Oct 24, 2026 · 23 min · 9 segments
CISA Notes Active Exploits, BlackX Overcomes Secure Boot, Exposed Setup Details AI Execution
Yes.
We have this new operation run by Russian-speaking affiliates of the INC and the Gentleman Ransomware Groups.
Right.
And they are using a tool called the Autonomous Red Team Kill Chain Framework or, you know, simply Phantom.
Yeah, Phantom is, I mean, it's a prime example of how the adversary's playbook is maturing right now.
How so?
Well, this isn't just a noisy automated script throwing random exploits at a firewall.
Human-approved? Meaning what? They just sit back and watch?
Pretty much.
The human operator provides a victim-specific prompt and reviews the steps.
Commercial models.
Like the ones anyone can use.
Exactly.
Wow.
We are talking about logs showing 8,257 messages across 133 distinct sessions.
Okay, let's unpack this because I want to make sure we are characterizing this threat accurately.
Sure.
I have to push back a little on this idea of the AI being some kind of autonomous master hacker.
Is the AI actually out there finding zero-day vulnerabilities in source code and writing novel exploits from scratch?
No.
Or is it just doing the tedious administrative paperwork of hacking?
It is absolutely doing the administrative paperwork.
Yes.
We have this new operation run by Russian-speaking affiliates of the INC and the Gentleman Ransomware Groups.
Right.
And they are using a tool called the Autonomous Red Team Kill Chain Framework or, you know, simply Phantom.
Yeah, Phantom is, I mean, it's a prime example of how the adversary's playbook is maturing right now.
How so?
Well, this isn't just a noisy automated script throwing random exploits at a firewall.
Human-approved? Meaning what? They just sit back and watch?
Pretty much.
The human operator provides a victim-specific prompt and reviews the steps.
Commercial models.
Like the ones anyone can use.
Exactly.
Wow.
We are talking about logs showing 8,257 messages across 133 distinct sessions.
Okay, let's unpack this because I want to make sure we are characterizing this threat accurately.
Sure.
I have to push back a little on this idea of the AI being some kind of autonomous master hacker.
Is the AI actually out there finding zero-day vulnerabilities in source code and writing novel exploits from scratch?
No.
Or is it just doing the tedious administrative paperwork of hacking?
It is absolutely doing the administrative paperwork.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.