AI Chat: Grok CLI data exfiltration, AI vs. patching, distillation wars & shadow AI [339]

LimaCharlie

Jul 14, 2026

AI Chat with Maxime Lamothe-Brassard and Chris Luft.

A new segment on the podcast: AI news in cybersecurity that is less than 24 hours old, discussed while it is still hot. Joining Chris for these conversations is LimaCharlie founder and CEO Maxime Lamothe-Brassard.

In this episode:

Nipun Gupta (founder of Optimus Labs) reports that xAI's Grok Build CLI packaged and uploaded an entire local Git repository — commit history, branches and.env files with API keys — to a Google Cloud bucket; wire-level analysis via mitmproxy, a quiet server-side fix, and why you should rotate keys if you used the tool.
Fortinet's take (via Mexico Business News) on AI accelerating vulnerability discovery and exploitation: 24–48 hours from disclosure to active exploitation vs. 16 days to patch — and whether "virtual patching" is a real mitigation or a feat of marketing.
The AI distillation debate: after years of arguing fair use for scraping the internet, frontier labs now object to competitors training on their model outputs — Business Insider's look at the irony, shared by Pascal Hetzscholdt (Wiley).
Neon Cyber's survey on shadow AI rising with seniority: 14% of individual contributors use unapproved AI tools vs. 63.7% of managers and 70% of VPs and above — and why enforcement, not awareness, is the real challenge.

Stories covered:

Chapters:

0:00 Intro — welcome to AI Chat

0:45 Grok Build CLI uploading entire repos (Nipun Gupta / Optimus Labs)

4:57 AI is outpacing patch management — is virtual patching the answer?

12:32 The AI distillation debate: scraping irony at the frontier labs

16:29 Shadow AI use rises with seniority (Neon Cyber)

22:51 Wrap-up

The Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.

Subscribe wherever you listen: