Edwin Kwan
  • Home
  • Speaker
  • Podcasts
    • Cyber Bites
    • AppSec Unlocked
    • It’s 5:05 Podcast
  • Journal
  • Publications
Select Page

Researchers Exploit AI Browser Reasoning to Train Self-Optimizing Phishing Scams in Under Four Minutes

Mar 9, 2026 | Podcast

https://guard.io/labs/agenticblabbering—how-ai-browsers-verbose-reasoning-fuels-the-ultimate-scamming-machine Security researchers at Guardio have demonstrated a critical vulnerability in AI-powered autonomous browsers by successfully tricking Perplexity’s...

Iranian Threat Actors Launch Hundreds of Attacks Against IP Surveillance Cameras Across Middle East

Mar 7, 2026 | Podcast

https://research.checkpoint.com/2026/interplay-between-iranian-targeting-of-ip-cameras-and-physical-warfare-in-the-middle-east Multiple Iranian hacking groups have conducted hundreds of exploitation attempts against internet-connected surveillance cameras across...

Hacktivist Groups Launch 149 DDoS Attacks Against 110 Organisations Following Middle East Military Operations

Mar 6, 2026 | Podcast

https://www.radware.com/security/threat-advisories-and-attack-reports/ddos-activity-following-operation-epic-fury-roaring-lion Cybersecurity researchers have documented a dramatic surge in retaliatory hacktivist activity following the U.S.-Israel coordinated military...

ClawJacked Vulnerability Allows Malicious Websites to Hijack Local OpenClaw AI Agents via WebSocket

Mar 5, 2026 | Podcast

https://www.oasis.security/blog/openclaw-vulnerability OpenClaw has patched a high-severity security flaw nicknamed ClawJacked that could allow malicious websites to connect to and commandeer locally running AI agents through a WebSocket attack. The vulnerability,...

Developer Faces $82,000 Bill After Stolen Google Gemini API Key Enables Massive Unauthorised Usage

Mar 4, 2026 | Podcast

https://old.reddit.com/r/googlecloud/comments/1reqtvi/82000_in_48_hours_from_stolen_gemini_api_key_my A small startup is confronting potential bankruptcy after unknown attackers exploited a compromised Google Gemini API key to rack up $82,314 in unauthorised charges...

DJI Romo Robot Vacuums Exposed Thousands of Devices Through Critical Security Flaws

Mar 3, 2026 | Podcast

https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt A Spanish AI strategist accidentally gained unauthorized access to approximately 7,000 DJI Romo robot vacuums worldwide after attempting to create a custom remote...
« Older Entries
Next Entries »

Latest Posts

  • New “ClawHub” and “ClawSwarm” Malware Campaigns Target AI Agents for Crypto Recruitment
  • KnowBe4 Research Reveals 86% of Phishing Attacks Are Now AI-Driven
  • Google Patches Maximum Severity CVSS 10 Flaw in Gemini CLI Amid Growing AI Tool Vulnerabilities
  • Critical cPanel & WHM Authentication Bypass Vulnerability Actively Exploited in the Wild
  • Critical Linux “copyfiles” Vulnerability Grants Root Access on Major Distributions

Speaking Events

  • Guest Lecture at UNSW Business School for INFS5907
  • Speaker at Bugcrowd Luncheon
  • Guest Lecture at UNSW
  • Panelist at SecTalks Legends – 2025
  • Keynote Speaker at Sydney AI Security Summit 2025

More Content

  • Articles (26)
  • Podcast (777)
  • Posts (26)
  • Publications (1)
  • Speaking (50)
  • X
  • RSS
Edwin Kwan