We're having some issues with podcast distribution. We're going to take a couple of days to figure out what is going on and what, if anything, we can do about it.

In this episode of Cybersecurity Today, host David Shipley discusses several pressing cybersecurity issues. First, popular NPM Linter packages were hijacked via phishing to spread malware, affecting millions of downloads.

Concurrently, Ukrainian CERT uncovers new phishing campaigns tied to APT28 using large language models for command and control.

Microsoft discontinues the use of China-based engineers for US Department of Defense systems following a controversial report. Lastly, social engineering, facilitated by AI, becomes a greater threat than zero-day exploits.

The episode emphasizes the need for stronger maintainer security, multifactor authentication, and a comprehensive understanding of social engineering risks.

00:00 Introduction - 10 Million Downloads
01:30 NPM Linter Packages Hijacked
05:05 Social Engineering and AI in Cybersecurity
08:57 Microsoft's China-Based Engineers Controversy
12:15 The Real Threat: Social Engineering
16:39 Conclusion and Call to Action

The Cybersecurity Today episode revisits a discussion on the risks and implications of AI hosted by Jim Love, with guests Marcel Gagné and John Pinard. They discuss the 'dark side of AI,' covering topics like AI misbehavior, the misuse of AI as a tool, and the importance of data protection in production environments. The conversation delves into whether AI can be conscious and the ethical considerations surrounding its deployment, particularly in highly regulated industries like finance. They emphasize the need for responsible use, critical thinking, and ongoing oversight to mitigate potential risks while capitalizing on AI's benefits. The episode concludes with a call for continued discussion and engagement through various platforms.

00:00 Introduction to Cybersecurity Today
00:33 Exploring the Dark Side of AI
02:31 AI Misbehavior and Security Concerns
07:35 Speculative Risks and Consciousness
26:09 AI in Corporate Settings
31:49 Human Weakness in Security
32:37 Social Engineering Tactics
33:08 Security in Engineering Systems
33:42 AI Data Storage and Security
35:16 AI Data Retrieval Concerns
39:36 Testing Security in Development
41:37 AI in Regulated Industries
43:57 Bias and Decision Making in AI
47:18 Critical Thinking and Debate Skills
55:06 The Role of AI as a Consultant
01:02:21 The Future of AI and Responsibility
01:04:55 Conclusion and Contact Information