Exploit

They're all focusing very heavily on cybersecurity.

And I do appreciate Anthropic giving us this kind of breakdown here of like what they're seeing and how it works and know the different exploits taken advantage of and whatnot but like chris you and i have done this long enough now on this podcast to recognize like they didn't do anything novel and what i mean by that is it didn't create a brand new world it simply worked off of training data to figure out how to upload a malicious package and i'm not i'm not taking credit away from the model i'm glad that it did like prove that it was, you know, smart or whatnot, but it's all trained on his, it's all based on historical training data.

Right.

And you and I have talked about malicious PI PI packages multiple times.

researcher nightmare eclipse has released another windows zero day proof of concept called shield crash which they claim bypasses microsoft september patch for an earlier windows defender vulnerability the exploit affects the microsoft malware protection engine and according to its github description works against all currently supported windows versions Shield crash follows CVE-2026-69414, known as Shield Break, a privilege escalation vulnerability that Nightmare Eclipse disclosed in August.

Microsoft subsequently patched Shield Break, but the researcher says the fix missed the path that allows essentially the same underlying issue to be triggered again.

Nightmare Eclipse has been releasing Windows exploits around Microsoft's monthly patch Tuesday since April following a dispute with the company over vulnerability reports.

Oh man, never mess with a researcher scorned.

Yeah, 153 in those.

This was tipped off to Krebs on Security because someone saw this being posted on a Russian cyber security – or excuse me, a cyber crime forum known as Exploit.

Yeah.

Yeah.

What does that actually say to us? Out of 250,000, give or take...

Exploits.

3,800 of them were exploited.

That's a tractable number.

Nexus launched on the dark web this week.

Krebs was told his own driver's license was advertised as a free sample on Russian cybercrime forum Exploit.

Nexus claimed to have licenses from people in the U.S. and Canada, as well as IDs, medical cards, and travel documents.

IDscan.net says it is investigating the matter.

I'm your host, Akanksha.

Today, we're kicking off Series 6, Exploitation, Forensics, and Advanced Defense with Episode 4, Real-World Exploitation, System Compromised with NJRAD.

So, get ready to dive with me into a full system exploitation scenario.

In this episode, we'll demonstrate compromising a Windows server using the Remote Access Trojan, that is RAD, which is NJRAD.

They built a coding model.

What emerged was a system that began reasoning across complete exploitation chains, and the engineers said so, not buried in a footnote.

In the lead finding of the announcement, cyber capability developed faster than we expected.

GLM 5.3 from the Jury UN Lab.

As we scaled post-training, cyber capability developed faster than we expected.

GLM 5.3 did not simply become better at identifying isolated flaws.

It began to reason across multiple stages of exploitation, forming coherent plans for complete exploitation chains.

That sentence is the engineers describing their own surprise.