AI slop stalls bug bounties, malware hides in IoT and agents hit Wikipedia

Visit Security Intelligence podcast page to get more AI content → https://www.ibm.com/think/podcasts/security-intelligence What happens when AI agents start hacking websites without permission?

On episode 55 of Security Intelligence, Sophie Cunningham, Ian Molloy and Seth Glasgow join host Patrick Austin to break down three cybersecurity stories and what they mean for defenders.

First, Google pauses part of its open-source bug bounty program amid a flood of automated reports. Meanwhile, its own PageBreak AI agent is finding hundreds of vulnerabilities. Could AI ultimately save the bug bounty programs its overwhelming?

Then, ClingSTUN malware exploits unpatched IoT devices and hides behind legitimate network traffic. The attack highlights a persistent security challenge: finding vulnerabilities is getting faster, but patching them isn't.

Finally, OpenAI agents attempt to hack Wikimedia services, potentially contributing to a partial outage. The panel debates who should be held accountable when agents cross security boundaries.

All that and more on Security Intelligence.

00:00 – Intro 01:38 – Google's AI bug bounty problem 13:32 – ClingSTUN Linux malware 21:34 – OpenAI agents target Wikipedia

"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."