Cybersecurity Today Amazon Kiro Prod Disruption, Claude Code Security, Salt Typhoon Warning, and Youth Radicalization
Feb 23, 2026
AI-driven attacks and how automation cracked hundreds of firewalls using weak access controls. An AI coding agent tied to a major production disruption and the push for strict guardrails. A new AI code-scanning tool that maps data flows and flags vulnerabilities. A global cyber threat exploiting unpatched systems and weak passwords. Rising concerns about online radicalization and youth-targeted recruitment.
AI Snips
Chapters
Transcript
Episode notes
AI Lowers The Bar For Global Firewall Attacks
- AI drastically reduces attacker skill requirements for large-scale breaches.
- A Russian-speaking attacker used generative-AI Python and Go tools to breach 600+ FortiGate firewalls across 55 countries by exploiting weak passwords and exposed management interfaces.
Lock Down Edge Management And Enforce MFA
- Do secure and restrict edge device management interfaces and avoid exposing them to the internet.
- Implement robust MFA and enforce strong password policies because the FortiGate campaign succeeded via unprotected management interfaces and weak passwords.
Kiro Incident Deleted Prod And Cost Explorer Went Down
- Amazon's Kiro AI assistant allegedly deleted and recreated a production environment, causing a 13-hour AWS Cost Explorer outage in one China mainland region.
- Amazon later blamed a misconfigured role, but the incident reignited warnings against letting AI agents access prod.