Zero-Click Exchange RCE, $25 AI Intrusions, and the ShinyHunters FBI Claim
From Initial Access · 01:07:12
Show by Bishop Fox
This episode breaks down:A zero-click Exchange Server RCE triggered by a Visio attachmentAI agents compromising online retailers for about $25 a targetShinyHunters' unverified claim that it breached the FBIOpenAI's six new misalignment disclosuresPlus, we sit-down with Bishop Fox's Emilio Gallegos on MikroTick, a RouterOS exploit chain attackers used before defenders knew it existed.Security Headlines:Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days, Security WeekAutonomous AI Agents are breaking into hundreds of Online Retailers for $25 a target in an ongoing campaign, Gambit SecurityFBI investigating claim hackers have stolen details of all its agents, BBCOpenAI Discloses Six New Incidents of ‘Concerning’ A.I. Behavior, The New York TimesAlso mentioned: Workshop: Weaponizing CloudFormation (available in English and Spanish) Virtual Session: AI & Cybersecurity Priorities for 2027: Executive ChatEvents: BSides Cleveland 2026, Ekoparty 2026, No Hat 2026, Wild West Hackin' Fest Deadwood 2026Blog: MikroTrick: Inside the RouteOS Takeover Chain Blog: Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI ApplicationsBlog: Master Key Included: Detecting SolarWinds ARM CVE-2026-28326Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit.
More episodes of Initial Access
More episodes
- Nvidia CEO Investigation, N-central Zero-Days, SonicWall MFA Bypass, And A Chainalysis Breach
- Binance $6.36B Hack, VMware ESX Zero-Day, TeamViewer Flaw, And Anthropic AI Exploits
- Direct Access with Farzan Karimi
- PHP2Shell Exploitation, Node2Shell Brotli RCE, And Mimori Ransomware Claims
- PHP2Shell: A Leaked Demo, A Broken Disclosure, and AI at Exploit Speed
- OpenAI Insider, Meta Muse’s Escape Hatch, AI Agents Gone Rogue
- A Third NetScaler Zero-Day, 8 Million Danish ID Records, and Google Pauses Its Bug Bounty
- ShinyHunters PeopleSoft WAF Bypass, Arrests, And OpenAI Astra News
- Ten-Hour Breaches, MikroTik Backdoors, Router Takeovers & the NetScaler Root Cause
- Patch Tuesday Overload, Broken Threat Feeds & the Scoping Problem
PodSearch is a free, independent podcast search engine. Read about PodSearch, the privacy policy or contact us.