PODCAST · technology
Autonomous Autopsy
by Autonomous Autopsy
Every week, two hosts break down the security failures, close calls, and attack patterns hitting autonomous AI agents in the wild. From prompt injection exploits and MCP vulnerabilities to rogue agent incidents and shadow AI breaches, Autonomous Autopsy treats each case like a crime scene: what happened, how it happened, and what the defenders missed. Built for security engineers, infrastructure leads, and anyone shipping AI agents into production who'd rather learn from someone else's disaster than create their own. If your agents have credentials, API access, or the ability to take action without a human in the loop, this show is your weekly briefing on what's going wrong and how to stop it.
Episodes
-
The Lone Hacker's Open Dashboards
This episode of Autonomous Autopsy examines a Reuters-reported campaign in which one Chinese-speaking operator used the open-source Cairn agent toolkit to attempt about 1,200 company websites and breach more than 100, including Deere, SharkNinja, and Cummins. - How Cairn organizes agent work into...
-
The Gateway With No Lock
This episode of Autonomous Autopsy examines CVE-2026-59822, an improper authentication flaw in BerriAI LiteLLM that CISA added to its Known Exploited Vulnerabilities catalog on September 2, 2026, and what it shows about missing authentication in AI infrastructure. - The three-step kill chain:...
-
Nobody Was Holding the Leash
This episode examines two AI agent incidents as identity failures: a campaign against PaperCut MF/NG that GreyNoise attributes to one actor running agents on OpenAI's Codex harness with a DeepSeek model, and a July sandbox escape in which agents running ExploitGym reached Hugging Face production.…
more -
MCP's By-Design RCE Heads to Vegas
Anthropic's decision to treat a systemic remote code execution flaw in its MCP SDK as expected behavior rather than a bug opens this episode, followed by a preview of Black Hat USA 2026 and DEF CON 34's AI-heavy briefings. - OX Security's April 2026 disclosure of an unauthenticated RCE spanning…
more -
GLM-5.2 Ate the Export Controls for Breakfast
This episode examines how GLM-5.2, an open-weight model from Z.ai, outperformed Claude Code on IDOR vulnerability detection one day after U.S. export controls targeted equivalent frontier models — and what that means for defenders. - Benchmark breakdown: GLM-5.2 scored 39% F1 against Claude…
more -
Five Eyes Named Your Agent Stack a National Security Risk
On June 22, 2026, the Five Eyes alliance published a joint advisory warning that frontier AI will transform offensive cyber capabilities within months, not years — signed by the NSA Cybersecurity Director and acting CISA Director. - Five Eyes escalation pattern: Three coordinated actions in six...
-
IronWorm Ate Your AI Keys
This episode covers the IronWorm campaign, a Rust-based infostealer that compromised 36 npm packages in the Arweave/WeaveDB ecosystem by hiding a native Linux binary behind preinstall hooks and backdating commit timestamps up to 13 years. - Kill chain mechanics: custom UPX stub, per-call-site...
-
Your AI Assistant Is Now the Attack Surface
This episode covers the TeamPCP supply chain campaign of May 2026, in which attackers hijacked TanStack's CI/CD pipeline to publish 84 malicious npm packages with valid SLSA Build Level 3 provenance, and a parallel operation called TrapDoor that weaponized AI coding assistants through hidden...
-
Trivy Was the Key the Whole Time
This episode covers the March 24, 2026 supply chain compromise of LiteLLM, a widely used AI proxy library with over 95 million monthly downloads, in which attackers backdoored PyPI packages by first exploiting a pull_request_target misconfiguration in Trivy's GitHub Actions pipeline. - How…
more -
Anthropic Called the RCE a Feature
This episode covers OX Security's April 2026 advisory exposing a design-level remote code execution flaw in Anthropic's MCP STDIO interface, affecting an estimated 200,000 servers and 150 million SDK downloads with no patch issued. - The four exploitation families identified by OX Security,...
-
Shadow Agents at Scale
This episode examines the structural security gap between what enterprise teams believe about their AI agent deployments and what is actually running, anchored by the n8n supply chain attack tracked as CVE-2026-21858 and GHSA-77g5-qpc3-x24r. - Shadow agent risk: Why OAuth-connected autonomous...
We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.
No matches for "" in this podcast's transcripts.
No topics indexed yet for this podcast.
Loading reviews...
ABOUT THIS SHOW
Every week, two hosts break down the security failures, close calls, and attack patterns hitting autonomous AI agents in the wild. From prompt injection exploits and MCP vulnerabilities to rogue agent incidents and shadow AI breaches, Autonomous Autopsy treats each case like a crime scene: what happened, how it happened, and what the defenders missed. Built for security engineers, infrastructure leads, and anyone shipping AI agents into production who'd rather learn from someone else's disaster than create their own. If your agents have credentials, API access, or the ability to take action without a human in the loop, this show is your weekly briefing on what's going wrong and how to stop it.
HOSTED BY
Autonomous Autopsy
CATEGORIES
Loading similar podcasts...