Cybersecurity Today

Do We Still Need Cybersecurity Awareness Month in the Age of AI Agents and Deepfakes? (Denis Villeneuve, Kyndryl Canada)
Recorded after a brutal October of rapid-fire zero-days, Cybersecurity Today host David Shipley asks whether Cybersecurity Awareness Month still matters; Denis Villeneuve, who leads cyber resilience and connectivity at Kyndryl Canada, argues it does—and should be continuous.
They discuss how awareness must evolve beyond phishing to address AI's speed, cognitive risk, and "shadow AI," using a 20/60/20 framework for goal-setting, automation, and validation while stressing that responsibility can be delegated but accountability cannot. Denis explains that deepfakes may counterfeit faces or voices but shouldn't defeat resilient business processes, advocating strong approvals, callbacks, and even code words. The conversation covers AI agent governance, overprivileged identities, tech debt, vendor maturity, modernization delays, and the need for guardrails, human-in-command controls, and tested remediation plans—"basics at speed" to make AI-driven change trustworthy.
00:00 Black October Opens
01:32 Meet Denis Villeneuve
04:07 Cyber Awareness Every Month
05:40 AI Speed And Cognition
09:00 Deepfakes And Process
12:17 Shadow AI Basics
14:35 Agents In The Wild
17:42 Identity For Every Agent
21:57 Making Compliance Not Suck
26:10 2027 CISO Priorities
28:33 Genie Coefficient And Models
34:08 Burnout And Hope
36:04 Closing Thanks

French Blood Bank Refrigeration Hacked, AI Tools Hit India's Banks, DreamHost Breach, Extradition, and Malware That "Values" Victims
Cybersecurity Today host David Shipley reports France's National Blood Service (EFS) says a November 2 cyberattack manipulated cold-storage settings at three sites via its refrigerator supplier's remote monitoring software, but alarms and staff response prevented product loss and collections continued as ANSSI and the Health Ministry assist; the incident follows a wider wave of attacks that overheated supermarket refrigeration across France and later multiple European countries.
India's CERT warns an AI-assisted actor "Crafty Falcon" is repeatedly breaching fintechs, lenders, payment firms, and crypto exchanges through exposed test environments and shared credentials, using AI tools including Artex—while a backdoored Artex build was found on dozens of internet-facing consoles.
DreamHost reports an intruder exploited a file manager flaw for about two months, harvesting FTP/SFTP credentials from logged-in users.
A Canadian was extradited over alleged university supercomputer crypto-mining. Cisco Talos details Volta AutoDoxer, an info-stealer that uses AI to rank victims' monetizable assets.
00:00 Top Stories Rundown
00:32 Blood Bank Fridge Hack
02:06 Supermarket Cooling Campaign
03:12 AI Tools Hit Indian Finance
04:40 Artex Tool Backdoor Twist
05:50 DreamHost File Manager Breach
07:19 Canadians Crypto Mining Case
08:53 Volta AutoDoxer AI Dossiers
10:27 Weekend Show Preview
11:02 Closing Thanks And Contact

Binance's $6.34B Crypto Heist, Europe's Supermarket Fridge Hacks, and the Rise of LLM Jacking
Cybersecurity Today host David Shipley reports Binance's $6.34B October 29 crypto theft, which Binance says began with a June supply-chain compromise and escalated via a fake hiring process that delivered poisoned developer tools, leading to access to the internal wallet signing service and abuse of Ethereum EIP-7702
The episode also covers refrigerator system attacks spreading across European retailers and suppliers via vulnerable controllers, with the Pentagon treating similar August U.S. commissary outages as suspected cyberattacks.
Barracuda urges patching two flaws that can be chained for root control if admin interfaces are exposed.
Researchers link Chinese state-linked attackers to chaining PHP-to-shell bugs and a kernel exploit to gain root on Palo Alto firewalls.
Finally, Mandiant details "LLM jacking," where criminals steal API keys or cloud tokens to run up AI bills rapidly.
00:00 Today's Cyber Headlines
00:34 Binance Heist via Fake Hiring
03:52 Fridge Hacks Spread in Europe
05:46 Pentagon Probes US Spoilage
07:03 Barracuda Root-Takeover Flaws
08:44 PHP to Shell Hits PAN-OS
09:51 Disclosure Drama and Exploits
11:15 LLM Jacking Drains AI Budgets
12:58 Wrap Up and Sign Off

Vishing Breaches Top Canadian Law Firms, FBI Pins Record Binance Heist on North Korea, and GM Pays $220M Privacy Settlement
David Shipley covers major cybersecurity headlines for Nov. 2, 2026: four large Canadian law firms (McCarthy Tétrault, Davies, Bennett Jones, and BLG) were breached via vishing impersonating IT on Teams and spoofed phone numbers, leading to compromised accounts and alleged large-scale file theft, while firms share intel and bring in CrowdStrike and Mandiant.
The FBI attributes the $6.36B Binance crypto theft to North Korea's TraderTraitor/Lazarus, details laundering tactics and wallet addresses, and Binance says it has covered 95% of losses.
Chainalysis discloses a breach exposing limited customer directory data.
CrowdStrike reports China-linked Vapor Panda using Artex AI at scale.
A fake Claude code extension briefly appeared in Cursor's marketplace.
GM agrees to a $220M settlement over Smart Driver data sales.
00:00 Top Stories Rundown
00:35 Vishing Law Firm Breaches
02:52 North Korea Binance Heist
05:18 Chainalysis Gets Hacked
07:07 Agentic AI Attack Surge
09:33 Fake Claude Extension Scam
11:15 GM Driver Data Settlement
13:25 Wrap Up and Sign Off

AI agents are changing both sides of cybersecurity. Attackers can move faster, while defenders face another challenge: securing the agents inside their own organizations.
On this Cybersecurity Today Weekend Interview, I'm joined by Adam Ely, General Manager of AI Agent Security at Check Point Software. We talk about what AI is changing for security teams—and what still comes down to getting the basics right.
Adam brings the perspective of a former CISO at Fidelity Investments and deputy CISO at Walmart. We discuss the pressure on security leaders, the promise of AI for defenders, and how organizations can adopt agents while controlling what they can access and do.
In this conversation:
• Why AI changes the speed and scale of cyberattacks.
• CISO burnout, accountability, and the value of sharing experiences.
• How AI agents can influence one another's behaviour.
• Why security teams need to rehearse and test AI-assisted incident response.
• The identity and access challenges of agents that can create other agents.
• What it means when companies put agents on the organizational chart.
• Why segmentation, access controls, monitoring, and other security basics matter more than ever.
• Using AI as a sounding board that challenges your thinking.
Where could AI help your security team—and where would you draw the line on its access? Share your thoughts in the comments.
Hosted by Jim Love.
Cybersecurity Today — Weekend Interview
October 31, 2026
Subscribe to Cybersecurity Today for cybersecurity news and interviews.
More episodes and contact:
https://technewsday.com
https://technewsday.ca
To support the show, visit the Donate tab.
Guest biography, Check Point Software:
https://www.checkpoint.com/about-us/leadership/
Check Point Software research discussed in the interview:
https://blog.checkpoint.com/security/peer-pressure-ai-agents
Adam's article on the changing CISO role:
https://blog.checkpoint.com/ai-security/redefining-the-ciso-contract-from-securing-the-business-to-securely-doing-business/