# AI agents risk, Upbound Group breach, Dolphin X Stealer

Page: https://stenobird.com/podcast/cybersecurity-headlines-744869/ai-agents-risk-upbound-group-breach-dolphin-x-stealer
Text version: https://stenobird.com/podcast/cybersecurity-headlines-744869/ai-agents-risk-upbound-group-breach-dolphin-x-stealer.md
Podcast: [Cybersecurity Headlines](https://stenobird.com/podcast/cybersecurity-headlines-744869)
Published: 2026-07-24T07:00:00+00:00
Episode link: https://cisoseries.libsyn.com/ai-agents-risk-upbound-group-breach-dolphin-x-stealer
Audio file: https://traffic.libsyn.com/secure/cisoseries/CSH-2026-07-24-a.mp3?dest-id=2260670
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/cybersecurity-headlines-744869/episodes/ai-agents-risk-upbound-group-breach-dolphin-x-stealer
Duration seconds: 501

## Resource

AI Agents become fastest growing exposed attack surface Consumer finance company Upbound Group blames data breach for millions in losses Dolphin X Stealer uses AI profiling to prioritize targets Get the show notes here: https://cisoseries.com/cybersecurity-news-ai-agents-risk-upbound-group-breach-dolphin-x-stealer/ Huge thanks to our sponsor, QuilrAI AI agents don't ask permission. They act -- moving data, triggering workflows, changing systems. QuilrAI is the permission layer they never had. Its Decision Engine evaluates the content, context, and intent of every action - before it completes. Alerts tell you later. QuilrAI decides now. Visit quilr.ai .

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/cybersecurity-headlines-744869/episodes/ai-agents-risk-upbound-group-breach-dolphin-x-stealer/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/cybersecurity-headlines-744869/ai-agents-risk-upbound-group-breach-dolphin-x-stealer.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.