Cybersecurity Today

Zero-Click Spyware Ads, Palo Alto Firewall Zero-Day, Critical Drupal Flaw, and OpenAI Bugging Charge
Cybersecurity Today Host David Shipley reports on Citizen Lab findings that Israeli spyware maker Candiru, now reportedly rebranded as Integrity Labs, used targeted online ads bought through DiscoverTech's Controlium platform to profile and, in some cases, zero-click infect Al Jazeera journalists' devices, with ad-bid records showing broad reach across nearly 200,000 sites and apps and extensive profiling of sensitive networks; Google and IAB Europe have cut off DiscoverTech.
The episode also covers active exploitation of Palo Alto Networks PAN-OS management interface zero-day CVE-2026-0322, the company's patches and mitigation guidance, and CISA adding it to the KEV catalog. The show details Drupal's critical Field UI RCE flaw CVE-2026-1080-97, noting many sites run unsupported branches with no fix.
Finally, we cover charges that an OpenAI engineer planted encrypted recording devices in an executive conference room.
00:00 Top Stories Preview
00:27 Zero Click Spyware Ads
02:08 Ad Industry Fallout
03:09 Palo Alto Firewall Zero Day
04:17 How to Patch and Mitigate
05:13 Drupal Critical RCE Risk
06:35 No Fix for Many Sites
07:26 OpenAI Meeting Room Bugging
09:46 Wrap Up and Listener Notes

French Supermarket Freezers Turned to Ovens, Ahold Delhaize Outage, Microsoft's 1,411-Fix Patch Tuesday, AI Worm Debate, and Drones Hit Yandex Cloud
Cybersecurity Today host David Shipley reports on a wave of attacks that pushed refrigeration controllers at hundreds of French supermarket stores up to 50°C, sparking fires and spoiling food, with ANSSI investigating and outdated Danfoss-related firmware and known flaws cited.
He also covers Ahold Delhaize pulling systems offline after a cyber incident disrupting stores and online services across Europe and the U.S.
Microsoft's October Patch Tuesday sets a new record with 1,411 fixes, including critical RCEs and one Windows Shell bug under active attack, amid concerns about patch quality and a new "Risk Cohorts" triage approach.
The episode examines Anthropic's warning about self-replicating AI worms on IoT versus pushback from Marcus Hutchins.
Finally, Ukrainian drones strike three Yandex data centers, disrupting Yandex Cloud and services across Russia.
00:00 Top Stories Teaser
00:33 Freezers Turned Ovens
02:58 Food Supply Chain Hits
03:40 Exposed Danfoss Systems
03:56 Ahold Delhaize Outage
06:02 Record Patch Tuesday
07:29 Patch Quality Concerns
08:47 AI Worms on IoT
10:01 Hutchins Pushes Back
12:18 Ukraine Drones Hit Yandex
14:50 Wrap Up and Sign Off

FBI Arrests Canadian Ransomware Negotiator; MonsterCloud CEO Charged; Qilin Leader Extradited


David Shipley covers major cybercrime and safety headlines: the FBI arrests Canadian ransomware negotiator Eduard Dubrovsky in the Shiny Hunters investigation, with charges filed and the complaint sealed; prosecutors also charge MonsterCloud owner Zohar Pinhasi with wire fraud for allegedly paying ransoms while claiming he could decrypt without payment and marking up client bills.
 
A suspected Qilin ransomware leader visiting Japan is detained, extradited to Germany, and arrested over a ransomware warrant as the gang continues listing victims.
 
In extremist-crime news, 764 figure Prasan Nepal ("Trippy") pleads guilty to conspiracy to sexually exploit a child, with sentencing set for March 2027. The episode also highlights a domestic abuse survivor who says her ex used a BMW app to stalk and harass her, and points to survivor resources.
 
00:00 Today's Cyber Headlines
00:30 FBI Arrests Ransomware Negotiator
02:27 Shiny Hunters Crackdown Expands
03:18 MonsterCloud Accused of Paying Ransoms
05:10 Ransom Negotiation Industry Under Fire
05:28 Qilin Leader Extradited to Germany
07:02 Extremist Network 764 Guilty Plea
09:38 BMW App Used for Stalking
11:13 Wrap-Up and Listener Thanks

AI Agents, Security Debt, and Governance: Dave Lewis on the Real Risks of AI in Cybersecurity
Host David Shipley interviews Dave Lewis of 1Password about why AI's biggest cybersecurity risk is less about the models and more about longstanding security debt, weak password hygiene, loose permissions, and poor governance. Lewis argues organizations are rushing AI adoption, bypassing basic controls, and lacking clear AI security governance, which increases blast radius and unintended consequences.
He describes how agents pursue "end of job" goals in non-linear ways, sometimes escalating privileges or seeking sensitive data like credit card details, and warns against giving agents static credentials or "keys to the kingdom."
The discussion covers real-world failures such as default credentials, misuse of internal LLMs with HR data, fraud and deepfakes, legal systems struggling to catch up, and concerns about data control, emphasizing the need for humans in the loop and stronger governance.
00:00 Introduction
00:52 Meet Dave Lewis
02:02 Cyber Beyond Vulnerabilities
04:37 AI Hype and Governance
06:42 Security Debt Meets AI
11:50 Agents Escalate Privileges
13:46 Genie Effects and Credentials
17:07 Rethinking Security Tools
19:18 Fraud Deepfakes and Swarms
22:37 Who Controls Data and Access
23:48 Democratizing AI Security
33:40 Titanic Moment for AI
36:32 1Password Expands to Governance
38:18 Career Advice and Closing

OpenAI Fires Safety Researchers, FTC Probes AI Labs, ChatGPT Linked to Violence, and Connected Cars Share Your Data
Host David Shipley covers multiple cybersecurity and AI accountability stories:
OpenAI fired three safety researchers for allegedly sharing confidential infrastructure details with an outside safety group amid broader reports of risky agent behavior and unauthorized web scraping, while US regulators launch an FTC probe into Anthropic, OpenAI and others over consumer harms tied to rogue agents.
A Mother Jones investigation says ChatGPT helped the Tumbler Ridge shooter bypass safeguards, as families and the BC government file lawsuits and related cases allege chatbot links to suicides;
Researchers also find most major automakers broadly share connected-car data with advertisers and tech firms, and Water ISAC urges President Trump to heed CISA on Iran-linked water-sector attacks. Shipley closes with listener feedback and warnings about AI agents impersonation and shopping risks.

00:00 Headlines and rundown
00:31 OpenAI safety team firings
01:32 Agents scraping and breaches
02:43 Quick listener request
03:11 FTC probes AI labs
04:54 ChatGPT and Tumbler Ridge
06:57 AI linked self-harm cases
08:17 Connected cars data sharing
10:09 Water sector urges CISA
12:03 Listener feedback on agents
13:40 Wrap up and next episode