Black October Isn't Just A PHP Bug. Attackers Want Your AI Keys.

AI agents are now finding and exploiting software weaknesses at scale, and a stolen AI API key can run up your bill. Here's what this week's security failures mean for your accounts, and what to update, cut, and check this week. Full post: https://natesnewsletter.substack.com/p/ai-agents-cybersecurity?utm_source=youtube&utm_medium=video&utm_campaign=ai-agents-cybersecurity-launch&utm_content=description Nate's Library MCP (every prompt kit and guide, inside the AI you already use): https://unlock-ai.natebjones.com/guides/how-to-connect-nates-library?utm_source=youtube&utm_medium=video&utm_campaign=ai-agents-cybersecurity-launch&utm_content=description My Links 🔗 👉🏻 Newsletter: https://natesnewsletter.substack.com/?utm_source=youtube&utm_medium=video&utm_campaign=ai-agents-cybersecurity-launch&utm_content=description 👉🏻 X: https://x.com/natebjones 👉🏻 TikTok: https://www.tiktok.com/@nate.b.jones 👉🏻 Instagram: https://www.instagram.com/nate.b.jones What's really happening when AI agents dig through the software we all depend on? The common story is that patching faster will fix it. The real question is whose side the strongest AI is working for. In this video, I share the inside scoop on Black October and what to do about it: - Why a stolen AI key works like cash on your bill - How an agent recovered a certificate key that was the number 4 - What to check in your connected apps and browser extensions - How I would pick the strongest model for cyber defense Attacks just got cheaper, and the same agents can work for you if you put the strongest one on defense and finish the repairs. Chapters: 00:00 Why stolen AI keys matter this week 01:39 Agents are native to computers 02:07 The PHP emergency fixes 03:32 eMudhra and the secret key that was 4 04:41 How defenders responded 06:37 How an AI agent attacks and defends 08:43 Why maintenance is hard 10:32 Check the apps connected to your accounts 12:42 The LiteLLM compromise at company scale 14:32 How to pick a model for cyber defense 17:34 When AI tools leak credentials 23:52 Five things to do this week Listen to this video as a podcast. Spotify: https://open.spotify.com/show/0gkFdjd1wptEKJKLu9LbZ4 Apple Podcasts: https://podcasts.apple.com/us/podcast/ai-news-strategy-daily-with-nate-b-jones/id1877109372