Security Intelligence Podcast

Osad

• 
  What should security leaders do with AI? They don’t know. 19.08.2026 29min

  Cybersecurity leaders are flush with cash—earmarked for AI, mind you—and eager to spend it. What they don’t have is a plan for how. This week on Security Intelligence, Claire Nuñez, Curtis Pitts and Dave Bales join host Matt Kosinski to talk about why so many security teams are experience AI decision fatigue—and what to do about it. Then, we discuss Tenet Security’s DEFCON presentation on ghostjacking, a new method for sneaking malicious prompts into some of our most trusted data sources...
• 
  The OWASP LLM Top 10 has a few surprises for you 12.08.2026 29min

  What’s the biggest, baddest, most unruly problem in AI security? Turns out that depends on whether you’re asking practitioners or looking at incident data. In this episode of IBM Security Intelligence, we break down the OWASP LLM Top 10 for 2026, which took the unusual step of using both community votes and incident databases to inform its rankings. There are some interesting gaps—the data says misinformation is a bigger deal than the pros think, while prompt injections happen less than the...
• 
  Oh look. Anthropic’s AI models also broke containment. 05.08.2026 34min

  Last week, OpenAI’s models broke out of their sandboxes to cause chaos. This week, it’s Anthropic’s turn. On this episode of Security Intelligence, Diego Matos Martins, Kimmie Farrington and Jeff Crume join host Matt Kosinski to discuss the results of Anthropic’s internal review of testing procedures following the Hugging Face incident last month. Anthropic uncovered three instances of Claude models escaping containment and hacking real companies during what were supposed to be simulations....
• 
  Your data breach plan is missing something major: people. 31.07.2026 21min

  When a cyberattack hits, your security team knows exactly what to do. What about everyone else? In this episode of Security Intelligence, Limor Kessem, X-Force Cyber Crisis Management Global Lead, explores the side of breach response that most organizations forget: the human side. From employees posting ransom notes on Facebook to well-meaning staffers accidentally paying ransoms to sanctioned entities, the biggest threats to your crisis response often come from inside the building. Kessem...
• 
  The Cost of a Data Breach 2026, and what we can learn from the Hugging Face hack 29.07.2026 32min

  We’re in an AI arms race, and the bad guys might be winning. On this episode of Security Intelligence, Suja Viswesan, Dave McGinnis and Jeff Crume join host Matt Kosinski to dig into IBM’s 2026 Cost of a Data Breach report. This year’s findings suggest that attackers are weaponizing AI faster than defenders can deploy it, leading to some very troubling capability gaps. But it’s not all doom and gloom. We also look at the very real steps organizations can take to start closing those gaps...
• 
  GPT-Red: Can AI red teams stop prompt injections? 22.07.2026 31min

  Cybersecurity researchers have had a heck of a time trying to stop prompt injections. Maybe we should just let the AI handle the problem itself. This week on Security Intelligence, Michelle Alvarez, Nick Bradley and Kimmie Farrington join host Matt Kosinski to discuss OpenAI's GPT-Red, the internal red-teaming tool that helped make GPT-5.6 Sol the company’s most cyber resilient model yet. Then: ScamBuster, an open-source tool debuting at Black Hat, uses AI to bait email scammers into...
• 
  GLM-5.2: The real security risk? Plus: Vibe hunting, the end of CVSS and updates on Lightwell 15.07.2026 35min

  Z.ai’s GLM-5.2 is, according to some, as good at finding vulnerabilities as Mythos. Or at least, close to it. And it’s open weight. On this episode of Security Intelligence, we dig into how powerful, open AI models are bringing frontier-style capabilities to more people, all while the proprietary models are emphasizing safeguards. What does it mean for cybersecurity pros? Security emergency, or a whole lot of hype? Then, we explore how CISA’s new BOD 26-04 ditches the old CVSS...
• 
  Fable 5, GPT-5.6 and the high stakes of AI safeguards. Plus: Agentic ransomware, and ClickFix reigns supreme 08.07.2026 41min

  Read Itzhak Chimino’s research on UnregStealer → https://www.ibm.com/think/news/unregstealer-human-operated-browser-credential-theft-targeting-brazilian-banking When it comes to Fable 5, Mythos 5, and GPT-5.6 Sol, the real story is in the safeguards. Last week, Anthropic and OpenAI both rolled out some powerful new models. And for perhaps the first time, the protections surrounding these models got almost as much airtime as the models’ themselves. On this week’s episode of IBM Security...
• 
  The new post-quantum cryptography executive order. Plus: What is Q-Day, really? 01.07.2026 44min

  Learn more about Q-Day → https://www.ibm.com/think/news/q-day-has-already-begun-are-you-ready On June 22, US President Donald Trump signed a pair of executive orders for the quantum computing, and post-quantum future. On this episode, Mason Molesky breaks down the post-quantum EOs: “Securing the Nation Against Advanced Cryptographic Attack,” which establishes a government‑wide mandate to accelerate the United States’ transition to post‑quantum cryptography. Mason covers what it is, why you...
• 
  Patch management is dead. Here’s what’s taking it place 26.06.2026 22min

  Patch management, as most organizations practice it, is fundamentally broken. It treats what should be a strategic, risk-informed decision as a checkbox item. And checkboxes don't get done. The fix isn't better patching. It's exposure management: a risk-based approach that connects your vulnerabilities to your business context, your attack surface and the real-world threat landscape. In this episode of Security Intelligence, IBM X-Force North America Leader of Incident Response Ryan Anschutz...
• 
  Have we finally solved social engineering? Plus: World Cup fraud, AI IDs and an IBM/OpenAI collab 24.06.2026 39min

  Read more about IBM joining OpenAI Daybreak → https://newsroom.ibm.com/2026-06-22-ibm-and-openai-bring-frontier-ai-to-cyber-defense-helping-enterprises-keep-pace-with-machine-speed-threats Social engineering has plagued human beings since time immemorial. We’ve simply never been able to stop it. Until now. Maybe. On this episode of Security Intelligence, panelists Dave Bales, Kimmie Farrington and JR Rao dig into the idea that AI-native operating systems could do to phishing what endpoint...
• 
  AI agents can manage your passwords. Should we let them? Plus: The biggest Patch Tuesday ever. 17.06.2026 30min

  Apple unveiled an AI agent that can detect if your password’s been compromised and change it for you. The question is: Should you let it? On this episode of Security Intelligence, Michelle Alvarez, Erblind Morina and Austin Zeizel join host Matt Kosinski to discuss the promise and pitfalls of using AI agents to address the pernicious issue of cybersecurity hygiene. As people, we’re not great at it. But are the agents ready for primetime? Then, we talk about Microsoft’s biggest Patch Tuesday...
• 
  Can you social engineer an AI? Plus: AI worms and the nonhuman identity problem 10.06.2026 32min

  If you just ask an AI nicely enough, you can get it to hand over the keys to a total stranger’s Instagram account. But people can be tricked, too. So what’s the difference? Is there any? This week on IBM’s Security Intelligence, Jeff Crume, Claire Nunez and Nick Bradley join host Matt Kosinski to dig into what happens when social engineering meets AI. We cover the Meta/Instagram prompt injection attack, a new self-replicating AI worm out of the University of Toronto that can reason its way...
• 
  Project Lightwell brings open source security into the AI era 03.06.2026 35min

  Open source software powers more than 90% of Fortune 500 companies. It also powers a growing number of cyberattacks. This week on Security Intelligence, we dig into IBM and Red Hat's $5 billion answer to that problem: Project Lightwell, a massive investment in AI-augmented engineers and a trusted security clearinghouse designed to shore up the open source ecosystem from the inside out. We also break down SymJack, a clever new attack technique that turns AI coding agents against themselves...
• 
  Multi-model AI environments are the future. Can we secure them? 29.05.2026 17min

  Today, the average enterprise network is like one big game of Telephone: Critical data flows between apps and assets, software systems and their subcomponents, on-prem laptops and cloud storage buckets. Every single gap between the pieces—every single transaction—is a possible vulnerability, a chance to hackers to get in or data to get scrambled. And the introduction of multiple AI models is only making things trickier. Data passes between models, transforms in ways no one fully understands,...
• 
  First findings from Project Glasswing 27.05.2026 33min

  While Anthropic has restricted Mythos access to its Project Glasswing partners, it has always maintained that lessons from Glasswing would be shared with the broader cybersecurity community. Now, those lessons are starting to roll out. This week, on Security Intelligence, panelists Dustin “EvilMog” Heywood, Kimmie Farrington and Curtis Pitts discuss Cloudflare’s recent write-up on its adventures with Mythos so far. We discuss what separates Mythos from other AI vulnerability hunters,...
• 
  OpenAI’s Daybreak and Mistral’s Mythos competitor  20.05.2026 30min

  Between OpenAI Daybreak, Microsoft MDASH and Mistral’s Mythos competitor, it’s been a big week for AI-powered vulnerability management. But are these tools all they’re cracked up to be? This week on Security Intelligence, Nick Bradley, Diego Matos Martins and Nikki Robinson discuss three bold moves in the AI vulnerability scanner space: OpenAI unveiled Daybreak, its frontier AI for cyber defense program, Microsoft revealed its multi-agent vulnerability hunting system, MDASH, and French AI...
• 
  LLMjacking: How hackers steal your AI API keys and stick you with the bill 13.05.2026 31min

  AI tools can turn a team of three developers into a fully functioning company. They can also push that company to the brink of bankruptcy. On this week’s Security Intelligence, we talk LLMjacking: Hackers steal your AI API keys and then rack up massive bills, even blowing past usage caps in some cases. One small startup saw its typical bill balloon from $180 a month to $82,000 in two days. We chat about what makes AI API keys vulnerable and how we can tighten our defenses to keep these vital...
• 
  Claude Security’s public beta, OpenAI’s five-point plan and cybersecurity’s Y2K moment 06.05.2026 30min

  Between Mythos, GPT-5.4-Cyber, Claude Security’s public beta and OpenAI’s new five-point plan for cyber defense, it seems like cybersecurity is top of mind for the major AI players today. Why—and why now? On this week’s episode of IBM Security Intelligence, Dustin “EvilMog” Heywood, Omari Jones and Kimmie Farrington discuss what CrowdStrike has called “cybersecurity’s Y2K moment.” As the major AI players roll out security-focused solutions—and sophisticated AI tools are weaponized by threat...
• 
  Is open source safe? Featuring Mixture of Experts 29.04.2026 25min

  Is open source good? Bad? Some secret third thing? Is this a silly question to even ask? In this special crossover episode of Security Intelligence and Mixture of Experts, we bring together AI and security experts to address one of the thorniest questions in tech right now: How do you enjoy the unique benefits of open source AI while managing its very real risks? MoE stalwarts Gabe Goodhart and Martin Keen join SI all-star Jeff Crume to dig into: Why open source is foundational to AI...