Chinese agent tried to recruit Stanford Student - 2025-09-02

·56 min·5 clips

Google warns that authentication tokens for SalesLoft Drift are compromised, affecting major companies like Zscaler and Palo Alto.

The episode opens with casual banter about seasonal trends before diving into cybersecurity topics. The first major story is a Google Threat Intelligence advisory about a SalesLoft Drift integration compromise, where Salesforce stored keys that were breached, affecting companies like Zscaler and Palo Alto Networks. Next, the hosts discuss a Krebs on Security article about DSLRoute, a residential proxy provider paying users $250 monthly to host devices, highlighting its sketchy registration in the Bahamas and potential for illicit use. They then cover Sophos research on threat actors using the legitimate incident response tool Velociraptor to deploy VS Code as a command-and-control channel, exemplifying living-off-the-land techniques. Ransomware updates include attacks on Swedish IT supplier Miljö Data and Nevada's state government, impacting agencies like the DMV. A Citrix vulnerability (CVE-2025-6543) is detailed, with Double Pulsar finding it exploited in the wild for remote code execution. AI topics include Cisco Talos discovering 1,100 exposed LLM servers, many dormant, and ESET's discovery of PromptLock, the first AI-powered ransomware using a 20-billion-parameter model to generate Lua scripts. The hosts debate AI hype, with one noting its utility for threat hunting summaries while another compares the bubble to the dot-com era. Other stories include a TransUnion breach via Salesforce exposing social security numbers, a McDonald's rewards system flaw allowing free nuggets, and an AI app for interpreting chicken sounds. The episode ends with a story about a Stanford student recruited by a Chinese agent over Instagram, who tried to move conversations to WeChat over three months.

As heard by us

A cybersecurity chat balances Citrix patch guidance, AI unease, and a nerdy reminder that online trust is not always misplaced.

The episode treats cybersecurity news like a holiday-weekend catch-up, with John away and the remaining hosts drifting through pumpkin spice, Home Depot skeletons, and Halloween light displays before settling back into the threat landscape.

Read the full review in PlayNext →

Why you'd press play

You start in holiday-weekend riffing, get a Citrix patch nudge, then land in Star Trek Fleet Community with a strangely sweet online-friendship coda.

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from Talkin' Bout [Infosec] News