
Oct 16, 2026 · 34 min
AI finds the bugs, but humans still have to fix them
The Department of Know: Hacked fridges, hiring humans to fix Mythos bugs, targeted ad spyware
The episode connects AI’s unpredictable behavior with practical weaknesses in calendars, browsers, connected infrastructure, and legacy enterprise systems.
- 1AI regulation remains difficult when the same rules must cover operating systems, cloud services, and language models.
- 2Calendar phishing, no-click malware, and malicious advertising exploit trusted software paths without requiring obvious user mistakes.
- 3Bank of America’s reported contractor response to Mythos findings highlights the gap between discovering vulnerabilities and safely remediating legacy systems.
Don't miss
The panel weighs Bank of America’s reported need for roughly 1,000 contractors to remediate vulnerabilities identified by Mythos, exposing the limits of AI-only patching.
The brief
Dennis Pickett and David Spark join Gerry to examine how AI is changing cybersecurity, from regulation and autonomous agents to the growing difficulty of controlling systems that pursue goals unexpectedly.
Calendar phishing shows how attackers can exploit a trusted workflow: malicious appointments and subscription notices appear where users already expect important information, especially when meetings are accepted automatically.
The risks extend beyond screens: North Korean IT-worker operations and vulnerabilities in connected Danfoss refrigeration systems show how cyberattacks can reach employers, consumers, stores, and physical operations.
The sharpest tension comes from Bank of America’s reported need for roughly 1,000 contractors after Mythos identified vulnerabilities: AI can expose flaws quickly, but legacy remediation still depends on institutional judgment.
No-click browser malware and malvertising close the loop, raising questions about ad blockers, secure browsers, endpoint defenses, and whether platforms have enough incentive to stop malicious ads.
Books & mentions
Weekly email
State of the Pod, every Monday
The week's most-discussed names and stories from podcasts, with the moments behind them. Free, five minutes, unsubscribe in one click.