Modern Cyber with Jeremy Snyder23 Okt 2025

This Week in AI Security - 23rd October 2025

In this week's episode, recorded live from the inaugural AI Security Summit hosted by Snyk, Jeremy reports on the latest threats and strategic discussions shaping the industry. Covering multiple instances of "old risks" reappearing in new AI contexts...

The Salesforce "forced leak" vulnerability, where an AI agent was exposed to malicious prompt injection via seemingly innocuous text fields on web forms (a failure of input sanitization).

Research from Nvidia detailing waterhole attacks where malicious code (e.g., PowerShell) is hidden in decoy libraries (like "react-debug") that AI coding assistants might suggest to developers.

A consumer AI girlfriend app that exposed customer chat data by storing conversations in an open Apache Kafka pipeline, demonstrating a basic failure of security hygiene under the pressure of rapid AI development.

The "Glass Worm" campaign, where invisible Unicode control characters (similar to Ascii Smuggling research by Firetail) were used to embed malware in a VS Code plugin, proving the invisible code risk is actively being leveraged in development tools.

Finally, Jeremy shares strategic insights from the summit, including the massive projected growth of the AI market (approaching the size of cloud computing), the urgency of data readiness and governance to prevent model poisoning, and the futurist perspective that AI's accelerated skill acquisition (potentially surpassing humans in certain tasks in an 18-month cycle) will require human workers to constantly upskill and change roles more frequently.

Episode Links

https://noma.security/blog/forcedleak-agent-risks-exposed-in-salesforce-agentforce/

https://www.koi.ai/blog/glassworm-first-self-propagating-worm-using-invisible-code-hits-openvsx-marketplace

https://developer.nvidia.com/blog/from-assistant-to-adversary-exploiting-agentic-ai-developer-tools/

https://www.foxnews.com/tech/ai-girlfriend-apps-leak-millions-private-chats

https://layerxsecurity.com/blog/cometjacking-how-one-click-can-turn-perplexitys-comet-ai-browser-against-you/

Worried about AI security? Get Complete AI Visibility in 15 Minutes. Discover all of your shadow AI now. Book a demo of Firetail's AI Security & Governance Platform

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(138)

This Week in AI Security - 15th October 2026

Back to the normal fifteen-minute format this week, across three themes: a couple of fresh attacks, a run of agent-behavior breakouts, and the policy response forming around them. Attackers are now dr...

15 Okt 17min

Søren Brandbyge & Adam Burns on Email and DNS

Email is the one application almost everyone on the internet uses every single day, and almost nobody understands how fragile it really is. In this two-part episode, Jeremy Snyder sits down with two g...

13 Okt 50min

This Week in AI Security - 8th October 2026

Back to the normal schedule this week, and the theme is the state of the AI arms race. Three major reports landed at once, from Microsoft, Google, and Anthropic, and the shared message is that attacke...

8 Okt 14min

This Week in AI Security - 1st October 2026

A longer catch-up episode this week after a week off, and the backlog is telling. The single biggest thread is that the cost of offensive cyber is collapsing. An open-weight model, Z.ai's GLM 5.3, is ...

1 Okt 26min

Richard Stiennon of IT-Harvest

Jeremy Snyder sits down with industry analyst Richard Stiennon, founder of IT-Harvest and author of the annual Security Yearbook, for a tour of the cybersecurity industry from the inside. Richard has ...

24 Sep 47min

This Week in AI Security - 17th September 2026

A shorter episode this week, recorded from the sidelines of Mind The Sec, soon to be Black Hat Latin America. The headline is distillation. Two separate disclosures, one from Anthropic and a joint adv...

17 Sep 9min

Jonathan Schaeffer of Kind

In this episode of Modern Cyber, Jeremy is joined by Jonathan Schaeffer, a 40-year AI veteran and the inventor of Kind, to discuss the sweeping evolution of artificial intelligence. Jonathan traces th...

11 Sep 48min

This Week in AI Security - 10th September 2026

This week's episode covers several stories plus a couple of topics that sit just outside the strict security lens but are too important to skip. The theme is hard to miss. AI agents are now running th...

10 Sep 14min