Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Alex Stamos to talk through the week’s cybersecurity news, including: Everyone’s still panicking about “misbehaving” AI models that are pretty much just doing what they’re being told to do Americans are giving AI agents unfettered access to their bank accounts.
Summary
What could go wrong? Last week’s PHP meteor seems to have missed Earth This week’s Brotli HTTP/2 critical flaw is this week’s meteor The private key is always 4. This time it’s TLS bugs in GoAhead Much, much more!
This week’s show is brought to you by Truffle Security. Co-founder and CEO Dylan Ayrey joins James Wilson to chat about scanning GitHub repos and finding more than half a million unique credentials that were never revoked. As Dylan explains, the problem of exposed keys exists everywhere and is only getting worse.
KazaSec's take
AI-related security incidents are a genuinely new category, prompt injection, model manipulation, and data leakage through an LLM integration don't map cleanly onto traditional application security testing, and are worth assessing deliberately rather than assuming existing controls already cover them.
Coverage details
We've archived 1154 other articles touching the same topic (october 2026, james, risky business) , see the full security news archive.
Related security advisories
Relevant from KazaSec
More coverage on this topic
We help organizations find and fix the gaps before they make headlines.