Talkin' Bout [Infosec] News

This week, the team discusses the White House's Initiative Gold Eagle and its implications for cybersecurity information sharing, an unexpectedly positive development involving Flock Safety, and the latest wave of AI news. The conversation also explores evolving AI model capabilities, security guardrails, open-weight Chinese models, and how AI is changing offensive and defensive security. Along the way, the hosts examine recent vulnerability research, industry reactions, and other cybersecurity headlines from the week.
Join us LIVE on Mondays, 4:30pm EST.
A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.
https://www.youtube.com/@BlackHillsInformationSecurity
Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

Chapters

(00:00) - PreShow Banter™ — The Two Jokes

(01:58) - Initiative Gold Eagle - 2026-07-20

(12:24) - Story #1 - White House Launches Gold Eagle Initiative for Unprecedented Cybersecurity Vulnerability Coordination

(18:58) - Story #2 - Microsoft Reins in RoguePlanet Zero-Day Threat

(21:48) - Story #3 - Now, defenders are embracing the prompt injection, too

(27:45) - Story #4 - Security incident disclosure — July 2026

(33:38) - Story #5 - Chinese AI has leveled up, and brought renewed focus on the open weight model shift

(44:25) - Story #6 - LAPD lets contract with surveillance giant Flock expire, citing ‘serious concerns’ over civil liberties and privacy

(47:24) - Story #7 - Inside Pegasus: The evolution of the world’s most notorious spyware system

(48:38) - Story #8a - WP2SHELL: PRE AUTHENTICATION RCE IN WORDPRESS CORE

(51:49) - Story #8b - Cloudflare WAF protects WordPress applications from two high-severity vulnerabilities

(53:20) - Story #9 - Cyberattack threatens utterly critical infrastructure in Japan: KFC

(58:10) - Paul’s Workshop

(01:00:29) - Sign up for the AI Summit to see Matt’s talk

(01:02:45) - Bronwen’s Workshop

(01:07:10) - Wild West Hackin’ Fest

(01:07:25) - DeathCon

(01:09:08) - PostShow Banter - Retirement Funds

LinksStory #1 - White House Launches Gold Eagle Initiative for Unprecedented Cybersecurity Vulnerability Coordination
Story #2 - Microsoft Reins in RoguePlanet Zero-Day Threat
Story #3 - Now, defenders are embracing the prompt injection, too
Story #4 - [Huggingface] Security incident disclosure — July 2026
Story #5 - Chinese AI has leveled up, and brought renewed focus on the open weight model shift
Story #6 - LAPD lets contract with surveillance giant Flock expire, citing ‘serious concerns’ over civil liberties and privacy
Story #7 - Inside Pegasus: The evolution of the world’s most notorious spyware system
Story #8a - WP2SHELL: PRE AUTHENTICATION RCE IN WORDPRESS CORE
Story #8b - Cloudflare WAF protects WordPress applications from two high-severity vulnerabilities
Story #9 - Cyberattack threatens utterly critical infrastructure in Japan: KFC
Paul’s Workshop
Sign up for the AI Summit to see Matt’s talk
Bronwen’s Workshop
Wild West Hackin’ Fest
DeathCon

Creators & Guests

Corey Ham - Host

Ralph May - Host

John Strand - Host

Paul Clark - Guest

Wade Wells - Host

Meagan Bentley - Producer

Bronwen Aker - Host

Matt Franz - Guest

Click here to watch this episode on YouTube.

Click here to view the episode transcript.

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits 
https://poweredbybhis.com

Brought to you by:
Black Hills Information Security 
https://www.blackhillsinfosec.com

☯️ Introducing BHIS Fusion Penetration Testing
https://www.blackhillsinfosec.com/fusion-penetration-testing/
Antisyphon Training
https://www.antisyphontraining.com/

Active Countermeasures
https://www.activecountermeasures.com

Wild West Hackin Fest
https://wildwesthackinfest.com

This week, the team unpacks a wide range of cybersecurity news, including a fraudulent offensive security startup tied to cybercriminals, how leaked OnlyFans content is inadvertently helping defenders identify compromised government websites, and new vishing attacks targeting Microsoft Entra passkey enrollment. They also examine AI prompt injection risks in GitHub workflows, malware campaigns abusing hundreds of GitHub repositories and Go packages, Microsoft's latest identity security developments, and the growing push for online age verification through government-issued IDs and selfies.
Join us LIVE on Mondays, 4:30pm EST.
A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.
https://www.youtube.com/@BlackHillsInformationSecurity
Chat with us on Discord! -
https://discord.gg/bhis
🔴live-event-chat

Chapters

(00:00) - PreShow Banter™ — The New Mainframes

(05:24) - OnlyFans Models are Accidental Blue Team Defenders - 2026-07-13

(06:23) - Story #1 - Felons, Fraudsters Flog Offensive Cybersecurity Startup

(15:37) - Story #2 - OnlyFans Models Are Accidentally Making Hacked Government Websites Disappear

(20:37) - Story #3 - Vishing actors target Entra passkey enrollment

(32:44) - Story #4 - GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos

(46:32) - Story #5 - Network of 200 GitHub Repositories Used for Malware Infection

(48:13) - Story #6 - Microsoft admits Windows 11 has a GDID tracker with no off switch, first documented publicly in an FBI hacker complaint

(53:53) - Story #7 - EU Reddit Users Must Verify Age With Government ID or Selfie

(59:39) - Story #8 - Risky Bulletin: All new cars to include a camera aimed at the driver's face

Links
Story #1 - Felons, Fraudsters Flog Offensive Cybersecurity Startup
Story #2 - OnlyFans Models Are Accidentally Making Hacked Government Websites Disappear
Story #3 - Vishing actors target Entra passkey enrollment
Story #4 - GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos
Story #5 - Network of 200 GitHub Repositories Used for Malware Infection
Story #6 - Microsoft admits Windows 11 has a GDID tracker with no off switch, first documented publicly in an FBI hacker complaint
Story #7 - EU Reddit Users Must Verify Age With Government ID or Selfie
Story #8 - Risky Bulletin: All new cars to include a camera aimed at the driver’s face
Creators & Guests

John Strand - Host

Mishaal Khan - Guest

Ralph May - Host

Meagan Bentley - Producer

Bronwen Aker - Host

Wade Wells - Host

Doc Blackburn - Guest

Jake Hildreth - Guest

Click here to watch this episode on YouTube.

Click here to view the episode transcript.

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits 
https://poweredbybhis.com

Brought to you by:
Black Hills Information Security 
https://www.blackhillsinfosec.com

☯️ Introducing BHIS Fusion Penetration Testing
https://www.blackhillsinfosec.com/fusion-penetration-testing/
Antisyphon Training
https://www.antisyphontraining.com/

Active Countermeasures
https://www.activecountermeasures.com

Wild West Hackin Fest
https://wildwesthackinfest.com

This episode of BHIS - Talkin' Bout [infosec] News covers the latest cybersecurity headlines, including debate over the economics of AI infrastructure, updates on the Huntress controversy, new details surrounding Scattered Spider, a critical Microsoft SharePoint vulnerability, and reports of a breach involving a DHS information-sharing network. The discussion also examines Apple's legal battles over alternative app stores, the limitations of Apple's Hide My Email feature, a Medtronic breach, firmware security, Palo Alto Networks attribution disputes, and other notable security stories that didn't make the main rundown.
Join us LIVE on Mondays, 4:30pm EST.
A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.
https://www.youtube.com/@BlackHillsInformationSecurity
Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

Chapters

(00:00) - PreShow Banter™ — Ask GPU

(02:09) - Story # 0: The memory crisis heads to court as class-action lawsuit filed against Samsung, SK Hynix, and Micron

(05:15) - Apple's Hide My Email ... Doesn't! – 2026-07-06

(08:38) - Story #1 - These Recent Insider Threat Allegations

(12:53) - Story #2a - Alleged Scattered Spider hacker extradited to the United States

(16:40) - Story #3 - US Department of Homeland Security says it is probing a cyber breach at information-sharing network

(22:20) - Story #5 - Espionage Against the European Parliament

(28:33) - Story #6a - Sony Is Going Disc-Free: What It Means for PS6 and Your Wallet

(33:35) - Story #6b - Resetting XBOX

(38:51) - Story #7 - Command & Conquer Generals: Zero Hour — macOS, iOS & iPadOS

(42:47) - Story #8 - Medtronic notifies customers impacted by ShinyHunters data breach

(43:56) - Story #9 - Flipper Zero firmware development continues with community help

(55:18) - Story #10 - Amazon will stop accepting new customers for Mechanical Turk

(59:06) - Fletus’ YouTube Channel

(59:42) - Doc’s Upcoming Workshop

(01:03:22) - Story #11 - Apple ‘Hide My Email’ Vulnerability Reveals Peoples’ Real Email Addresses

(01:03:56) - Story #12 - Startup sues Palo Alto Networks' Koi Security, saying an AI-hallucinated report falsely linked it to Chinese espionage

Links
Story # 0: The memory crisis heads to court as class-action lawsuit filed against Samsung, SK Hynix, and Micron
Story #1 - These Recent Insider Threat Allegations
Story #2a - Alleged Scattered Spider hacker extradited to the United States
Story #3 - US Department of Homeland Security says it is probing a cyber breach at information-sharing network
Story #5 - Espionage Against the European Parliament
Story #6a - Sony Is Going Disc-Free: What It Means for PS6 and Your Wallet
Story #6b - Resetting XBOX
Story #7 - Command & Conquer Generals: Zero Hour — macOS, iOS & iPadOS
Story #8 - Medtronic notifies customers impacted by ShinyHunters data breach
Story #9 - Flipper Zero firmware development continues with community help
Story #10 - Amazon will stop accepting new customers for Mechanical Turk
Fletus’ YouTube Channel
Doc’s Upcoming Workshop
Story #11 - Apple ‘Hide My Email’ Vulnerability Reveals Peoples’ Real Email Addresses
Story #12 - Startup sues Palo Alto Networks’ Koi Security, saying an AI-hallucinated report falsely linked it to Chinese espionageCreators & Guests

Corey Ham - Host

John Strand - Host

Wade Wells - Host

Doc Blackburn - Guest

Hayden Covington - Host

Ralph May - Host

Fletus Poston - Guest

Ryan Poirier - Producer

Click here to watch this episode on YouTube.

Click here to view the episode transcript.

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits 
https://poweredbybhis.com

Brought to you by:
Black Hills Information Security 
https://www.blackhillsinfosec.com

Antisyphon Training
https://www.antisyphontraining.com/

Active Countermeasures
https://www.activecountermeasures.com

Wild West Hackin Fest
https://wildwesthackinfest.com

This week on BHIS - Talkin' Bout [infosec] News, the team discusses the Polymarket supply chain compromise that led to the theft of millions from a small number of high-value accounts, emerging phishing campaigns abusing OpenAI invitations and Microsoft 365 device code authentication, and recent Oracle security updates. They also cover convictions tied to the Transport for London and U.S. healthcare intrusions, Google's Android earthquake warning system, concerns over MITRE ATT&CK evaluation methodology, and the ongoing debate surrounding threat intelligence researchers interacting with cybercriminals.
Join us LIVE on Mondays, 4:30pm EST.
A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.
https://www.youtube.com/@BlackHillsInformationSecurity
Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

Chapters

(00:00) - PreShow Banter™ — The Next Webcast Thing

(00:14) - Polymarket's Bad Bet with Third-Party Vendors - 2026-06-29

(03:56) - Story #1 - It's looking like a hot, messy summer for security teams as AI finds countless previously hidden vulns

(07:49) - Story #2 - FBI issues urgent Kali365 security warning for Teams, Outlook, OneDrive users

(08:55) - Story #3 - heavener: This is what happens when you can't afford EDR licenses

(18:50) - Story #4 - Ex-Huntress analyst claims company insider fed info to a ransomware crim. Social media drama ensues

(31:59) - Story #5 - I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID.

(36:14) - Story #6 - CISA Adds Four Known Exploited Vulnerabilities to Catalog

(37:09) - Story #7 - Victory! 702 has Expired!

(37:43) - Story #8 - Scattered Spider Hackers Plead Guilty on Day 1 of Trial

(40:52) - Story #9 - Polymarket customers lose $3 million in supply-chain attack

(44:56) - Story #10 - Bad cybersecurity by Secret Service agents put US officials at risk, inspector general says

(49:31) - Story #11 - How Android Earthquake Alerts System Works

(53:47) - Story #12 - Cybersecurity firms targeted by fraudulent OpenAI organization invites

(59:34) - Story #13a - The Trojan horse of cybercrime: Weaponizing SaaS notification pipelines

(59:59) - Story #13b - Order-tracking app Shop abused to push callback phishing attacks

(01:04:29) - Chinese AI vs. Anthropic Mythos | BHIS [In Focus]

Links
Story #1 - It’s looking like a hot, messy summer for security teams as AI finds countless previously hidden vulns
Story #2 - FBI issues urgent Kali365 security warning for Teams, Outlook, OneDrive users
Story #3 - heavener: This is what happens when you can’t afford EDR licenses
Story #4 - Ex-Huntress analyst claims company insider fed info to a ransomware crim. Social media drama ensues
Story #5 - I Could’ve Rickrolled the Entire FIFA World Cup. All I Needed Was My ID.
Story #6 - CISA Adds Four Known Exploited Vulnerabilities to Catalog
Story #7 - Victory! 702 has Expired!
Story #8 - Scattered Spider Hackers Plead Guilty on Day 1 of Trial
Story #9 - Polymarket customers lose $3 million in supply-chain attack
Story #10 - Bad cybersecurity by Secret Service agents put US officials at risk, inspector general says
Story #11 - How Android Earthquake Alerts System Works
Story #12 - Cybersecurity firms targeted by fraudulent OpenAI organization invites
Story #13a - The Trojan horse of cybercrime: Weaponizing SaaS notification pipelines
Story #13b - Order-tracking app Shop abused to push callback phishing attacks
Chinese AI vs. Anthropic Mythos | BHIS [In Focus]

Creators & Guests

John Strand - Host

Bronwen Aker - Host

Corey Ham - Host

Meagan Bentley - Producer

Wade Wells - Host

Ralph May - Host

Hayden Covington - Host

Click here to watch this episode on YouTube.

Click here to view the episode transcript.

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits 
https://poweredbybhis.com

Brought to you by:
Black Hills Information Security 
https://www.blackhillsinfosec.com

Antisyphon Training
https://www.antisyphontraining.com/

Active Countermeasures
https://www.activecountermeasures.com

Wild West Hackin Fest
https://wildwesthackinfest.com

This week’s episode covers a series of cybersecurity stories, including a researcher’s discovery of vulnerabilities in FIFA’s World Cup platform that could have enabled unauthorized administrative access and even the ability to alter live broadcasts. The team also discusses the risks of large-scale identity verification data exposure, supply chain attacks impacting the scientific research community, ongoing fallout from Broadcom’s VMware acquisition, and legal challenges from major organizations facing rising VMware costs. Along the way, the hosts share commentary on AI-related security concerns, access control failures, and the broader impact of vendor decisions on enterprise security.
Join us LIVE on Mondays, 4:30pm EST.
A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.
https://www.youtube.com/@BlackHillsInformationSecurity
Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

Chapters

(00:00) - PreShow Banter™ — There's always more suppply chain

(04:52) - Rickrolling the FIFA World Cup - 2026-06-22

(07:59) - Story #1 - Texas Government Data Breach Exposes 3 Million Driver’s License Records

(10:56) - Story #2 - I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID.

(21:00) - Story #3 - FortiBleed: 75,000 Fortinet Firewalls Compromised: Global Enterprises Exposed – Claim Your Ethical Disclosure

(23:58) - Story #4a - Stakeholder-Specific Vulnerability Categorization (SSVC)

(25:44) - Story #4b - CVSS Is Officially Dead: What CISA's BOD 26-04 Means for Everyone

(37:19) - Story #5 - Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformatics and MCP Developers via Malicious PyPI Wheels

(43:56) - Story #6 - FBI disrupts massive AI-powered phishing service using a million URLs

(46:12) - Story #7 - Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure

(47:12) - Story #8 - AI models that can take down governments and business months away, rare Five Eyes statement warns

(48:44) - Story #9 - ANTHROPIC’S MYTHOS AI BROKE INTO ALMOST ALL NSA CLASSIFIED SYSTEMS IN HOURS

(58:45) - Story #10 - Tesco moving 40,000 server workloads off VMware amid Broadcom’s “abusive conduct”

Links
Story #1 - Texas Government Data Breach Exposes 3 Million Driver’s License Records
Story #2 - I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID.
Story #3 - FortiBleed: 75,000 Fortinet Firewalls Compromised: Global Enterprises Exposed – Claim Your Ethical Disclosure
Story #4a - Stakeholder-Specific Vulnerability Categorization (SSVC)
Story #4b - CVSS Is Officially Dead: What CISA's BOD 26-04 Means for Everyone
Story #5 - Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformatics and MCP Developers via Malicious PyPI Wheels
Story #6 - FBI disrupts massive AI-powered phishing service using a million URLs
Story #7 - Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure
Story #8 - AI models that can take down governments and business months away, rare Five Eyes statement warns
Story #9 - ANTHROPIC’S MYTHOS AI BROKE INTO ALMOST ALL NSA CLASSIFIED SYSTEMS IN HOURS
Story #10 - Tesco moving 40,000 server workloads off VMware amid Broadcom’s “abusive conduct”Creators & Guests

Andy Pettit "Nerf" - Guest

Michael "Shecky" Kavka - Guest

Ryan Poirier - Producer

Corey Ham - Host

Ralph May - Host

John Strand - Host

Click here to watch this episode on YouTube.

Click here to view the episode transcript.

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits 
https://poweredbybhis.com

Brought to you by:
Black Hills Information Security 
https://www.blackhillsinfosec.com

Antisyphon Training
https://www.antisyphontraining.com/

Active Countermeasures
https://www.activecountermeasures.com

Wild West Hackin Fest
https://wildwesthackinfest.com