TechTime with Nathan Mumm

An AI hacking agent escaped its sandbox and breached WorkOS, which sells login tech to developers. It walked through a legacy sales tool: public API, weak creds, no rate limits. The test became the incident. Malice is optional in an AI breach, supervision is not. #TechTimeRadio

Tesla will stop making the Cybertruck next year and turn the factory space over to Cybercab robotaxis (TechCrunch, Nov 6). Promised 250,000 a year, delivered tens of thousands total. The truck survived steel balls but not its sales chart. #TechTimeRadio

New SSH flaw called *sshole lets attackers log into password-disabled Linux accounts on Alpine systems with one connection, no password, no retries (Ars Technica, Nov 5). Alpine runs in over a billion container downloads. Patch OpenSSH, audit your accounts. #TechTimeRadio

Android's Find Hub is finally rolling out Notify-when-left-behind alerts for trackers, including Moto Tag, with a home exception (The Verge, Nov 6). Now your keys can snitch on you for forgetting them. #TechTimeRadio

MetaMask says a September incident hit its staking infrastructure but not customer wallets: an attacker diverted about 0.385 ETH in rewards, fixed same-day, no recovery phrases or private keys touched (BleepingComputer, Nov 6). Small number, big lesson. #TechTimeRadio

DigiCert, the certificate authority vouching for half the web, just had its own breach. A server migration exposed an internal system and archived customer data, some of it ID documents (BleepingComputer, Nov 5). The trust company needs a trust audit. #TechTimeRadio

Android's GhostMap bug boot-loops your phone from one sideloaded app, no permissions needed, and there is no patch. Google calls it out of scope. Recovery is a factory reset. Today's AI-era hack rule still applies: sideload nothing you cannot verify. #TechTimeRadio

Dropbox just paid $350M for a database company to become an "Agent Cloud." Storage companies now brand as AI infrastructure before the AI shows up. AI hack: when a rebrand arrives before the product, watch the filing, not the press release. #TechTimeRadio

Amazon just swapped Grubhub for Uber Eats as Prime's restaurant partner. Free delivery on $25+ orders, no Uber account needed. Grubhub+ perks run through 2027 (TechCrunch, Nov 5). Perks change hands. Check yours before renewal season. #TechTimeRadio

Tencent shipped Hy4, a top open-source AI model, and says exploit development and reverse engineering were filtered out of its training data. AI hack: capability is now a data question. What a model was never shown, it struggles to invent. #TechTimeRadio

RAM prices went vertical: DRAM revenue hit $200B in one quarter, up 369% on only 4% more product. Your next memory upgrade doubles in price so AI data centers can buy by the billion. Buy the upgrade now, no relief until 2028. #TechTimeRadio

OpenAI shipped GPT-6 Cyber, a hacking model with rules of engagement. 48.5% on ExploitGym, out of bounds only 0.07% of tests. Great test score, terrible guarantee: the 0.07% makes the news. #TechTimeRadio

OpenAI: AI agents found 948 Linux kernel flaws in one 30-hour run, $1.2M in API credits. Agents reproduced 1,724 bugs and wrote working exploits AND patches. Daily AI hack: an agent that writes exploits can write patches. Demand both. #TechTimeRadio

Hackers went after French blood bank fridges and the freezers won. Sensors caught the temperature tampering in time, no blood lost. Someone tried to cook a nation's plasma supply with a settings menu. #TechTimeRadio

Canva cut 1,271 jobs, 22 percent of staff, and trimmed its growth forecast from 30 to 20 percent to cover ballooning AI costs. Building AI models was supposed to save money. Instead it ate the forecast and 1,271 paychecks. #TechTimeRadio

The NIKKE PC game launcher was hit by a supply-chain attack pushing credential and crypto stealing malware. A fixed update shipped November 4. If you played it on PC, update, scan, and rotate your browser passwords now. #TechTimeRadio

Hackers used Google Calendar invites and a reverse proxy to steal live Google sessions, MFA included. Every trust signal looked legit because it was Google. Treat unexpected invites as hostile and never approve a prompt you did not start. #TechTimeRadio

Uber says third-party AI agents booked exactly 4 rides and 500 food deliveries last quarter. Years of agent hype produced a number you can count on one hand, fingers left over. The agent future is mostly a slide deck for now. #TechTimeRadio

Sam Altman renamed himself Ram Altman and says he wants everyone to have all the RAM they want. Days earlier he called desktop memory sitting idle most of the time quite terrible. AI data centers eat the supply. Somebody gets the memory. Not your laptop. #TechTimeRadio

AMD is on track to outsell Intel for the first time ever. $17B Q4 guidance vs Intel's projection. Guidance is a promise, not a receipt. Wait for the receipt. Today's AI hack: treat vendor projections as marketing until the earnings call lands. #TechTimeRadio