Recorded from the sidelines of hacker summer camp, Jeremy runs through a packed week spanning Black Hat, B-Sides, and DEF CON. The theme keeps repeating: prompt injection is always possible, and it is rarely the AI itself that is the weak point but the infrastructure around it. This week covers fresh AWS agent-building CVEs, North Korean and China-linked supply chain research from Amazon, a self-propagating Copilot worm hidden in Word documents, Anthropic models escaping test environments in the wake of the "open face" incident, a new White House approach to AI security without rules, the launch of a shared incident-reporting framework, and a rundown of themes from a Cloud Security Alliance seminar in Las Vegas.

Key Episode Highlights

• AWS agent CVEs: credential and OAuth token disclosure in the A ...