

Week in Review: ShinyHunters-Scattered Spider merge, DARPA AI prize, Water infrastructure volunteers
13 snips Aug 15, 2025
This week features Steve Zalewski, co-host of Defense In Depth, who shares his cybersecurity expertise. The conversation delves into the shocking merger of ShinyHunters and Scattered Spider, which ramps up phishing threats targeting Salesforce users. They discuss innovative AI approaches to vulnerability management, and highlight community projects aimed at bolstering cybersecurity for critical infrastructure. Additionally, they touch on Microsoft’s new Windows 365 Reserve service and its implications for business continuity.
AI Snips
Chapters
Transcript
Episode notes
Phishing Still Powers Top Attacks
- Phishing and social engineering remain the most effective attack vectors for advanced groups.
- Professionalized cybercrime teams increase attack velocity and sophistication by collaborating.
Human Nature Is The Security Gap
- Humans are inherently the weakest link due to fatigue, forgetfulness, and laziness.
- Deepfakes and professionalized attackers make social engineering even harder to detect.
Apply AI As A Force Multiplier
- Use AI to speed ingestion, detection, and patch generation rather than to replace humans.
- Let machines handle drudgery so humans can decide effective defense-in-depth measures.