Frontier models and the future of cyber defense.

13 hours ago

Frontier models and the future of cyber defense.

In this special edition from Black Hat, Dave Bittner sits down with ⁠Clint Gibler⁠, Cyber Lead at ⁠OpenAI⁠, and ⁠Robby Winchester⁠, Chief Global Professional Services Officer at ⁠SpecterOps⁠, to explore how frontier AI models are changing the way defenders approach cybersecurity. The conversation moves beyond the hype to examine responsible AI deployment, AI red teaming, reducing noise in security workflows, and the balance between advanced models and human expertise. They also discuss OpenAI’s Trusted Access for Cyber program and what it takes to give security practitioners access to powerful AI capabilities while managing the risks of misuse.

Special Editions

Frontier models and the future of cyber defense.

13 hours ago

Frontier models and the future of cyber defense.

In this special edition from Black Hat, Dave Bittner sits down with ⁠Clint Gibler⁠, Cyber Lead at ⁠OpenAI⁠, and ⁠Robby Winchester⁠, Chief Global Professional Services Officer at ⁠SpecterOps⁠, to explore how frontier AI models are changing the way defenders approach cybersecurity. The conversation moves beyond the hype to examine responsible AI deployment, AI red teaming, reducing noise in security workflows, and the balance between advanced models and human expertise. They also discuss OpenAI’s Trusted Access for Cyber program and what it takes to give security practitioners access to powerful AI capabilities while managing the risks of misuse.

Special Editions

Cybersecurity News

Signals and Space

13 hours ago

Attacking trust in space.

This week on T-Minus: Space-Cyber Briefing: we look at how AI systems are being used to abuse the trust people have in space-based imagery. This abuse has caused people to believe that fake images and videos are genuine and dismiss real content as misinformation.

T-Minus

13 hours ago

AI, misinformation, and the future of cybersecurity.

As AI products proliferate, they continue to introduce new concerns, which have subtly eroded trust in imagery and content created by space-based infrastructure. In this week's episode, host Maria Varmazis sits down with ⁠⁠⁠Dave Bittner and Brandon Karpf to look at Google's troubled implementation of Nano Banana 2 in Google Earth. The incident raises larger concerns regarding how AI systems are becoming deeper ingrained into everyday life despite their ability to be misused and spread misinformation.

Research Saturday

Aug 15, 2026

The botnet that scouts before it strikes.

Today we are joined by ⁠Ian Goldin⁠, Senior Lead Information Security Engineer, and ⁠Mike Horka⁠, Principal Information Security Engineer, from ⁠Lumen's Black Lotus Labs⁠, discussing their research entitled "Expanded JDY IoT and SOHO botnet enables rapid vulnerability exploitation." Black Lotus Labs has uncovered a major resurgence of the JDY botnet, a China-nexus reconnaissance network now comprising more than 1,500 compromised SOHO and IoT devices. The botnet uses these devices to conduct targeted scanning and fingerprinting, helping threat actors rapidly identify vulnerable infrastructure—sometimes within hours of a new vulnerability disclosure—and appears to have a particular focus on U.S. military-related networks. The research highlights how compromised routers and IoT devices can be turned into distributed reconnaissance infrastructure that evades traditional IP-based defenses and supports follow-on exploitation.

Week that Was

Aug 15, 2026

President Trump authorizes private-sector companies to hack cybercriminals.

Trivy, not LiteLLM, was the original source of the 2,500-organization supply chain attack. Patch Tuesday notes: Microsoft fixes three zero-days.

CyberWire Daily

Aug 14, 2026

Apple has a message for you.

Apple sends out threat notifications to users targeted by spyware. Trivy, not LiteLLM, was the original source of the 2,500-organization supply chain attack. French tax authority confirms data breach. Chinese hack-for-hire group conducts espionage and cybercrime simultaneously. Ukrainian police shut down 94 scam call centers. Former data analyst jailed for insider extortion plot. New macOS malware spreads via ClickFix. Today we are joined by Tom Kellermann, VP of AI Security at TrendAI, discussing the machine-speed war for financial control. And the glitch in the surveillance matrix.

Daily Briefing

Aug 14, 2026

Apple sends out threat notifications to users targeted by spyware.

Trivy, not LiteLLM, was the original source of the 2,500-organization supply chain attack. Chinese hack-for-hire group conducts espionage and cybercrime simultaneously.

CyberWire Daily

Aug 13, 2026

Please hack responsibly.

President Trump deputizes private-sector companies to target cybercriminals. The LiteLLM supply-chain attack exposed credentials belonging to thousands of organizations. Data-theft campaign targets misconfigured Salesforce and ServiceNow instances. Hackers deploy AI agents to breach Taiwanese government systems. CISA mandates urgent patch for actively exploited Cisco firewall vulnerability. Nightmare Eclipse publishes yet another Windows zero-day exploit. On our Industry Voices segment, Clint Gibler, Cyber Lead at OpenAI, and Robby Winchester, Chief Global Professional Services Officer at SpecterOps, discuss frontier models and the future of cyber defense. And please do not reply. Seriously.

Story

Aug 13, 2026

How Frontier Models Are Reshaping Cyber Defense with Clint Gibler from OpenAI and Robby Winchester from SpecterOps

Clint Gibler, Cyber Lead at OpenAI, and Robby Winchester, Chief Services Officer at SpecterOps, join Dave Bittner for a discussion recorded live at Black Hat USA 2026. Together, they explore how frontier AI models are changing cyber defense, where AI creates the greatest value for defenders, and why responsible deployment and human expertise remain essential as organizations adopt these technologies.

Caveat

Aug 13, 2026

US private equity firms targeted by hackers.

More jurisdictions continue to cut ties with Flock.

Daily Briefing

Aug 13, 2026

President Trump deputizes private-sector companies to target cybercriminals.

The LiteLLM supply-chain attack exposed credentials belonging to thousands of organizations. CISA mandates urgent patch for actively exploited Cisco firewall vulnerability.

Caveat

Aug 13, 2026

Surveillance Rulings and Social Media Scrutiny.

This week, Ben and Ethan discuss two major stories. The first looks deeper into the Supreme Court's recent ruling on the Chatrie case and the long-term impacts this decision could have on privacy within the nation. The second dives into another court case decision, which exposes social media companies to greater liability for allegedly addictive design features on their platforms and those features impacts on users.

AI Security Brief

Aug 13, 2026

What do AI-driven ‘bank heist’ attacks mean for defenders?

Attackers aren't just using AI to steal data; they're using it to fight back while you investigate them in real time. And once an adversary is inside, why would they ever want to leave? That's the unsettling reality Tom Kellermann, VP of AI Security and Threat Research at TrendAI, lays out in this episode. And the numbers prove it. According to a 2026 TrendAI survey of 46 financial-sector CISOs, more than 60% of respondents experienced counter-incident response, where adversaries actively disrupt live investigations. In addition, nearly 90% of these leaders reported more AI-enabled attacks year over year. Tom joins Johnny Hand and Dustin Childs to explain why the threats that hit banks first tend to hit everyone else next, and what defenders can do about it.

Load More