Visit the Security Intelligence the podcast page → https://ibm.biz/BdpmAn

What happens when one of the world’s most popular AI coding tools falls into the wrong hands? 

On this episode of Security Intelligence, Nick Bradley, Dave Bales and JR Rao discuss the Claude Code source code leak. Attackers are already using the opportunity to spread malware through fake repos, but the real question is how threat actors might use their newfound knowledge of Claude Code’s internals to wreak havoc on AI agents and the CI/CD pipeline. 

Then, we follow up on our old friends TeamPCP, Shiny Hunters and Lapsus$, whose overlapping data breach claims are causing no small amount of confusion and consternation among security pros. We examine the credential rotation problem and the uneven security surface of modern supply chains that helped get us in this mess. 

Plus: Threat intelligence usually focuses on attacks that did happen. But what if we started talking about the ones that didn’t? And do cybercriminals have anything to teach us about “mature” AI adoption? Some big names seem to think so. 

All that and more on Security Intelligence. 

Segments: 

00:00 – Introduction
1:12 -- The Claude Code leak 
11:19 -- TeamPCP’s breach spree 
21:21 -- “Close-call” databases  
29:28 -- Cybercrime and AI adoption 

The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. 

Explore to securely deploy and operate agentic AI workloads at runtime → https://ibm.biz/BdpmAb
#ClaudeAI #ThreatIntelligence #DataBreach

IBM Technology

IBM's Security Intelligence podcast panel discusses three cybersecurity topics: the Claude Code source code leak on npm, the Team PCP breach spree, and whether cyber criminals can teach defenders about AI adoption. On the Claude Code leak, experts frame it as an npm supply chain security problem rather than an Anthropic-specific issue, warning about lookalike packages, agentic system exploits, and reduced attack research costs. On Team PCP, the panel highlights how a single unrotated credential enabled a breach of the European Commission and 29 other entities, emphasizing identity as the new security perimeter. Finally, the panel debates whether ransomware operators' restrained AI use (limiting it to low-level tasks) gives defenders an opportunity to leapfrog attackers by deploying AI more aggressively for SOC operations.

The Claude Code source code leak: Takeaways for cybersecurity pros