The Cybersecurity Defenders Podcast·Jul 14, 2026·23m·Episode #339

AI Chat: Grok CLI data exfiltration, AI vs. patching, distillation wars & shadow AI [339]

Download audio Show notes Apple Podcasts

Show notes

AI Chat with Maxime Lamothe-Brassard and Chris Luft.

A new segment on the podcast: AI news in cybersecurity that is less than 24 hours old, discussed while it is still hot. Joining Chris for these conversations is LimaCharlie founder and CEO Maxime Lamothe-Brassard.

In this episode:

• Nipun Gupta (founder of Optimus Labs) reports that xAI's Grok Build CLI packaged and uploaded an entire local Git repository — commit history, branches and .env files with API keys — to a Google Cloud bucket; wire-level analysis via mitmproxy, a quiet server-side fix, and why you should rotate keys if you used the tool.

• Fortinet's take (via Mexico Business News) on AI accelerating vulnerability discovery and exploitation: 24–48 hours from disclosure to active exploitation vs. 16 days to patch — and whether "virtual patching" is a real mitigation or a feat of marketing.

• The AI distillation debate: after years of arguing fair use for scraping the internet, frontier labs now object to competitors training on their model outputs — Business Insider's look at the irony, shared by Pascal Hetzscholdt (Wiley).

• Neon Cyber's survey on shadow AI rising with seniority: 14% of individual contributors use unapproved AI tools vs. 63.7% of managers and 70% of VPs and above — and why enforcement, not awareness, is the real challenge.

Stories covered:

• / guptanipun_my-spare-laptop-ran-completely-...

• https://mexicobusiness.news/cybersecu...

• / pascal-hetzscholdt_quote-heres-some-delici...

• https://neoncyber.com/blog/shadow-ai-...

Chapters:

0:00 Intro — welcome to AI Chat

0:45 Grok Build CLI uploading entire repos (Nipun Gupta / Optimus Labs)

4:57 AI is outpacing patch management — is virtual patching the answer?

12:32 The AI distillation debate: scraping irony at the frontier labs

16:29 Shadow AI use rises with seniority (Neon Cyber)

22:51 Wrap-up

The Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.

Subscribe wherever you listen:

• Spotify: https://open.spotify.com/show/6ep00ze...

• Apple Podcasts: https://podcasts.apple.com/us/podcast...

• YouTube: / @limacharlieio

← Previous

Intel Chat: Dialogflow Rogue Agent, ghost phishing, CISA KEV deadline & HalluSquatting [338]

AI Chat with Maxime Lamothe-Brassard and Chris Luft. A new segment on the podcast: AI news in cybersecurity that is less than 24 hours old, discussed while it is still hot. Joining Chris for these conversations is LimaCharlie founder and CEO Maxime Lamothe-Brassard. In this episode: • Nipun Gupta (founder of Optimus Labs) reports that xAI's Grok Build CLI packaged and uploaded an entire local Git repository — commit history, branches and .env files with API keys — to a Google Cloud bucket; wire-level analysis via mitmproxy, a quiet server-side fix, and why you should rotate keys if you used the tool. • Fortinet's take (via Mexico Business News) on AI accelerating vulnerability discovery and exploitation: 24–48 hours from disclosure to active exploitation vs. 16 days to patch — and whether "virtual patching" is a real mitigation or a feat of marketing. • The AI distillation debate: after years of arguing fair use for scraping the internet, frontier labs now object to competitors training on their model outputs — Business Insider's look at the irony, shared by Pascal Hetzscholdt (Wiley). • Neon Cyber's survey on shadow AI rising with seniority: 14% of individual contributors use unapproved AI tools vs. 63.7% of managers and 70% of VPs and above — and why enforcement, not awareness, is the real challenge. Stories covered: • / guptanipun_my-spare-laptop-ran-completely-... • https://mexicobusiness.news/cybersecu... • / pascal-hetzscholdt_quote-heres-some-delici... • https://neoncyber.com/blog/shadow-ai-... Chapters: 0:00 Intro — welcome to AI Chat 0:45 Grok Build CLI uploading entire repos (Nipun Gupta / Optimus Labs) 4:57 AI is outpacing patch management — is virtual patching the answer? 12:32 The AI distillation debate: scraping irony at the frontier labs 16:29 Shadow AI use rises with seniority (Neon Cyber) 22:51 Wrap-up The Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly. Subscribe wherever you listen: • Spotify: https://open.spotify.com/show/6ep00ze... • Apple Podcasts: https://podcasts.apple.com/us/podcast... • YouTube: / @limacharlieio