How AI Is Changing Cybersecurity and Exposing Decades of Bad Code
Was this the worst week in cybersecurity? AI-discovered PHP2Shell vulnerabilities, the LiteLLM supply chain attack, and reports of unauthorized AI agents accessing bank accounts are exposing serious weaknesses in software security.
But is this really a cybersecurity problem, or has AI exposed decades of poor software engineering decisions?
In this episode of ShipTalk, Martin Reynolds and Adam Arellano break down a remarkable week in AI security and debate whether engineering or security teams should be responsible for fixing what comes next.
Topics covered:
PHP2Shell: Critical PHP vulnerabilities discovered with AI that could put millions of websites at risk.
LiteLLM supply chain attack: How compromised developer credentials led to malicious software releases.
Rogue AI agents: Why major US banks are struggling to distinguish authorized AI assistants from unauthorized activity.
Chainguard controversy: How an early security patch release disrupted coordinated vulnerability disclosure.
AI-powered vulnerability discovery: Why decades-old software vulnerabilities are suddenly becoming easier to uncover.
Engineering vs. security: Who should own cybersecurity when AI accelerates both vulnerability discovery and potential exploitation?
Are we witnessing a temporary cybersecurity crisis, or the beginning of a new normal for software development?
Chapters:
00:00 The worst week in cybersecurity?
01:36 Engineering vs. security: Who's responsible?
03:21 Critical PHP vulnerabilities and AI security threats
07:46 Why AI changes vulnerability discovery
10:21 Chainguard and the early security patch controversy
14:22 Rogue AI agents accessing bank accounts
17:05 How cybersecurity teams are responding
20:40 Why engineering and security must change
ShipTalk — https://www.shiptalk.io
Harness — https://www.harness.io
Follow
Adam Arellano: https://www.linkedin.com/in/adamrossarellano/
Martin Reynolds: https://www.linkedin.com/in/martinreynolds/
the power of code compels you.
#Cybersecurity #AISecurity #SoftwareEngineering