Security Intelligence

• React2Shell makes waves, WormGPT falls flat and the latest threat to your Gmail account

  Just how big a deal is React2Shell? Depending on who you ask, it’s either a Log4Shell-level event or just another average, everyday application security vulnerability. Patch and move on. This week, on Security Intelligence, panelists Sridhar Muppidi, Claire Nuñez and Ian Molloy weigh in on the contentious debate React2Shell has sparked. However it shakes out, one thing is for sure: The response to this vulnerability has been anything but typical. We also dive into: 13:01 -- Whether malicious LLMs like WormGPT live up to the hype 23:40 -- How hackers can lock you out of your Gmail account by changing your age 34:09 -- What happens when two different threat actors attack you at the same time 42:37 -- Why cybersecurity pros should care about solar radiation grounding 6,000 flights All that and more on Security Intelligence. The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. Explore the podcast → https://www.ibm.com/think/podcasts/security-intelligence Subscribe for AI and security updates → https://www.ibm.com/account/reg/us-en/signup?formid=news-urx-52120

  --------  

  50:12

  --------

  50:12
• Your house might be a botnet, your devs are leaking secrets and poems are breaking your AI guardrails

  --------  

  42:59

  --------

  42:59
• Trawling the honeypot: What it’s like to discover a new malware strain

  Being a malware reverse engineer isn’t always glamorous work. You spend a lot of time digging through junk emails. But when you find something in there—well, that’s a whole different story. On this episode of Security Intelligence, X-Force Malware Reverse Engineer Raymond Joseph Alfonso tells us about the time he discovered a curious new malware loader in the honeypot. And that leads to a bigger conversation about how hackers hide malicious code from view—and some of the new techniques they’re cooking up to stay hidden. The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. Learn more about QuirkyLoader → https://www.ibm.com/think/x-force/ibm-x-force-threat-analysis-quirkyloader Follow the Security Intelligence podcast on your preferred platform → https://www.ibm.com/think/podcasts/security-intelligence

  --------  

  14:12

  --------

  14:12
• The dark web job market thrives, AI fraud rings rise and it’s holiday scam season.

  Do you think you’re too smart to fall for a Black Friday scam? Generative AI might knock you down a few pegs. On this episode of Security Intelligence, host Matt Kosinski and panelists Suja Viswesan, Dave McGinnis and Nick Bradley discuss how threat actors are using AI to turbocharge holiday scam season. Plus: - IBM X-Force makes malware research tools public - The dark web job market is thriving - AI fraud schemes are getting quite elaborate And the story of an enterprising insider threat who tried to turn his employer’s wind turbines into cryptojacking machines. Spoiler: He got caught. 00:00 – Introduction 02:45 – Holiday scam season 13:37 – X-Force malware research tools 19:47 – Dark web jobs report 24:41 – Factory finds an AI fraud ring 31:48 – Cryptojacking wind turbines The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. Learn more about cybersecurity → https://www.ibm.com/think/securityExplore the podcast → https://www.ibm.com/think/podcasts/security-intelligence Learn more about the X-Force Malware Threat Research GitHub → https://www.ibm.com/think/x-force/introducing-x-force-malware-threat-research-public-github-repository

  --------  

  40:00

  --------

  40:00
• Anthropic stops AI spies, the new OWASP Top 10 and the rise of small-time ransomware

  Anthropic says it disrupted a nearly fully autonomous espionage campaign carried out by AI agents. But some cybersecurity pros are skeptical of the framing.On the latest episode of Security Intelligence, host Matt Kosinski is joined by Ryan Anschutz, Evelyn Anderson, Seth Glasgow and Mixture of Experts podcast fixture Chris Hay to dig into Anthropic’s report and the range of responses to it. Plus: The newest OWASP Top 10 is here, the ransomware landscape is cracking up and does cyber insurance just encourage hackers? All that and more on Security Intelligence.00:00 -- Introduction01:29 -- Anthropic’s AI spy ring bust15:44 -- OWASP Top 10 202524:41 -- Small ransomware gangs33:45 -- Is cyber insurance worth it? The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. Explore the podcast → https://www.ibm.com/think/podcasts/security-intelligenceSubscribe for AI and security updates → https://www.ibm.com/account/reg/us-en/signup?formid=news-urx-52120

  --------  

  40:14

  --------

  40:14

More Business podcasts

Trending Business podcasts

About Security Intelligence

Security Intelligence: Podcasts in Family