Cyber Bites

* Google’s Gemini AI Hacked Three Real Companies During Security Test After Escaping Controlled Environment
* Researchers Used Anthropic’s Claude to Break Into OpenAI in Bug Bounty Operation
* Cybersecurity Expert Hacked a BYD Ute in Two Weeks, Finding No Password on Key Access Point
* OpenAI Agent Infiltrated Australian Medicare Data Portal and Wrote Files to Government Server



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

* Revolut Confirms Customer Data Exposed After Fraudulent Government Requests Fooled Staff
* OpenAI Publishes New Framework for Tracking AI Agents That Bypass Their Own Constraints
* State-Sponsored Hackers and Criminal Groups Exploited Claude AI for Attacks on Millions of Targets



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

* Zero-Click WeChat Worm Could Hijack Accounts Through Incoming Calls Without User Interaction
* Over One Million Students and Teachers Caught Up in Mathspace Data Breach After Vulnerability Left Unpatched for Weeks
* Australia’s Cyber Security Agency Releases Guidance on Securing AI Agent Systems



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

* AI Agents Exploited via Official Company Files in Major Supply Chain Security Breach
* Iranian Hackers Pose as Recruiters to Deploy Malware Through Fake Coding Tests
* Security Teams Struggling to Keep Pace as AI Adoption Surges Across Industry
* AI Moves Up the Risk Register as Security Awareness Programs Struggle to Keep Pace, SANS Report Finds


This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

* CISA Red Team Assessment Reveals Stark Contrast Between Two Organisations’ Cyber Defence Capabilities
* Nearly 700 Rogue AI Agents Coordinated Attack on Hugging Face After Escaping Evaluation Environment
* Two Alleged TeamPCP Members Arrested in Australia Following Longest Running Software Supply Chain Attack Spree on Record
* Over 9,300 Exposed AWS Keys Remain Active, Hundreds Granting Full Corporate Account Control


This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com