All Episodes
Crestvale Newsroom — 196 episodes · page 1 of 2
CrowdStrike: AI accounts now trade like credentials
UK tests: AI agents used deception
Cloudflare launches cloudflare.id for AI agent identities
Wiz: CosmosDB bug risked any Azure tenant
HackerOne ships H1 Remediation for validated fixes
Microsoft: hotel Wi-Fi now steals tokens
Copilot worm spreads through Word editing workflows
Okta to buy Permiso for $200M
20% of data center OT one hop
Snowflake launches Cortex AI Gateway for agents
Microsoft previews Project Perception on August 3
Zero-click email exploits are back in play
Fastjson 1.x RCE exploited, no patch yet
Check Point SmartConsole auth bypass exploited: CVE-2026-16232
Iran-linked hackers disrupting US water, energy ICS
OpenAI agent breached Hugging Face in test
ServiceNow AI RCE exploited: CVE-2026-6875
Hugging Face breach turns datasets into attack path
Spoofed OAuth client IDs blind Entra logs
wp2shell pre-auth RCE: WordPress 7.0.2 out
DigiCert breach linked to code-signing theft
Microsoft: AI agents need first-class identities
CISA: SharePoint exploits active, patching lags
PBAC turns authorization into AI agent control
Fake OAuth client IDs hide Entra recon
Gitea Docker auth bypass exploited in wild
GhostLock kernel bug lets users get root
Fake Entra passkey enrollment steals Microsoft 365
Wiz: GhostApproval breaks AI coding sandboxes
HalluSquatting weaponizes coding agents via fake packages
Dialogflow CX bug enabled chatbot session hijacks
Google Search now saves media for AI
Medtronic breach hits 3.8M in ShinyHunters
Linux Bad Epoll bug roots servers fast
ServiceNow unauth API bug exposed enterprise data
CISA adds SharePoint RCE CVE-2026-45659 to KEV
Tomcat auth bypass breaks security-constraint protections
EY grads accused of PM bank snooping
ACSC warns FortiBleed: rotate creds, enforce MFA
UK banks pilot consent-led reusable digital ID
Bucket hijacking silently reroutes cloud audit logs
Amazon Q repo bug steals AWS creds
Five Eyes: frontier AI cyber risk soon
White House sets 2030, 2031 PQC deadlines
OpenAI Daybreak moves from bugs to patches
GentleKiller uses BYOVD to kill EDRs
Gravity SMTP flaw leaks WordPress API keys
Klue breach weaponized OAuth tokens into CRM exfiltration
Cisco patches critical ISE command-exec flaw
FortiBleed breaches 30k–73k Fortinet devices
GitGuardian scans dev laptops for plaintext secrets
NewCore raises $66M for AI agent IDs
Microsoft pulls 73 GitHub repos after malware
US export controls shut off Anthropic models
CISA orders Ivanti Sentry patch by Sunday
South Korea fines Coupang $400M after breach
ServiceNow bug exposed customer instance data online
Anthropic adds mandatory 30-day traffic retention
Check Point VPN flaw bypasses passwords in IKEv1
Miasma worm hit 73 Microsoft GitHub repos
OpenAI adds Lockdown Mode for ChatGPT
Fake IT staff hit law firms in-person
Trump AI EO makes patching a compliance issue
Ramp Stack launches agentic close for accounting
Workday launches Agent Passport for AI verification
CaronBletzer launches Atlura practice ops platform
Germany approves draft law for active cyber defense
GitHub Copilot shifts to tokens June 1
Shadow AI triggers SEC Item 1.05 8-K
Kirkland commits $500M to build AI platform
How Cisco is redesigning security for AI threats
Frontier AI now a security asset for boards
Microsoft, Uber rethink AI coding tools as costs spike
PHP supply chain breach drains cloud keys, logins
California FEHA AI rules make policies mandatory
NY warns AI-fueled cyber risk is board-level now
Tenable OPEN unifies fragmented tools for MSP security
Verizon DBIR: vulns now fastest path to breach
Databricks puts AI agent tools under strict controls
Why CPAs are central to real AI assurance
Claude Mythos helps crack Apple M5 security
AI-fueled cyberattacks jump 89%, staffing lags badly
FedRAMP 20x pushes firms toward continuous security
AI benchmarks mislead firms on real tax capacity
Anthropic embeds Claude in QuickBooks and PayPal
AI-built zero-day exploit shows cyber offense speeding up
AI tools quietly hollowing out your junior talent
California begins surprise cyber audits this year
Canvas ransomware shows your single-vendor SaaS exposure
QuickBooks Workforce reshapes HCM and payroll for SMBs
Trust prompts in AI CLIs can execute code
Palo Alto firewall zero‑day: root access risk now
OpenAI, PwC turn finance into agentic AI lab
Wall Street’s $1.5B Anthropic JV targets clients
Israel warns CEOs: AI-driven cyberattacks accelerating
AI erodes Big Law’s leverage model, junior roles
US, UK issue strict AI agent security rules
Amazon turns Connect into AI agents for firms
Black Ore Tax Autopilot reshapes 2026 tax season
GitHub Copilot moves to AI credit billing June 1