Mandiant
Information security companywww.mandiant.com
49
MENTIONS
34
EPISODES
32
PODCASTS
Search complete. 49 mentions across 34 episodes found for "Mandiant".
Sep 20, 2026
speaker_0HOST
But what sets this story apart is Google's covert involvement.
speaker_0HOST
During Team PCP's hacking spree, an analyst from Google's threat intelligence group, Mandiant, infiltrated the group.
speaker_0HOST
This undercover analyst provided Google with real-time insights into the hacker's operations, allowing the company to warn potential targets and disrupt the group's activities from within.
speaker_0HOST
At the Sentinel-1 LabsCon conference, Austin Larson from Google's Threat Intelligence Group revealed the details of this operation.
speaker_0HOST
Organisations in these industries must update their defences to detect this specific malware family.
speaker_0HOST
Mandiant has released its 2026 AI risk report, while a ransomware developer received a prison sentence for previous attacks.
speaker_0HOST
Security teams are also dealing with the plug-in 4-shell AI attack vector and a critical flaw in SAP software.
speaker_0HOST
These developments underscore the growing complexity of threats involving AI and legacy enterprise systems.
speaker_0NARRATOR
A hijacked AI coding assistant session reportedly helped an attacker spread malicious code across about 100 internal repositories at an unnamed software-as-a-service provider.
speaker_0NARRATOR
According to Mandiant, the assistant first recommended software that the attacker had poisoned, and someone accepted that recommendation.
speaker_0NARRATOR
the resulting shai-halud activity then spread through the internal repositories and stole repository secrets and source code.
speaker_0NARRATOR
This incident shows how a connected coding agent can turn one compromised session into a much wider software supply chain problem.
speaker_0HOST
Top story number three.
speaker_0HOST
Mandiant says an attacker hijacked an active AI coding assistant session at an unnamed software-as-a-service provider and used it to spread the Shai-Hulud worm across about 100 internal repositories.
speaker_0HOST
The campaign began after a poisoned software recommendation was accepted, then escalated through a malicious PyPI package, stolen GitHub OAuth tokens and an infected package in the company's own namespace, ultimately stealing source code and secrets.
speaker_0HOST
The case underscores how AI-assisted development can become an entry point for supply chain compromise, prompting calls for checksum verification, stricter secret handling, and controlled dependency routing.
speaker_0NARRATOR
A compromised software development workflow allowed malicious activity to spread across about 100 internal code repositories.
speaker_0NARRATOR
Mandiant says, an attacker hijacked an active AI coding assistant session at an unnamed software-as-a-service provider.
speaker_0NARRATOR
Before that repository spread, the assistant recommended software that the attacker had poisoned, and the recommendation was accepted.
speaker_0NARRATOR
The resulting shai-hulud activity stole repository secrets and source code.
Andy HorngoldGUEST
Been at Intruder for five years, and my background is pretty heavily in the offensive security space.
Andy HorngoldGUEST
So previously, I was at Mandiant, where I was the EU red team lead.
Andy HorngoldGUEST
Intruder's mission is to essentially prevent breaches before they start.
Andy HorngoldGUEST
We focus very heavily on that initial access side of things where we're trying to find weaknesses and exposures that may result in a breach.
Endre BangerterGUEST
Or maybe you can find some contextual information about it, so that's what we're doing in TreadTray.
Endre BangerterGUEST
We started a couple of years ago to index samples which are referenced in open source intelligence, let's say in blogs by Mandiant or whoever, right? We crawl these blogs, we get the hashes, then we get the binaries, we index the code of the binaries.
Endre BangerterGUEST
We have a big number of binaries which are associated with the blog post basically, right? And how you could help an instant responder is basically, okay, that's a piece of unknown code.
Endre BangerterGUEST
We don't know the family.
Yvonne WassenaarGUEST
So every single board should be doing cyber tabletops with management.
Yvonne WassenaarGUEST
You should know, do you have the relationship with Mandiant, with what three-letter agencies? It is coming for all of us.
Yvonne WassenaarGUEST
And I will tell you on the two incidents that I can specifically reference, you know, basically Mandiant, Booz Allen, the three-letter agencies have all confirmed, oh, it is AI.
Yvonne WassenaarGUEST
AI was able to go through this other company, get a legitimate credential, go in, the pace of what they're working is not human possible.
Yvonne WassenaarGUEST
And so I do a lot with CISOs, and they have said the next 12 to 18 months, while all these vulnerabilities are uncovered, are going to be the most hellacious of their life, and therefore by default for all of us as board directors.
Frank CilluffoHOST
Stacey is at Armiden, and she's leading their government affairs efforts and much more.
Frank CilluffoHOST
She had previously done so with Mandiant, Google, and just a... truly informed guest and a longtime friend and someone I always turn to when I'm looking for concise answers.
Frank CilluffoHOST
Stacey, thanks so much for joining
Stacy O'MaraGUEST
us.
20 MINS LATER
Stacy O'MaraGUEST
Yeah, no, you want all of those relationships in place way before an event pops off.
Stacy O'MaraGUEST
And that is within the industry community with and between the interagency and government agencies.
Stacy O'MaraGUEST
And then also with foreign partners, you know talking about Ukraine again, which is another great case study for a lot of these topics On one of our visits there we were sitting with a couple liaisons in the room and in in Brussels and we were I don't know four or five months into the war and it was very quiet and somber and you know these men had families in Ukraine and finally and I was with the head of intelligence and my boss and he finally he says well if it weren't for Mandiant, we would have fallen to the Russians.
Stacy O'MaraGUEST
And it was a very sobering moment.
24 more episodes mention Mandiant.
Create an account to see the whole feed, search across every transcript, and follow the entities you care about.