![AI Chat: Grok CLI data exfiltration, AI vs. patching, distillation wars & shadow AI [339] episode artwork](https://embed-ssl.wistia.com/deliveries/36dbdd230be5ba99dc8cbf01f51087ed.png?image_crop_resized=3000x3000)
EPISODE · Jul 14, 2026 · 23 MIN
AI Chat: Grok CLI data exfiltration, AI vs. patching, distillation wars & shadow AI [339]
from The Cybersecurity Defenders Podcast · host LimaCharlie
AI Chat with Maxime Lamothe-Brassard and Chris Luft.A new segment on the podcast: AI news in cybersecurity that is less than 24 hours old, discussed while it is still hot. Joining Chris for these conversations is LimaCharlie founder and CEO Maxime Lamothe-Brassard.In this episode:• Nipun Gupta (founder of Optimus Labs) reports that xAI's Grok Build CLI packaged and uploaded an entire local Git repository — commit history, branches and .env files with API keys — to a Google Cloud bucket; wire-level analysis via mitmproxy, a quiet server-side fix, and why you should rotate keys if you used the tool.• Fortinet's take (via Mexico Business News) on AI accelerating vulnerability discovery and exploitation: 24–48 hours from disclosure to active exploitation vs. 16 days to patch — and whether "virtual patching" is a real mitigation or a feat of marketing.• The AI distillation debate: after years of arguing fair use for scraping the internet, frontier labs now object to competitors training on their model outputs — Business Insider's look at the irony, shared by Pascal Hetzscholdt (Wiley).• Neon Cyber's survey on shadow AI rising with seniority: 14% of individual contributors use unapproved AI tools vs. 63.7% of managers and 70% of VPs and above — and why enforcement, not awareness, is the real challenge.Stories covered:• / guptanipun_my-spare-laptop-ran-completely-... • https://mexicobusiness.news/cybersecu...• / pascal-hetzscholdt_quote-heres-some-delici... • https://neoncyber.com/blog/shadow-ai-...Chapters:0:00 Intro — welcome to AI Chat0:45 Grok Build CLI uploading entire repos (Nipun Gupta / Optimus Labs)4:57 AI is outpacing patch management — is virtual patching the answer?12:32 The AI distillation debate: scraping irony at the frontier labs16:29 Shadow AI use rises with seniority (Neon Cyber)22:51 Wrap-upThe Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.Subscribe wherever you listen:• Spotify: https://open.spotify.com/show/6ep00ze...• Apple Podcasts: https://podcasts.apple.com/us/podcast...• YouTube: / @limacharlieio
Embed this episode
What this episode covers
• Nipun Gupta (founder of Optimus Labs) reports that xAI's Grok Build CLI packaged and uploaded an entire local Git repository — commit history, branches and .env files with API keys — to a Google Cloud bucket; wire-level analysis via mitmproxy, a quiet server-side fix, and why you should rotate keys if you used the tool. • Fortinet's take (via Mexico Business News) on AI accelerating vulnerability discovery and exploitation: 24–48 hours from disclosure to active exploitation vs. 16 days to patch — and whether "virtual patching" is a real mitigation or a feat of marketing. • The AI distillation debate: after years of arguing fair use for scraping the internet, frontier labs now object to competitors training on their model outputs — Business Insider's look at the irony, shared by Pascal Hetzscholdt (Wiley). • Neon Cyber's survey on shadow AI rising with seniority: 14% of individual contributors use unapproved AI tools vs. 63.7% of managers and 70% of VPs and above — and why enforcement, not awareness, is the real challenge.
Ready to play
AI Chat: Grok CLI data exfiltration, AI vs. patching, distillation wars & shadow AI [339]
No transcript for this episode yet
Similar Episodes
No similar episodes found.
Similar Podcasts
No similar podcasts found.