This episode covers a sharp shift in the threat landscape — threat actors are now using agentic AI operationally during intrusions, not just to write code but to run live attacks. We also dig into how AI agents can be tricked into executing malicious commands through their legitimate permissions, and why the LiteLLM supply chain compromise is a wake-up call for developers moving fast in the AI tooling space.
Show Notes
This episode covers a sharp shift in the threat landscape — threat actors are now using agentic AI operationally during intrusions, not just to write code but to run live attacks. We also dig into how AI agents can be tricked into executing malicious commands through their legitimate permissions, and why the LiteLLM supply chain compromise is a wake-up call for developers moving fast in the AI tooling space.
Stories covered:
- PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking (The Hacker News) - https://thehackernews.com/2026/10/php2shell-exploitation-hits-government.html
- You gave your AI agent access, but who is giving it orders? (BleepingComputer) - https://www.bleepingcomputer.com/news/security/you-gave-your-ai-agent-access-but-who-is-giving-it-orders/
- LiteLLM release pipeline hacked to distribute info-stealer malware (BleepingComputer) - https://www.bleepingcomputer.com/news/security/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware/
- Hacker leaks 281 GB of data from Germany's far-right AfD party - Bitdefender (Bitdefender) - https://news.google.com/rss/articles/CBMilAFBVV95cUxNbUJwVVRxRkdXS2ZMUm9XcTlCbm5FY1FDOXFldExRdXlqVnQ2UUJuaXV6VEZUbnFmT3NwUEpEdzJHd0FYYTl5LUd2Yzh0Q0JZWS1JajdSb3lRS21CcVRQcEJZdHR1RGdSV1VSTXFXRkZUV1BQVS14eWZDQ01rV2dOOXI4OTVfZFJMYWVxY1A0TlRIQmdn?oc=5
- The Essential Skill You Start Losing in Your 20s—and Runners Often Neglect to Train (Runner's World) - https://www.runnersworld.com/training/a74240992/explosive-power-training-runners/
- What the US Movement Against Data Centers Can Learn From Abroad (Wired) - https://www.wired.com/story/what-the-us-anti-data-center-movement-can-learn-from-everywhere-else/
What is Signal Check?
Tech, hacking, security, running, climbing news all in one podcast cause.. why not?