Binance $6.36B Hack, VMware ESX Zero-Day, TeamViewer Flaw, And Anthropic AI Exploits
From Initial Access · 00:47:23
Show by Bishop Fox
In this episode, we break down four security stories: How a fake job interview led to the $6.36 billion Binance hack Warp Panda's zero-day use of a VMware ESX logging flaw rated 2.7 TeamViewer and UEFI PXE boot flaws that turn support tools against technicians An unreleased Anthropic AI model chaining bugs into five working exploits We also cover Bishop Fox research on how agent harness design shapes the results of AI security tools, and why AI-generated vulnerability findings are cheap to produce but costly to verify. Security Headlines: North Korea Steals USD 6.36 Billion From Binance in the Largest Hack in History, TRM Labs Binance's $6.3 billion hack began with a fake job interview, and a campaign 'built over many months', CoinDesk EIP-7702 Phishing Attack, arXiv Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day, SecurityWeek TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians' Machines, SecurityWeek CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers, Security Affairs Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits, The Hacker News Also mentioned: Workshop: iOS Game Hacking: From Zero to God Mode Virtual Session: Healthcare Security at Machine Speed: $17M Ransomware & AI Adversaries Virtual Session: Attacking AI: Real-World Paths to Compromise Events: API Cybersecurity Conference 2026 Blog: What Is an Agent Harness? How AI Security Tools Work Blog: AI Findings are Cheap to Find & Costly to Trust Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit.
More episodes of Initial Access
More episodes
- Nvidia CEO Investigation, N-central Zero-Days, SonicWall MFA Bypass, And A Chainalysis Breach
- Direct Access with Farzan Karimi
- PHP2Shell Exploitation, Node2Shell Brotli RCE, And Mimori Ransomware Claims
- PHP2Shell: A Leaked Demo, A Broken Disclosure, and AI at Exploit Speed
- OpenAI Insider, Meta Muse’s Escape Hatch, AI Agents Gone Rogue
- A Third NetScaler Zero-Day, 8 Million Danish ID Records, and Google Pauses Its Bug Bounty
- ShinyHunters PeopleSoft WAF Bypass, Arrests, And OpenAI Astra News
- Zero-Click Exchange RCE, $25 AI Intrusions, and the ShinyHunters FBI Claim
- Ten-Hour Breaches, MikroTik Backdoors, Router Takeovers & the NetScaler Root Cause
- Patch Tuesday Overload, Broken Threat Feeds & the Scoping Problem
PodSearch is a free, independent podcast search engine. Read about PodSearch, the privacy policy or contact us.