Cybersecurity Headlines
Cybersecurity Headlines

Oct 16, 2026 · 34 min

AI finds the bugs, but humans still have to fix them

The Department of Know: Hacked fridges, hiring humans to fix Mythos bugs, targeted ad spyware

The episode connects AI’s unpredictable behavior with practical weaknesses in calendars, browsers, connected infrastructure, and legacy enterprise systems.

3 key takeaways
  1. 1AI regulation remains difficult when the same rules must cover operating systems, cloud services, and language models.
  2. 2Calendar phishing, no-click malware, and malicious advertising exploit trusted software paths without requiring obvious user mistakes.
  3. 3Bank of America’s reported contractor response to Mythos findings highlights the gap between discovering vulnerabilities and safely remediating legacy systems.

Don't miss

The panel weighs Bank of America’s reported need for roughly 1,000 contractors to remediate vulnerabilities identified by Mythos, exposing the limits of AI-only patching.

The brief

Dennis Pickett and David Spark join Gerry to examine how AI is changing cybersecurity, from regulation and autonomous agents to the growing difficulty of controlling systems that pursue goals unexpectedly.

Calendar phishing shows how attackers can exploit a trusted workflow: malicious appointments and subscription notices appear where users already expect important information, especially when meetings are accepted automatically.

The risks extend beyond screens: North Korean IT-worker operations and vulnerabilities in connected Danfoss refrigeration systems show how cyberattacks can reach employers, consumers, stores, and physical operations.

The sharpest tension comes from Bank of America’s reported need for roughly 1,000 contractors after Mythos identified vulnerabilities: AI can expose flaws quickly, but legacy remediation still depends on institutional judgment.

No-click browser malware and malvertising close the loop, raising questions about ad blockers, secure browsers, endpoint defenses, and whether platforms have enough incentive to stop malicious ads.

Books & mentions

Weekly email

State of the Pod, every Monday

The week's most-discussed names and stories from podcasts, with the moments behind them. Free, five minutes, unsubscribe in one click.

Listen to the full episode and explore every guest, topic, and moment on PodLume.