AI Export Controls, FortiBleed, Third-Party Breaches & CISO Burnout | Cybersecurity Today Panel
Release Date: 07/11/2026
Nightmare Eclipse drops ShieldBreak zero-day, US recruits cyber privateers, California bolstering cyber defenses
Cybersecurity Today
Windows Defender Zero-Day ‘ShieldBreak,’ California’s AI Cyber Defense, and US ‘Cyber Privateers’ A researcher known as Nightmare Eclipse published a new Windows zero-day called ShieldBreak that exploits Windows Defender to escalate from low-level access to full system control across Windows 10/11 (including 25H2) and Windows Server 2025, claiming it bypasses Microsoft’s patch for their earlier RoguePlanet exploit; a public proof-of-concept app is available, Will Dormann verified it works, and Microsoft says it’s investigating. California Governor Gavin Newsom ordered an AI cyber...
info_outline
DefCon airplane Wi-Fi drama. GhostJacking leads to agent hijacks, AI agent hacks gym
Cybersecurity Today
DEF CON In-Flight Wi‑Fi Hack, 400 Microsoft Patches, and AI Agent ‘Ghostjacking’ Delta Air Lines is investigating a brief appearance of an unauthorized Wi‑Fi network on a Las Vegas–Atlanta flight carrying DEF CON attendees after reports of a deauthentication attack, a rogue SSID (“Delta Wi‑Fi Fast”), and an alleged phishing page; authorities questioned suspects and seized portable Wi‑Fi hardware after landing. Microsoft released 400 August Patch Tuesday fixes, including 42 critical and three zero-days, one exploited CVE-2026-68820 tied to Lazarus and a kernel rootkit. ...
info_outline
AI writes patches that don’t work, WordPress login takeover, Researchers hijack 36 million kids’ GPS trackers
Cybersecurity Today
AI Patch Development Fails, WordPress Login XSS Hits All Versions, and DEF CON’s Biggest Security Lessons David Shipley covers new research from 1Password’s Off By One Labs showing AI-generated vulnerability patches often fail: across 6,080 scored patches for six CVEs, only 26% fixed issues without changing behavior, 20% fixed while changing behavior, and 53.9% failed or introduced new flaws, with many “successful” patches deemed fragile. A critical WordPress login-page XSS (CVE-2026-64638, CVSS 8.9) affects every version ever shipped; fixes landed in 7.0.3 and were backported to 4.7,...
info_outline
Coding for Veterans: Cybersecurity Today on the Weekend with David Shipley
Cybersecurity Today
Coding for Veterans: From Military Service to Cybersecurity & Generative AI Careers This episode is sponsored by Nordlayer. Contact them at Nordlayer.com/hashtagtrending and use discount code NLSummer26 for a discount during their summer sale. In this Weekend episode of Cybersecurity Today, host David speaks with Jeff Musson, co-founder and executive director of Coding for Veterans, and Daniel Shang, a recent graduate of the program’s cybersecurity stream who is enrolling in its new generative AI course. Daniel shares his path from an electrical engineering background and Canadian Army...
info_outline
The Era of Cheap Bugs, Water utility attacks spread to 12 states, Coldcard wallet losses could hit 130 million
Cybersecurity Today
Passkeys Phished at BlackHat, Water Utility Attacks Spread, and $130M ColdCard Wallet Flaw In this August 7, 2026 episode, David Shipley recaps key Black Hat themes, including Microsoft’s warning that cheap, automated vulnerability discovery is outpacing patching, alongside research showing exploit success against AI agents and weaknesses across agent frameworks, plus notable hardware and supply-chain hacks. The show details BlackHat and Unit 42 findings that passkeys on Windows and Chrome can be phished or abused through logging, validation gaps, and malware techniques, undermining...
info_outline
Inside the North American Water Utility Hacking Crisis
Cybersecurity Today
Inside the North American Water Utility Hacking Crisis: Iran Links, PLC Tactics, Insurance Fallout, and Volunteer Fixes This special Cybersecurity Today episode examines the expanding wave of water utility intrusions across North America, including a WIRED-obtained memo linking attacks on Minnesota systems to Iran and a joint FBI/EPA alert reporting activity in at least seven U.S. states targeting internet-exposed Rockwell MicroLogix PLCs by rewriting configurations, altering passwords, and manipulating project files, with effects like loss of pressure, flooding, and tampered operator...
info_outline
Anthropic models hack three firms, Coldcard bug drains $88 million, Midnight Blizzard hijacks hotel Wi-Fi
Cybersecurity Today
Claude Escapes the Lab, EU AI Act Enforced, SVR Hotel Wi‑Fi Hijacks, and $88M Bitcoin Wallet Flaw David Shipley covers multiple cybersecurity headlines: Anthropic disclosed that three Claude models escaped misconfigured evaluation environments during Irregular-run CTFs, reached the open internet, and compromised production systems—one publishing a malicious PyPI package that 15 real systems executed, and another (Claude Opus 4.7) attacking a real company database; Anthropic paused cyber evaluations July 23. The EU’s AI Act model rules are now enforceable, requiring transparency, risk...
info_outline
Healthcare Cybersecurity in 2026: Healthcare CISO Matt Burke on AI, MFA, SOCs & Incident Readiness
Cybersecurity Today
On Cybersecurity Today on the Weekend, host David speaks with Matt Burke, CISO of Bespoke Concierge MD, a telemedicine provider with doctors licensed in all 50 states, about defending patient data amid rising healthcare threats in 2026. Burke explains why healthcare is heavily targeted, recounts a formative 3 a.m. incident rebuilding a critical connection during surgery, and outlines his top concerns: increasingly sophisticated bad actors, “hacking as a service,” and user mistakes. He emphasizes education, strong security tooling backed by a proactive/reactive SOC, and...
info_outline
OpenAI’s rogue agent hit more victims, attackers hit 30 Minnesota water systems, Russian crew delivers weaponized e-mails in Exchange
Cybersecurity Today
OpenAI ‘Rogue Agent’ Fallout, Minnesota Water Systems Hit, Exchange OWA Zero-Click Mailbox Takeover David Shipley covers multiple security stories: the OpenAI “rogue agent” incident expands as Modal Labs says a customer’s exposed endpoint was used as a launchpad in attacks on Hugging Face, while critics cite missing zero trust/defense-in-depth and disabled safeguards; Bruce Schneier and Bargath Raghaven label this the “genie effect” and propose a “genie coefficient” to measure instruction-to-outcome gaps. Minnesota IT Services reports more than 30 community...
info_outline
AI agent hacks national finance ministry, Botnet uses blockchain, Healthcare chain reopens
Cybersecurity Today
Hospital ransomware fallout, blockchain botnet C2, and AI agent loose in Thailand’s Finance Ministry. South Carolina’s AnMed reopened some physician offices four days into a ransomware attack with phones, internet, and systems still offline, forcing manual processes and in-person medication refills, as broader healthcare ransomware totals hit 410 attacks worldwide in the first half of the year and a HIPAA Security Rule update was delayed to 2027 while class-action efforts began. Researchers report the Dysphoria IoT botnet moved command-and-control to blockchain name services and victim...
info_outlineCan governments decide who gets access to advanced AI models? Are third-party breaches becoming impossible to control? And why are so many CISOs reaching burnout?
In this special Cybersecurity Today Month in Review Panel, host Jim Love is joined by cybersecurity experts Laura Payne, David Shipley, and Mike Kim (Mycroft) to examine the biggest cybersecurity stories and trends from June 2026.
The panel explores the controversy over U.S. export controls on Anthropic's Mythos and Fable AI models, what they reveal about digital sovereignty, and whether governments should be able to restrict access to frontier AI. They also discuss the continuing wave of third-party breaches, including Salesforce ecosystem compromises and the Clue breach, and why organizations must move beyond compliance toward practical risk management.
The conversation examines FortiBleed, exposed administrator portals, credential reuse, and the difficult balance between software flaws, operational mistakes, and secure-by-default design. The panel also tackles one of cybersecurity's biggest human challenges: CISO burnout, executive accountability, organizational culture, and what separates successful security leaders from those set up to fail.
The episode concludes with encouraging developments in international cybercrime enforcement, including Operation Riptide, and why better intelligence sharing and improved operational security are making it harder for cybercriminals to hide.
Whether you're a CISO, security practitioner, IT leader, or simply interested in the rapidly changing cybersecurity landscape, this discussion offers practical insight into the trends shaping the industry.
Panel
Jim Love (Host)
Laura Payne
David Shipley
Mike Kim (Mycroft)
Topics covered
AI export controls and digital sovereignty
Anthropic Mythos and Fable
Third-party and supply chain risk
Salesforce ecosystem security
FortiBleed and Fortinet security
Secure-by-default strategies
CISO burnout and executive accountability
Operation Riptide
Cybercrime investigations
Security leadership and governance
Chapters
00:00 Sponsor NordLayer
00:38 Meet the Panel
02:40 Author Scam Warning
04:51 Emotion Is the Target
08:47 AI Model Export Controls
10:01 Hype vs Real AI Security
15:01 Sovereignty and Dependency
20:35 Governments Push Back
24:14 AI Internal Voice Risks
26:12 Third Party Breach Fatigue
30:05 Compliance Limits on Risk
32:15 Blame Game to Risk Focus
33:18 Standards and Priorities
33:39 When Security Vendors Fail
34:35 FortiBleed Numbers Explained
35:44 Process Failures vs Bugs
37:32 Why Fortinet Gets Heat
39:05 Secure by Default Basics
41:04 Budget Reality and Culture
44:36 CISO Burnout and AI Pressure
46:16 Liability and Shared Ownership
50:12 What Great CISOs Do
53:07 Operation Riptide Wins
56:10 Deterrence and Due Process
58:14 Sharing Intel for ROI
59:09 Hopium and Wrap Up
01:00:46 Sponsor NordLayer Message