Episode

AI gets hacked, and BitLocker gets bypassed

Podcast
Smashing Security
Published
Jun 17, 2026
Duration seconds
4363
Processing state
not_requested
Canonical source
https://www.smashingsecurity.com/472
Audio
https://audio4.redcircle.com/episodes/0dd2df29-be28-4c2e-b953-ba9c68f54c1c/stream.mp3
JSON
/v1/public/podcasts/smashing-security-453614/episodes/ai-gets-hacked-and-bitlocker-gets-bypassed
Markdown
/podcast/smashing-security-453614/ai-gets-hacked-and-bitlocker-gets-bypassed.md

Actions

  • POST https://stenobird.com/v1/public/podcasts/smashing-security-453614/episodes/ai-gets-hacked-and-bitlocker-gets-bypassed/transcription-requests
    Idempotently request low-priority transcript generation for this episode.
  • GET https://stenobird.com/podcast/smashing-security-453614/ai-gets-hacked-and-bitlocker-gets-bypassed.md
    Read the agent-friendly Markdown representation of this episode resource.

Summary

What if your AI coding assistant could be tricked into stealing your own company's secrets - by reading a single booby-trapped bug report? No phishing email. No malware. No password ever stolen. Just an AI doing exactly what it was told. Meanwhile, someone calling themselves Nightmare Eclipse has decided to teach Microsoft a lesson. The result? Three zero-days dropped on the internet, one of which lets a thief with a USB stick walk straight past BitLocker. Microsoft is furious. Plus don't miss our featured interview with Son Nguyen Kim of Proton Pass, who explains why plugging AI agents into your email and calendar without thinking twice is rather like hiring a new employee with the keys to everything - and skipping the background check. All this and more in episode 472 of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Paul Ducklin. EPISODE LINKS: ShinyHunters claims 61M Sysco records - Cybernews. Derbyshire police officer under investigation for using AI to create evidence - Derbyshire Times. Maine forced to take down data breach portal after fake notices filed with authorities - Hot for Security. A Fake Bug Report Hijacks Your AI Coding Agent - and Nothing Catches It. - Tenet Security. Agentjacking: a fake bug report hijacks AI coding agents - TNW. When anti-virus goes rogue - A trifecta of Defender zero-days - SolCyber. BitLocker in crisis? The "YellowKey" zero-day in plain English - SolCyber. Microsoft versus Full Disclosure: The ongoing Nightmare Eclipse saga - SolCyber. BitLocker, Defender, zero-days, and bragging rights: More MS nightmares - SolCyber. Inside the FBI’s Kinetic Cyber Range - FBI. Inside the FBI's Kinetic Cyber Range - YouTube. Computer worm strikes International Space Station - Graham…