On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Chris Krebs to talk through the week’s cybersecurity news, including:

• Everyone’s using the ARTEX pentesting framework to hack the planet and it has the makings of an actual crisis
• The French government attributes freezer hacks to Iran’s IRGC
• Rob Joyce was right and the breachpocalypse has exhausted global IR resources
• The White House has nominated Palintir’s CISO to lead CISA. It’s certainly a choice!
• Much, much more!

This week’s show is brought to you by SpecterOps. Consultant Raj Patel joins Patrick Gray to talk through his work in finding some serious weaknesses that made NTLM relay attacks practical again. Raj used OpenAI LLMs to bypass that SMB signing and come up with some unnatural ldap tricks as well. Those techniques are now patched, but Raj learned a lot about parallel discovery in the AI age.

Show notes:

WorkOS says attacker used ARTEX AI to breach internal sales app https://www.bleepingcomputer.com/news/security/workos-says-attacker-used-artex-ai-to-breach-internal-sales-app

Russia’s AI-powered hacks are causing chaos in Ukraine https://risky.biz/RBFEATURES43/

Microsoft November 2026 Patch Tuesday https://krebsonsecurity.com/2026/11/microsoft-fixes-nearly-1100-security-vulnerabilities

OpenAI says GPT-6 Cyber found 81 Firefox flaws and 948 Linux bugs https://www.bleepingcomputer.com/news/security/openais-new-gpt-6-cyber-ai-finds-81-firefox-flaws-948-linux-bugs

Attacker abuses Microsoft Entra ID to target downstream MSP clients https://www.cybersecuritydive.com/news/attacker-microsoft-entra-id-downstream-msp/873744

Pat Opet (@patopet) on X https://x.com/patopet/status/2119119940036800520

Hackers enlist Artex to scan GitHub repositories for exposed secrets https://www.cybersecuritydive.com/news/hackers-artex-github-repositories-exposed-secrets/874007

Nearly 1.5 million exposed secrets targeted in new revocation program https://www.bleepingcomputer.com/news/security/truffle-security-launches-program-to-revoke-14-million-live-secrets

ARTEX exposed hosts https://censys.com/blog/artex-agentic-asbestos

Claude Code settings files expose thousands of secrets on GitHub https://arstechnica.com/ai/2026/11/claude-code-settings-files-expose-thousands-of-secrets-on-github

Chainalysis breach https://www.bleepingcomputer.com/news/security/chainalysis-says-breach-exposed-credentials-for-all-customers

AI-fueled hacking is getting worse — top cyber companies are turning away some victims https://www.nbcnews.com/tech/security/ai-hacking-getting-worse-cyber-firms-are-turning-away-victims-rcna607617

SI impersonation fraud indictment (Soall, Hazan, Sheetrit) https://www.justice.gov/usao-sdny/pr/three-foreign-nationals-arrested-and-charged-scheme-use-super-intelligence-defraud

Cyberattack disrupts blood-storage refrigeration systems in France https://www.bleepingcomputer.com/news/security/cyberattack-disrupts-blood-storage-refrigeration-systems-in-france

FBI and CISA warn of cyberattacks targeting refrigeration systems https://www.bleepingcomputer.com/news/security/fbi-cisa-warn-of-cyberattacks-targeting-refrigeration-systems

France blames Iran for fridge cyberattacks, says some caused fires https://therecord.media/france-blames-iran-for-fridge-cyberattacks

Lesley Carhart - Let’s Talk About Why all This OT Stuff is Connected https://www.linkedin.com/pulse/lets-talk-why-all-ot-stuff-connected-lesley-carhart-3kn8c/

OpenSSH flaw lets attackers log into password-disabled Linux accounts https://www.bleepingcomputer.com/news/security/openssh-flaw-lets-attackers-log-into-password-disabled-linux-accounts

GhostMap: The Android flaw that crashes your phone before you open the app Labs https://www.bitdefender.com/en-us/blog/labs/ghostmap-android

Want to Rent an Internet Address at the White House? https://krebsonsecurity.com/2026/11/want-to-rent-an-internet-address-at-the-white-house

French bank confirms cyber heist, hackers suspected to have stolen an estimated $133 million https://therecord.media/french-bank-confirms-cyber-heist

GOPAX suspends withdrawals and trading following hacking threats https://en.yna.co.kr/view/AEN20261106011751320

FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers https://therecord.media/fbi-agent-pleads-guilty-to-stealing-from-nation-state-hackers

What Democratic control of Congress means for cybersecurity https://cyberscoop.com/democrats-congress-cybersecurity-cisa-ai-priorities

Palantir exec nominated to lead CISA; lame-duck Senate vote is uncertain https://therecord.media/michael-losapio-cisa-director-nomination

NTLM relay made new again! https://specterops.io/blog/2026/10/23/ldap-signing-bypass-ntlm-relay/

For full show notes visit https://risky.biz/RB859