What does it take to trick an AI agent? Not a whole lot, it turns out. This week, panelists Nick Bradley, Claire Nuñez and Jeff Crume join host Matt Kosinski to discuss a couple of new methods for hijacking AI agents and breaking their guardrails. We also talk recent evolutions in DDoS attack trends, the legacy of zero trust and some glaring security flaws in an extremely popular AI training app. Plus: We ring in Cybersecurity Awareness Month with the traditional airing of grievances. 00:00 – Introduction 01:38 – Tricking AI agents 15:18 – The DDoS comeback 26:03 – 15 years of zero trust 36:02 – Neon exposes user calls 44:34 – Cybersecurity myths The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. Subscribe to the IBM Think newsletter: 	<a href="https://www.ibm.com/account/reg/us-en/signup?formid=news-urx-52120" rel="noopener noreferrer" target="_blank">https://www.ibm.com/account/reg/us-en/signup?formid=news-urx-52120</a>		&nbsp;Follow the Security Intelligence podcast on your preferred platform: <a href="https://www.ibm.com/think/podcasts/security-intelligence" rel="noopener noreferrer" target="_blank">https://www.ibm.com/think/podcasts/security-intelligence</a>&nbsp;Learn more about cybersecurity: <a href="https://www.ibm.com/think/security" rel="noopener noreferrer" target="_blank">https://www.ibm.com/think/security</a>&nbsp;

Claire Nuñez

Creative Director, IBM X-Force Cyber Range 

Jeff Crume

IBM Distinguished Engineer, Master Inventor, AI and Data Security

 Nick Bradley

X-Force Incident Command 

AI agent scams, DDoS attack trends and what it takes to make zero trust work. All this and more on Security Intelligence.    

How to scam an AI agent, DDoS attack trends and busting cybersecurity myths

Security Intelligence is a weekly news podcast for cybersecurity pros who need to stay ahead of fast-moving threats. Each week, we cover the latest threats, trend, and stories shaping the digital landscape, alongside expert insights that help make sense of it all. Whether you’re a builder, defender, business leader or simply curious about how to stay secure in a connected world, you’ll find timely updates and timeless principles in an accessible, engaging format. New episodes weekly on Wednesdays at 6am EST.

Security Intelligence

An AI security CEO thinks we’re six months away from an “AI vulnerability cataclysm.” Is this a legitimate threat, or just fear-mongering? On this week’s episode, host Matt Kosinski and panelists Cris Thomas, Suja Viswesan and Troy Bettencourt debate whether we're headed straight for an AI security disaster. We also react to reports on Scattered Spider’s return (surprise!), a potential new strain of the devastating Petya ransomware and a survey of common cloud misconfigurations. Plus: Hot takes on dumb cybersecurity rules. All this and more, on Security Intelligence.&nbsp;&nbsp;&nbsp;&nbsp;00:00 – Intro &nbsp;01:02 – The AI apocalypse&nbsp;12:53 – Scattered Spider’s back&nbsp;23:41 – Misconfiguration risks&nbsp;32:35 – What is HybridPetya?&nbsp;42:46 – Dumb cybersecurity rules&nbsp;&nbsp;The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.&nbsp;&nbsp; Subscribe to the IBM Think newsletter: <a href="https://www.ibm.com/account/reg/us-en/signup?formid=news-urx-52120" rel="noopener noreferrer" target="_blank">https://www.ibm.com/account/reg/us-en/signup?formid=news-urx-52120</a>&nbsp;Follow the Security Intelligence podcast on your preferred platform: <a href="https://www.ibm.com/think/podcasts/security-intelligence" rel="noopener noreferrer" target="_blank">https://www.ibm.com/think/podcasts/security-intelligence</a>&nbsp;Learn more about cybersecurity: <a href="https://www.ibm.com/think/security" rel="noopener noreferrer" target="_blank">https://www.ibm.com/think/security</a>&nbsp;

Cris Thomas (Space Rogue)

X-Force Global Lead of Technical Eminence  

Suja Viswesan

VP of Security Products 

Troy Bettencourt

Global Partner & Head of X-Force 

The AI vulnerability apocalypse, the return of Scattered Spider, new Petya ransomware and more. All this and more on Security Intelligence. 

The AI vulnerability apocalypse, a new strain of Petya and dumb cybersecurity rules

Has the most notorious cybercrime gang of the moment really hung up its keyboards?&nbsp;In this episode of Security Intelligence, host Matt Kosinski along with panelists Dave Bales, Michelle Alvarez and Sridhar Muppidi discuss Scattered Lapsus$ Hunters’ retirement announcement, the ethics of ransomware research, software supply chain security lessons from the npm hack, the state of OT security, and hiring fraud.&nbsp;&nbsp; Plus: Dave takes on CVSS scores.&nbsp; All this and more, on Security Intelligence.&nbsp;&nbsp; 00:00 – Intro&nbsp;&nbsp;02:12 – Scattered Lapsus$ Hunters retire&nbsp;8:05 – AI ransomware is here&nbsp;15:43 – npm hijacking&nbsp;24:51 – X-Force on OT threats&nbsp;35:27 – AI hiring fraud&nbsp;41:36 – A hacker and Huntress EDR&nbsp; The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.&nbsp; Subscribe to the IBM Think newsletter: <a href="https://www.ibm.com/account/reg/us-en/signup?formid=news-urx-52120" rel="noopener noreferrer" target="_blank">https://www.ibm.com/account/reg/us-en/signup?formid=news-urx-52120</a>&nbsp;Follow the Security Intelligence podcast on your preferred platform: <a href="https://www.ibm.com/think/podcasts/security-intelligence" rel="noopener noreferrer" target="_blank">https://www.ibm.com/think/podcasts/security-intelligence</a>&nbsp;Learn more about cybersecurity: <a href="https://www.ibm.com/think/security" rel="noopener noreferrer" target="_blank">https://www.ibm.com/think/security</a>&nbsp;

Dave Bales

Michelle Alvarez 

Manager, X-Force Strategic Threat Analysis

Sridhar Muppidi

IBM Fellow, CTO IBM Security 

The end of Scattered Lapsus$ Hunters, the rise of AI ransomware and hot takes on CVSS scores: All that and more on this episode of Security Intelligence.

AI ransomware, hiring fraud and the end of Scattered Lapsus$ Hunters

Have we made cybercrime too easy? In the very first episode of Security Intelligence, panelists Jeff Crume, Suja Viswesan and Nick Bradley join host Matt Kosinski to discuss the invention of vibe hacking and HexStrike AI, an offensive security framework that threat actors are co-opting to command their own AI agent armies. We also discuss Scattered Lapsus$ Hunters’ unconventional new ransom demand and the rise of the RATs, or remote access trojans. Plus: A game of “Would You Rather?" &nbsp;&nbsp;00:00 – Intro&nbsp;1:40 – Introducing vibe hacking&nbsp;9:28 – HexStrike AI fuels AI agent crime&nbsp;14:42 – AI agent cyber attacks vs. Human cyber attacks&nbsp;18:16 – Scattered Lapsus$ Hunters want Google to fire employees&nbsp;26:03 – Remote Access Trojans on the rise&nbsp;&nbsp;The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.&nbsp; Subscribe to the IBM Think newsletter: <a href="https://www.ibm.com/account/reg/us-en/signup?formid=news-urx-52120" rel="noopener noreferrer" target="_blank">https://www.ibm.com/account/reg/us-en/signup?formid=news-urx-52120</a>&nbsp;Follow the Security Intelligence podcast on your preferred platform: <a href="https://www.ibm.com/think/podcasts/security-intelligence" rel="noopener noreferrer" target="_blank">https://www.ibm.com/think/podcasts/security-intelligence</a>&nbsp;Learn more about cybersecurity: <a href="https://www.ibm.com/think/security" rel="noopener noreferrer" target="_blank">https://www.ibm.com/think/security</a>&nbsp;

IBM Distinguished Engineer, Master Inventor, AI and Data Security 

Suja Viswesan 

VP of Security Products

Nick Bradley

How are defenders dealing with vibe hacking, HexStrike AI, Scattered Lapsus$ Hunters and cybersecurity's RAT problem? Listen to Security Intelligence to find out.  

Vibe hacking, HexStrike AI and the latest scheme from Scattered Lapsus$ Hunters

Cybersecurity moves fast: Old vulnerabilities are patched as new exploits appear. Cybercrime gangs form and strike and fade, disappearing with millions of ransom dollars. What protected the organization yesterday might leave it hopelessly exposed today. At the same time, cybersecurity pros rely on core principles—like the CIA triad of infosec, the principle of least privilege, zero trust architectures—to help them navigate this shifting terrain.&nbsp;&nbsp;Security Intelligence addresses both of these angles in a single, exciting, and digestible podcast episode every week. Listeners learn both the latest news and timeless insights, all from experts they can trust. This format speaks directly to the needs and preferences of cybersecurity practitioners, who want frequent, granular and technical content that gives need-to-know information.&nbsp;&nbsp;&nbsp;

Stay ahead in cybersecurity with Security Intelligence. Weekly episodes cover the latest threats, trends and expert insights—making complex security issues clear and actionable.

IBM

Recent Episodes

SEASON 1

How to scam an AI agent, DDoS attack trends and busting cybersecurity myths

The AI vulnerability apocalypse, a new strain of Petya and dumb cybersecurity rules

AI ransomware, hiring fraud and the end of Scattered Lapsus$ Hunters

Vibe hacking, HexStrike AI and the latest scheme from Scattered Lapsus$ Hunters

Introducing Security Intelligence Podcast

About The Show

Security Intelligence

Matt Kosinski

Host