Modern Cyber with Jeremy Snyder18 Joulu 2025

This Week in AI Security - 18th December 2025

In the final episode of 2025, Jeremy examines the evolution of SEO poisoning into "AI poisoning," a major privacy breach involving a popular browser extension, and shares a data-driven "sneak peek" at the state of AI security over the past year.

Key Stories & Developments:

AI Poisoning of Search Results: Researchers identified an attack where threat actors plant false information online to trick AI-powered search engine crawlers. This results in search engines providing AI summaries that list scam phone numbers for legitimate services like airline call centers, effectively creating a modern, AI-driven version of SEO poisoning.
The "Pay-to-Crawl" Proposal: Jeremy discusses a new proposal from Creative Commons that suggests moving away from outright blocking AI crawlers. Instead, website owners could set a price for crawling and training, allowing organizations to monetize the use of their data by LLM providers.
Urban VPN Privacy Breach: A popular Chrome and Edge extension, Urban VPN Proxy, was caught intercepting and reading the AI chat messages of its 7.3 million users. This incident highlights the risk of third-party browser extensions reading sensitive data that users assume is private.

2025 in Review Snapshot: Using data from the Firetail AI Incident Tracker, Jeremy reveals two major trends from 2025:

The Surge in Incidents: AI security incidents saw a massive jump from 2024 to 2025, marking this as the year AI-related security became a global, pervasive problem.
Disclosure vs. Injection: While the OWASp Top 10 lists prompt injection as the #1 risk, the tracker data shows that sensitive information disclosure (largely due to organizational error) actually outstrips prompt injection by about a third.

Episode Links

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(138)

This Week in AI Security - 15th October 2026

Back to the normal fifteen-minute format this week, across three themes: a couple of fresh attacks, a run of agent-behavior breakouts, and the policy response forming around them. Attackers are now dr...

15 Loka 17min

Søren Brandbyge & Adam Burns on Email and DNS

Email is the one application almost everyone on the internet uses every single day, and almost nobody understands how fragile it really is. In this two-part episode, Jeremy Snyder sits down with two g...

13 Loka 50min

This Week in AI Security - 8th October 2026

Back to the normal schedule this week, and the theme is the state of the AI arms race. Three major reports landed at once, from Microsoft, Google, and Anthropic, and the shared message is that attacke...

8 Loka 14min

This Week in AI Security - 1st October 2026

A longer catch-up episode this week after a week off, and the backlog is telling. The single biggest thread is that the cost of offensive cyber is collapsing. An open-weight model, Z.ai's GLM 5.3, is ...

1 Loka 26min

Richard Stiennon of IT-Harvest

Jeremy Snyder sits down with industry analyst Richard Stiennon, founder of IT-Harvest and author of the annual Security Yearbook, for a tour of the cybersecurity industry from the inside. Richard has ...

24 Syys 47min

This Week in AI Security - 17th September 2026

A shorter episode this week, recorded from the sidelines of Mind The Sec, soon to be Black Hat Latin America. The headline is distillation. Two separate disclosures, one from Anthropic and a joint adv...

17 Syys 9min

Jonathan Schaeffer of Kind

In this episode of Modern Cyber, Jeremy is joined by Jonathan Schaeffer, a 40-year AI veteran and the inventor of Kind, to discuss the sweeping evolution of artificial intelligence. Jonathan traces th...

11 Syys 48min

This Week in AI Security - 10th September 2026

This week's episode covers several stories plus a couple of topics that sit just outside the strict security lens but are too important to skip. The theme is hard to miss. AI agents are now running th...

10 Syys 14min