Light

Episode #1082 Quiz

The Malicious Use of AI
Date: 2026-06-09 | Length: 2.25 hrs | Episode page at twit.tv

About this episode

Security Now! #1082 covers significant security threats including a $20 million ransom paid by a US law firm after client data theft, ongoing exploitation of Cisco SD-WAN zero-days, and a critical Everest Forms Pro WordPress plugin remote code execution flaw via unsafe eval() of user input.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: What strategic advantage did the Silent Ransom Group exploit in targeting law firms like Weil Gotshal & Manges for ransom payments?

Question 1

What strategic advantage did the Silent Ransom Group exploit in targeting law firms like Weil Gotshal & Manges for ransom payments?

Law firms have deep-pocketed clients who pay ransoms quickly to avoid delays. Law firms typically have weak external cloud security making them easy targets. Law firms' ransom payments are tax-deductible, incentivizing payouts. The confidential client data held by law firms causes massive reputational harm and legal consequences if disclosed.

Question 2: In the 'Everest Forms Pro' WordPress plugin vulnerability, why was the sanitization of user input insufficient to prevent remote code execution?

Question 2

In the 'Everest Forms Pro' WordPress plugin vulnerability, why was the sanitization of user input insufficient to prevent remote code execution?

Because sanitize_text_field() does not escape single quotes, allowing attackers to break out of string context in eval. Because the plugin accepted inputs from authenticated administrators only, increasing risk. Because the plugin used deprecated PHP functions which automatically disabled sanitization. Because the plugin did not sanitize inputs before passing them to the database, resulting in SQL injection.

Question 3: How does the WeedHack malware leverage the Ethereum blockchain in its infection process?

Question 3

How does the WeedHack malware leverage the Ethereum blockchain in its infection process?

It uses blockchain smart contracts to execute commands on victim machines. It uses the Ethereum blockchain to locate its command server in a way that's difficult to block or take down. It stores stolen data encrypted on the Ethereum blockchain for persistence. It pays ransoms via Ethereum automatically to avoid detection.

Question 4: What unique capability does the AI-enabled Internet worm developed by researchers demonstrate compared to traditional worms?

Question 4

What unique capability does the AI-enabled Internet worm developed by researchers demonstrate compared to traditional worms?

It exploits a single known vulnerability repeatedly until the network is compromised. It uses a recursive reasoning loop to detect and exploit diverse vulnerabilities in real time across heterogeneous devices. It requires proprietary cloud-based AI platforms to function across multiple devices. It only targets IoT devices within a confined network, limiting its spread.

Question 5: According to Anthropic's study, what distinguishes the highest-risk AI-enabled cyber actors from others?

Question 5

According to Anthropic's study, what distinguishes the highest-risk AI-enabled cyber actors from others?

They employ autonomous orchestration and agentic scaffolding to chain attack stages with minimal human intervention. They avoid using AI for live network operations to maintain stealth. They focus exclusively on initial reconnaissance phases to gather extensive data. They use multiple AI platforms simultaneously for attack orchestration.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.