Curated cybersecurity video content, discussions, interviews, presentations, and educational material from YouTube.
323 articles
Threat Wire reports Shiny Hunters’ claim of more than 2 TB of FBI-related data, continued Oracle PeopleSoft exploitation, and vulnerabilities affecting OpenAI, GitLab, Nintendo Switch, Parallels Desktop and Cloudflare Containers.
On Payload Podcast, Yarden Shafir discusses Windows protections intended to isolate AI agents, risks from shared user permissions, and where AI assistance can help security research and patch assessment.
The presenter demonstrates customizing Wi-Fi Pineapple Pager themes through JSON: adding quick settings, binding controls to internal variables, and configuring theme UI elements to run commands as root. The walkthrough uses an internal firmware 1.1.3 build.
The Shark Jack display is an Ethernet-connected device that runs selectable payloads for network and port scans, LLDP discovery, and connectivity checks. Two devices can use Shark Link to validate network paths and configurations.
Harsh investigated how an outdated Libheif dependency in Discourse’s Debian-based image reportedly left OpenAI vulnerable. The video explains how an AI agent helped inspect the code and why fixes took time to reach downstream packages.
Researchers demonstrated that a crafted link could make Microsoft Copilot execute a prompt, exfiltrate connected data and poison persistent memory. The Co Snitch vulnerability chain has been patched, and researchers reported no evidence of exploitation.
BHIS presenters demonstrate how ESC17 certificate-template misconfigurations enable TLS server impersonation. Their lab combines a trusted certificate with DNS redirection to impersonate WSUS and gain local administrator access.
A speaker describes how a visible license plate may lead from public vehicle records to a VIN and vehicle-history data, potentially exposing an owner's address, businesses and routines.
The video reviews cybercrime-forum listings and research on uncensored AI tools, including reported phishing and infostealer workflows. It notes that some reported attacks still involved human-operated initial access and that legitimate security research also uses these
A speaker says AI can help chain vulnerabilities, but its success varies by vulnerability class. They describe business logic flaws, IDORs, remote code execution, and XXEs as areas where AI can struggle without the right harness.
The video recommends setting security guardrails before building, keeping credentials out of generated code, reviewing code before release, and running the platform and AI inference in the company’s cloud. The speaker also describes a Superblocks security check blocking
A Superblocks-sponsored walkthrough demonstrates controls for AI-built internal apps, including centralized credentials, isolated development, deployment-blocking security checks and audit logs. A demo review flags customer PII sent to OpenAI.
A video demonstrates a C++ loader fetching an encrypted shellcode payload from Discord’s CDN, decrypting and executing it in memory, and opening a reverse shell. The presenter says the demo highlights a risk and urges access controls.
Google says its Page Break AI agent found over 500 XSS bugs. A separate validator tests whether injected code executes, while findings across hundreds of apps using security frameworks included only two XSS bugs.
The speaker says agentic offensive testing should first learn how an application works, helping identify unintended behavior and validate whether suspected business-logic flaws are real.
IBM's Security Intelligence panel discusses chatbot answer poisoning, suspected LLM-assisted exploitation and an AI-agent campaign targeting PaperCut, alongside practical defenses.
Security Now examines a patched Muse flaw that could let local code steal account tokens and hijack the AI assistant, alongside reported unauthorized AI agent activity, data extortion and suspected maritime cyber incidents.
The discussion argues that AI cybersecurity benchmarks often test tasks with known answers, unlike black-box attacks. It suggests evaluating which vulnerabilities AI can find and how many it finds in a specific target.
The video explains how storage systems can detect ransomware through changes such as rising data entropy, reduced compressibility and mass file operations, and recommends resilient backups and coordinated response planning.
Alt Security co-founder and CEO Noman Kehet argues that CTF and code-level benchmarks do not reflect black-box attacks. He describes learning applications before testing and says AI still struggles with complex vulnerabilities and false positives.
A BHIS panel examines reported AI agent access to government sites, disclosure gaps and accountability, alongside a phishing-service takedown and prompt-injection research involving Salesforce workflows.
Radware researchers found more than 3,000 hacking and fraud guides on underground forums. New tutorials rose to an estimated 110–140 per month in 2026, with more focus on carding and identity theft; generative AI may make them easier to produce.
The presenter explains how CVE-2026-87902 may let a crafted request traverse beyond a WordPress theme and include a PHP file, potentially enabling remote code execution under specific server conditions.
Hak5's Darren discusses the Wi-Fi Pineapple Pager's wireless testing, event-triggered alerts and customizable payloads, and compares it with the Mark VII and Enterprise models.
