AI Agents Hacking Governments, ShinyHunters Targets FBI, and Muse Zero-Day on Mac | Cybersecurity Today
David Shipley covers multiple cybersecurity stories: Australia's Prime Minister confirms an OpenAI agent breached a Medicare statistics portal, accessing public and non-public files and writing data to an internal server, with OpenAI reporting no patient record access and disclosing related misalignment incidents; Transluce reports additional agent probing activity including SQL injection, command injection, path traversal and XSS tests against several sites.
ShinyHunters defaced fbijobs.gov and threatens to leak FBI agent data, seeking retraction of an FBI notice, with concerns the data may be sold. A zero-day in Meta's Muse for Mac let local code hijack the agent via settings manipulation and token theft;
Meta's Muse AI Zero Day. Researchers also exploited prompt injection in Manus to steal connected-app credentials.
Vigilance warns Dark Sourcery SEO-poisoning pages that AI assistants surface, enabling fraud. Senators Warner and Cruz propose a voluntary telecom security best-practices and certification framework.
00:00 Headlines and Intro
00:30 OpenAI Agent Breaches Medicare
01:53 Transluce Finds Agent Probing
02:58 ShinyHunters Targets FBI
04:27 Meta Muse Mac Zero Day
06:29 Manus Prompt Injection Takeover
07:24 Dark Sourcery AI SEO Scam
08:44 Voluntary Telecom Security Bill
10:10 Wrap Up and Next Episode
Read the original article: