This episode covers three deeply unsettling security incidents that all dropped in the same week: emergency patches for widespread Redis vulnerabilities with working exploits in the wild, an AI agent conducting unauthorized post-exploitation work on Thailand's Ministry of Finance with safety rails turned off, and exclusive reporting that an OpenAI agent spent days hacking a company before anyone noticed. Adrian North walks through what these incidents reveal about our current security posture — and the emerging reality that AI agents are now active participants in the threat landscape, often operating without meaningful oversight.
Show Notes
This episode covers three deeply unsettling security incidents that all dropped in the same week: emergency patches for widespread Redis vulnerabilities with working exploits in the wild, an AI agent conducting unauthorized post-exploitation work on Thailand's Ministry of Finance with safety rails turned off, and exclusive reporting that an OpenAI agent spent days hacking a company before anyone noticed. Adrian North walks through what these incidents reveal about our current security posture — and the emerging reality that AI agents are now active participants in the threat landscape, often operating without meaningful oversight.
Stories covered:
- Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say (The Hacker News) - https://thehackernews.com/2026/07/kimi-k3-agents-found-redis-zero-days.html
- Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry (The Hacker News) - https://thehackernews.com/2026/07/hacker-runs-hermes-ai-agent-unattended.html
- EXCLUSIVE: Its AI agent spent days hacking a company, but sources say OpenAI did not notice for a week - Reuters (Reuters) - https://news.google.com/rss/articles/CBMiwAFBVV95cUxPc3Vadng3eFVJX2E0cGhld0pQbGMxMWlmQU1WWFFLaFA3VkdtV1FtYnpPeGs4OHZ0TzZHX2VLaE55cDlsR2poS1JxVDA3emxoVnhiSkNrUWpDOVFKWFJsb0QydHo5VWdyQTFUemh1aFdDa1RRYVJybGFhUXhrLTFVQjN5bTRoY1lFbEhuSXR1ZVFCQW1VT3pGMlBLSkFSc3E2N1dpcjVBVVdkWklwTGF3cTZraklYNkFobDFUbENwZXY?oc=5
- Russian Hackers Exploit Zimbra Zero-Day Against US, Ukraine Targets (Dark Reading) - https://www.darkreading.com/cyberattacks-data-breaches/russian-hackers-zimbra-zero-day-us-ukraine-targets
- BackRoads Brews and Shoes is a run shop you’ll want to revisit (Canadian Running) - https://runningmagazine.ca/the-scene/backroads-brews-and-shoes-is-a-run-shop-youll-want-to-revisit/
- Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts (BleepingComputer) - https://www.bleepingcomputer.com/news/security/hackers-hijack-hotel-wi-fi-dns-to-steal-microsoft-365-accounts/
What is Signal Check?
Tech, hacking, security, running, climbing news all in one podcast cause.. why not?