tool Hunt; Device Code Phishing; XCSSET; NuGet API Keys" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SN 1090 Black Hat - The Hidden Flaws in AI Security Nobody Saw Coming" (Security Now (Audio)) - "How a fake police officer nearly stole Graham's cryptocurrency" (Smashing Security) - "Local governments in four states dealing with cyberattacks that have shut down services" (The Record from Recorded Future News) - "Kids' online safety bill faces dim prospects of passage this session despite progress" (The Record from Recorded Future News) - "FBI, South Korea warn of Gunra ransomware gang targeting critical infrastructure" (The Record from Recorded Future News) - "Poland uncovers second heat plant cyberattack that went hidden for months" (The Record from Recorded Future News) - "Senate Democrats introduce bill to distribute $300 million annually to shore up water system cybersecurity" (The Record from Recorded Future News) - "China-linked hackers turning popular cybersecurity tool into ransomware launchpad, Microsoft warns" (The Record from Recorded Future News) - "Water utilities group partners with DEF CON offshoot for Water Watch Center" (The Record from Recorded Future News) - "US cyber ambassador nominee Cassady confirmed in Senate" (The Record from Recorded Future News) - "New Mexico judge orders Meta to pay $567 million in kids online safety case" (The Record from Recorded Future News) - "Military device manufacturer discloses cyber incident to SEC" (The Record from Recorded Future News) - "Irregular, firm behind AI hacking incidents, won't say if there were more" (The Record from Recorded Future News) - "Levi Strauss says hackers breached employee computers, accessed corporate data" (The Record from Recorded Future News) - "French rugby club Stade Français restores systems after cyberattack, probes data leak" (The Record from Recorded Future News) - "Cyberattack on North Carolina Ports 'contained' as Coast Guard, state officials investigate" (The Record from Recorded Future News) - "Belarusian cybercriminal behind Ransom Cartel gets 16-year prison sentence" (The Record from Recorded Future News) - "Chinese telcos maintain deep US presence despite Salt Typhoon links, House committee says" (The Record from Recorded Future News) - "Canadian man pleads guilty to Snowflake hacks that led to 165 breaches" (The Record from Recorded Future News) - "Dutch retailer De Bijenkorf warns customer data may be exposed after cyber incident" (The Record from Recorded Future News) - "Cyberattacks on water systems expand to 12 states as South Dakota, Georgia announce incidents" (The Record from Recorded Future News) - "Anthropic AI agent faked identities, phished real developers in UK government hacking test" (The Record from Recorded Future News) - "Polish convenience store chain Żabka hacked through third-party account" (The Record from Recorded Future News) - "Apple launches new legal challenge against UK over iCloud access" (The Record from Recorded Future News) This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

  5. Aug 4

    The Agentic Age: When Autonomous Systems Outpace Human Defense

    This week's edition examines the erosion of digital boundaries as AI agents transition from linguistic tools to autonomous security actors capable of executing multi-stage intrusions at machine speed. We analyze the convergence of self-optimizing threats, the 'Uber-ization' of state-sponsored espionage, and the critical need to shift from perimeter defense to granular identity and permission management. Read this edition in full at https://www.pers-int.com/?digest=Cybersecurity%2FCompact_Digests%2Fdaily_digest_compact_2026-08-04_14-00-12.html&channel=Cybersecurity&latest=1 0:00 - Introduction 0:34 - The Rise of the Agentic Age 6:29 - Nation-State Shadow Wars 12:47 - Supply Chain and Infrastructure Fragility 17:56 - Modernizing the Defensive Perimeter 21:08 - The Expanding IoT and Hardware Attack Surface 23:09 - Conclusion Referenced sources: - "Prompting for Patches That Fix Vulns Without Adding New Ones - Keith Hoodlet - ASW #394" (Application Security Weekly (Audio)) - "See, Our Compliance Framework Includes a Checkbox for Resilience" (CISO Series Podcast) - "Why Don't You Tell Me Which Metrics Sound Most Impressive" (CISO Series Podcast) - "Why Runtime Agents Are Replacing Static Posture Checks" (Cloud Security Podcast) - "Water you waiting for" (CyberWire Daily) - "The hidden risks in space supply chains." (CyberWire Daily) - "Black Hat preview Vulnerability Research in the Agentic Age." (CyberWire Daily) - "Claude outside the lines." (CyberWire Daily) - "Building a great firewall around AI." (CyberWire Daily) - "You've been disconnected." (CyberWire Daily) - "License plate readers as stalking tools, ExfilSquad dumps UK police data, the ever-shrinking patch window" (Cybersecurity Headlines) - "The Department of Know Minnesota water hack, LLM finds encryption flaw, human error hit Hugging Face" (Cybersecurity Headlines) - "OpenAI agent reaches Modal, Minnesota water systems hacked, fake Russian companies steal real money" (Cybersecurity Headlines) - "Leaky BMCs, Claude finds encryption flaws, Google's new names" (Cybersecurity Headlines) - "Why is Preventative Security So Difficult" (Defense in Depth) - "AppSec, Shopify-Style; State of Mobile Security; the News - Kern Smith, Andrew Dunbar - ESW #470" (Enterprise Security Weekly (Audio)) - "The Man Who Was There For Cybersecurity's Strangest Moments - Mikko Hyppönen" (Hacked) - "Read This Before You Buy That TV Streaming Stick" (Krebs on Security) - "Risky Business #846 -- OpenAI built a fireplace out of wood" (Risky Business) - "Risky Bulletin Russia is behind the recent hotel WiFi hacks" (Risky.Biz) - "Risky Bulletin Non-profit offers $22,000 bounty for INC ransomware group" (Risky.Biz) - "Srsly Risky Biz Chipping Away at Chinese AI Risks" (Risky.Biz) - "Risky Bulletin New Chinese cyber contractor identified" (Risky.Biz) - "SANS Stormcast Tuesday, August 4th, 2026 More Arch Linux AUR trouble; iCloud Sharing; Pass the Passkey" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Monday, August 3rd, 2026 zipdump.py update; Atomic MacOS Analysis; OpenAI Phishing; COLDCARD Vulnerability" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Thursday, July 30th, 2026 Apple Patches; IPMI Admin PW Hash Leak; VMWare Patches; OpenWRT Patch" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "More on the OpenAI Agent's Attack on Hugging Face" (Schneier on Security) - "The OpenAI Hack Shows the Genie Is Out of the Bottle" (Schneier on Security) - "Measuring the Tendency of AI Agents to Go Rogue" (Schneier on Security) - "Long-Lived Vulnerability in Microsoft Secure Boot" (Schneier on Security) - "SN 1089 Models Go Rogue & ExploitGym - Regulators, Start Your Engines" (Security Now (Audio)) - "This job interview could destroy your company" (Smashing Security) - "Bitcoin hardware wallet maker destroys some inventory after more than $88 million stolen" (The Record from Recorded Future News) - "Russian hackers hijack hotel Wi-Fi networks to spy on travelers, Microsoft says" (The Record from Recorded Future News) - "CISA warns of spike in attacks on water systems as Minnesota incidents probed" (The Record from Recorded Future News) - "Anthropic says its AI hacked real-world companies in three incidents" (The Record from Recorded Future News) - "Finland to disconnect fiber-optic link to Russia as lease expires" (The Record from Recorded Future News) - "North Korea's Lazarus Group sharing tools with ransomware hackers, South Korean agencies warn" (The Record from Recorded Future News) - "North Korean hackers behind major open-source supply chain attacks, Amazon says" (The Record from Recorded Future News) - "OpenAI says rogue agent behind Hugging Face hack broke into additional services" (The Record from Recorded Future News) - "Laundry Bear's webmail hackers had more in store after February, report says" (The Record from Recorded Future News) - "India's Bank of Baroda confirms cyber incident after hackers claim data theft" (The Record from Recorded Future News) This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

  6. Jul 21

    The Kinetic Cascade: When Digital Vulnerabilities Trigger Physical Failure

    This week's edition examines the accelerating erosion of the traditional security perimeter as unprecedented vulnerability surges meet automated, agentic exploitation. We analyze the dangerous convergence of software regression and physical supply chain disruption, from ransomware-induced food shortages to the weaponization of IoT for real-time battlefield intelligence. Read this edition in full at https://www.pers-int.com/?digest=Cybersecurity%2FCompact_Digests%2Fdaily_digest_compact_2026-07-21_14-03-40.html&channel=Cybersecurity&latest=1 0:00 - Introduction 0:34 - Patch Tuesday Chaos and the Vulnerability Surge 6:59 - The AI Arms Race: Agents, Hallucinations, and Exploits 12:11 - State-Sponsored Espionage and Global Cyber Warfare 16:49 - Supply Chain Shadows and Critical Infrastructure Hits 20:21 - The Surveillance State: Privacy in the Age of IoT 23:07 - Conclusion Referenced sources: - "Behind the friendly face." (CyberWire Daily) - "For hackers, sharing is caring." (CyberWire Daily) - "Patchapalooza packs a punch." (CyberWire Daily) - "The ransomware toll road." (CyberWire Daily) - "Hugging Face fights AI hacks, World Cup streamers get red cards, WordPress enters a patching race" (Cybersecurity Headlines) - "Fairlife dairy cyberattack, ACR Stealer surge, Abbott Labs incidents" (Cybersecurity Headlines) - "The Department of Know CMMC suspended, ShareFile shutdown, Context Bombing strikes back" (Cybersecurity Headlines) - "Zoom's wake-up call, zero-day SonicWall patch, 23andMe's growing breach bill" (Cybersecurity Headlines) - "CMMC Phase II suspended, tracking troops in Iran, defenders turn to context bombing" (Cybersecurity Headlines) - "Protecting AI Agents in O365 and Google Workspace" (Defense in Depth) - "AI Security at Scale, CMMC phase II paused, and the Weekly Enterprise News - Keith Hollender - ESW #468" (Enterprise Security Weekly (Audio)) - "Microsoft Patches a Record 570 Security Flaws" (Krebs on Security) - "Risky Bulletin Hacker wipes Romania's entire land registry database" (Risky.Biz) - "Srsly Risky Biz Ransomware Uses AI To Amp Up Negotiations" (Risky.Biz) - "SANS Stormcast Friday, July 17th, 2026 Hikvision Scans; LG Spyware; Huggingface Hack; Wordpress Core RCE" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Wednesday, July 15th, 2026 Microsoft Patches; New MSFT Priv Escalation; Progress ShareFile 0-Day; Grok Exfiltration" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "MIT to Become Hotbed of AI Video Surveillance" (Schneier on Security) - "On Flock License Plate Tracking Cameras" (Schneier on Security) - "SN 1087 HalluSquatting, GhostApproval & GitLost - Patch Tuesday Breaks Records" (Security Now (Audio)) - "India says allegedly leaked nuclear plant files pose no safety risk" (The Record from Recorded Future News) - "Hackers were inside South Korea's diplomat training system for 9 months" (The Record from Recorded Future News) - "Software provider to more than 2,000 US hospitals says hackers stole employee and customer data" (The Record from Recorded Future News) - "Dairy company Fairlife suspends production in US after cyber incident" (The Record from Recorded Future News) - "Senator calls on Rubio, Blanche to push back against Canadian surveillance legislation" (The Record from Recorded Future News) - "Sandworm hackers have a CAPTCHA trick for Ukrainians" (The Record from Recorded Future News) - "Scattered Spider hackers sentenced to 5.5 years over £29 million Transport for London hack" (The Record from Recorded Future News) - "Cyberattack on Japan's largest cold-chain operator disrupts KFC, supermarket supplies" (The Record from Recorded Future News) - "LAPD sidelines relationship with license-plate reader company Flock Safety" (The Record from Recorded Future News) - "Microsoft smashes Patch Tuesday record for second successive month" (The Record from Recorded Future News) - "US unseals indictment against alleged operators of Russian bulletproof hosting service" (The Record from Recorded Future News) - "NATO logistics, Ukrainian troops are top subjects of Russian camera hacks, advisory says" (The Record from Recorded Future News) This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

  7. Jul 14

    The Agentic Swarm: Defending Against Autonomous Logic and Identity Dissolution

    This week's edition examines the fundamental shift from static vulnerabilities to a landscape of self-optimizing, autonomous exploits and the rise of 'agent debt' within enterprise environments. We analyze the convergence of state-sponsored espionage, the weaponization of linguistic prompt injection, and the critical need for deterministic architectural boundaries in an era of non-human identities. Read this edition in full at https://www.pers-int.com/?digest=Cybersecurity%2FCompact_Digests%2Fdaily_digest_compact_2026-07-14_15-18-04.html&channel=Cybersecurity&latest=1 0:00 - Introduction 0:36 - The Agentic Attack Surface 6:19 - Privacy, Policy, and the Surveillance State 12:08 - State-Sponsored Espionage and Global Tensions 17:09 - Ransomware Evolution and Extortion Tactics 20:35 - The Future of Infrastructure and Identity 22:57 - Conclusion Referenced sources: - "Discovering & Securing Your AI Agent Attack Surface - Jeremy Snyder - ASW #391" (Application Security Weekly (Audio)) - "The Only Thing Worse Than Technical Debt is Newly Discovered Technical Debt" (CISO Series Podcast) - "What Part of Zero Trust Does Your Exception Not Understand" (CISO Series Podcast) - "The Hidden Cost of BlackBox AI Bridging Cloud and Code Security" (Cloud Security Podcast) - "State of the router." (CyberWire Daily) - "Preparing space for Q-day." (CyberWire Daily) - "Conti-versal opinions." (CyberWire Daily) - "GoshDarn it, that's advanced." (CyberWire Daily) - "Who you gonna call" (CyberWire Daily) - "Welcome home, hacker." (CyberWire Daily) - "Russia's router access routes, MemGhost haunts AI memory, DHS alert got waved off twice" (Cybersecurity Headlines) - "Multifunction Windows backdoor, NSA revives TAO, urgent ShareFile warning" (Cybersecurity Headlines) - "The Department of Know France gets ready for quantum, JadePuffer ransomware, UK's Cyber Shield" (Cybersecurity Headlines) - "Interpol's global fraud sweep, China's Claude Code flag, old Github account tricks" (Cybersecurity Headlines) - "UK Cyber Shield, Japanese telco attack, China AI model limits" (Cybersecurity Headlines) - "Humans Are Bottleneck in a Machine-Speed World" (Defense in Depth) - "Hungry We talk Smoked Meat, Poutine, and Bagel - also, Identiverse Interviews! - John Pritchard, Cassie Christensen, Jaime Lewis-Gross, François Proulx, Kim Brown - ESW #467" (Enterprise Security Weekly (Audio)) - "Risky Bulletin India bans app used to hack e-rickshaws in viral videos" (Risky.Biz) - "Srsly Risky Biz Supreme Court Undermines Section 702" (Risky.Biz) - "Risky Bulletin All new cars to include a camera aimed at the driver's face" (Risky.Biz) - "SANS Stormcast Wednesday, July 8th, 2026 Odd DNS; AnyDesk Phishing; Tenda Backdoor; GitLost" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "AI Surveillance and Social Progress" (Schneier on Security) - "SN 1086 The Apex Agentic Adversary - Visual Prompt Injection Strikes" (Security Now (Audio)) - "JadePuffer - the AI that ran a ransomware attack all by itself" (Smashing Security) - "Russian celebrity journalist Ksenia Sobchak says hackers accessed Telegram channels via email breach" (The Record from Recorded Future News) - "Russia's FSB blamed for Poland grid attack as UK and EU impose first joint cyber sanctions" (The Record from Recorded Future News) - "Europe revives law allowing big tech to scan for CSAM" (The Record from Recorded Future News) - "Ryuk operator pleads guilty; BlackcatAlphV conspirator gets nearly 6-year sentence" (The Record from Recorded Future News) - "License plate cameras may be next target after Supreme Court reins in location tracking" (The Record from Recorded Future News) - "China, India ran separate spying campaigns against same Pakistani police force" (The Record from Recorded Future News) - "Latvian forestry company still restoring systems weeks after ransomware attack" (The Record from Recorded Future News) - "NSA revives 'Tailored Access Operations' name for elite hacking unit" (The Record from Recorded Future News) - "Greek victims file lawsuit against Intellexa over Predator spyware" (The Record from Recorded Future News) - "Taiwan charges two businessmen over alleged role in Chinese espionage campaign" (The Record from Recorded Future News) - "Spain arrests alleged supporter of pro-Russian hacktivist groups after FBI tip" (The Record from Recorded Future News) - "Supreme Court allows Texas app law requiring age verification to take effect" (The Record from Recorded Future News) - "Why We Need Some AI Model Controls" (Unsupervised Learning) This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

  8. Jul 7

    The Algorithmic Attrition: Navigating the Era of Autonomous Adversaries

    This week's edition examines the structural collapse of traditional cybersecurity perimeters as AI-driven agents move from simple phishing tools to end-to-end automated exploit generation. We analyze the systemic risks posed by agentic identity, the erosion of supply chain trust through Git history manipulation, and the widening vulnerability of the global IoT ecosystem. Read this edition in full at https://www.pers-int.com/?digest=Cybersecurity%2FCompact_Digests%2Fdaily_digest_compact_2026-07-07_22-53-26.html&channel=Cybersecurity&latest=1 0:00 - Introduction 0:45 - The Rise of the AI Adversary 7:34 - Supply Chain Vulnerabilities and Identity Crisis 13:58 - Geopolitical Cyber Warfare and State Actors 18:20 - The Broken Trust in Data and Privacy 20:44 - The Expanding Perimeter of IoT and Mobile 23:13 - Conclusion Referenced sources: - "Defense-in-depth strategies for securing mobile applications - Ryan Lloyd - ASW #390" (Application Security Weekly (Audio)) - "What Part of Zero Trust Does Your Exception Not Understand" (CISO Series Podcast) - "Who Governs Your AI Agents Identity, Offboarding & Open Standards" (Cloud Security Podcast) - "Welcome home, hacker." (CyberWire Daily) - "NetNut gets cracked." (CyberWire Daily) - "CyberWire Daily at 10 The vulnerabilities, zero‑days, and hardware flaws over the last decade." (CyberWire Daily) - "The people's AI" (CyberWire Daily) - "The AI lock comes off." (CyberWire Daily) - "The court draws a privacy line." (CyberWire Daily) - "India tax RAT, prompt injection crypto scam, France pushes quantum-safe" (Cybersecurity Headlines) - "First AI ransomware, AdaptHealth suffers cyberattack, UK cyber plan delayed" (Cybersecurity Headlines) - "The Department of Know PeopleSoft exploit, Ford brings back gray beards, LLM vetting" (Cybersecurity Headlines) - "Consumer security worries, Vought supervises spy budgets, Fortibleed exposes Fortinet" (Cybersecurity Headlines) - "Bash hits AI, DHS announces ANCHOR-CI, Aikido buys Root" (Cybersecurity Headlines) - "Even With All These Security Vendors We Still Have Glaring Gaps" (Defense in Depth) - "Mastering agent permissions and Identiverse interviews - Howard Ting, Ajay Gupta, Sandy Bird, Amir Ofek - ESW #466" (Enterprise Security Weekly (Audio)) - "FBI Seizes NetNut Proxy Platform, Popa Botnet" (Krebs on Security) - "Risky Business #844 -- China closes AI vulndev gap as USA lifts Fable ban" (Risky Business) - "Risky Bulletin Android drops PIN guessing limit from 1,800 attempts to just 20" (Risky.Biz) - "Risky Bulletin FatFs bugs enable physical access attacks on a load of devices" (Risky.Biz) - "Risky Bulletin Researcher drops giant cache of zero-day exploits" (Risky.Biz) - "SANS Stormcast Tuesday, July 7th, 2026 RCS and DNS; OpenSSH Update; Beyond Trust Advisory; PolinRider Update" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Wednesday, July 1st, 2026 Apple Patches; SimpleHelp Exploit; Git DNS Tricks;" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "Google Is Suing Chinese Scammers Who Are Using Gemini" (Schneier on Security) - "SN 1085 A SOTA State-Sponsored Campaign - AI's New Superpower Loop Engineering" (Security Now (Audio)) - "Polymarket can predict the future. So how did it miss this hack" (Smashing Security) - "Britain plans to build autonomous AI 'Cyber Shield' to defend nation" (The Record from Recorded Future News) - "Major Japanese telco says cyberattack exposed 12 million emails" (The Record from Recorded Future News) - "Major medical device manufacturer notifies nearly 4 million of breach" (The Record from Recorded Future News) - "Ukrainian media outlets now among 'priority targets' for Russian hackers" (The Record from Recorded Future News) - "Spyware found on phone of European Parliament member probing it" (The Record from Recorded Future News) - "Supreme Court decision threatens EU-US data transfer agreement" (The Record from Recorded Future News) - "Japanese insurer, brewer, manufacturer and telecom disclose cyber breaches" (The Record from Recorded Future News) - "CIA chief highlights major shifts in agency's tech approach" (The Record from Recorded Future News) This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

  9. Jun 23

    The Agentic Collapse: When Autonomous Tools Become Attack Vectors

    This week's edition examines the erosion of the traditional security perimeter as AI agents and automated workflows introduce unprecedented, non-deterministic risks to the enterprise. We analyze the shift from human-scale prompting to machine-speed exploitation, exploring the cascading vulnerabilities found in global software supply chains and the geopolitical implications of state-sponsored infrastructure pre-positioning. Read this edition in full at https://www.pers-int.com/?digest=Cybersecurity%2FCompact_Digests%2Fdaily_digest_compact_2026-06-23_14-00-11.html&channel=Cybersecurity&latest=1 0:00 - Introduction 0:30 - The Agentic Arms Race: Securing the AI Frontier 6:41 - Modern Defense Dilemmas: Policy, Personnel, and Regulation 11:54 - Supply Chain Siege: From NPM to Infrastructure 16:50 - State-Sponsored Shadows: Geopolitical Cyber Warfare 20:24 - The Ransomware Ripple Effect: Impacting Global Industry 22:24 - Conclusion Referenced sources: - "How AI Is Reshaping Identity Security at the Infrastructure Layer - Amit Masand, Neha Duggal, Ev Kontsevoy - ASW #388" (Application Security Weekly (Audio)) - "It's Not That We Don't Value Your Experience, We Just Don't Want to Pay for It" (CISO Series Podcast) - "Boards Love to Hear Jargon, Says Soon-to-Be-Fired CISO (LIVE in Boston)" (CISO Series Podcast) - "The Klue is in the data trail." (CyberWire Daily) - "Vulnerability response Built for humans, outpaced by machines." (CyberWire Daily) - "Peeling back Banana RAT." (CyberWire Daily) - "CyberWire Daily at 10 A decade of leaks, espionage, and influence operations." (CyberWire Daily) - "The botnet browser blues." (CyberWire Daily) - "The nominee in limbo." (CyberWire Daily) - "OpenAI takes on Mythos, Klue hits security shops, Five Eyes has eyes on AI" (Cybersecurity Headlines) - "Brazil phone alert hack, Prinz Eugen ransomware, Congress deepfake bill" (Cybersecurity Headlines) - "The Department of Know SearchLeak, Check Point zero-day, and pulling the plug on Fable" (Cybersecurity Headlines) - "Police clean WordPress sites, Klue OAuth breach, Warner's CISA warnings" (Cybersecurity Headlines) - "Anthropic tells G7 to cooperate, Fortinet VPN leak exposes credentials, Crypto Clipper abuses reviews" (Cybersecurity Headlines) - "Athena coalition, Estonia's quarantine, Arch hit with malware" (Cybersecurity Headlines) - "Navigating Shadow AI in the Enterprise, Verizon's SECOND 2026 report, and the news - Ankita Gupta - ESW #464" (Enterprise Security Weekly (Audio)) - "Risky Business #842 -- Anthropic needs an adult in the C suite" (Risky Business) - "Risky Bulletin Klue breach impacts security firms" (Risky.Biz) - "Risky Bulletin Canada's spy agency allowed to remove a botnet from Canadian devices" (Risky.Biz) - "Srsly Risky Biz Anthropic Lacks Emotional Intelligence" (Risky.Biz) - "SANS Stormcast Tuesday, June 23rd, 2026 Webshells; GitHub Actions Update; Fortibleed Update; Private Access Control Tokens" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Thursday, June 18th, 2026 QUIC Challenge; Android 17; Oracle CSPU; JetBrains Plugins;" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Wednesday, June 17th, 2026 VHDX to Remocs RAT; Fake Job Offer; OpenBSD Vuln; Copilot M365 Leakage" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "Anthropic's Fable and the State of AI" (Schneier on Security) - "Embedding Forbidden Text in Spyware to Discourage AI Analysis" (Schneier on Security) - "AI Use by the US Government" (Schneier on Security) - "SN 1083 Patch Tuesday à la AI - Arch Linux Repo Under Siege" (Security Now (Audio)) - "AI gets hacked, and BitLocker gets bypassed" (Smashing Security) - "Police raid malware network tied to Russia's Evil Corp hacker group" (The Record from Recorded Future News) - "Australian sugar producer works to restore operations as ransomware group claims attack" (The Record from Recorded Future News) - "Hostile states behind three-quarters of attacks on Britain's critical infrastructure, cyber chief warns" (The Record from Recorded Future News) - "EU grants Ukraine access to cybersecurity reserve for major attacks" (The Record from Recorded Future News) - "Warner warns of CISA cuts, staffing gaps in letter to acting chief" (The Record from Recorded Future News) - "GitHub dismissed security reports on flaws now exploited by supply-chain worm, researchers say" (The Record from Recorded Future News) This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

  10. Jun 16

    The Vanishing Buffer: Surviving the Era of Machine-Speed Exploitation

    This week's edition examines the collapse of the temporal defense window as autonomous agents shrink the patch-to-exploit cycle to mere minutes. We analyze the strategic shift from perimeter defense to automated triage in the face of agentic worms, supply chain poisoning, and the weaponization of orbital infrastructure. Read this edition in full at https://www.pers-int.com/?digest=Cybersecurity%2FCompact_Digests%2Fdaily_digest_compact_2026-06-16_14-00-12.html&channel=Cybersecurity&latest=1 0:00 - Introduction 0:33 - The AI Arms Race: From Coding Assistants to Agentic Threats 6:21 - Patching at the Speed of Light: Navigating the Vulnerability Surge 12:10 - Geopolitical Cyber Warfare: Espionage and Infrastructure Sabotage 18:45 - Supply Chain Siege: Protecting the Software Factory 21:00 - The New Digital Frontier: Securing Space and Satellite Assets 23:00 - Conclusion Referenced sources: - "Why Does It Matter Who or What Created the Code - Matias Madou - ASW #387" (Application Security Weekly (Audio)) - "Boards Love to Hear Jargon, Says Soon-to-Be-Fired CISO (LIVE in Boston)" (CISO Series Podcast) - "The fable ends before it begins." (CyberWire Daily) - "Securing satellites already in space, with journalist Shaun Waterman." (CyberWire Daily) - "Vulnerability management at AI speed." (CyberWire Daily) - "Deadline-driven defense." (CyberWire Daily) - "The court calls Google's bluff." (CyberWire Daily) - "A checkmark for trust, a payload for theft." (CyberWire Daily) - "Anthropic models defended, FBI shuts down massive phishing service, 1Password acquires Apono" (Cybersecurity Headlines) - "The Department of Know CISA's quick patch, Miasma attacks, judge finds AI guilty" (Cybersecurity Headlines) - "Fortinet patches FortiSandbox, GitHub disables npm scripts, Nottingham University breach" (Cybersecurity Headlines) - "Big Patch Tuesday, 'Nightmare Eclipse' drops Windows 0-day, Claude Fable restricted at Microsoft" (Cybersecurity Headlines) - "Fable 5, Tchap hacked, CISA priorities" (Cybersecurity Headlines) - "Safe AI at scale, what happens after initial access, and the weekly enterprise news - Albert Estevez Polo, Shiva Pillay - ESW #463" (Enterprise Security Weekly (Audio)) - "A Record-Breaking Patch Tuesday for June 2026" (Krebs on Security) - "Risky Business #841 -- Microsoft gets owned and 0day'd" (Risky Business) - "Risky Bulletin Arch Linux supply chain attack spreads to 1,900+ AUR packages" (Risky.Biz) - "Risky Bulletin In the age of AI, CISA changes federal patching rules" (Risky.Biz) - "Risky Bulletin Meta says NSO violated court order with new campaign targeting WhatsApp" (Risky.Biz) - "SANS Stormcast Monday, June 15th, 2026 Arch Linux Malicious User Packages; Splunk Vuln and Exploit; Exploiting AI Coding Agents" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Friday, June 12th, 2026 Bitlocker Trouble; Ivanti and Oracle Exploited; macOS Malicious Installers" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Thursday, June 11th, 2026 Framing Protections; npm improvements; Adobe Patches; New Defender 0-day" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SN 1082 The Malicious Use of AI - Anthropic's Red Team Report" (Security Now (Audio)) - "This AI worm just rewrote its own rules" (Smashing Security) - "Estonia to quarantine emails sent from Russian .ru domain before they reach government officials" (The Record from Recorded Future News) - "Cyberattack on Russian tech firm Astral disrupts business, government services for week" (The Record from Recorded Future News) - "Finland brings charges against cargo ship officers for cutting submarine cables" (The Record from Recorded Future News) - "Belarus-linked hackers target Gmail accounts of Polish public figures and their families" (The Record from Recorded Future News) - "British high school sends students home following cyberattack" (The Record from Recorded Future News) - "Hacker linked to Void Blizzard faces charges over cyberespionage campaign" (The Record from Recorded Future News) - "CISA to require federal agencies to patch some cyber vulnerabilities within 3 days" (The Record from Recorded Future News) - "Cyberattack shuts down major Australian sugar mills, disrupting harvest" (The Record from Recorded Future News) - "Microsoft ships largest Patch Tuesday on record, with one bug under active attack" (The Record from Recorded Future News) - "UK weakens proposed telecoms defenses against Chinese hackers after industry pushback" (The Record from Recorded Future News) - "CISA to transform how it assesses cyber vulnerabilities and risks, Andersen says" (The Record from Recorded Future News) - "Hackers pose as women seeking romance to spy on Russian soldiers" (The Record from Recorded Future News) This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

  11. Jun 9

    The Automating Breach: When Machine-Speed Exploits Erase the Perimeter

    This week's edition examines the systemic collapse of digital borders as geopolitical warfare and agentic AI converge to eliminate the concept of a secure zone. We analyze the transition from reactive patching to a necessity for autonomous, multi-agent defense in an era of automated, high-frequency exploitation. Read this edition in full at https://www.pers-int.com/?digest=Cybersecurity%2FCompact_Digests%2Fdaily_digest_compact_2026-06-09_14-26-09.html&channel=Cybersecurity&latest=1 0:00 - Introduction 0:34 - Geopolitical Cyber Warfare and Digital Sovereignty 8:12 - The AI Arms Race: From Agentic Defense to Automated Exploits 15:40 - The Human Element: Social Engineering and Identity Theft 18:37 - Shadows in the Supply Chain: Vulnerabilities in the Modern Stack 20:41 - Conclusion Referenced sources: - "Scanner Results Are a Starting Point. Here's What Comes Next. - Federico Kirschbaum - ASW #386" (Application Security Weekly (Audio)) - "You've been muted...permanently." (CyberWire Daily) - "The NSA gets an AI upgrade." (CyberWire Daily) - "Not every headhunter is hiring." (CyberWire Daily) - "The AI race gets a referee." (CyberWire Daily) - "The bugs are piling up faster than the fixes." (CyberWire Daily) - "Claude & Gemini malware, Mythos sneaky flaws, Instagram AI abuse" (Cybersecurity Headlines) - "CISA Palantir Director, EU tech sovereignty, SolarWinds Serv-U flaw" (Cybersecurity Headlines) - "The Department of Know NVD audit, Meta's leaky AI, Microsoft is closer to quantum" (Cybersecurity Headlines) - "Chinese cybercrime group, Cisco CM flaw, CISA faces changes" (Cybersecurity Headlines) - "Illegal streamers, EU digital sovereignty, cost of a cyber force" (Cybersecurity Headlines) - "Russia claims officials' surveillance, Project Glasswing expands, CISA flags two-year-old Oracle flaw" (Cybersecurity Headlines) - "The State of AI in SecOps, the Unintended Consequences of Vulnmaxxing, and the News - Filip Stojkovski - ESW #462" (Enterprise Security Weekly (Audio)) - "Soap Box Detection and response in the AI age" (Risky Business) - "Risky Business #840 -- Microsoft walks back researcher threats" (Risky Business) - "Risky Bulletin RubyGems adds dependency cooldowns to counter supply chain attacks" (Risky.Biz) - "Risky Bulletin The EU debuts digital sovereignty plan" (Risky.Biz) - "Srsly Risky Biz NATO's Cyber Approach Needs Change" (Risky.Biz) - "Risky Bulletin A tenth of all new domains last year were malicious" (Risky.Biz) - "SANS Stormcast Tuesday, June 9th, 2026 Azure Repos Infected; Checkpoint VPN 0-Day; Verizon VoLTE missing IPSec integrity prot." (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Friday, June 5th, 2026 Coreutils for Windows; Cisco Unified Comm Manager Fix and Exploit; OAuth Orphans" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Wednesday, June 3rd, 2026 SVG Phishing; Android Patches; Poly Voice Vuln; Ivanti Neurons Priv Escelation" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "The Intersection of Encryption and AI" (Schneier on Security) - "SN 1081 AI Captured the Flag - Personal AI Productivity Superpower or Privacy Threat" (Security Now (Audio)) - "This AI security flaw might be impossible to fix" (Smashing Security) - "Armenia's pro-Europe party wins election despite Russia-linked disinformation" (The Record from Recorded Future News) - "WhatsApp says NSO targeted users with spearfishing attacks in violation of court order" (The Record from Recorded Future News) - "Russia upgrades rules for its digital spy system to better track citizens online" (The Record from Recorded Future News) - "EU unveils tech sovereignty package to cut reliance on US, Chinese suppliers" (The Record from Recorded Future News) - "Apple removes Russia's state-backed messaging app Max from its store" (The Record from Recorded Future News) - "Trump considers Palantir exec to lead CISA" (The Record from Recorded Future News) - "Russia seeks to label two anti-Kremlin hacker groups as 'extremist'" (The Record from Recorded Future News) This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

  12. Jun 5

    The Permission Crisis: From Guarding Perimeters to Auditing Autonomy

    This week's edition examines the fundamental shift in cybersecurity from defending static network boundaries to managing the volatile logic of autonomous AI agents. We analyze how the rise of agentic workflows and the erosion of the traditional perimeter are transforming the core mission of the CISO from vulnerability patching to the auditing of delegated authority. Read this edition in full at https://www.pers-int.com/?digest=Cybersecurity%2FCompact_Digests%2Fdaily_digest_compact_2026-06-05_15-45-37.html&channel=Cybersecurity&latest=1 0:00 - Introduction 0:34 - The AI Arms Race: Agents, Prompts, and Prompt Injection 8:17 - The Vulnpocalypse: Managing the Growing Patch Backlog 15:16 - State-Sponsored Shadows: Geopolitics and Global Cyber Warfare 18:44 - Identity Under Siege: OAuth, Social Engineering, and MFA Bypasses 20:47 - Beyond the Perimeter: Securing the Modern Enterprise Ecosystem 22:38 - Conclusion Referenced sources: - "BadHost, Dead CTFs, Exploding NPMs, and the Verizon DBIR - ASW #385" (Application Security Weekly (Audio)) - "Our Data Security Policy Is Transparent in That It Doesn't Exist" (CISO Series Podcast) - "Not every headhunter is hiring." (CyberWire Daily) - "The AI race gets a referee." (CyberWire Daily) - "The bugs are piling up faster than the fixes." (CyberWire Daily) - "The skills pay the bills." (CyberWire Daily) - "Mind the gap between IT and OT." (CyberWire Daily) - "Chinese cybercrime group, Cisco CM flaw, CISA faces changes" (Cybersecurity Headlines) - "Illegal streamers, EU digital sovereignty, cost of a cyber force" (Cybersecurity Headlines) - "Russia claims officials' surveillance, Project Glasswing expands, CISA flags two-year-old Oracle flaw" (Cybersecurity Headlines) - "Meta AI hands over Instagram access, Dutch police dismantle botnet, RedHat packages backdoored" (Cybersecurity Headlines) - "GlobalProtect VPN exploited, ChatGPT share links exploits, Feds criticize NIST" (Cybersecurity Headlines) - "The Department of Know Google's CodeMender, CISA's big leak, Torvalds open-source warning" (Cybersecurity Headlines) - "Soap Box Detection and response in the AI age" (Risky Business) - "Risky Business #840 -- Microsoft walks back researcher threats" (Risky Business) - "SANS Stormcast Friday, June 5th, 2026 Coreutils for Windows; Cisco Unified Comm Manager Fix and Exploit; OAuth Orphans" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SANS Stormcast Thursday, June 4th, 2026 swagger.json Scans; Android Fake Call Detection; Anthropic Dashboard" (SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)) - "SN 1081 AI Captured the Flag - Personal AI Productivity Superpower or Privacy Threat" (Security Now (Audio)) - "This AI security flaw might be impossible to fix" (Smashing Security) This episode is independent commentary and is not affiliated with, sponsored by, or endorsed by the sources listed above.

About

We listen to hundreds of expert podcasts so you don't have to find them yourself. Each Metacast distils the most important cybersecurity conversations into one short briefing — telling you what matters, who said it, and which episodes to hear next. A Personalised Intelligence production — www.pers-int.com