Security Weekly: Crypto Theft, AI Coding Risks and Data Privacy Concerns

Summary

The episode reviews reported crypto thefts at Binance and Polymarket, security-test failures in AI-generated code, threat infrastructure linked to Volt Typhoon, risks from AI relays and data handling, and GM’s sale of driver data.

Key points

Binance halted deposits and withdrawals after a reported theft of more than $6 billion in crypto. TRM Labs attributed the attack to North Korea; Binance said it was recovering some assets.
Attackers compromised a third-party service used to distribute JavaScript that drained Polymarket users’ crypto wallets. The episode reports about $2.5 million stolen and says Polymarket fixed the issue and resumed trading.
Veracode’s 2026 Gen AI security report found that 38% of tested AI-generated code failed security tests. The host cautioned that this does not mean 38% of the code was insecure and emphasized testing.
Cisco Talos reportedly linked UAT 11473 to Volt Typhoon’s Silent Train network. The episode says Lumen Black Lotus Lab reported that the network was used to exploit a Cisco SD-WAN flaw.
A Symantec-identified AI relay reportedly routed requests through its own infrastructure and disabled security safeguards. The host advised organizations to look for such tools on employee systems.
The host and Josh Marpet discussed privacy and attribution risks, including how corporate asset sales could affect data handling and how anonymous company ownership could make cyber investigations harder.
The episode reports that GM would pay $220 million over selling customer driving data to a broker, which passed it to insurers that raised some customers’ rates.

Article Details

Topics: [05:29] Polymarket incident involving wallet-draining JavaScript
[08:41] Veracode findings on AI-generated code security tests
[11:11] UAT 11473, Volt Typhoon and the Silent Train network
[17:17] AI relay routing and disabled security safeguards
[19:32] Privacy risks involving AI companion data and asset sales
[22:22] Company ownership rules and cyber attribution concerns
[26:03] GM customer driving data sold to a broker and insurers
Binance halts withdrawals after a reported crypto theft

Threat Actors

UAT-11473Cisco Talos reportedly linked the group to China and to Volt Typhoon’s Silent Train network, which was reportedly used to exploit a Cisco SD-WAN flaw.

Vendors

CiscoCisco Talos reportedly linked UAT 11473 to Volt Typhoon’s network; the episode also discusses a Cisco SD-WAN flaw exploited through that network.SymantecSymantec’s threat-hunting team reportedly identified an AI relay that routed requests through its own infrastructure and disabled security safeguards.

Products

Cisco SD-WANThe episode says a flaw in Cisco SD-WAN was exploited using infrastructure associated with Volt Typhoon’s Silent Train network.PolymarketThe platform suspended trading after attackers compromised a third-party service distributing wallet-draining JavaScript; it later fixed the issue.