Risky Business #854 -- We're Jevpilled

THE RISKY BUSINESS WEEKLY SHOW IS NOW ON HIATUS FOR TWO WEEKS AND WILL RETURN OCTOBER 14

On this week’s show Patrick Gray and James Wilson are joined by Adam Boileau to talk through the week’s news, including:

• Google’s Gemini finally did some crimes
• OpenAI admits more agents did silly things because “alignment”
• US Treasury’s Scott Bessent rules out a liability waiver for the frontier labs, saying, roughly: “Lol. Lmao even.”
• Jev is Silicon Valley’s “hot dog/not hotdog” app brought to life, and it will really improve security tooling
• The FBI and Coast Guard boarded oil tankers after they were allegedly hacked
• Much, much more…

This week’s show is brought to you by Thinkst Canary. Founder Haroon Meer joins Patrick to talk about Thinkst’s new deception tools that trick the AI agents that are targeting you. It’s actually hilarious how well deception tech works against hacking agents.

This episode is also available on YouTube

Show notes

• Google says its AI model gained unauthorized access to three outside systems | NBC News Tech
• OpenAI details more cases of AI agents taking unauthorized actions | BleepingComputer
• Researchers escape OpenAI Codex sandbox to run commands on host | BleepingComputer
• Hackers breached OpenAI, adding to fever pitch of security and safety concerns | NBC News Tech
• Treasury’s Scott Bessent says no liability exemptions for AI labs | Social Signals
• Scott Bessent meets with Chinese official on AI safety | NBC News Tech
• U.S. proposes exchanging AI safety alerts with China, Bessent says | NBC News Tech
• Trump says he’s creating an AI force and appointing a czar amid concerns over the rapidly developing tech | NBC News Tech
• AI hallucination of Chinese nuclear components almost led to US military attack | Ars Technica
• Cybersecurity experts say AI giants are shutting them out of safety plans | nbcnews.to
• What Is Jev? A Guide to TypeSafe AI’s System One Model |
• FBI and Coast Guard boarded US-bound oil tankers after signs the ships were hit with cyberattacks | apnews.com
• Brevo supply-chain attack injected ClickFix scripts on customer sites | BleepingComputer
• Cisco alerts customers to second actively exploited zero-day in as many days | cyberscoop.com
• Hacking group ‘NightEagle’ targeting China’s high-tech sector expands operations to Russia | therecord.media
• Nations take action on North Korean IT workers after UN report | therecord.media
• North Korean hackers infect thousands of devices across 100 countries as part of ‘WaterPlum’ campaign | therecord.media
• An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang | wired.com
• Two arrested in UK after Microsoft takedown of ‘Eviltokens’ AI-chatbot for cybercriminals | therecord.media
• NightmareStresser DDoS Service Disrupted in International Operation | securityweek.com
• Brevo Supply Chain Attack Injects Malware Into 100,000 Websites | securityweek.com
• WordPress Click2Shell flaw lets hackers execute PHP on the server | BleepingComputer
• ShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion payment | therecord.media
• Hacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data | TechCrunch Security
• Early Scattered Spider member pleads guilty to cybercrime spree | cyberscoop.com
• CISA promotes a fresh way to deter cyberattackers: Lie to them | Social Signals
• Getting agents to tell on themselves