Risky Business (815): Anthropic's AI APT report is a big deal

In this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news, including:

Anthropic says a Chinese APT orchestrated attacks using its AI
It’s a day ending in -y, so of course there are shamefully bad Fortinet exploits in the wild
Turns out slashing CISA was a bad idea, now it’s time for a hiring spree
Researchers brute force entire phone number space against Whatsapp contact discovery API
DOJ figures out how to make SpaceX turn off scam compounds’ Starlink service

This week's episode is sponsored by Mastercard. Senior Vice President of Mastercard Cybersecurity Urooj Burney joins to talk about how the roles of fraud and cyber teams in the financial sector are starting to converge. Mastercard also recently acquired Recorded Future, and Urooj talks about how they aim to integrate cyber threat intelligence into the financial world.

Show Notes:

Full report: Disrupting the first reported AI-orchestrated cyber espionage campaign
https://assets.anthropic.com/m/ec212e...

Researchers question Anthropic claim that AI-assisted attack was 90% autonomous - Ars Technica
https://arstechnica.com/security/2025...

China’s ‘autonomous’ AI-powered hacking campaign still required a ton of human work | CyberScoop
https://cyberscoop.com/anthropic-ai-o...

Amazon discovers APT exploiting Cisco and Citrix zero-days | AWS Security Blog
https://aws.amazon.com/blogs/security...

CISA gives federal agencies one week to patch exploited Fortinet bug | The Record from Recorded Future News
https://therecord.media/fortinet-fort...

PSIRT | FortiGuard Labs
https://fortiguard.fortinet.com/psirt...

CISA, eyeing China, plans hiring spree to rebuild its depleted ranks | Cybersecurity Dive
https://www.cybersecuritydive.com/new...

This Is the Platform Google Claims Is Behind a 'Staggering’ Scam Text Operation | WIRED
https://www.wired.com/story/lighthous...

A Simple WhatsApp Security Flaw Exposed 3.5 Billion Phone Numbers | WIRED
https://www.wired.com/story/a-simple-...

DOJ Issued Seizure Warrant to Starlink Over Satellite Internet Systems Used at Scam Compound | WIRED
https://www.wired.com/story/doj-issue...

Multiple US citizens plead guilty to helping North Korean IT workers earn $2 million | The Record from Recorded Future News
https://therecord.media/multiple-us-n...

Cyberattack leaves Jaguar Land Rover short of £680 million | The Record from Recorded Future News
https://therecord.media/jaguar-land-r...

FBI: Akira gang has received nearly $250 million in ransoms | The Record from Recorded Future News
https://therecord.media/akira-gang-re...

Operation Endgame: Police reveal takedowns of three key cybercrime tools | The Record from Recorded Future News
https://therecord.media/operation-end...

Inside a Wild Bitcoin Heist: Five-Star Hotels, Cash-Stuffed Envelopes, and Vanishing Funds | WIRED
https://www.wired.com/story/bitcoin-s...