Black hat

Hey, welcome to Hacker and Defend.

I'm Hector Monsegur, former Black Hat hacker, once staring down 125 years in prison.

That's crazy.

That is crazy.

That's a giant gap between the reality of the situation and what is being said.

Now, I mean, cyber concerns, you know, you have White Hat, you have Black Hat.

By White Hat, I mean people that have the capabilities to engage in cyber hacks, but are actually working for governments, for cybersecurity corporations in order to find those vulnerabilities and prevent them from being exploited by the Black Hat, like, let's say, the cyber hackers that are the traditional enemies on the Internet that we encounter.

It would seem to me that one of the things that one would be calling for here would be a large number of white hatted bio hacking specialists that would be working for the government, would be working for these companies to to identify and shut down those pathways.

Most certainly.

Yeah, our t-shirts literally say,

go hack yourself, which is a great hit at Black Hat.

So the whole idea is...

Don't, how do you hack or run a pentest against your organization? Find ways that you're actually exploitable.

And these are things I've been talking about for a long time.

The last thing, and we've only got a couple minutes left that I wanted to touch on.

One of my big concerns coming out of Black Hat was we had two big events or two big things going on that I was seeing.

One was OpenAI Hugging Face, and we've continued to see more and more almost daily come out of that.

The nature of the bug is so egregious that...

it makes sense that they moved the lion's share of the Bitcoin to prevent this vulnerability being taken advantage of by black hat hackers.

If it was black hat, they could have used this bug over the last several years and made little tiny withdrawals.

The other detail you didn't mention that I thought was really interesting was actually there was another bug that That was patched and fixed by Blockstream.

And I believe that was on September 1st.

There's

a lot of different information swirling around.

This is one not to make any big assumptions, but it does make sense to me, if it was Black Hat, they wouldn't be communicating with people, and they probably wouldn't have snagged as much as they did.

But if you read this report, it is kind of an eye opener.

So just to get you caught up, we talked about when we were at Black Hat, we saw OpenAI's presentation.

July 7th through July 13th.

OpenAI testing its new models, which we think is the new Astra, which should be coming out, by the way, any week now, testing it in cybersecurity, gave it a very well-known and very, very difficult cybersecurity test called Exploit Gym.

learned that companies will do that.

Yeah.

I mean, I saw the Black Hat presentation.

I was pretty impressed with the candor of these guys.