Nov 12, 2026 · 7 min
Ransomware demands meet AI agents and cloud intrusions
Maersk gets a $5M ransom note, CopperDragon's malware connections, United grounds AI booking bots
The episode connects extortion, software vulnerabilities, state-linked attacks, and autonomous tools to the expanding ways organizations can lose control of systems and data.
- 1Maersk faces a $5 million ransomware demand alongside an investigation into data theft from an acquired company.
- 2Shared malware infrastructure may connect China-linked campaigns, while United Airlines blocks personal AI assistants from booking flights.
- 3Zoom, N-able, and AWS-related incidents show how vulnerabilities and cloud credentials can expose privileged systems and secrets.
Don't miss
Arctic Wolf Labs’ account of Antifox-linked intrusions shows attackers using web shells and cloud credentials to search for secrets in AWS environments.
The brief
The briefing opens with a $5 million ransomware demand against Maersk and an investigation into data theft from an acquired company, then traces possible links among China-associated campaigns through a shared malware supplier.
United Airlines is blocking personal AI assistants from booking tickets, turning a routine travel workflow into a test of how companies manage autonomous software acting on customers’ behalf.
A Krebs on Security investigation reportedly identifies an alleged Qilin ransomware administrator, while Zoom patches Windows flaws that could let unauthenticated attackers gain elevated privileges.
The episode then covers Iran-linked arson charges and an Enable emergency hotfix for seven N-able vulnerabilities, with hosted systems restored but on-premises servers kept offline pending updates.
Arctic Wolf Labs links Antifox to attacks on web applications and AWS environments, where web shells and stolen cloud credentials allegedly exposed production secrets.
Weekly email
State of the Pod, every Monday
The week's most-discussed names and stories from podcasts, with the moments behind them. Free, five minutes, unsubscribe in one click.