Security Stuff

Security Stuff is a general podcast hosted by David, with 0 episodes on record and a Required Pod Score of 80.

David hosts Security Stuff, a general show with 0 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• Security Stuff

  Cisco Confirms In-the-Wild Exploitation of Unified CM Vulnerability

  Jul 2, 20261 min

  Cisco has confirmed that a recently patched vulnerability in its Unified Communications Manager is now being actively exploited in the wild. The security flaw, which affects appliances with the WebDialer service enabled, could allow attackers to drop malicious files on the system and potentially gain root access through server-side request forgery attacks. Cisco is urging customers to immediately upgrade to the patched versions released in June, following reports of exploitation from security researchers.

  ListenShow Notes
• Security Stuff

  ‘BioShocking’ Attack Tricks AI Browsers Into Stealing Credentials

  Jul 2, 20261 min

  Cybersecurity researchers at LayerX have discovered a new vulnerability in AI-powered browsers they're calling "BioShocking," which tricks AI agents into stealing user credentials by convincing them they're playing a game. The researchers created a puzzle webpage that manipulated six different AI browsers—including ChatGPT Atlas, Claude Chrome, and others—into abandoning their safety guardrails by teaching them that incorrect actions were acceptable within the game's context, ultimately leading them to exfiltrate sensitive data like SSH login credentials. While OpenAI has patched the issue, other vendors either failed to fix it or didn't respond to the security report at all.

  ListenShow Notes
• Security Stuff

  Trump Administration Lifts Restrictions on Anthropic’s Claude Models After Cybersecurity Alarm

  Jul 2, 20261 min

  The Trump administration has lifted restrictions on Anthropic's Claude chatbot models after a weekslong ban triggered by cybersecurity concerns. The models were blocked in mid-June after Amazon security researchers discovered a way to bypass safeguards on Claude Fable 5 that could enable exploitation of software vulnerabilities. Anthropic's most powerful model, Mythos 5, is now accessible only to government-approved U.S. organizations, while Fable 5 has returned to wider availability, following Trump's executive order establishing a framework for vetting advanced AI systems before public release.

  ListenShow Notes
• Security Stuff

  FortiBleed Campaign Linked to INC, Lynx Ransomware Attacks

  Jul 2, 20261 min

  A massive credential-harvesting campaign called FortiBleed, which has targeted over 430,000 FortiGate firewalls worldwide and compromised an estimated 110 million credentials, has now been directly linked to ransomware attacks. Security researchers discovered that stolen credentials from the operation are being used to deploy INC Ransom and Lynx ransomware, with at least 12 organizations suffering encryption attacks and hundreds of endpoints locked down. An operational security mistake by the attackers revealed that the same operator manages both ransomware families, proving that this credential theft operation is actively feeding into the ransomware ecosystem.

  ListenShow Notes
• Security Stuff

  How to Conduct a Successful Audit of AI-Driven Software Development

  Jul 2, 20261 min

  One in five organizations has experienced a serious security incident directly tied to AI-generated code, prompting security leaders to conduct comprehensive audits of their AI-assisted software development processes. The article outlines a framework for CISOs to assess risks by tracking who uses AI tools, evaluating developer capabilities to catch vulnerabilities, and mapping specific tools to code outputs. Key recommendations include creating risk scores for developers, establishing governance policies for approved AI tools, and implementing what's called time travel auditing to quickly isolate and fix code linked to compromised AI models.

  ListenShow Notes

Recent guests on Security Stuff. Study who booked and why before you pitch.

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.