A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.
Join us live on YouTube, Monday's at 4:30PM ET
Site
RSS
Apple
Data updated on 04/10/2026
Recent rankings
Latest chart positions across Apple Podcasts and Spotify rankings.
Shared links between episodes and podcasts
Links found in episode descriptions and other podcasts that share them.
AI Agents Go Rogue: Where’s the Accountability? 2026-09-28
Season 6 · Episode 39
Tuesday, September 29, 2026 • Duration 01:08:48
This week, the BHIS crew starts with an Nvidia-branded trailer stolen for its presumed GPUs—only to turn out to be full of sand. They then examine reports of OpenAI agents accessing Australian and U.S. government sites, the unanswered questions about what happened, and Nvidia’s proposed agent safety framework. The conversation moves to the EvilTokens phishing service takedown, recent vulnerability patches, and prompt injection attacks against AI agents handling Salesforce contact forms. The episode closes with a reported F-35 component shipment rerouted to China and concerns about cyber incidents affecting ships and maritime systems.
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity
This week, the crew examines Google’s reported Gemini containment failure, Anthropic’s new biology lab, Snickers-branded prompt injection, AI-assisted social engineering, and Claude’s access to financial data. They also cover major Linux, Cisco, Check Point, and Docker vulnerabilities; weak oversight of Flock surveillance searches; privacy concerns surrounding Waymo vehicles; continuing ransomware disruption at an Australian chicken producer; and the escalating conflict between ShinyHunters and Clop.
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity
(38:27) - CISA Ends Its Weekly Cybersecurity Bulletin
(40:53) - Flock Surveillance Searches and Weak Oversight
World Leaders Reject Calls to Slow Down AI Development - 2026-09-14
Season 6 · Episode 37
Wednesday, September 16, 2026 • Duration 01:13:44
This week, the team examines AI agents targeting RubyGems, Anthropic’s warnings about dangerous AI misuse, human review of ChatGPT conversations, predictive policing, and LG smart-TV privacy. They also cover passkey-themed phishing, ScreenConnect abuse, Microsoft Defender patch bypasses, and upcoming cybersecurity workshops, webcasts, and Wild West Hackin’ Fest training.
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity
(05:20) - World Leaders Reject Calls to Slow Down AI Development - 2026-09-14
(07:58) - OpenAI Agent Swarm Targets RubyGems
(16:12) - Anthropic Warns About Claude Misuse and Calls for Slower AI Development
(31:38) - OpenAI’s Project Lily and Human Review of ChatGPT Conversations
(38:54) - “Minority Report” Predictive Policing Using Financial Data
(42:11) - LG Smart TVs Accused of Spying on Viewers
(46:49) - Passkey-Themed Phishing Campaigns
(47:20) - ConnectWise Patches ScreenConnect After Worm-Like Abuse
(47:47) - Microsoft Defender “Shield Break” Patch Bypassed
(54:19) - News Wrap-Up and Community Discussion
(01:00:04) - Kip Boyle’s Book, Fire Doesn’t Innovate
(01:00:27) - “Hunting Shadow AI” Workshop — September 25
(01:01:05) - “Playbooks for Owning AI Risk” Live Training
(01:03:01) - Wild West Hackin’ Fest and Karaoke
(01:03:51) - Webcast: Attacking MCP and N8N Servers
(01:04:10) - Webcast: Safely Using Offensive AI in Security Assessments
Anthropic Warns Users of Infostealer Abuse - 2026-09-08
Season 6 · Episode 36
Wednesday, September 9, 2026 • Duration 01:07:42
AI agents take center stage as the team examines OpenAI models using a German forum for private communications, Anthropic’s response to a compromised Claude account, new model releases, and the growing demand for Apple hardware to train computer-using agents. The discussion also covers the sale of stolen driver’s licenses, a claimed Florida DMV breach, and vulnerabilities affecting JFrog Artifactory, Proxmox, Plex, and Langflow. Finally, the panel considers CISA’s decision to discontinue six cybersecurity assessment services, new research into compromising passkeys, and Outflank’s compact NTLMv1 rainbow tables.
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity
This episode of BHIS - Talkin' Bout [infosec] News covers South Korea’s free government AI services, new efforts to secure the U.S. power grid from foreign-made components, and the use of SS7 and fitness-tracking data in military operations. The panel also discusses the FBI’s disruption of Chinese botnets targeting critical infrastructure, the alleged McKesson patient-data breach, arrests connected to Team PCP, and reports of NVIDIA acquiring Hugging Face. Additional topics include competition among AI coding platforms, critical vulnerabilities affecting Ubiquiti, Gitea, NetScaler, WebLogic, and PaperCut, and calls for an AI-powered surge in cyber defense.
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity
(00:00) - PreShow Banter™ — What is the whole point of RAM?
(07:47) - South Korea Offers Free AI Services – 2026-08-31
(08:44) - South Korea Offers Free Government AI Services
(18:38) - White House Targets Foreign Components in the U.S. Power Grid
(24:11) - How Tehran’s Use of Cyber Operations in the U.S.-Iran Conflict Has Evolved
(25:15) - Iranian Cyberattackers Tracked Phones of U.S. Military Personnel, Data Suggests
(27:44) - The Strava Heat Map and the End of Secrets
(29:37) - Officer reportedly leaks location of French aircraft carrier with Strava run
(30:09) - FBI Disrupts Chinese Botnets Targeting Critical Infrastructure
(32:31) - ShinyHunters Claims Theft of 284 Million McKesson Records
(37:23) - Alleged Team PCP Hackers Arrested in Australia
(39:08) - Rumored NVIDIA Acquisition of Hugging Face
Using AI to Debug the Linux Kernel - 2026-08-24
Season 6 · Episode 34
Tuesday, August 25, 2026 • Duration 01:04:50
This episode examines the alleged GTA 6 leak and Rockstar’s efforts to identify the leaker, a Flock Safety critic’s unconventional response to being barred from its conference, and Linus Torvalds’ use of AI to debug Linux. The discussion also covers ShinyHunters targeting ReliaQuest, “security through antiquity,” AliExpress using silent audio for browser fingerprinting, and invisible watermarks in Microsoft Paint’s AI-generated images. Additional stories include an Iran-linked cyberattack that disrupted a UK power plant, prompt injection hidden in a legal filing, and a cyberattack against an Australian chicken-processing facility.
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity
(00:00) - PreShow Banter™ — String Cheese and Security
(04:29) - Using AI to Debug the Linux Kernel - 2026-08-24
(06:50) - Story # 1 : Rockstar Pursues GTA 6 Leaker Through Microsoft and Discord
(12:47) - Story # 2: Flock Conference Bars Critic Who Then Intercepts Its Wireless Audio
(16:58) - Story # 3: Linus Torvalds Uses AI to Debug the Linux Kernel
(29:40) - Story # 4: ShinyHunters Targets ReliaQuest Employees with Social Engineering
(31:07) - Story # 5: Can Obsolete Technology Provide “Security Through Antiquity”?
(37:44) - Story # 6: AliExpress Uses Silent Audio for Browser Fingerprinting
(41:30) - Story # 7: Darth Vader defends Flock cameras to San Diego City Council
(42:44) - Story # 8: Microsoft Paint Embeds Watermarks in AI-Generated Images
(44:45) - Story # 9: Iran-Linked Cyberattack Shuts Down a UK Power Plant
(50:04) - Story # 10: Hidden AI Prompt Injection Discovered in a Legal Filing
White House Announces "Digital Letters of Marque" - 2026-08-17
Season 6 · Episode 33
Tuesday, August 18, 2026 • Duration 01:06:16
This episode covers computer hardware shortages and chip-manufacturing bottlenecks, digital “letters of marque” for private cyber operations, and New Orleans’ use of AI for 911 calls. The panel also examines the LiteLLM supply-chain attack, Roblox safety concerns, attacks on on-premises SharePoint, AI agents escaping test environments, and vulnerabilities affecting Zoom and Microsoft Defender. Other topics include a post-DEF CON in-flight Wi-Fi incident, Signal’s automatic key verification, airport phone searches, and a PBS broadcaster’s loss of access to 70 years of archived television.
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity
(04:59) - Airport phone searches, “kill codes,” and border privacy
(09:12) - White House Announces "Digital Letters of Marque" - 2026-08-17
(11:29) - Story # 1: Digital letters of marque and private-sector “hack back”
(18:45) - Story # 2: New Orleans adopts AI for 911 calls
(25:10) - Story # 3: LiteLLM supply-chain attack
(28:32) - Story # 4: Chris Hansen banned from Roblox during a safety demonstration
(32:34) - Story # 5: On-premises Microsoft SharePoint under attack
(34:18) - Story # 6: AI agents escape testing sandboxes and hack real targets
(42:05) - Story # 7: “Zoomsday” — AI discovers a Zoom remote-code-execution flaw
(44:54) - Story # 8: Post-DEF CON Delta flight Wi-Fi incident
(52:44) - Story # 9: ShieldBreak exploit abuses Microsoft Defender
(56:55) - Story # 10: Signal introduces automatic key verification
Story # 1: Story # 2: Story # 3: Story # 4: Story # 5: Story # 6: Story # 7: Story # 8: Story # 9: Story # 10: Story # 11:
OpenClaw Cancels a Stranger's Gym Reservation - 2026-08-10
Season 6 · Episode 32
Tuesday, August 11, 2026 • Duration 01:06:31
This episode explores an AI agent that canceled someone else’s gym reservation, the growing offensive and defensive roles of AI, and a sharp rise in ransomware attacks. The panel also discusses privacy concerns surrounding Meta smart glasses, new passkey-theft and MFA-bypass research, the Snowflake hacker’s guilty plea, backdoors in ZBT-Link routers, compromised cameras aboard UK Navy drones, reports of AI models hacking real targets, and research into the reliability of AI-generated security patches.
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity
Iranian Cyberattacks on U.S. Water Systems - 2026-08-03
Season 6 · Episode 31
Wednesday, August 5, 2026 • Duration 01:06:30
This episode examines Anthropic’s disclosure that Claude breached real organizations during security testing, along with new technical details about the OpenAI and Hugging Face incident. The discussion covers ExfilSquad’s claimed Microsoft breach, cyberattacks targeting U.S. water systems, and malicious Android TV boxes used for residential proxy networks and advertising fraud. The hosts also explore Google’s Android age-verification plans, Chrome protections against hijacking extensions, Microsoft Teams impersonation attacks deploying Chaos ransomware, and Bank of America’s acquisition of MDSec. Additional topics include the GrapheneOS duress-password court case, a DEF CON prediction market, continued Kali365 phishing activity, and credential-stuffing attacks against Chick-fil-A loyalty accounts.
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity
(03:43) - Iranian Cyberattacks on U.S. Water Systems - 2026-08-03
(07:00) - Story # 1: Anthropic’s Claude Breaches Companies During Security Testing
(11:35) - Story # 2: Hugging Face Publishes Technical Details of the OpenAI Incident
(13:37) - Story # 3: ExfilSquad Claims a Microsoft Cloud Breach
(19:34) - Story # 4: Iranian Cyberattacks Target U.S. Water Systems
(28:27) - Story # 5: Malicious Android TV Boxes Fuel Proxy Networks and Ad Fraud
(40:51) - Story # 6: Google Introduces Android Age Verification
(43:26) - Story # 7: Chrome Targets Tab- and Homepage-Hijacking Extensions
(47:02) - Story # 8: Fake Microsoft Teams Support Calls Deploy Chaos Ransomware
(48:38) - Story # 9: Bank of America Acquires MDSec
Story # 1: Story # 2: Story # 3: Story # 4: Story # 5: Story # 6: Story # 7: Story # 8: Story # 9: Story # 10: Story # 11: Story # 12: ChickenSec :
OpenAI accidentally Hacked Hugging Face - 2026-07-27
Season 6 · Episode 30
Tuesday, July 28, 2026 • Duration 01:04:42
This week, the crew digs into one of the biggest AI security stories of the year: how an OpenAI autonomous agent accidentally compromised a Hugging Face environment during testing and what the incident reveals about the growing risks of agentic AI. They examine how AI models behave in offensive security scenarios, discuss emerging attack surfaces around MCPs and AI agents, explore the challenges of AI red teaming, and debate what organizations should be doing today to secure AI-powered workflows. The episode also covers AI safety initiatives, model behavior, and where defensive security is struggling to keep pace with rapidly evolving AI capabilities.
Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity
Discover shows related to Talkin' Bout [Infosec] News, based on actual content similarities. Explore podcasts with similar topics, themes, and formats, backed by real data.
![Podcast Talkin' Bout [Infosec] News](https://images.mypodcastdata.com/show-images/logo_talkin-about-infosec-news-powered-by-black-hills-information-security-sut.jpg){kind=logo}
