Can You TRUST Anything in Tech Anymore? (S5) S40
September 26, 2026
AI Summary
5 min read"It Has to Be Earned"
In his September 25, 2026 episode of The JMOR Tech Talk Show, host John C. Morley opens with a blunt question: "Who can you trust anymore?" The episode, titled "AI Hackers and Scams: Who Can You Trust Anymore? (S5, S40)," walks through fourteen developments from the week, each one illustrating how new capabilities in AI, automation, and everyday software create fresh openings for attackers. The dominant theme is not that technology is bad, but that trust is being assumed rather than verified — and that assumption is becoming dangerous.
The Attack Surface Is Expanding Faster Than Awareness
Several of the week's stories share a common shape: a trusted tool or process is impersonated or exploited at scale. A North Korea-linked operation known as Water Plum — also called Contagious Interview — has compromised at least 30,000 devices across more than 100 countries. The group poses as prospective employers, targeting software developers and IT professionals through social media, job platforms, and freelance markets. Victims receive a technical assignment or are asked to troubleshoot a video conference issue; they download a file that installs malware. The attackers have stolen browser passwords, cryptocurrency wallet data, and screenshots, and have transferred $11 million in stolen cryptocurrency. Morley stresses that the technique is not crude: "Cyber
Continue reading the full summary in the app — free to try.
Read Full Summary →Free • No credit card required
Never miss an episode of The JMOR Tech Talk Show (Podcast)
Get every new episode summarized in your inbox — free, ~5 minutes to read.
No spam. Unsubscribe anytime.
What you'll learn
- 1 (00:49) **Show Introduction and Theme** - Host John Corey opens the show and introduces the central question: "Who can you trust anymore?"
- 2 (04:24) **Browser Extensions Can Hijack Your AI Assistant** - Researchers demonstrate that malicious browser extensions can interfere with AI assistants that have permissions to access research, documents, and websites.
- 3 (06:27) **DISO Data Breach Exposes 23.6 Million Users' Images** - A data breach at DISO disclosed unauthorized access to data from 23.6 million users, including image metadata.
- 4 (09:30) **Fake LastPass Software Distributes Malware via GitHub** - Attackers created a fake GitHub page impersonating LastPass Authenticator to distribute malware called "Rapunzel Info Stealer."
- 5 (12:55) **North Korean Hacking Group Water Plum Infects 30,000 Devices** - A North Korea-linked operation known as Water Plum (also called Contagious Interview) has compromised at least 30,000 devices across more than 100 countries.
- 6 (19:28) **Zero-Click Vulnerability in Four AI Coding Tools** - Research disclosed a zero-click vulnerability involving plugin handling in Claude Code, Codex, GitHub Copilot CLI, and Gemini CLI.
- 7 (20:28) **AI Video Call Can Scan Your Face and Mood** - A service called "Talking Killy" uses automated video selfies for age verification and raises questions about facial expression and voice analysis during conversations.
+ Full timestamped outline available in the app
Show Notes
What happens when the technology designed to HELP you becomes another way for attackers to reach you?
This week on The JMOR Tech Talk Show, we’re digging into a disturbing new side of AI, cybersecurity, privacy, and trust. Researchers have demonstrated attacks that can hijack AI assistants through malicious browser extensions. Millions of Gyazo user records were exposed. Criminals impersonated LastPass to distribute malware. A North Korea linked campaign compromised tens of thousands of devices, and researchers found a zero click vulnerability affecting major AI coding tools.
Then we go even further. What happens when AI can access your files, analyze your face and voice, or move from answering questions to taking actions in the real world?
Technology is getting more capable. The question is whether our security habits are keeping up.
Who and what can you trust anymore?
#Cybersecurity #ArtificialIntelligence #TechNews #OnlineSafety #JMORTechTalk
More from this podcast
The JMOR Tech Talk Show (Podcast) →