Initial Access
by Bishop Fox
Latest episode
Nvidia CEO Investigation, N-central Zero-Days, SonicWall MFA Bypass…
Nvidia CEO Investigation, N-central Zero-Days, SonicWall MFA Bypass…
About this podcast
Bishop Fox offensive security researchers, experts, and hackers take a real look at the latest cybersecurity news headlines and have a straight take on them. The goal is simple: do you actually need to care about this, or is it just another variation of the same fundamental security problems we've been dealing with for years?
Episodes
The newest 20 of 44 episodes
- Nvidia CEO Investigation, N-central Zero-Days, SonicWall MFA Bypass, And A Chainalysis Breach · 1 h 1 min · Season 1 Episode 43In this episode, we break down four security stories: • Jensen Huang resigning as Nvidia CEO after reports he was a foreign intelligence target • N-able’s N-central zero-day…
- Binance $6.36B Hack, VMware ESX Zero-Day, TeamViewer Flaw, And Anthropic AI Exploits · 47 min · Season 1 Episode 42In this episode, we break down four security stories: • How a fake job interview led to the $6.36 billion Binance hack • Warp Panda's zero-day use of a VMware ESX logging flaw…
- Direct Access with Farzan Karimi · 27 minIn this special Direct Access episode, we sit down with Farzan Karimi, Deputy CISO at Moderna, to talk about how his team built an AI threat model agent that cut first-pass…
- PHP2Shell Exploitation, Node2Shell Brotli RCE, And Mimori Ransomware Claims · 59 min · Season 1 Episode 41In this episode, we break down three security stories: • PHP2Shell one week later: working shells, a KEV listing, and exploit noise • Node2Shell, a Brotli flaw whose public fix…
- PHP2Shell: A Leaked Demo, A Broken Disclosure, and AI at Exploit Speed · 53 min · Season 1 Episode 40In this episode, we break down one security story: • PHP2Shell: two critical PHP RCE flaws reaching back to PHP 5.4 • How a leaked demo video broke PHP's coordinated disclosure…
- OpenAI Insider, Meta Muse’s Escape Hatch, AI Agents Gone Rogue · 43 min · Season 1 Episode 39In this episode, we break down four security stories: • A cyberattack that hijacked Danfoss refrigeration controllers at hundreds of French supermarkets • An OpenAI engineer…
- A Third NetScaler Zero-Day, 8 Million Danish ID Records, and Google Pauses Its Bug Bounty · 1 h 13 min · Season 1 Episode 38In this episode, we break down three security stories: • CVE-2026-88779, a third exploited NetScaler zero-day labeled denial-of-service • About 8 million Danish CPR records…
- ShinyHunters PeopleSoft WAF Bypass, Arrests, And OpenAI Astra News · 37 min · Season 1 Episode 37In this episode, we break down four security stories: • A ShinyHunters PeopleSoft WAF bypass that hinges on one URL-encoded character • The arrest of an alleged ShinyHunters…
- Zero-Click Exchange RCE, $25 AI Intrusions, and the ShinyHunters FBI Claim · 1 h 7 min · Season 1 Episode 36This episode breaks down: • A zero-click Exchange Server RCE triggered by a Visio attachment • AI agents compromising online retailers for about $25 a target • ShinyHunters'…
- Ten-Hour Breaches, MikroTik Backdoors, Router Takeovers & the NetScaler Root Cause · 54 min · Season 1 Episode 35This episode covers an AI agent fleet that compressed two weeks of red team work into ten hours, a two-CVE chain giving attackers full admin on MikroTik routers, and a fraudulent…
- Patch Tuesday Overload, Broken Threat Feeds & the Scoping Problem · 44 min · Season 1 Episode 34Bishop Fox's Managed Security Services team returns with Sergio Villegas, Richard Brown, and Kendrick Urbaniak covering patch volume that no longer fits a normal cycle, threat…
- IDScan Leak, Vished Hospitals, Berlin's Ransom Refusal & a Grid Under Fire · 42 min · Season 1 Episode 33This episode covers a dark web marketplace selling 150+ million driver's license scans traced to one identity-verification vendor, McKesson's breach after a ShinyHunters vishing…
- Audio Fingerprinting, AI-Assisted ICS Attacks & the Zombie Card Bypass · 36 min · Season 1 Episode 32This episode covers an inaudible browser script fingerprinting AliExpress shoppers, AI-generated exploit scripts lowering the bar on Siemens PLC attacks, and researchers reviving…
- Spliced Instructions, Recycled Bugs, Leaked Addresses & Sold Directories · 37 min · Season 1 Episode 31A malicious MCP server tricks AI coding agents into leaking secrets, a three-year-old GeoServer bug resurfaces as a zero day, a hardware wallet maker's shipping partner exposes…
- Live from DEF CON at RedTail: Red Teaming After AI · 47 min · Season 1 Episode 29This week's episode is different. No headlines, no CVEs. Just a live sit-down from Bishop Fox's RedTail meetup at DEF CON, with Bishop Fox's John Untz, Richard Brown, and Billy…
- AI Sandbox Escape, Autonomous Ransomware Agent, Self-Spreading npm Worm · 51 min · Season 1 Episode 30This is the debut episode from Bishop Fox's Managed Security Services team — not new headlines, but three stories the show already covered, revisited through the lens of what an…
- Rogue Agents, Bounty Cuts & the AI Brake Pedal · 59 min · Season 1 Episode 28This episode covers a ChatGPT flaw that let one link spin up a fully authorized rogue AI agent, GitHub's public bug bounty cuts, Origin Energy's second breach in months, and…
- Rogue Agents, Invisible Screens, and a Vulnerability Clearinghouse · 1 h 3 min · Season 1 Episode 27This episode breaks down OpenAI's own AI agent hacking into Hugging Face without human direction, an Android attack that hides commands in invisible screen text to hijack AI…
- Attribution and OpSec at Scale · 44 min · Season 1 Episode 26This week's episode is different. Bishop Fox Red Teamers Brandon Kovacs, Thomas Wilson, and Rob Antonucci talk through what attribution actually looks like when device-level…
- Old Backdoors, Ghost Phishing, and Borrowed AI · 38 min · Season 1 Episode 25This episode breaks down a Tenda router backdoor that turns out to be three years old, a phishing kit called EvilTokens that hides until a victim's browser builds it, and CISA…
