Security Intelligence Podcast

Visit Security Intelligence podcast page to get more AI content → https://www.ibm.com/think/podcasts/security-intelligence
That melted ice cream might not be the freezer’s fault.

On episode 56 of Security Intelligence, Claire Nunez and MJ Vaidya join host Patrick Austin to break down three cybersecurity stories and what they mean for defenders.

First, attackers hijack refrigeration controllers from Danfoss, Copeland and Dixell at French supermarkets, pushing cases to 50°C. Team82 flagged the flaws and Danfoss shipped a fix, yet thousands of controllers remain exposed online. Is planned downtime the price of staying patched?

Then, a Semperis survey of 1,200 IT professionals links AI to 84% of ransomware attacks. Many of those attacks abuse companies’ own AI agents and identity systems. Should your agents be part of your insider threat model?

Finally, Bank of America brings on 1,000 contractors to patch vulnerabilities found by Anthropic’s Mythos and other AI security models. The panel debates whether AI can fix what it finds, and why patching can’t be a one-time push.

All that and more on Security Intelligence.

00:00 – Intro

01:00 – Hackers hijack supermarket fridges

10:11 – AI linked to 84% of ransomware attacks

19:31 – Bank of America hires 1,000 patchers

"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."

Visit Security Intelligence podcast page to get more AI content → https://www.ibm.com/think/podcasts/security-intelligence
What happens when AI agents start hacking websites without permission?

On episode 55 of Security Intelligence, Sophie Cunningham, Ian Molloy and Seth Glasgow join host Patrick Austin to break down three cybersecurity stories and what they mean for defenders.

First, Google pauses part of its open-source bug bounty program amid a flood of automated reports. Meanwhile, its own PageBreak AI agent is finding hundreds of vulnerabilities. Could AI ultimately save the bug bounty programs its overwhelming?

Then, ClingSTUN malware exploits unpatched IoT devices and hides behind legitimate network traffic. The attack highlights a persistent security challenge: finding vulnerabilities is getting faster, but patching them isn't.

Finally, OpenAI agents attempt to hack Wikimedia services, potentially contributing to a partial outage. The panel debates who should be held accountable when agents cross security boundaries.

All that and more on Security Intelligence.

00:00 – Intro
01:38 – Google's AI bug bounty problem
13:32 – ClingSTUN Linux malware
21:34 – OpenAI agents target Wikipedia

"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."

Visit Security Intelligence podcast page to get more AI content → https://www.ibm.com/think/podcasts/security-intelligence
That ChatGPT ad might not be from OpenAI.

On episode 54 of Security Intelligence, Michelle Alvarez, Giacomo Casoni and Norman Dorsch join our new host Patrick Austin for imposter week: three stories about attackers posing as something you trust.

First, attackers bought sponsored search ads that led to a fake “Plus 5.6” Custom GPT, which steered at least 40 victims toward a ClickFix page and a remote access trojan. The panel digs into why ClickFix keeps working, and whether AI companies should police their GPT marketplaces the way app stores do.

Then: Rapid7 found Linux backdoors, including a new BPFDoor variant and a RAT called AVERAT, hiding on the appliances that screen companies’ email. From there, attackers can see an organization's mail traffic, and their own traffic blends right in. How do you catch an imposter that looks exactly like your security tools?

Finally, suspected state-linked hackers exploit two critical flaws in Citrix NetScaler, hitting dozens of organizations across government, healthcare and critical infrastructure. Some Dutch hospitals took patient portals offline. And patching won’t evict attackers who got in first, which makes a tested playbook essential.

All that and more In Security Intelligence.

00:00 – Intro

1:35 – Fake GPTs as malware lures

7:37 – Backdoors disguised as email

13:51 – Inside the NetScaler attacks

"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."

Visit Security Intelligence podcast page to get more cybersecurity content → https://www.ibm.com/think/podcasts/security-intelligence
Ask a chatbot for a customer service number, and you might get a scammer's.

That's the trick behind "Dark Sourcery," a campaign that games AI answer engines into citing phishing links and fake support lines. It's SEO poisoning updated for an AEO world, and it works because so few of us verify what AI tells us before charging ahead.

On episode 53 of Security Intelligence, Kimmie Farrington, Curtis Pitts and Dave McGinnis join hosts Matt Kosinski and Patrick Austin to break down three AI-enabled cyberattacks and what they mean for defenders.

First, the poisoned chatbots: How does Dark Sourcery work, and how do we rethink trust in the AI era?

Then, a threat actor spends months tearing through Ubiquiti, WordPress and Zyxel gear, stealing thousands of government documents. GreyNoise suspects it had an LLM helping write its tools.

Finally, an AI agent swarm breaches hundreds of PaperCut servers. It goes from an empty workspace to a real victim in about four hours, and then ignores its own rules of engagement.

All that and more on Security Intelligence.

00:00 - Intro

1:23 - Dark Sourcery

13:00 - LLM-assisted hacking spree

21:46 - Agent swarm attack

"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."

Visit Security Intelligence podcast page to get more cybersecurity content → https://www.ibm.com/think/podcasts/security-intelligence
People like to say “cybersecurity is a team sport.” But how often do we actually live up to that ideal?

In this bonus episode of Security Intelligence, host Matt Kosinski talks to Joe Xatruch about the Cyber Cluster, a public-private-academic alliance that’s turning Costa Rica into a global hub for cybersecurity talent and services.

Joe shares what inspired the cluster, the obstacles they had to tackle to get it off the ground and the benefits it’s brought to people and organizations across the country. Plus—why the model is spreading, and why that’s great news.

This is what a collaborative approach to cybersecurity really looks like. And it turns out it’s even better than the hype.

All that and more on Security Intelligence.

"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."