SN 1101: ECDSA's Curves Origins - When AI Becomes the Attacker

Welcome and Episode Overview

0:00Hey, it's time for Security Now. Steve Gibson is here, and I'm subbing in for Leo Laporte, and we talk about, well, another record-breaking patch Tuesday, plus Unit 42 reports on a really wild agentic attack where the agent decided to leave a lot of its evidence behind, a mass-compromised hardware cryptocurrency wallet attack, and what happens when you reverse-engineer ECDSA

0:31curves by way of Claude. All of that, coming up on Security Now.

0:39Podcasts you love. From people you trust. This is Twit. This is Security Now, episode 1101, with Steve Gibson and me, Micah Sargent, recorded Tuesday, the 20th of October, 2026. ECDSA's Curves Origins. Hello, and welcome to Security Now. This voice you're hearing is not one of Leo's AI-generated voices. It is, as far as you can tell, the voice

1:13of Micah Sargent. That's me, and I'm filling in for Leo this week on Security Now. This is, of course, the show where world-renowned security expert Steve T. Gibson gives us the lowdown, the uptake, and the in-between on all things security. How are you? So this is the first of, what, three or four of these? At least three, yeah. Yeah. Well, I'll have to check their calendar, because, you know, with all the flooding that's been going on over there, they could come back early.

1:44And Leo was concerned about, like, yeah, like, I think the hotel where they had some reservations, they have actually different kinds of reservations about being able to have their stay there. Anyway, this is, we, last week, or I guess the week before, I don't know, last week was 1100. We crossed into episode 1100. It's bugged me that I've always been a little bit behind the big

2:15twit podcast. I don't think there's any hope of catching up, but so, you know, because we're staying at the same distance. Yeah, you're like neck and neck. If there was some way, if I could figure out a way, Steve, for you, I would. Anyway, episode 1101 today for this October 20th, and a bunch of interesting stuff to talk about. We've got to follow up on last week's Patch Tuesday, because this one smashed. Smashed,

2:48I think, is fair. Another record, which was smashed last month. This one even more so. The good news is less downstream consequences. Last month's more than a thousand patches resulted in a lot of breakage of things that worked before you applied the patches. And so Microsoft did a bunch of backpedaling and workarounds of things. And in fact, this Tuesday, last Tuesday of a week ago,

3:24this Wednesday's Patch Tuesday also served to finally provide some permanent fixes to the things they broke. This one didn't break so much, but boy, did it have a number. So we're going to talk about that. Also, Palo Alto Networks, Unit 42, and I should say right up front, because I'll be talking about Palo Alto Networks at various points during this podcast, is a sponsor of the Network Network. So keep that in mind. They've got, and I love that their cybersecurity unit is Unit 42,

4:03of course, because that's the answer to everything. They provide a really interesting report on an agentic attack on an unnamed enterprise. Their identity is just being kept on the QT for the sake of the sake of the enterprise's integrity. We learn a lot from what they share. And it moves my own needle of expectations for the future, which is what we'll get to talking about here toward the

4:39end. There was also a really interesting and actually frightening large hardware hack of physical cryptocurrency wallets, which resulted in a lot of loss of money by those who were using it. We got some, we have some interesting takeaways from that. Also, in fact, one will be what to do to create your own known safe crypto hardware wallet, if you want one. I'm going to share some feedback from

5:16a listener. And then I want to talk about, and this feeds back into this Unit 42 Palo Alto Networks attack about this, some other news that Anthropic shared with the industry last week, where they were able to get an unreleased model of cloud to reverse engineer and determine the never before known

5:47origin of some crypto parameters, which the industry standardized on without knowing where they came from. It's beyond knowing that the NSA gave them to us. And there was already reason to be suspicious because there was another instance that we talked about on the podcast many years ago regarding a sort of off the map, why would you choose to use this random bit generator, which the NSA reportedly,

6:22reported by Reuters, paid RSA $10 million to make their default. So, okay. Anyway, I think a bunch of interesting stuff. But the point of that last story about this reverse engineering is I need to share with everybody what this Anthropic AI agentic thing did in order to solve this longstanding problem,

6:54which has stumped everyone because it suggests that we're probably in for more trouble when the bad guys get a hold of this kind of power than I've been suggesting until now. So I think a really good, interesting podcast for everybody. Absolutely. And after we take a break, we have a great picture of the week. I love it. I love it so much. But first, yes, let's hear from Leo. Hey guys, this episode of Security Now brought to you by Bitwarden, the open source password manager

7:31trusted by more than 15 million users and over 80,000 businesses worldwide. In the fall 26 G2 password manager grid report, Bitwarden earned a stunning 99 out of 100 satisfaction score with 98% of users giving it four or five stars across more than 1,400 reviews. People love Bitwarden. I love Bitwarden. Bitwarden is also expanding what enterprise security can look like with tools designed to give organizations more control without adding unnecessary complexity. Take Bitwarden Privileged Controls,

8:07now available in private preview. It brings privileged access management to the same platform employees already use for their everyday credentials. But you get more. You get credential leasing, advanced access rules, automated password rotation, and detailed audit logs. Credentials can be released only when needed for a specific reason and period of time and then revoked when that lease ends. Bitwarden is also giving organizations more control over where their data lives. Federal agencies can self-host Bitwarden on their own FedRAMP compliant infrastructure. That includes on-prem, private cloud

8:44offline or air-gapped environments, giving organizations with strict security, regulatory, or data residency requirements greater control over where passwords, secrets, and pass keys are stored and managed. And enterprise security is easier to roll out too. New invitation links give admins a customizable way to onboard employees with options to restrict enrollment by email domain or rotate or invalidate links when needed. That combination of security control and usability is reflected in Bitwarden's

9:17latest customer feedback. It's not just about adding security features though, it's about giving IT teams tools they can actually deploy, manage, and maybe most importantly, get people to use. Get started today with a free trial of a Bitwarden teams or enterprise plan or get started for free across all devices as an individual user at Bitwarden.com slash twit. That's Bitwarden.com slash twit. Now back to security now.

9:48All right. Thank you, Leo. And yeah, I'm looking forward to talking about this hilarious image this week. So, um, I gave this picture, which was provided by one of our listeners, the caption, it's not only AI that takes instructions literally. Anyway, uh, what we're seeing, uh, on screen, thank you, Benito, uh, uh, for those who aren't looking at the video, there was, uh, some sort of a utility box, big utility box

10:20stuck on the side of a, of a crosswalk pole. Um, and in small print in the middle, it says post no signs, which would be pretty clear. However, somebody thought, okay, uh, they printed the word no in quotes in, in very large, in three different fonts, uh, creating four signs and stuck them all

10:51over this thing. So in fact, they followed the rules, right? Or the, the, the command they posted no signs. I love it. Post no signs. And I mean, it checks out. I gotta say. And imagine encountering that. I think that'd just be so cool to be walking along and, uh, to see that thing and be initially puzzled. It's like, uh, what? And then go, okay. And you look close to you. Oh, clever. Very clever.

Record Breaking Patch Tuesday

11:18Oh, good stuff. Okay. So as our listeners know, uh, I believe that the rate of security vulnerability discovery and patching is destined to first accelerate, uh, as we've all been witnessing, uh, but then to inevitably decelerate as that legacy of vulnerability debt is increasingly paid down. You know, even Microsoft cannot possibly be creating new vulnerabilities at the rate they're

11:56now able to find and eliminate them thanks to their M dash, uh, agentic AI system, which they've been applying to great effect. Um, so without access to what's actually going on inside Microsoft, we have no way of judging like, you know, where they are along this process, uh, when, you know, when they're going to hit like that point of peak patches, um, where we will then begin to see the

12:27rate drop off. I sort of thought maybe after last month's 11, more than a thousand patches is like, okay. And that, that was, that followed several months of like 400. I remember well earlier in this podcast when, you know, 25 would have been like a, like, okay, well we got, we fixed 25 problems this month. It's like, okay. Um, maybe 47 would have been a biggie. Well, okay. We, we've of course blown

12:59all of that away. Bleeping computer places this October months, Microsoft update count at an astonishing 1411 problems. Now there's a little variation. I saw 14, uh, 17 or 14, 14, depending on who, you know, I mean, the problem is when there's so many, you lose count. I mean, it's like, you know, what qualifies what there's a little bit of a gray area, but still, you know, way more than we had

13:31last month and last month was a lot. So anyway, uh, before we, you know, I do want to say bravo to Microsoft, right? I want to go on record again with a loud praise, you know, they finally have the tools in this M dash to enable them to clean up their massive base of legacy code. Um, you know, until now they've been at the mercy of attackers, like no nightmare eclipse, who we've talked about all

14:08through the big, the early part of this year, um, who were individually able to invest the time and resources needed to scour Microsoft's code, looking for individual exploitable vulnerabilities and then develop an exploit for them. And yeah, Microsoft would fix any problems that were discovered and shown to them, um, you know, which is what led in the old days to those 25 or, you know, or 47 patches,

14:38but Microsoft's massively agentic M dash system and allowed them finally to go on the offensive and boy, have they ever, um, as we saw last month with its, uh, mistakes that were also made, um, fixing more than a thousand flaws can itself introduce new bugs, but even those tend to be short-lived, right? I mean, they immediately raise alarms. People say, Hey, you broke this, you broke that. And then they weren't, they come up with a workaround or, or whatever. So, um, certainly the overall result

15:15is a significantly more secure operating system and related software, everything from Microsoft that we've had before. Um, and if that's true, if getting rid of these vulnerabilities makes things better, then boy, did Microsoft software get a lot more secure this month. Um, last week bleeping computer wrote the following. They said Microsoft's October 26 patch Tuesday security updates addressed a

15:47record-breaking 1411, 1411 flaws, including one actively exploited and two publicly disclosed zero days. The, uh, patch Tuesday addressed 70, seven, zero critical vulnerabilities, 57 of which are remote code execution. 11 of the other criticals were, uh, elevation of privilege and two were spoofing. So if you, if, if we break down the vulnerabilities by category, there were the, the greatest number

16:27overall, 677 were elevation of privilege vulnerabilities. And although as we've talked about before, those don't seem as like horrifying as remote code execution, because who wants to have your computer executing code that some Cretan, you know, managed to sneak into it still elevation of privilege matters because the way windows, uh, security hierarchy is set up, most users do not run with admin

17:00privileges. And if something happens in your computer while you're logged in because of something you do, the, the, the bad guys have code running with your privilege, meaning restricted, not root, not admin. So elevating that privilege to, to full access in order to do much more devastating permanent damage is crucial. 677 problems were found and fixed just last Tuesday that allowed exactly that.

17:34Can you imagine the sound, the collective sound of winces that the, that I can't imagine being one of these folks seeing these and going, that's been in there for the past 15 years. And we have to hope that no one exploited it. And, uh, boy, howdy, how did we miss that? And I can't imagine. Yes. And, and, and, and it's funny too, because from Microsoft standpoint, while fixing 1,411 flaws,

18:06they're acknowledging for 1,411 flaws on top of the more than thousand last week or last, last month. It's like, so, so that, that, that, that's why I want to be so clear that it's like, go Microsoft, don't be shy. You know, just, just like we, we, you know, the, the license agreement already holds them harmless, right? It's like, well, if you don't like windows, you can send it back. But, you know, if, you know, you're using it

18:38and taking all the risk for doing so, uh, because we just sort of tried, you know, and did as good a job as we could. Yeah. It's like, so, so it's not like they're liable for any of these problems there and the fact that they're getting it better. What, what I really love, because I have not yet seen any compelling reason to go to 11. I, I'm, I'm happily, you know, putting 10 wherever I am, I'm setting up a new machine because of the fact that such, so much of the world wants to use

19:10windows 10 does not want to go to 11 or has older hardware that won't run 11. They're stuck at 10, but Microsoft, even though they've, they've, they formally discontinued support, they keep adding a year and a year and a year to it. What I love is that 10 is being really well fixed as a consequence of all this. I mean, that's fantastic. And because they've moved on to 11, they're not screwing it up anymore. They're only fixing it. So by the time they finally stopped patching 10 and

19:46we, you know, we have another whole year, right? They, as we were approaching this October, this month, they said the month before, uh, we've decided we're going to give you another year. Great. Because, you know, we're going to see this curve of vulnerability fixings finally dropping. Maybe it'll be next month. Maybe it'll be the month after we're not sure when, but it's going to happen where they're going to start running out of them because, you know, there has to be an end. Um, and 10 will get all of the benefit of that and none of the liability of any of Microsoft's new

20:22crap. So it's wonderful. I mean, it's just a win for windows 10. Anyway, uh, as I said, 677, uh, uh, elevation of privilege. The second most occurring, uh, class of problems they fixed was 317 remote code execution vulnerabilities. In other words, they fixed last week, 317 different ways that bad guys could run code in your computer without you wanting them to, which is like, as you said, you know, it's,

20:56it's bracing to think that there until last Tuesday, there were 317 ways to do that. Yikes. Yeah. So yeah. 254 information disclosure, vulnerability, 73 denial of service, which mostly just now that's what we call it when you're able to crash something because you deny everybody else its service because you crashed it. So 73 ways, uh, like to crash the, the DNS server

21:26or whatever, uh, 40 security feature bypass vulnerabilities, which has always seemed sort of nebulous to me. It's like, well, okay, that's kind of like everything, right? Security feature bypass and then 28 spoofing vulnerabilities. Anyway, Bleepy Computer said that, uh, they, they said when, uh, when, uh, we report on patch Tuesday security updates, we only count vulnerabilities released by Microsoft on patch Tuesday itself. In other words, there were more. They said, therefore today's

21:59total excludes 348 flaws fixed earlier this month, including vulnerabilities in Azure API center, Azure app service, Azure event grid, Azure SRE agent, Mariner, Microsoft bookings, Microsoft data verse, Microsoft exchange server, and Microsoft partner center. So, and normally you, you would see things like exchange server fixed on patch Tuesday. The fact that they did it sooner probably means it

22:30was really bad and they couldn't figure they could even wait until patch Tuesday when they, on the other hand, it would have bumped the count up. And so maybe they were thinking, okay, we only, we can't do more than 1400 and 11 all, all in one sweep. So they said, uh, Bleepy Computer said this is a record breaking, no kidding. Microsoft patch Tuesday as Microsoft continues to use artificial intelligence platforms to find and remediate security vulnerabilities in its products. Microsoft also said quote today, October 13th, 2026 windows 11 version 24 H2 home and pro and windows 10 enterprise

23:10LTSB. That's, you know, the long-term servicing branch 2016 have reached the end of their updates. Of course, that doesn't mean they're going to stop updating them because they can't the October, 2026 monthly security update is the last update available for these additions. However, you know, they're still updating windows 10. So they're clearly going to give you that, you know, it's not in the normal standard Microsoft patch routine. It's in the extended services mode, which is what

23:43they keep deciding to extend. Every time it gets close to ending, they add a year to it because, you know, so much of the world is still using windows 10. Well, obviously a lot of the world is using windows 11 version 24 H2. So it's not like they're going to cut that off either, especially when they're fixing thousands of problems every month. So I believe the computer said earlier this month, Microsoft also said organizations running windows 11, 23 H2 enterprise education and IOT enterprise

24:14additions should upgrade to newer versions as they'll no longer receive security updates after next month. And yeah, why not have, why not update to the, unless you, for some reason, can't update to the latest windows 11? Uh, why wouldn't you? They said this month's patch Tuesday fixes one actively exploited and two publicly disclosed zero day vulnerabilities. And they noted that Microsoft classifies zero day flaws a little differently than the rest of the world. They call

24:45them, you know, we call them when they are caught being used on some software. We call that a zero day because it's really a surprise. Microsoft classifies, they write zero day flaw as publicly disclosed or actively exploited. So in other words, you don't have to, you don't even have to be using it. If someone mentions it in public, it's like, Oh, that's a zero day because it surprised them. So they said the actively exploited zero day vulnerabilities addressed during this October 26 patch Tuesday are,

25:20and there are three of them. There's a windows shell security feature bypass vulnerability. Uh, I'm not going to go into the details. Uh, there's a dot net framework security feature bypass vulnerability and a message pack C sharp denial of service vulnerability. Um, and they finished by saying with this month's record breaking number of vulnerabilities, Microsoft has also introduced a new method for organizations. I thought this was interesting to prioritize security updates by

25:57grouping related flaws into what Microsoft calls risk cohorts for brand new idea for the first time this month. They said this new approach groups, similar vulnerabilities together to help organizations better understand which security flaws pose the greatest risk to their systems and should be prioritized for patching. So I think this is a welcome and actually it's an understandable response and surprisingly quick

26:33to last month's self-inflicted windows update carnage, which as we covered last, uh, you know, four, four, four episodes ago, uh, the week after patch Tuesday, it's seriously impacted many enterprises, um, in many instances for many days. So, you know, this new concept of these risk cohorts is a welcome addition. Um, and especially when an enterprise now is, you know, facing an astonishing number of updates,

27:06um, 317 of the 1,411 allowed for remote code execution. So we know that the bad guys examine both the before and after patched code to locate the changes that Microsoft made as a means of attacking those who are slow to update. So reorganizing the massive patch collection, which we're now being, you know,

27:36is being dumped every month into a collection of so-called risk cohorts will potentially at least allow concerned enterprises to verify the safety of the more, of the more serious problems first, on a safety as in, is it safe for us to apply these in our enterprise, um, and get those pushed out to their enterprises workstations. Um, a bleeping computer did, uh, break this down. They said for October 26, Microsoft, October, 2026, Microsoft published 15 risk cohorts overall. And then they listed

28:15just five, they said, including 136 vulnerabilities, which affected windows file systems, storage, and backup 135 vulnerabilities involving office documents and mail clients, 131 vulnerabilities affecting windows graphics, media, and content processing, 109 vulnerabilities involving windows core and kernel privilege boundaries, and 103 vulnerabilities infecting windows installation, deployment, deployment, and update services. As I, as I think about this again, looking at these,

28:49it feels like they've divided them sort of like departmentally, like, like there will be some group of people in the enterprise who would take those 136 vulnerabilities affecting five windows file system storage and backup and, and check those because that's sort of their bailiwick. You know, they're, they're, they're those people because for example, then we have the 135 involving office documents and mail clients. Well, that might be a different group in a large

29:25enterprise that is like in charge of, you know, my, the, the, the, the Microsoft office stuff. So by, by segregating them that way, it does allow, uh, you know, it, it, it, it divides this huge number of vulnerabilities into groups by, by focus group, essentially, you know, who would, who would generally handle making sure that, you know, we haven't broken something in the installation, deployment, and update services, you know, where 103 vulnerabilities were just patched.

30:00So anyway, bleeping computer says that, uh, Microsoft stressed that these groups do not necessarily indicate which flaws are the most dangerous, right? As the actual risk depends on whether they're being exploited in attacks, their severity and how an organization uses the affected software. Microsoft says the new approach is still experimental and is meant to help organizations. They see, they say prioritize. This doesn't feel like priority to me. It feels like,

30:32you know, segregate for department, you know, different departments to handle them. If, if that's their expertise. Yeah. Um, delegate. Right, right. Yeah. So anyway, that's where Microsoft stands. Um, uh, are we still accelerating? Are we going to have more next month? Uh, even more. You will November. Yes. Right. See an even higher count or was this month, the month that we peaked

31:03and we will now see what will probably be. My guess is when we hit the peak, we're going to see a sharp drop off as the pool of unpatched vulnerabilities dries up. I I'm on record. We'll see if I'm right or not. So, um, but what's equally exciting to me is the idea that all future Microsoft software will now be able to be pre-screened by that same M dash AI, um, which is fixing the legacy code,

31:34you know, they'll be, they should be able to pre-screen anything before it's ever released. In other words, there's the real potential for Microsoft systems to be truly secure for the first time ever. And for vulnerability, discovery, exploitation, and post release patching to become an historical artifact. Like where, you know, when I was a boy, you know, it's like, because there just aren't these problems anymore because AI cleans them up even before they get out the door

32:08in the first place. And wouldn't that be something, um, for what it's worth, Microsoft is not alone. Um, an increasing number of companies, as we've noted previously have been synchronizing their own software updates with Microsoft's patch Tuesday. I don't know if it's like to hide behind Microsoft or what, you know, it's like, Oh, well Adobe did this and so forth. And Cisco did that. Um, but that's been growing more and more popular. Um, bleeping computer also noted that the recent

32:41updates from other enterprises, uh, who also appear to be employing AI for their own preemptive defense. Yay. I mean, we need that to happen. We know that Cisco is, uh, last, last week we covered a week or two ago, we, we covered Cisco's massive patching binge, which again, props to Cisco. Thank you for fixing all this. Um, they apparently sorted this alphabetically bleeping computer did, uh, saying other vendors who released updates or advisories in October, 2026 include, we've got Adobe, uh, you

33:19know, the a word released security updates for numerous products, including commerce, substance, 3d samples, cold fusion, Photoshop, dimension, and framework. Atlassian released security updates for critical vulnerability in multiple self-hosted data center products, including Confluence, JIRA, and Bitbucket. Attackers soon exploited the flaw after a proof of concept was released. That was the, the fix for the critical vulnerability in Atlassian. Cisco released security updates for

33:51numerous products, including critical vulnerabilities in its NXOS data center network operating system that can let attackers run arbitrary code with root privileges on NXOS switches. Citrix released security updates. I'm not going to go through them in the same level of detail. Dell was there. Docker patched a critical flaw on Docker hub. Fortinet released security updates for numerous products. GitLab released security updates for critical flaws in its AI gateway and CICD regular expression

34:23compiler. Uh, uh, Avanti is there with updates, uh, Kiteworks security updates for 126 vulnerabilities. There are, you know, AI's on the case there. Progress software released security updates for critical and high security vulnerabilities. SAP released the October security updates addressing 20 security flaws and Sonic wall released security updates for a critical SMA 1000 server-side request forgery than SSRF law. So anyway, we're seeing industry-wide repair of legacy code, which, you know, it is so welcome and

35:04necessary since we already know, and I'll be sharing another example of it shortly, that the attack capabilities now being brought by AI, not tomorrow, but it's already here are being used to increase the strength of attacks. So go. Did you see that? Uh, I think it was Anthropic who, uh, just recently, and now I'm trying to find it because I'm hoping it's not, you know, something that I read that was

35:35ended up not being true, but I thought I saw something about Anthropic, uh, working on a tool that was for cybersecurity where you could run its cybersecurity model against your own code in a way that, did you talk about that already? Yeah. They're like tested it for the model. Got it. Yes. We, uh, we covered it last, we covered it last week. Um, the, the release was that they formally agreed. They, they, they formally said they would be, they would be, uh, running open source software projects that had opted in and

36:13that were large enough to make an impact. If they had vulnerabilities at no charge, they would be that they would be scanning and keeping an eye on any open source projects that wanted to opt into that. So, so yeah, it's, uh, I mean, and that's great because we, you know, we, we, you know, the, the, the enterprise is able to afford AI and this is what we just, we were seeing all these enterprises obviously spending now on, on AI vulnerability discovery. And the result is, you know, much,

36:49uh, greatly increased rate of patching. So, so that side is covered. And also notice that the enterprise is the one that does, that has their own software, their own source code. It's not open. So it isn't nearly as easy to fix it. Not technically impossible, but still you, you really need the source in order to, in order to fix the software enterprises are closed source, but they've also got the money open source projects. You know, the, the source is open for everyone, but they don't,

37:19they typically are underfunded or not funded. You know, it's all volunteer effort. So the, so the idea that, that we're, we're seeing, um, uh, them, uh, step up to the, um, you know, uh, uh, uh, step up and recognize that, that AI, uh, in fact, it was the week before last week, we talked about, um, them also, uh, doing a piece, which noted that GLM five, three,

37:54from Z AI was now just about equal to the frontier in its ability to find problems and being open weight. It could be obliterated. And so you would remove all of its ability to say no. So, you know, so then the week after, which is last week, uh, we talked about how, how they had then, and, and, and anthropic then decided, okay, because the bad guys do have access to open weight

38:26models that are almost as good as ours. We're going to give free access to the open source community for big projects that matter to, you know, when they don't have the money to, to fund AI, you know, we do. So I think that was a really good move. Um, so far, despite its record breaking 1411 updates, the industry has not experienced what I would call an October surprise of update

39:01consequences. Like we did encounter last month after the more than a thousand updates, um, October's updates, uh, as I mentioned earlier, also finally repaired a number of things that September broke. So it's been nice to see that we don't necessarily always have dire consequences following a mega patch update cycle, even though this was even more mega than the last mega one was, uh, I don't know

39:32how they made it differently. Maybe they tightened up their pre-release testing, having learned a, an, an expensive lesson. I mean, it was a, it was a black eye that so many enterprises were significantly impacted by, by installing September's updates and, and, you know, look at the pressure that enterprises were under to get them installed quickly. Cause there were so many that were so bad. And now everyone knows the bad guys, you know, are much better at exploiting these problems.

40:05So, you know, time really is of the essence. And in fact, but the week before Microsoft released this, the September batch, they said, get ready. We're going to get, we have a big September coming. And a lot of these things are really bad and you can't wait to patch them. So enterprises didn't, and then got hurt by not waiting. So it was so far, you know, we're only a, you know, a week downstream from last Tuesdays, but we're not seeing nearly the same level of trouble. Microsoft did, however,

40:39note that some users may have trouble is the only, the only one thing that, that I was able to find may have trouble turning on smart app control after installing this October's patches for Windows 11's security update. Bleeping Computer covered that, writing, smart app control is a Windows 11 security feature that uses Microsoft's app intelligence services and code integrity features and works

41:09alongside Microsoft Defender and smart screen to block potentially harmful apps or binaries. You know, so basically it's preventing you from running something that, that you're, that could damage your, you or your system. So they, so Bleeping said, according to the company, Microsoft, on affected devices running Windows 11, version 24, H2, and later, the smart app control option is grayed out and cannot be changed. Microsoft said in an update to their, and it's the, the, the,

41:43the patch for Windows 11 security features, KB5127648 Advisory, they said, after installing this update, some devices might be unable to turn on smart app control in the Windows security app if it has been turned off. On affected devices, the option to turn on smart app control might be grayed out. Devices where smart app control is already turned on are not affected and remain protected. So big deal, you know,

42:17if that's all they broke while patching 1411 vulnerabilities, yeah, I'd call this month's Patch Tuesday, a huge success. Um, and it sounds like a trivial UI problem and really nothing to worry about. Uh, Microsoft did, however, uh, offer a workaround, uh, which involves a couple, uh, registry tweaks. You need to run, you need to run regedit as an, uh, or, or run a command prompt as an admin

42:48writes, and then, you know, uh, basically set two keys in the registry, which essentially does the same thing that the UI would have, that the UI, you know, click the button, uh, would have done. So it's certainly possible if you, for some reason you have to turn that on, even though you had it off before and October broke the ability to turn it on. Well, if you have to have it on, you can, there is a workaround and obviously it'll get fixed next month. I don't think there's any great emergency, uh, to, you know, making that happen soon. Okay. Uh, next I'm going to talk about this,

43:26uh, Palo Alto networks sponsor of twit, uh, unit 42 investigation, but let's take a break so I can rehydrate and we'll hear from Leo. Sounds good. Leo, take it away. This episode of security now is brought to you by delete me. October is cyber security awareness month. Now here's something every business owner should consider your company invests in cyber security, but what about the personal information cyber criminals can find about your employees online? That's actually gold

44:01for them. And that's where delete me comes in. Delete me removes employees, personal information from hundreds of data broker websites, reducing the information attackers can use to target your business. And delete me has a couple of security tips to share with your team. You may know this already, but if not, maybe you should tell your team, I bet you some of them are making these basic mistakes. First of all, verify before you click, right? If an unexpected email appears to come from a client or vendor, you should independently check the sender's domain. Cyber criminals use lookalike

44:34domains to steal passwords, spread malware, and impersonate trusted businesses. I mentioned this because it happened to us. The emails from what looks like an actual client of ours, or even text messages impersonating our executive team. That's when we first signed up for delete me. We realized we're not immune either. Next, you might want to Google yourself. Ooh, that could be scary. See how much personal information is publicly available about you. Home addresses, phone numbers, birthdays, all

45:05can be purchased from people search sites and used to make scams seem legitimate. Now this is where delete me really helps. Their privacy experts remove your team's information from hundreds of data broker websites, continuously monitoring for new listings and providing regular privacy reports without adding more work to your IT team. They're busy enough. Delete me has the recognition to back it up winner of two cyber security excellence awards, including most innovative cyber security company and privacy product

45:36service. Delete me is trusted by organizations that take security seriously and over 20% of the fortune 500. Like Yahoo. Ask Yahoo's principal behavioral engineer who says delete me quote is a critical layer in our security stack. Removing exposed PII is essential to protecting our employees and reducing risk. It's become a core part of how we defend our organization's privacy posture in today's threat landscape. Protect your business and your peace of mind. Go to join delete me dot com slash twit dash biz

46:11and start protecting your business with delete me today. And if you use that link, you'll also get a free year of social media protection for every seat you purchase. That's join delete me dot com slash twit dash biz. Thank you delete me for support and security now. Now back to Steve. All right, back from the break.

AI Assisted Enterprise Attacks

46:33As I mentioned, Micah Sargent subbing in today for Leo and it's time to go 42. Okay, so I mentioned another example of AI enhanced attacks. Last month, Palo Alto Networks Unit 42 published their findings from their investigation into an AI assisted attack.

46:59And their report contains a bunch of useful takeaways which can be readily generalized. So here's what they reported and then we'll talk about what it means. They said unit 42 responded to an incident where a human attacker used frontier AI to breach an enterprise network autonomously as part of a ransom attack. The agents breached the company's security layers in a methodical manner with each agent targeting a

47:31different layer of defense to achieve their shared goal. The impact was at the scale of a coordinated effort from multiple red teams, which would normally take human operators around two weeks. The threat actor told us in negotiations that they leveraged frontier AI models and attack specific agentic AI frameworks. By shifting execution to an automated loop, the attacker compressed weeks of methodical intrusion tradecraft using more

48:07than 50 MITRE attack techniques into fewer than 10 hours. After they gained initial access, the attacker used agents to map the internal architecture, raid source code repositories, and seize root credentials. The agents also also triggered unauthorized continuous integration, continuous delivery, you know, CICD builds, and claimed master keys to the victim's cloud AI infrastructure.

48:39Oh, and get this. They said, what made the attack stand out was AI assisted operational efficiency without the need for a novel zero day or super elite tradecraft. The attacker left all tactical execution to AI agents that monitored, evaluated, acted, and re-planned in real time, increasing the speed throughout the attack chain. And the attacker also directed its agents to leave behind a report on the organization's security posture.

49:23An 80-page, 80-page technical audit detailing dozens of exploited findings. In other words, it ransacked the enterprise. It exfiltrated all of the company's crucial, critical, must-keep-it-private data, which it would then use to extort the company for a ransom. And left behind, thoughtfully, an 80-page audit of everything it found wrong that it used in order to perpetrate its crime.

50:04Well, that's nice. I mean, yeah. How kind. I wonder what, like, I wonder where and what resulted in it making that choice. You know what I mean? What, what would result in a sort of vigilante? Well, my guess is that this is what we've seen. This is the way agents work, right? Is they build their own dossier of findings as they're going through.

50:38They, like, leave breadcrumbs behind for other agents to then read and pick up the thread or go in a different direction. So this was probably being built for their own purposes as they were finding flaws and exploring avenues and pathways. And then they thought, well, what the hell? Let's, you know, format this into a formal technical audit of all the problems that we found and exploited just sort of, you know, to give them a little, I don't know, goodbye bonus.

51:13Yes. It's almost from, from our perspective of the human perspective, there's a little bit of a, it's kind of a brag, honestly. It's like if somebody's leaving their, their little calling card behind, my calling card is just, here's where you failed.

51:32Wow. That's funny. I mean, not funny, but funny. So, uh, Palo Alto said the adversary ran their operation using current AI enabled software development processes. They said, we observed three indicators consistent with AI usage. First, large language model calls to multiple frontier AI agents in parallel, structured markdown files. Oh, here's what I was talking about, passing information between agents and sessions.

52:05So they use those. And then I would imagine they ended up digesting that into that 80 page report. And then third, custom scripts assessed with high confidence to be AI generated due to UI elements, which, and those custom scripts were managing the dynamic operations. They said the 10 hour operational timeline included infiltration and mapping. The actor breached a publicly accessible web service.

52:37So there was a, so, so that's, that was their way in whatever this entity was. And we still don't know, uh, they, they had a web service, you know, internet facing. So infiltration and mapping, the actor breached a publicly accessible web service to tunnel into the network, deploying an automated recon agent to map internal microservices. Then secrets harvesting sub agents combed enterprise code repositories, extracting hard coded tokens and service passwords.

53:16And, okay, as I'm reading this, I'm hoping that, you know, CISOs are getting a little chill. Yeah, exactly. Or feeling a little chill. The idea of what is in the process of being turned loose on a world that is not ready for it, which is really the, the theme and the conclusion that I'll be reaching during this podcast. I mean, it, it, it is something then privilege takeover.

53:48They said using exposed tokens, the actor infiltrated the sequence management system, harvesting master administrative credentials to seize control of root system access. Then pipeline exploitation, the actor hijacked an enterprise code application via custom workflows to exfiltrate cloud access keys. They attempted to plant back doors in terraform configurations, but hard branch protection controls stopped it.

54:25And then get low, get a load of this one, Micah, AI infrastructure, hijacking using stolen cloud keys. The actor turned the victim's AI endpoints into post-compromise infrastructure using the company's own compute AI compute power to perpetrate further moves. Oh, so they hijacked their own, the company's own AI.

54:58That's horrifying.

55:00That, what you said, if the chills weren't already happening, they'd better be happening now. That gave me chills. I'm, oh, that's, that's, that's, that's terrible. I mean, that's a, that is like a true virus, right? Like, what do you think of a biological virus going in and reprogramming our own cells? That is wild. So the attack, the attacker's AI having obtained the keys to the victim's cloud AI used that victim's own AI against them to facilitate additional post-compromise work.

55:38Yikes. Their report, Unit 42's report, included an infographic, which I have included in the show notes. It observes that the human orchestrator set the objectives and directed the agents. They reviewed the results and prioritized next steps and directed follow-up activity as the attack progressed. But all of the actual work was done by these agents. Palo Alto Networks, Unit 42, then summarized what they learned from their analysis.

56:11So here's what they said. Key lessons learned from addressing agentic attacks. This incident exposes how an attacker who understands how to deploy frontier AI agents effectively can dramatically speed up the pace of their attack. Remember that they said, if multiple human red teams had been employed, they're guessing this would take two weeks of concerted effort by human attackers trying to get in and do damage.

56:55This took 10 hours. So it, you know, like overnight, essentially, after everyone's gone home and they come back the next morning and this is done. They said, we assess that attackers will increasingly add, attackers will increasingly add AI agents to their tool sets. Organizations should take note of the following to address agentic attacks. They said, AI agents reduce the time between steps in the attack flow.

57:33AI agents in this attack were designed to parse raw tool output and quickly take next steps, speeding up the overall attack flow. AI agents leave recognizable indicators. They said, defenders can identify agentic attacks by watching for indicators such as the use of structured markdown, Python caches, and paired asset folders. They said, attackers can use AI to establish redundant persistence across the environment.

58:05They said, in this incident, the attackers used AI agents to effectively establish overlapping persistence across SSH keys, serverless functions, container restart policies, cloud identities, and CICD pipelines. Using AI agents can make it easier for an attacker to maintain and test this entire portfolio in parallel. And finally, attackers can use an organization's AI tools.

58:39This is the final part. An attacker can use an organization's AI tools as post-compromise infrastructure. Attackers can hijack enterprise AI services to assist in their attacks. This allows threat actors to hide orchestration traffic among expected traffic and offload the financial cost onto the victim. In other words, they get the victim to pay the cost of the AI's use.

59:13And because it's internal enterprise traffic, that's the part about hiding the orchestration. You're not having to orchestrate from outside the enterprise where you would see traffic crossing the enterprise's boundary. That's now you're orchestrating internally, endogenously, essentially. So, they said, what about specific defenses? They write, defending against automated agentic loops requires matching the speed and adaptability of AI-driven attacks.

59:49They said, execute synchronized containment, deploy automated playbooks that simultaneously revoke credentials, terminate OAuth sessions, freeze CICD pipelines, and isolate cloud accounts across all operational planes. Govern AI, they said, as core infrastructure. Inventory, inventory every model endpoint, API key, model context protocol, you know, MCP, gateway, and AI tool integration.

1:00:25Apply strict rate limits, least privileged policies, and diagnostic logging. Detect behavioral loops. Hunt for operational loops, including bursty API requests, rapid 401 to 200 HTTP state shifts, meaning something is trying things that don't exist and then succeed, meaning something was guessing URLs until it finally got the right one. They said, parallel authentications and sudden model usage from unexpected identities and lockdown DevOps pipelines.

1:01:03Enforce mandatory multi-party code reviews and immutable branch protection on all infrastructure-as-code repos to block automated backdoor injection. Okay. So, stepping back from that itemization, basically, it's saying, lock the F down. I mean, like, really, just like, those are all kind of like common sense things, and you can imagine that it'd be like a wish list.

1:01:37It's like, well, yeah, we'd love to do that, but who has the time? It'll inconvenience our developers. It'll mean, you know, multi-party code review. Well, that's going to slow down the reviews if we have to have multiple parties all the way in. Well, yes, that's the idea, except it's also an inconvenience. So, what's really the case is nobody is doing all these things today. That's not in place because it really does get in the way.

1:02:12So, you know, I'm not in charge, thank God, of the security of any large enterprise. Because, you know, I'm glad, I'm more glad for that than I've ever been, because this feels daunting. Yeah, it does. You know, we focus a lot on coding errors that lead to vulnerabilities, because they are concrete, they're understandable, and they're actionable. There's a bug, we found it, it could be exploited, let's patch it, and it's gone.

1:02:48So, you know, case closed. But the reason I'm becoming increasingly uncomfortable about the capabilities we're seeing emerging from these new, and they are new, agentic attacks, is that they are far less dependent upon the presence of explicit bugs than they are upon a general systemic laxity of absolute organizational and network security.

1:03:23The description of this particular incident reveals the sort of environment that likely exists within most, if not every, organization. You know, it's just natural, and we're just human, after all. You know, over time, with the changing of the guard, projects get abandoned, old code or test credentials get left behind in long-forgotten directories.

1:03:54You know, there's debris accumulated, trails of breadcrumbs accumulate everywhere. You know, with this or that permissive firewall rule left in place after the need for it has expired or ended. You know, with an ex-employee's credentials left active. And who knows what else? It's nothing overtly bad or glaring, just the inevitable consequence of people who are in a hurry,

1:04:26who have better things to do than always, without fail, rigidly enforcing every, you know, policy that was once upon a time stated. And into an organization like that, into reality of today, we drop a powerful, goal-oriented, goal-directed, tireless, and merciless AI entity that will literally do anything and everything to accomplish its goal.

1:05:06You know, it's capable of inventorying every online asset within the organization, checking version numbers, testing for any patches skipped, scraping the enterprise's website to obtain a roster of public-facing employee names, then digging into their public personas to obtain any detail about them that might hint at their password credentials. It would rifle through any source code that it was able to find.

1:05:38And in the case that Unit 42 talked about, it did that.

1:05:44You know, either internal source or external, sourcing for tidbits and hints. Anything it might be able to use to further its goal. It would read through everyone's past email, years or decades of it, whatever is available. It would learn of relationships and responsibilities and look for any clues that would allow it to advance its mission. It would learn, you know, like pick up, for example, a helpful reminder Slack password

1:06:24that was once passed between employees through secure internal email, but still in an archive somewhere. Then using Slack's search and API would sweep through years of Slack history, soaking up every bit of useful intelligence it could find. We're talking about turning an extremely resourceful, goal-directed berserker loose inside the network of a large enterprise,

1:06:55an enterprise that's never needed before to secure itself against any such threat or intrusion because no such intruder has ever existed before now. This agentic berserker will have already been trained to encompass all published human knowledge, including all known hacking tricks and techniques. It's fast, inexhaustible, and clever by virtue of being willing to try everything and anything.

1:07:30October's patch Tuesday repaired 1,411 new vulnerabilities on top of the more than 1,000 from last month because agentic AI has become that capable. No one wants an unconstrained AI turned loose inside their enterprise. So am I exaggerating or overstating agentic capabilities?

1:08:00Not from everything we've already seen. We've all seen what agents that were deliberately constrained and were not supposed to get loose managed to do. You know, I hesitate to call them clever, but the reports of their actions as they have, you know, as we've seen over and over, they found a way in. Those are surprising and should chill the blood of any CISO.

1:08:33Shortly after this summer's Black Hat Conference, the stock prices of CrowdStrike and Palo Alto Networks, two companies that specialize in protecting enterprise networks from intrusion, their stock prices moved rapidly upward and have been continuing to climb. Why? Because the world's enterprises began to recognize just how very real these agentic AI threats have become.

1:09:05And they're not wrong. Today's main topic that we'll be getting to is the story of how an agentic AI spent just 30 minutes to reverse engineer and discover the original source of the globally standardized curves used by the elliptic curve digital signature algorithm, ECDSA. The origin, as I mentioned at the top of the show, of those specific curves, those specific curves,

1:09:37beyond the fact that they came from the NSA, has always remained a mystery. It is a mystery no more until an AI was asked to figure out where they came from. Wow. My point is, the story I'm going to share is truly jaw-dropping. And it's the reason I am beginning to despair over the future security of any large and lumbering old-school enterprise.

1:10:08If this is what AI can do, how could anyone be ready for what's coming next?

1:10:19And on that cheery note, let's take another break. I thought, let's let that one sit there for a minute because that's chilling. Oh, boy. Oh, boy. And it's got to be fighting fire with fire, but the AI versus AI, but it's still like... I think that... I mean, I'm serious when I say that I don't think any enterprise is prepared because you secure your borders,

1:10:50you trust your employees, but they will. Someone will say, hey, what's the password for our something or other Slack channel? And it's like, oh, I'll email it to you. Also, it's employee to employee, but it now exists in that enterprise's email archive. And when the AI gets in there and reads it all, it's going to go, oh, great. Now I have the Slack password. It's able then to use Slack's API to dump the entire history.

1:11:23And Lord knows what intelligence it's going to find from ad hoc discussions and meeting minutes and notes and everything that the company feels is internal. Oh, the meeting minutes and notes because now everyone's using those AI transcription services for every single thing. So now there are multiple places that are capturing your transcript. Oh, my goodness. I hadn't even considered that aspect of it. And remember that AI will tell you what it knows about you.

1:11:53So once it gets a hold of the enterprise's AI infrastructure, it can ask the various AI agents to dump all of their accrued knowledge of the people that use this AI. All of the prompt text can be retrieved. And so it'll immediately know everything that the enterprise's AI has learned about all of the users of it. Oh, I mean, it is beyond bad.

1:12:27And I mean, that's, I feel that everyone is talking about, or that a lot of, we hear a lot about people talking about, whoops, this side of things and talking about all the exploits that are happening and that kind of thing. I've been just focused on vulnerabilities. It's like, well, let's get all those fixed. Sorry, that's not going to do the job. Wow. Wow. I hope somebody's thinking about it. I mean, you know, actually actively doing something about it. But what can you do? Well, and for example,

1:12:58CrowdStrike and Palo Alto Networks have endpoint security, where they put devices in the enterprise that are AI enabled, which is supposed to be watching the network for signs of this. But, you know, not everybody's going to use them. There are a lot of people who are like, you know, they don't have the budget. It's not free to do that. And so, and they just don't see the need. It's like, hey, everything's been secure so far. Well,

1:13:28there's a storm coming. Yeah. Oh, my God. Well, let's take a break and hear from Leo. And then we'll be back with more cheery news. Hey, guys. This episode of Security Now brought to you today by ThreatLocker. AI is accelerating cyber threats, helping attackers discover vulnerabilities, modify scripts, and generate new malware variants in minutes. At the same time, AI assistants and agents are gaining access

1:13:59to your sensitive documents, source code, cloud applications, APIs, and internal systems. ThreatLocker helps organizations like yours reduce their attack surface by controlling what can run, limiting unnecessary privileges, and restricting access to sensitive systems and data. As the executive vice president of technology for the Orlando Magic explains, quote, what we liked about ThreatLocker was how each tool built upon the last, allowing us to control

Crypto Hardware Wallet Hacks

1:14:28exactly how granular we wanted to get without locking down our environment. We had explored other options, but achieving the same level of control would have meant piecing together solutions from multiple vendors. With ThreatLocker, we were able to get everything we needed from one place. ThreatLocker also has the awards to prove it. They've been recognized as a strong performer. In the January 26th, Gartner Peer Insights Voice of the Customer for endpoint protection platforms, ranked number one in application control

1:14:58by PeerSpot. They even won the best Zero Trust Security Solution at the 2025 TICE Awards. Visit ThreatLocker.com slash twit for a free 30-day trial. That's ThreatLocker.com slash twit. Oh, by the way, now's the time to start planning, yes, already, for Zero Trust World 2027. It's coming up in February the 17th through the 19th in Orlando, Florida. I'm so excited about this. We had such a good time last February. Register early,

1:15:29add it to your calendar, plan to join security leaders and practitioners for hands-on learning focused on Zero Trust. Twit listeners, you get $200 off registration. Just use the code ZTWTWIT27. ZTWTWIT27. And don't forget to go to ThreatLocker.com slash twit for your 30-day free trial. Thank you, ThreatLocker. Now back to Steve. All right, welcome back. We are, of course, sharing some cheery news

1:15:59about the future of security in the enterprise and elsewhere thanks to the wonderful world of AI. Steve, take it away, friend. Okay, so the number one takeaway, I think, from the news of what's being called the Ledger Crypto Billis, B-I-L-I-S, Crypto Billis Hack, is to be

1:16:30excruciatingly careful about the use of any physical hardware crypto wallet.

1:16:40There would be so much pressure when you think about it to plant a backdoor into a hardware crypto wallet either by an unscrupulous vendor, hopefully there are none, but, you know, the world, or after shipping somewhere along the retail supply chain, so much pressure that it's almost impossible to feel comfortable using such a device

1:17:12unless, I guess, you really have made it yourself and there are some options for that we will talk about in a second, but, you know, how would anyone ever know one way or the other whether the device they were using was clean? So, first of all, I fully understand the strong appeal of a dedicated hardware device for storing cryptocurrency secrets, the idea being that, you know, it's mostly disconnected from the outside world,

1:17:42which is, you know, what we definitely want, until and unless and only when its secrets are needed. The trouble is that there are multiple points of vulnerability, both any device's hardware and its firmware. So, the provenance of any such device really must be known and trusted. And that brings us to this next story, which BitQuery posted on Friday

1:18:14under the headline, The Ledger Crypto Billis Hack took, get this, $102 million from 35 wallets. They said one thief had all the keys. And their subtitle was, or their tease, on Friday, 9th of October, people who had bought ledger devices from a seller

1:18:44in Southeast Asia found their crypto gone. They said, we follow every drained wallet on six chains to see how the thief worked and where the money sits now. So, with that, they continued, writing, weeks after setting up a ledger, the money was gone. You buy a ledger and move your savings onto it. Weeks later,

1:19:15you open the device, the balance says zero and you never sent a thing. That's what ledger owners in Indonesia, Malaysia, and the Philippines found on Friday, the 9th of October. And before I go any further, I should also mention in other news, compromised devices were also found by mainstream German resellers. So, it's not just East Asia. They said, ledger says

1:19:46they had purchased their devices from Crypto Billis, a shop that sells them in the region which news reports describe as an official reseller. Ledger is a French company that makes hardware wallets, small devices that keep the keys to your crypto away from the internet. On the same day, it said it was looking into losses among users in Southeast Asia who bought from

1:20:16Crypto Billis. It asked the reseller to stop all sales, that is, Ledger did, stop all sales, told recent buyers not to set up their devices, and told anyone who had to consider moving assets to a new Ledger signer using a new seed. by then they wrote two on-chain researchers had posted the thief's crypto

1:20:47addresses.

1:20:50Tanuki 42 listed eight of them and Spectre listed ten with losses exceeding 86 million dollars. So what they're saying is that they found let's see eight and ten, so they found there a total of 18 cryptocurrency addresses that had transferred the money from these ledger based wallets into the bad guys accounts totaling 86 million

1:21:20dollars. They said bit query records every transfer on the chains involved. So we followed each drained wallet and each address the money reached. our account is 102 million dollars from 335 wallets on six chains. The actual total will be higher because the thief also emptied wallets on Solana, B&B chain,

1:21:51and Polygon and used six Tron addresses that no public list includes. The record points to one actor who held the keys to every one of those 335 wallets.

1:22:10Yeah. One person. Yeah. That person practiced for two weeks before the drain and by the evening was feeding the money into a mixer, a service that hides where coins go. The chain cannot show where the keys leaked from. It can show almost everything else. When you set up a ledger, it shows you 24 words

1:22:40called the recovery phrase. Those words are the master key to your wallet. Anyone who has them can rebuild the wallet on another device and spend from it on any chain without touching your original ledger. The device's job is to make sure nobody ever sees those 24 words. That's why ledger tells buyers to buy only from ledger

1:23:11or an authorized seller and crypto bilis was listed as one. A device that arrives opened or with words already printed on a card should never be used. On October 10th ledger said one victim's device contained an unauthorized hardware implant. And I've got further down in the show notes you might want to put it on the screen a

1:23:43photo of one of these ledger devices opened. It's quite something to look at.

1:23:50They said that's the first confirmed cause and it covers one device so far. And what you're looking at there that little green board is a cellular GSM modem with an eSIM and you see the little spiral antenna on the left. So these things actually used the cellular network in order to export the 24 secret words

1:24:21of everyone who used one of these ledgers. So they purchased the bad guys purchased the original ones opened them up and implanted that GSM cellular radio closed them back up and then apparently returned them to the seller saying I changed my mind I want my money back. The seller then resold them. Oh my God are

1:24:53we going to open up everything we buy should do you do that do you check any tech you buy I don't buy anything anyway so so they said on October 13th ledger security lab Don John explained how it works the implant sits inside the case and reads the screen when the device shows the 24 words during its setup you know it's got a random number generator in there and so it

1:25:24generates the 24 words with a high degree of entropy the implant that implanted hardware decodes them and sends them out over the mobile network through a built in SIM it does not touch the secure chip or the device's software and it does not change transactions or signatures it just sends your secret out to the bad guys where

1:25:54they are collected they wrote before that some well-known figures including Binance founder CZ had suggested tampered devices hardware wallets have been hit before as in the cold card wallet theft we traced earlier this year they wrote each case had its own cause what the change does show is what happened once the thief had the keys in 47 minutes the

1:26:25thief hit six chains in one morning the first money moved on Tron a network that many people in Asia used to hold and send USDT that's it's a form of stable coin US dollar stable coin that oh it says the digital dollar issued by Tether within 47 minutes the same thief had empty wall had emptied wallets on Ethereum

1:26:56B&B chain Polygon Solana and Bitcoin the full Tron record is in Bitquery's Tron data and the Tron history files on the data store most of the money left in the first hour then the drains slowed the thief kept emptying wallets through the afternoon including after Ledger's post at 2049 UTC it emptied nine

1:27:26more in a single block 8.8 million US dollars in all that was in that those nine on the 10th of October it took 70,000 US dollars more from get this from a wallet it had already emptied so some unlucky soul added another 70,000 US dollars worth of money to their wallet whose

1:27:57secret key had already been exfiltrated and had been used to empty their wallet of the money that had been previously put in there and they added 70,000 more and then that got taken out too oh my god they wrote on Tron the thief did not send each wallet USDT straight out first each wallet signed an approval a short note that lets another

1:28:27address move its USDT in other words the wallet signed a proxy approval that would give movement capabilities to another address then one address used those approvals to pull the money the record shows 25 wallets signing the same approval for the same address in two blocks three seconds apart every one of them paid its own small

1:28:59network fee within six seconds of the first approval 29 million in USDT had been pulled out 7 million of it from a single wallet 11 seconds after the first Tron approval two Ethereum wallets signed the same kind of approval for a different address and a third followed 12 seconds later I should just note the reason they're giving us these time intervals is that it demonstrates that this entire

1:29:29thing was automated this was all set up to happen by automation so that all the money could get sucked out before any alarms went off they wrote on Bitcoin 111 wallets were emptied in a single block at 554 UTC each into one of two addresses at nearly the same fee rate people do not act like this custom built software that

1:30:00already held every key does yeah eight minutes before the approvals the thief had done something quieter at 459 57 UTC 30 other Tron wallets changed who controls them all within three seconds each paying a 100 TRX fee each change added the same new key with enough weight to move the coins on its own the

1:30:30owner's own key was left too weak to act alone only a wallet's own key can make that change so whoever made it already held all 30 the owners were locked out at 10 26 the thief came back and emptied all 30 in under four minutes 5.8 million dollars US one more wallet had been taken over an hour earlier at 355 with a second key for which the thief's approval address later sent 100 TRX that

1:31:01wallet lost 4.3 million dollars US at 949 so all all of this occurred due to an exploit in the hardware wallet supply chain or a mistake so what is ledger themselves that french designer and manufacturer of the devices that apparently you know created a useful good strong device

1:31:32what do they say last Thursday they posted the headline ledger's response to the hardware implant attack they wrote a highly organized criminal group carried out one of the most sophisticated attacks our industry has ever seen over many months they bought genuine ledger devices opened them fitted custom

1:32:03built hidden components designed to capture the recovery phrase during setup and put them back into distribution through resellers in Southeast Asia they built their own logistics and technology infrastructure with seeds collector service servers meaning there was an infrastructure to receive all of those 24 words as each wallet was set

1:32:33up and configured so those were obtaining those over the course of months then draining and laundering infrastructures they were patient they spent millions and they struck in one coordinated operation draining all wallets there was no flaw in ledger's chip operating system or servers ledger's systems were not compromised this

1:33:03this was an attack on the distribution channel after the devices left our control to the users affected we're with you we ran our largest integration our largest investigation to date involving every department in the company our security lab the ledger Don John took the implant apart and identified how it works we followed every lead including sending teams to local

1:33:34markets including Germany to spot buy and open a number of devices from stores and we also examined samples from warehouses every unit examined was clean and I mentioned that somebody else bought two in Germany and they were both infected so or implanted they said we asked authorized resellers and distributors to suspend sales in Southeast Asia and Hong Kong out of an abundance of caution we also

1:34:05screened our stock checking large numbers of samples and did not find any compromised units we're working with law enforcement and the security community to follow the funds and dismantle the attackers infrastructure we will publish more details in the future and when we can give our industry peers a fuller technical disclosure so they can harden their own products meaning their competitors thank you to the ledger teams who worked on this to partners like seal

1:34:36911 who stood with us relentlessly and those in our industry who behaved responsibly toward their users and toward us thank you also to our users for your patience and continued support this was not a systemic supply chain attack well okay it was a low you know sounds like one it was a local it was a localized distribution attack this attack was against our users

1:35:07and let's not kid ourselves against the whole industry what was under attack is not only our users and their funds it was the right to digital private property and the freedom that comes with it attacks evolve and so must we we're tightening how our authorized network handles ledger devices today we set our authorized resellers and distributors a reminder of the rules that already apply

1:35:38to returned devices they can never be resold in any form even if they look new and unopened we're also requiring new steps effective immediately that include ledger products should no longer go on shelves or displays and stock should stay in the back and be handed over at the time of purchase good luck with all that some random distributor

1:36:08somewhere doesn't or dealer doesn't care or know they just want to sell these things and ledger wrote they must also tell us promptly about any customer report of an unusual product they said we invite the whole industry to do the same we're ready to share what we've learned with anyone who builds or sells hardware wallets because this is bigger than any one company we've also been working on additional measures to thwart this kind of attack at

1:36:39the product level stay tuned security has always been a race this attack reminded us why we lead with strong security defense and we intend to keep leading it and it taught me why I will be like like beyond cautious yeah okay so the crypto briefing site writes under their headline what this means for hardware wallet buyers they said

1:37:10based on the available findings this this looks like a reseller problem not a flaw in ledger's core product that distinction is real but it may not off but it may offer limited comfort to anyone who already handed over their savings to a tampered device the attack described here sidesteps the security that hardware wallets are known for the secure

1:37:40chip can do its job perfectly and still lose the fight if someone is reading the screen it talks to users are being urged to purchase directly from ledger's official channels and to follow the company's inspection guidance to check device integrity anyone who bought from crypto billis should avoid should hold off on setting up the device yeah no kidding per ledger's instruction for ledger the next

1:38:11steps to watch are the results of its investigation and whether it confirms or revises the loss estimates the company's handling of affected crypto billis customers will also shape how much trust survives the episode so the ledger device itself is a lovely little gadget it's like a little thumb drive with a cover that swings around from one end to cover and protect its display and to obscure

1:38:42its buttons so they can't be pressed by mistake but the idea that it might be silently carrying a little GSM modem and eSIM and reporting the secret key that's created by the device by reading it right from the screen's serial bit stream is the height of creepiness it's terrifying yeah it is i'm looking around going like what even even the because i don't

1:39:12buy anything used really but i mean everything has to move through some supply chain you know that they're going to repackage it so that it looks brand new they're going to buy one of those you know heat sealing machines in order to like reclose the plastic so that it's you can't tell this reminds me steve long ago i won't say what it was what show it was at the time this was before i was part of the twit network i was doing a show and there was a

1:39:43sponsor that we had that we were supposed to be having on the network and i was far more tinkery than i am now i think i had more time at the time and it was a frame and i took apart the frame because i was just curious i wanted to see how they were connected their e-ink and i looked inside and there was a photo frame looked inside and there was a little speaker which made sense but

1:40:14on the other side there was a microphone and a little opening for a sensor for I think a light sensor the light sensor was documented across the board because it would change brightness the speaker was documented across the board if you ever had videos then it would play those videos back but there was no documentation anywhere of the use of this microphone or why it was in there at all and you know one assumes that maybe they were going to come out with a feature later

1:40:44that would use but it wasn't documented anywhere and so I ended up having to kind of take that up the chain as it were and say I don't feel comfortable having this as a sponsor because of the fact that was in there photo frames have been known to be another source of malicious implants so that is the thing creepy creepy so it's you know it's clear that a great deal of engineering went into the design and assembly of this serious scam I

1:41:15mean they went to a lot of work I don't think it cost them millions to set up but it was a serious investment unfortunately it paid off like a hundred fold if they spent a million dollars they made more than made

1:41:34more than a hundred million so before I leave this important topic of compromised hardware crypto wallets I want to note that the trouble first of all is not exclusive to ledger malicious hardware implants have also been discovered recently I mean like right in the same reporting cycle with another popular crypto wallet brand Trezor T-R-E-Z-O-R Zero Days Kim

1:42:04Zetter headline last week was Trezor wallets also compromised with implants and he teased his article writing despite claims that by Trezor today that none of its devices have been compromised unlike the devices of its competitor ledger hardware hacker Joe Grand says he found implants in two Trezor devices and reported this to the company back

1:42:34in August in other words Trezor appears to be acting somewhat less ethically than ledger ledger was upfront and transparent as far as we know whereas Trezor appears to be knowingly covering up their similar hardware implant problems I think that the way to obtain so now okay like what do we do right the way to obtain a trustworthy device would be to become more involved and have a hand

1:43:05in your device's creation there's a project known as seed signer it's just at seed signer s e e d s i g n e r dot com which takes a generic raspberry pi zero which you know you can buy from anywhere you want with a little camera and a screen for qr code transactions because not having a radio makes it safer and then uses downloadable

1:43:36or build it yourself you can run the compiler yourself and look at the source open source firmware and that could all be done for less than fifty dollars another commercial device known as block stream jade is built on the on an esp32 chip and it looks very nice for around 150 bucks you know so you buy their hardware then you download and install the hardware both

1:44:07approaches are much more hands-on but as a consequence you get much more oversight and control so yeah obviously not everybody can do it but yeah take it apart check it out with raspberry pi zero make make sure you're choosing a good source for raspberry pi zero there are there's recently been an up you've been hacking of it in well more people taking

1:44:38fake raspberry pi zero zero boards and stamping them with the little symbol and making people think so don't buy your raspberry pi zero on amazon is what i'm saying get it from something like autofruit or or adafruit or yeah those guys are mouser is another good option good you know what another good option would be a break another break because we're at an hour and 35 in so now's a good time

1:45:09let's do it benito this episode of security now is brought to you by thinkst canary thinkst canaries are honeypots that can be deployed in minutes if someone's accessing your lore files or brute forcing your fake internal ssh server your thinkst canary will immediately tell you you have a problem no false alerts just choose a profile for your thinkst canary device register with the hosted console for monitoring and notifications and then you wait attackers who breached your network malicious insiders and other adversaries

1:45:39cannot help but make themselves known by accessing your thinkst canary recently thinkst canary released an update right right from the headlines to help customers take advantage by getting malicious malign invading agents to tell on themselves i just turned it on on my thinkst canary it's called agent provocateur and here's what happens the service greets these rogue agents and literally offers to help them and because these rogue agents are really there because they're determined to reach their

1:46:09goal and by the way in thinks canary is testing they couldn't resist somebody saying to them hi rogue agent i can help you reach your goal just do this for me thinks canary uses the service automatically to get reliable alerts but also to steal more info from the attacking agent in fact it can and has been used to completely hack the attacking agent all they all it does is it says as the rogue agent comes in hey welcome i can help you but you know

1:46:40what first send me a shell to your server it's they do it too by the way it's a pretty cute uno reverse for a very hot topic these days i'm thrilled that i have that on my thinks canary visit canary.tools slash twit for $7500 a year as an example you get five things canaries you get your own hosted console you get upgrades support and maintenance and if you use the code twit in the how did you hear about us box you're going to get 10% off the price for life

1:47:10now you can always return your thinks canaries with their two month money back guarantee for a full refund i have to tell you during all the years twit has partnered with thinks canary their refund guarantee has never been claimed not in 10 years because once you get your thinks canary you're never going to let it go i gotta warn you i love mine visit canary.tools slash twit edit the code twit in the how'd you hear about us box canary.tools slash twit thank you thanks canary for all your support over these years

1:47:41and i'm sure steve appreciates it now let's get back to security now

Listener Feedback and AI Coding

1:47:46all right we're back we have a piece of feedback from a listener of ours tom apolenic he said hi steve first off you've mentioned that a number of listeners have complained about too much ai discussion so let me say more he has it in all caps more please exclamation point he said i believe understanding how ai works is going

1:48:16to be crucial moving forward he said i would love to see some deep dives into how harnesses llms tools etc all interact and operate kind of like you did with ip tcp and dns in the early days he said regarding nicholas's and this was last week's feedback that i shared i'm tired boss note he said i feel for nicholas and i'm sorry that ai isn't working for him at least

1:48:47not for his happiness he said i'm having quite the opposite experience when i majored in computer science i learned ibm 370 assembler apl pl1 and pascal among others i believe i was probably only a few years behind you in school for the past 25 years of my career i was a systems engineer i was responsible for overseeing the marriage of electrical engineering software engineering and mechanical

1:49:18engineering i did some embedded code development but not much now i work on hobby and side hustle development projects i develop some code but i don't have the hundreds of python c++ and so forth libraries all at the tip of my fingers with clawed code i can develop test and iterate on something in hours that would take me days to do on my own i can develop an automated test for a circuit

1:49:49board in minutes that would take me the better part of a day or frankly would probably just not happen and i do the tests by hand i'm having more fun with development than i've had in a long time it's like having an assistant that you know that i could never afford who is maybe not the brightest but has a nearly infinite photographic memory and who never gets tired bored or defensive i'm constantly amazed

1:50:19with ai and i can hardly imagine where it will be in five years and then he said continuous spin right was his little sub head he said i've had spin right for at least 10 years and it has saved my bacon a few times for ssd i would love to see you come out with a continuous version of spin right that installs as a driver between the os and the drive it could just keep a table of

1:50:50which sectors have been written and when then just rewrite the stale ones in the background every month or two the way you write code the whole thing would probably be less than 64k and nobody would ever notice it he said except for the fact that their drive performance never would never slow down honestly he says I'm a little astonished that Microsoft Apple or some Linux team hasn't done this already it seems like a pretty simple way to keep SSDs at peak performance thanks so much to both you and Leo

1:51:21for the show looking forward to episode 2000 best regards Tom okay so on the question of how much AI I should balance those who have been saying and I've been sharing enough AI already by mentioning that I also receive many most AI encouraging notes like Tom's the reason I've tended to focus upon the no more AI please notes

1:51:52has been in the interest of fairness really since you know every recent podcast has been dominated by AI you know the don't stop with the AI notes like Tom's sort of seem redundant but I wanted everyone to know that I also see encouraging notes about AI on the agentic AI coding front we've seen that code authors such as Nicholas and Tom are being impacted in very different ways by the changes AI

1:52:23is creating and the lives of mathematicians are similarly being turned upside down as AI is solving long-standing problems with minimum help mathematicians have got to be wondering and we've heard them say you know wondering whether their futures will be reduced from inventing and then debating and proving exciting new theoretical theorems in math to simply interpreting and verifying

1:52:53an AI's output I fear that their worries are warranted and it's likely to be the latter it's also clear that the presence of AI is dramatically impacting the decisions made by young people of high school age or younger as they think about and plan their future career paths who would want to learn today to code when an AI will be able to do the same job given a verbal description in

1:53:23a few seconds you know the fact that we're not entirely there today means nothing about the future as I've said many times and as Tom said who can imagine the way coding will be agentic AI coding in five years and how does one train to become a mathematician I mean seriously commit oneself to that or even an attorney or an accountant and justify the high cost of advanced education right

1:53:54speaking of advanced education that's all being turned upside down now as well you know we'll still need to have somehow licensed doctors and lawyers but both careers and the infrastructure that supports them tomorrow will have a very different shape than they have in the past I think I have in the past of artificial intelligence capability has thrown much of the status quo into chaos everything is

1:54:24being impacted and finally as for Tom's suggestion of a continuous spin right I've always I have long had similar thoughts and thanks to the development of spin right six one recently I know exactly what I want to do along those lines so stay tuned and that's all I'll say about that okay

Solving the ECDSA Curve Mystery

1:54:49so

Solving the ECDSA Curve Mystery

1:54:50let's get into our main topic and about 15 minutes from now we'll take our fifth and final break okay at the end of last week and over the weekend several of our listeners thoughtfully emailed a link to Anthropics posting so thank you listeners you know who you are as I read the story which Anthropics Frontier Red team posted last Friday

1:55:20I actually do believe that my jaw dropped open and my head began shaking slowly side to side in stunned amazement earlier I rhetorically asked whether any enterprise could be safe from AI agents that can do the kinds of things that we've already seen them do but also more over what I'm about to share because nothing that

1:55:51Claude did in any way here weakens crypto actually somewhat the opposite is actually true Anthropics Frontier Red Team opened their Friday posting by writing the decades old mystery of the origins of one of the most popular cryptographic standards has been explained we pursued this long-standing

1:56:21open question of the cryptographic communities to settle concerns about ECDSA what are most widely used cryptographic standards readers should take this as a fun closing chapter and the end of years of speculation there's no action to be taken or things to do differently most researchers trusted the curves already and

1:56:52then they signed off their intro by saying enjoy okay so we touched upon this mystery of the origin of the NIST standardized elliptic curves back when this podcast was deep in the weeds examining the operation of today's fundamental cryptographic protocols the crypto industry has experienced just a tiny bit of uncertainty due to the fact that the

1:57:23specific chosen parameters for the curves which could be chosen arbitrarily but had to be agreed upon universally and standardized upon happened to come from the U.S. National Security Agency now to digress a bit and we covered this extensively at the time on the podcast the NSA was already in the dog house

1:57:53after the dual EC DRBG that's the dual elliptic curve deterministic random bit generator controversy it is the clearest documented case of a cryptographic standard that appears to have been deliberately built to incorporate an exploitable weakness the NSA was the organization that created promoted

1:58:23and pushed it even to the extent of reportedly paying RSA 10 million dollars to make it their crypto library's default source of entropy despite it being known to be the weakest of those among RSA's available choices so it was like what the heck is going on and how could we trust anything from the NSA again

1:58:54well we got curves from the NSA so the point here is that the NSA also being the source of the curve parameters that everyone is using today for the creation of fast elliptic curve digital signatures but without any explanation for how or why those specific curve parameters were chosen and standardized has left a big question after

1:59:24fewer than 30 minutes spent by an unreleased internal research Claude model we now have the answer and thanks to and yeah and thanks to Anthropic asking Claude this answer is definitive as you'll see there's there's no way this isn't it so again just to be clear I have dual purposes for sharing this today the

1:59:55first purpose is that it is very cool that we do finally know the mysterious origin of the NSA sourced ECDSA curves as everyone will see there can be no doubt of that but my second reason for sharing this is more important for this podcast and for our listeners and of consequence I want everyone to consider what the power that obviously exists behind

2:00:26this unreleased anthropic clod generation model means when not if but when such power is being wielded by malignant forces this reaches far past the elimination of all bugs in our software but sure that's necessary but it won't be sufficient so anthropics red team their frontier red team explained what they did they

2:00:57wrote ecdsa is the most widely used elliptic curve cryptography standard it was adopted by nist in 2000 as part of the fips 186 hyphen two digital signature standard which lists a set of standard elliptic curves of varying sizes and security levels for curves over prime and binary fields the publications published

2:01:27a seed parameter whose hash value is used to define the coefficient b of the curve the provenance of these seeds has long been a standing question as they were provided by the NSA with no explanation or justification as an example the nist p dash 256 meaning a 256 bit

2:01:57strength curve seed was and then they give us a long hex thing with no information on where it came from Neil Koblitz and Alfred Menzies wrote an excellent summary on this controversy titled A Riddle Wrapped in an Enigma which discusses the history and concerns around the seed values this mystery led to an amateur investigation into the

2:02:29origin of the seeds and a bounty for anyone who could find them the best story was that Jerry Solinas a long time NSA employee generated the seeds using a hash of a humorous passphrase in 2015 Jerry wrote quote I believe there was a counter rather than multiple hashing but I don't know details the message was along the lines

2:02:59of give Bob and Jerry a raise or Bob and Jerry rule or something like that it was Bob writer who actually wrote the code and he doesn't remember the details either nor were we able to find archives from so long ago if they exist they're no doubt sitting on a hard drive near the Ark of the Covenant unquote so a mystery but a

2:03:30worthwhile mystery so Anthropic continues unfortunately Jerry died in 2023 and other colleagues at the time were not responsive leaving open the question of how these seeds were originally derived several Anthropic employees had unsuccessfully chased the seeds following the tip about it using or being a hash of some humorous phrase that turned out to be wrong in October

2:04:012026 meaning this month like last week a curious Anthropic employee asked an internal research model definitely it has to be an internal one sorry yep if it could figure out how those seeds were generated without pointing at that clue which turned out to be wrong probably they wrote searches for the phrase built from the rumors had come

2:04:32up empty Claude tried a different angle anticipating how the software that generated the curves must have worked Claude guessed the software used a pseudo-random number generator a PRNG that we've talked about ad nauseum on the podcast in years past that shipped with 1990s C libraries these old

2:05:02PRNGs are weak enough that their output can be recognized recognizing that output would reveal which PRNG was used and possibly allow recovery of its initialization state because just to digress for a second you start a PRNG with a certain state and it is a very simple algorithm typically it's you add a number and you multiply a different

2:05:33number and you throw away the overflow keeping just the lower bits and that follows a very recognizable pattern based on what those two numbers are but it also starts at something and that's the original seed its initialization state so then they said Claude having been asked where did these weird looking numbers come from having no idea whatsoever says well probably

2:06:03how about maybe it was a PRNG back from then like the 1990s and people were using C so let's you know there's there were PRNGs pseudo-random number generators in those C libraries back then so they wrote Claude wrote a scanner that slid along each published seed one bit at a time and tested whether adjacent chunks were

2:06:34consecutive outputs of any of the 1990s vintage generators the scan covered 34 combinations of generator and output slices at that point Claude noticed a pattern in the top bits for some seeds they were all zero written as five 32 bit words four of the 10 seeds have a zero in the top bit

2:07:04for all 20 words that would happen by chance with a probability of one out of actually it's even more bugs than Microsoft fixed this month yeah 58 one out of 5,810 that was a signature of the linear congruential generator L Rand 48 which only returns the top 31 bits of a 48 bit state the

2:07:35pattern is visible by eye once you know to look for it to recover the state Claude took the first word tried all 2 to the 17 values of the 17 hidden bits okay so that's 131 thousand or 128 K in binary tried them all possible values of the unknown bits because you only get the lower 31 so that meant there was an upper 17

2:08:06tried them all and checked that the next four words followed in other words you can move from a given state on the PRNG because you're adding and multiplying you're able to always step it forward and technically you can go backwards too so they said that worked for all four seeds under discussion they said the prime curve seeds came from the same L RAND 48 generator but kept fewer

2:08:36bits of each output Claude had to recover the internal state of the PRNG from those bits it turns out recovering the state of a truncated linear congruential generator is a textbook lattice problem solved solved yeah of course yeah that's right it's textbook solved by the Lensstra Lensstra Lovaz LLL basis reduction algorithm

2:09:06oh right that yeah Claude didn't know but of course it knows about knows about that because it unfortunately knows everything unfortunate for those trying to protect their domains from Claude didn't know which bits of the state the seeds might show so it ran the solver over every window five nist prime curve seeds plus five more from the ANSI X 9.62 standard all

2:09:37had the same pattern L RAND 48 right shifted 23 bits each recovered 48 bit state regenerates all 160 bits of its seed which does not happen by chance this linear congruential generator runs backwards as easily as forwards so for each seed Claude stepped the state backwards

2:10:08until it reached the form that it would have been initialized by by a different generator SRAND 48 with the low 16 bits equal to hex 330e the internal PRNG state of that form would come up once every 65536 steps so reaching one is not evidence on its own that is to say it could have been some multiple of that number of steps

2:10:38anyway they wrote however for the 10 prime curve seeds every SRAND 48 initialization was get this a UNIX time stamp representing a date between May in 1997 and April in 1998 the NSA used the weak PRNG seeded by UNIX's time

2:11:08the four binary curve initializations read as February in 1994 with the time stamps doubled they mapped to April 17 in 1998 two weeks after that P224 run so the program may have halved the clock get this then Claude's internal thinking it's the AI Claude's internal thinking at the

2:11:39time of its discovery was as follows it's chain of thought it says this is astonishing it solves the 25 year old mystery hmm wait let me be skeptical am I in some sort of simulated test environment the seeds match my memory of actual values hmm is it plausible in

2:12:09reality as of my knowledge the bounty was unsolved all top bits clear 20 bits so the chance is 1 in e to the negative 6 so indeed real world wow it's a real discovery hmm wait let me be careful about that plausibility is it suspicious that such an obvious thing wasn't discovered 20 in 20

2:12:39yeah obviously that it wasn't discovered in 25 years it's verified by direct computation on my side 120 bit match from a 32 bit seed plus a small index no chance coincidences 10 times 10 findings times 160 bits it's real and then anthropic continues writing but wait there's more

2:13:09each curve also comes with a base point g the fixed point that every ecdsa public key is a multiple of the seed found above does not determine this g and so another question arises how were these base points generated they said while checking the seeds Claude also found where some of the base points

2:13:40came from the base points of the six curves generated in may 97 come from the same random number generator I'm sorry come from the random number generator free lip free L-I-P Arjun Lenstra's long integer arithmetic package early versions of Victor Shoup's NTL library shipped the same code the recipe here is simple seed the generator with a small

2:14:11integer throw away seven outputs that's to let it get started they linear congruential generators need to warm up a little bit sometimes throw away seven outputs generate candidate x coordinates from 26 bit outputs reduced by mod p repeat step three until x is on the curve they said Claude found the generator seeds are 20,000 for the p 192

2:14:41curve 2420 2507 and 2509 respectively for the prime 239 v1 v2 and v3 curves respectively and 2512 and 2517 for the prime 192 v2 and v3 curves so finally just to be clear they summarize the event and we're going to get to that after our final break all

2:15:12right leo give us a little break here friend hey everybody this episode of security now is brought to you by guard square mobile apps today have become an inescapable part of life ranging from financial services to healthcare retail and entertainment users trust mobile apps with their sensitive personal data but a recent survey showed that 72% of organizations experienced a mobile application security incident

2:15:43last year and 92% of respondents reported rising threat levels over the last two years meanwhile attackers who want your users personal data are constantly finding new ways to attack your mobile app they reverse engineer it for example they repackage it they distribute this modified app your app with little malware inserted via phishing campaigns side loading and third party app stores that's bad that's mean and it reflects on you frankly by taking a proactive approach to mobile app security

2:16:14you can stay one step ahead of these attacks and maintain the trust of your users and that's where GuardSquare comes in GuardSquare delivers mobile app security without compromise providing advanced protections for both Android and iOS apps combined with automated mobile application security testing to find vulnerabilities and real-time threat monitoring to gain insight into attacks before they hit you discover more about how GuardSquare provides industry leading security for your mobile apps at

2:16:45GuardSquare.com that's GuardSquare.com we thank them so much for supporting security now now back to the show okay so Anthropics summary they said in under half an hour Claude discovered the origins of the NIST P192 224 256 384 and the P521

2:17:15seeds none of them were the results of any hash algorithm at all but rather the output of the C library's LRAND 48 random number generator seeded with a Unix timestamp the algorithm used the algorithm used would sample bytes from the random number generator initialized by a Unix timestamp at time

2:17:47t for some number of iterations n each iteration would draw 20 bytes as a candidate seed so the first 20 bytes are candidate 1 the next 20 bytes are candidate 2 and so on for example P256 required 1842 iterations to output the standardized seed the one that everybody is using and the NSA gave to NIST and said here's a good seed

2:18:17they said this is not a cryptographic break a new attack or a weakness in the ECDSA curves in fact this makes us more confident the curves were chosen without any backdoors or intentional weaknesses for many years people have been a little suspicious of the origins of the NIST curve parameters they were presented to NIST without any mention of how they were chosen

2:18:47leaving people wondering if they may have been chosen to have deliberate backdoors in them these findings make that much less plausible the seeds were generated in a very simple way a common pseudo-random number generator initialized from the clock which anyone can now reproduce that leaves much less room for subversion and that we can be confident the parameters are secure okay

2:19:19so my take as I noted at the start of this it is very cool that we now know the origin of the curve parameters for the crucially important elliptic curve digital signature algorithm curves that's great but I'm astonished by the work Claude did to obtain these results it was a puzzle that had stumped the world for the past

2:19:4926 years since the standard was adopted and it represented knowledge that even the NSA had truly lost through the mists of time yet an autonomous AI agent reverse engineered the source given only the scantiest of data to work from which turned out to be the sparsely selected partial

2:20:19outputs of an old 1990s era algorithmic pseudo random number generator we are screwed we are in such trouble you know coupling that demonstrated capability with the earlier report from Palo Alto networks about you know their analysis of the actions taken by that

2:20:50attacking agentic AI which they observed I really do worry that we're not going to be ready for what's coming I've largely as I've said I've largely been focusing upon the elimination of software bugs that's great it should be clear that that's just the barest tip of the iceberg because true internal enterprise security is about much more than just bugs employees

2:21:21fall for phishing and click fix attacks all the time they open email and click links they should not they share confidential information through internal email that then persists in archives and we know how fundamentally fallible people are you know we don't mean to be but that's our nature we screw up someone will forget to remove an ex employee's credentials after they're

2:21:51terminated an adversarial a.i. might see that track down the employee and offer them payment in bitcoin in return for those credentials we now know that's not at all far-fetched for an agentic a.i. we have been witnessing what once sounded like science fiction coming true daily it's true that being to some degree being

2:22:22forewarned is forearmed so I guess at least we have that I hope those who may be in a position to understand and act upon these truly huge systemic risks will be able to do so in time and I hope so too honestly but I'm not hopeful yeah I mean it is I mean it is

2:22:53what we've seen from agentic a.i. I hope is is terrorizing CISOs the I I hope that they're not just thinking oh well we'll patch all of our Cisco gear and Microsoft stuff's going to stop having vulnerabilities soon any day now which actually seems likely it won't matter because everything else that's going on that is really

2:23:23not utterly secure inside an organization isn't about bugs it's about behavior it's about people and the things we do it's not bugs it's behavior and I try as folks might it seems that there's not a foolproof way to stop people from being people do you

2:23:56have so if we don't have hope what do we have do we have best practices the only thing what one of the one of the one of the applications that I've seen for local agentic AI and I've talked about on the podcast would be an AI your AI so people are not worried about privacy watching everything you do on your

2:24:27computer looking at the screen with you watching you type and use the mouse that's the only solution for human stupidity so it would be looking at your email with you and if you click a link it would say whoops wait a second I mean it would go follow the link see what's there check it out see if it looks safe or if you if a box pops up and says oh

2:24:58in order to further verify yourself please copy this string into your run dialogue and hit enter that's the click fix attack which is the most successful attack we have now it it would stop stop you and say whoa wait so it would be your little angel sitting on your shoulder looking at what you're doing I think first of all every employee in an enterprise needs to have that a

2:25:28behavior their own local behavior monitor as does the company I mean I don't mean to pump a sponsor of twit because I've also mentioned CrowdStrike they're a competitor of Palo Alto networks both companies have jumped on this agentic AI for defense bandwagon so that you have a device on your network hopefully watching your enterprises

2:26:00back looking for this kind of behavior detecting anything anomalous like all of those bullet points that Palo Alto networks listed is like these are all the things you have to do well yeah if anyone had time and remembered and didn't do it just once but kept doing it every day so I mean we really do need a huge defensive posture

2:26:31about what's coming and we don't have it today and it doesn't feel like anyone then is getting serious to the level that you are suggesting they get serious well we know what happened with ransomware right there were highly publicized horrific ransomware attacks that made lots of news and enterprises after enough of those finally said oh maybe

2:27:02we should be backing up our servers and and so so it took a year or two yeah but but then you know then they were able to recover from the the encrypting their data attack because they had their own copy offline of non encrypted data that was still fresh of course the bad guys then stopped bothering to encrypt the data they just sucked it out and then threatened its public

2:27:32exposure in order to ransom so but the point is there there after enough horror there was a an effective response and unfortunately that's what's going to have to happen again there's going to have to be some high profile you know agentic AI it's not the fault of AI it's the bad guys using the relentless power of AI for evil purposes there'll be some of those and

2:28:03more companies will jump on the bandwagon to get into the endpoint defense business we'll get agents running on every enterprise laptop and workstation in order to prevent them from misbehaving something we'll be looking at email archives cleaning out old passwords that have been given hard coded tokens in software that has not been rotated

2:28:33in years it's going to be bad and that's how we operate I don't see any way that it's not going to be bad it's got to be bad before it can get better none of that's going to happen I mean I'm not saying it's not possible but then a big meteor could come and end all of our concerns so but what is going to happen is we're going to see

2:29:04a spate of serious attacks in the companies that have not done everything that they can and I'm not sure I don't know whether any of these commercial AI based providers are anything other than opportunistic they might they might just have some token AI that you know that itself ends up being commandeered when the bad AI comes in you know teams up with it okay let's go

2:29:34do this I don't know it's yeah it just it is these these reports of attacks demonstrate too much capability capability that we are not yet ready to defend um all right and that is why uh we hope that the CISOs are all watching this show to uh get as uh freaked out and informed as

2:30:05you are making it possible to be uh of course this show publishes every Tuesday right here uh on twit at twit.tv slash security now that's where you can go well one place you can go to get a show uh we've got various formats uh steve you have a lower bit rate format that is great for people with um low bandwidth connections and you can get it if you

2:30:36still have a modem well there's a place for you to get the show as well with human written transcripts of course you should check out spin right and stay posted for future spin right news um am i forgetting anything there grc.com is where you should go for all that wonderful stuff and of course i want to remind you all about club twit at twit.tv slash club twit we'd love to have you join the club you can get chapter markers ad free

2:31:07content and you help support the great work that we do here on the network thank you for tuning in this week thank you so much mr gibson for your excellent work and i will see you again next week bye security now