Initial Access

Bishop Fox

Bishop Fox offensive security researchers, experts, and hackers take a real look at the latest cybersecurity news headlines and have a straight take on them. The goal is simple: do you actually need to care about this, or is it just another variation of the same fundamental security problems we've been dealing with for years?

  1. -5 j

    FIFA Takeover, FFMpeg RCE, Klue Breach, Hardware Hacking

    This episode breaks down a public FIFA signup form wired straight to World Cup broadcast controls, an FFmpeg RCE buried in half your media apps, a SaaS breach cascading through delegated OAuth, and home routers conscripted into proxy infrastructure, plus a sit-down with Bishop Fox's Marco Sanchez on hardware hacking.  Security Headlines: I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID, BobDaHacker FFmpeg fixes PixelSmash flaw in widely used video decoder, BleepingComputer Klue hack results in data breach at several cybersecurity firms, TechCrunch How Hackers Found a Back Door Into the American Living Room, The Wall Street Journal  Also Mentioned:  Workshop: Debug to Root: A Friendly Introduction to Hardware Hacking (available in English and Spanish) Virtual Session: Beyond the Hype: What Mythos Actually Means for Security Teams Event: SummerCon 2026 XKCD Comic: Dependency Join the conversation in the Bishop Fox Discord Server.

    51 min

  2. 22 juin

    Pokémon GO, ServiceNow Auth Flaw, and the Anthropic Model Pulldown

    This episode explores what happens when the systems people trust quietly extend into domains they never agreed to. A Pokémon GO AR dataset trained a Visual Positioning System now adjacent to military drone navigation. A ServiceNow authentication flaw handed attackers read access to the operational core of enterprise IT. And the US government pulled two frontier AI models off the market over a jailbreak, with no established framework to bring them back.

    55 min

  3. 15 juin

    Linux NFTables Root Exploit, Gemini Prompt Injection, and Cisco SD-WAN Zero-Day

    This episode explores how the attack surface keeps expanding at every layer — from a single inverted kernel character enabling unauthenticated root, to AI assistants weaponized as system-wide IPC through notification injection, a Cisco SD-WAN zero-day giving attackers control of enterprise routing fabric, and the week's unavoidable elephant: whether Claude Fable V's guardrails actually hold.

    36 min

  4. 9 juin

    Forged VPN Sessions, Autonomous AI Worm, and Hotel Reservation Hijacking

    This episode explores how attackers live in the gap between what a system can verify and what it settles for from forged GlobalProtect VPN sessions to an autonomous AI worm, a social-engineered Meta support bot, voice-phished Salesforce access, and hotel reservation hijacking.

    49 min

  5. 1 juin

    Custom Payload Evasion, Chained Network-to-Physical Breach, and Satellite Hacking

    This episode goes inside the Bishop Fox Red Team — exploring how AI accelerates custom payload evasion and social engineering at scale, what a chained network-to-physical breach looks like in practice, and why satellites and gas pumps are reachable from the public internet right now.

    47 min

  6. 26 mai

    VS Code Supply Chain Attack, Microsoft Exchange Zero-Day, and AI-Accelerated Vulnerability Discovery

    This episode explores how attackers exploit infrastructure that became load-bearing before anyone secured it from a malicious VS Code extension that compromised thousands of GitHub repositories and an actively exploited Exchange zero-day, to Cisco SD-WAN auth bypasses, AI chaining low-severity bugs into real attack paths, and AWS GovCloud credentials left exposed in a public repo.

    27 min

  7. 18 mai

    AI Zero-Day Exploit, CI/CD Supply Chain Poisoning, and Vibe-Coded Data Exposure

    This episode explores how modern development's trust assumptions keep failing in attackers' favor, from the first confirmed AI-written zero-day to a coordinated supply chain attack poisoning 518 million download paths, developer credential harvesting via rootkit, AWS SES abuse for phishing at scale, and thousands of vibe-coded apps leaking sensitive data in the open web.

    46 min

  8. 11 mai

    Linux Kernel Exploit, GitHub RCE, and Canvas Cyberattack

    This episode explores how every layer of the stack has become an attack surface — from a privilege-escalating Linux kernel flaw and a GitHub infrastructure RCE to a poisoned RubyGems supply chain, a trojanized vendor installer, and a ransomware hit on centralized education infrastructure.

    48 min
Tout afficher (23)

À propos

Bishop Fox offensive security researchers, experts, and hackers take a real look at the latest cybersecurity news headlines and have a straight take on them. The goal is simple: do you actually need to care about this, or is it just another variation of the same fundamental security problems we've been dealing with for years?

Informations

  • Création
    Bishop Fox
  • Années d’activité
    2 k
  • Épisodes
    23
  • Classification
    Contenu explicite
  • Copyright
    © 2026 Bishop Fox
  • Site web de l’émission
    Initial Access