September 9, 2026 01:07:42 S6:E36

Anthropic Warns Users of Infostealer Abuse - 2026-09-08

AI agents take center stage as the team examines OpenAI models using a German forum for private communications, Anthropic’s response to a compromised Claude account, new model releases, and the growing demand for Apple hardware to train computer-using agents. The discussion also covers the sale of stolen driver’s licenses, a claimed Florida DMV breach, and vulnerabilities affecting JFrog Artifactory, Proxmox, Plex, and Langflow. Finally, the panel considers CISA’s decision to discontinue six cybersecurity assessment services, new research into compromising passkeys, and Outflank’s compact NTLMv1 rainbow tables.

Join us LIVE on Mondays, 4:30pm EST.
A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.
https://www.youtube.com/@BlackHillsInformationSecurity

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

Chapters

(00:00) - PreShow Banter™ — Internet Fall Weather
(03:17) - Anthropic Warns Users of Infostealer Abuse - 2026-09-08
(06:59) - OpenAI Agents Exploit a German Forum for Private Communications
(17:18) - Anthropic Warns a User About Infostealer Abuse of Their Claude Account
(23:32) - OpenAI’s Latest Model Tops AI Leaderboards and Revives the AGI Debate
(26:01) - CrowdStrike Releases AI Models Developed with NVIDIA
(29:12) - FBI Investigates the Sale of 103,000 Stolen Driver’s Licenses
(32:41) - ShinyHunters Claims a Breach of the Florida DMV
(35:19) - AI Labs Amass Mac Minis and Mac Studios for Agent Training
(38:02) - Critical Authentication Bypass Disclosed in JFrog Artifactory
(39:00) - Proxmox Vulnerability Exposes Internet-Facing Hosts
(40:17) - New Plex Vulnerability Raises Home-Network Security Concerns
(41:24) - Langflow Vulnerability Enables Unauthenticated Remote Code Execution
(47:07) - Thomson Reuters Breach Disrupts State Court Systems
(47:25) - CISA Cuts Six Free Cybersecurity Assessment Services
(52:24) - New Research Demonstrates Ways to Compromise Passkeys
(54:07) - Outflank Publishes a Smaller NTLMv1 Rainbow Table and Cracking Tool
(56:02) - Dan DeCloss: Turning Pen Tests into Risk Intelligence Anti-Cast
(56:53) - PlexTrac’s AI-Assisted Reporting and Retesting
(01:03:44) - Charles Shirer Introduces the FanMeyer Creator Platform
(01:05:06) - Upcoming AI Browser Research and Wild West Hackin’ Fest Talk
(01:05:49) - Hacking and Defending Satellite Infrastructure at Wild West
(01:06:25) - Upcoming AI Core Skills Fundamentals Course

Links
OpenAI Agents Exploit a German Forum for Private Communications
Anthropic Warns a User About Infostealer Abuse of Their Claude Account
OpenAI’s Latest Model Tops AI Leaderboards and Revives the AGI Debate
CrowdStrike Releases AI Models Developed with NVIDIA
FBI Investigates the Sale of 103,000 Stolen Driver’s Licenses
ShinyHunters Claims a Breach of the Florida DMV
AI Labs Amass Mac Minis and Mac Studios for Agent Training
Critical Authentication Bypass Disclosed in JFrog Artifactory
Proxmox Vulnerability Exposes Internet-Facing Hosts
New Plex Vulnerability Raises Home-Network Security Concerns
Langflow Vulnerability Enables Unauthenticated Remote Code Execution
Thomson Reuters Breach Disrupts State Court Systems
CISA Cuts Six Free Cybersecurity Assessment Services
New Research Demonstrates Ways to Compromise Passkeys
Outflank Publishes a Smaller NTLMv1 Rainbow Table and Cracking Tool

Dan DeCloss: Turning Pen Tests into Risk Intelligence Anti-Cast
Charles Shirer Introduces the FanMeyer Creator Platform
Upcoming AI Browser Research and Wild West Hackin’ Fest Talk
Hacking and Defending Satellite Infrastructure at Wild West

Click here to watch this episode on YouTube.

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits

https://poweredbybhis.com

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

☯️ Introducing BHIS Fusion Penetration Testing
https://www.blackhillsinfosec.com/fusion-penetration-testing/

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

Episode Video

Creators and Guests

Host

Bronwen Aker

Bronwen Aker is a BHIS Technical Editor who joined full-time in 2022 after years of contract work, bringing decades of web development and technical training experience to her roles in editing pentest reports, enhancing QA/QC processes, and improving public websites, and who enjoys sci-fi/fantasy, Animal Crossing, and dogs outside of work.

Host

Corey Ham

Corey Ham has been with Black Hills Information Security (BHIS) since 2021 delivering red teaming and OSINT services. Currently, Corey leads the ANTISOC team at BHIS, providing subscription-based continuous red teaming to BHIS clients. Outside of his time at BHIS, you can find him out in the woods or up on a mountain somewhere.

Host

Ralph May

Ralph is a U.S. Army veteran and former DoD contractor who supported the United States Special Operations Command (USSOCOM) with information security challenges and threat actor simulations. Over the past decade, he has provided offensive security services at Optiv Security and Black Hills Information Security (BHIS) across various industries. His expertise spans network, physical, and wireless penetration testing, social engineering, and advanced adversarial emulation through red and purple team assessments. Ralph has developed several tools, including Bitor (set to release in January 2025) and Warhorse, which enhance efficiency in penetration testing infrastructure and operations. He has spoken at numerous conferences, including DEF CON, Black Hat, Hack Miami, B-Sides Tampa, and Hack Space Con.

Guest

Charles "bsdbandit"

Guest

Dan DeCloss

Dan DeCloss is the founder and Chief Customer Brand Officer of PlexTrac. Following PlexTrac’s acquisition by Brinqa, he joined Brinqa’s executive leadership team and board to lead its combined offensive security practice. Dan brings more than 20 years of cybersecurity experience spanning the Department of Defense, penetration testing, application security, security operations, and program leadership. He holds OSCP and CISSP certifications and a master’s degree in computer science from the Naval Postgraduate School.

Producer

Ryan Poirier

Ryan Poirier began his time at Black Hills Information Security (BHIS) as the Video Producer and Editor in August 2020. Ryan polishes and perfects every webcast, podcast, and workshop on the BHIS, ACM, and WWHF YouTube Channels. Prior to Ryan’s time at BHIS, he worked for one of the largest public schools in the United States, conducting their video production and live broadcasting. He joined the BHIS team because he felt like it would be a great group of people to work with, and he couldn’t pass up the perfect next step in his career. Outside of his time with BHIS, Ryan does freelance photography, attends Cars & Coffee events, and expands his knowledge of audio and videos.