AI may be good at finding security vulnerabilities, but it can't beat human stupidity

The transcript reviews a widespread Klue-Salesforce compromise where attackers used a compromised legacy credential to obtain OAuth tokens and exfiltrate CRM data from hundreds of customers (including Huntress and LastPass), with a new extortion group named Icarus claiming responsibility and leaking/ransoming data; it also touches on insider-allegation fallout at Huntress and a separate long-standing Squid proxy vulnerability ('Squidbleed') that exposes credentials when legacy FTP/HTTP features are enabled.