43:I[185,["/_next/static/chunks/08z4tkzvltetr.js","/_next/static/chunks/121~yigv24_j6.js","/_next/static/chunks/0jo3du-icy6v2.js","/_next/static/chunks/15cy49d~_zsjj.js","/_next/static/chunks/0..ktetnpeix7.js","/_next/static/chunks/0_htf5~kl..m1.js","/_next/static/chunks/0i6hzvr84kc1r.js"],"SendEmailButton"] 45:I[63625,["/_next/static/chunks/08z4tkzvltetr.js","/_next/static/chunks/121~yigv24_j6.js","/_next/static/chunks/0jo3du-icy6v2.js","/_next/static/chunks/15cy49d~_zsjj.js","/_next/static/chunks/0..ktetnpeix7.js","/_next/static/chunks/0_htf5~kl..m1.js","/_next/static/chunks/0i6hzvr84kc1r.js"],"AddToLibraryButton"] 46:I[29721,["/_next/static/chunks/08z4tkzvltetr.js","/_next/static/chunks/121~yigv24_j6.js","/_next/static/chunks/0jo3du-icy6v2.js","/_next/static/chunks/15cy49d~_zsjj.js","/_next/static/chunks/0..ktetnpeix7.js","/_next/static/chunks/0_htf5~kl..m1.js","/_next/static/chunks/0i6hzvr84kc1r.js"],"ShareButton"] 47:I[58016,["/_next/static/chunks/08z4tkzvltetr.js","/_next/static/chunks/121~yigv24_j6.js","/_next/static/chunks/0jo3du-icy6v2.js","/_next/static/chunks/15cy49d~_zsjj.js","/_next/static/chunks/0..ktetnpeix7.js","/_next/static/chunks/0_htf5~kl..m1.js","/_next/static/chunks/0i6hzvr84kc1r.js"],"ProcessEpisodeButton"] 48:I[45269,["/_next/static/chunks/08z4tkzvltetr.js","/_next/static/chunks/121~yigv24_j6.js","/_next/static/chunks/0jo3du-icy6v2.js","/_next/static/chunks/15cy49d~_zsjj.js","/_next/static/chunks/0..ktetnpeix7.js","/_next/static/chunks/0_htf5~kl..m1.js","/_next/static/chunks/0i6hzvr84kc1r.js"],"SignupCTA"] 3b:["$","time",null,{"dateTime":"2026-05-25T14:00:00.000Z","children":"May 25, 2026"}] 3c:["$","span",null,{"aria-hidden":true,"children":"·"}] 3d:["$","span",null,{"children":"00:40:33"}] 44:T4b1,

The security world is a noisy place lately. What's actually going on in the trenches?

Candid Wüest, Principal Security Advocate at xorlab, joins Robby to cut through the hype and take a look at how attackers are actually operating in 2026.

They open with a reference to their last discussion about LLM-infused malware, and touch upon using deception techniques such as honey tokens, fake password files and prompt injections to derail automated attackers. From there, they walk through the actual lay of the land: edge device exploits, credential abuse via infostealers, supply chain attacks targeting GitHub repositories, and why ClickFix social engineering is still working just as well as ever. They also dig into the growing connection between AI-assisted development and supply chain risk and what organisations should actually be doing about it.

The episode closes on the bug bounty market, where AI is quietly disrupting the economics of responsible disclosure, and what that might mean for how vulnerabilities get reported, priced, and exploited going forward.

Send us Fan Mail