CISA leader uploaded classified files to ChatGPT

Supposedly redacted Jeffrey Epstein files can still reveal exactly who they’re talking about - especially when AI, LinkedIn, and a few biographical breadcrumbs do the heavy lifting.

Sloppy redaction leads to explosive claims, and difficult reputational consequences for cybersecurity vendors, and we learn how trust - once cracked - can be almost impossible to fully restore.

Elsewhere, the spotlight turns to insider threat in the age of AI, after a senior US cybersecurity official uploads sensitive government material into the public version of ChatGPT. Oops.

All this, and much more, in episode 453 of Smashing Security with cybersecurity veteran Graham Cluley and special guest Tricia Howard.

EPISODE LINKS:

• Notepad++ hijacked to serve malware in targeted attacks - Notepad++.
• Porn-quitting app caught leaking users’ sexual habits - 404 Media.
• MicroWorld Technologies’ eScan anti-virus update turned into a malware delivery system - Morphisec.
• Jmail.World.
• Informant told FBI that Jeffrey Epstein had a ‘personal hacker’ - Techcrunch.
• Confidential informant statement given to FBI - US Department of Justice.
• Post by Graham Cluley - LinkedIn.
• Trump’s acting cyber chief uploaded sensitive files into a public version of ChatGPT - Politico.
• We are Lady Parts - Channel 4.
• We are Lady Parts trailer - YouTube.
• “Bashir with a good beard” by We are Lady Parts - YouTube.
• “Voldermort under my headscarf” by We are Lady Parts - YouTube.
• Doctor Who: The Shakespeare Notebooks - Penguin.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

SPONSORS:

• Passwork - a reliable secrets manager and password management solution.
• Meter - Network infrastructure for the enterprise. Get a free personalised demo.
• Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter! Join Smashing Security PLUS via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!

FOLLOW THE SHOW:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.