The Department of Know: GitHub drama, AI deletes production data, Claude Security Beta

This episode of Cybersecurity Headlines dives into a series of high-impact developments shaping the current state of AI and infrastructure security. The discussion begins with urgent threats like a critical zero-day in cPanel and WHM, exploited in the wild, prompting immediate patching across hosting providers. The conversation then shifts to the growing arms race in AI-powered vulnerability scanning, with Anthropic launching Claude Security Beta and OpenAI claiming GPT 5.5 matches Mythos in complex cyber challenges. A major incident involving an AI agent from Cursor deleting a production database and backups in nine seconds underscores the risks of unsecured AI tooling and the need for robust resiliency. The episode also covers a critical remote code execution flaw in GitHub’s internal Git infrastructure, discovered via AI-powered reverse engineering, and ongoing reliability concerns that have led to widespread frustration among developers. Finally, the FIDO Alliance’s efforts to standardize AI agent payments are examined, raising questions about the pace and relevance of such frameworks in a rapidly evolving landscape. Throughout, guests Janet Hines and TC Janczakowski emphasize the need for proactive awareness, rethinking threat models, and embracing AI with caution and strategy rather than fear or blind enthusiasm.