OnlyFans Models Are Accidental Blue Team Defenders - BHIS - Talkin' Bout [infosec] News 2026-07-13 - Video

Join us LIVE on Mondays, 4:30pm EST.
A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.
https://bhisnews.transistor.fm

Chat with us on Discord! -
https://discord.gg/bhis
????live-chat

???? Register for FREE webcasts, summits, and workshops -
https://poweredbybhis.com


This week, the team unpacks a wide range of cybersecurity news, including a fraudulent offensive security startup tied to cybercriminals, how leaked OnlyFans content is inadvertently helping defenders identify compromised government websites, and new vishing attacks targeting Microsoft Entra passkey enrollment. They also examine AI prompt injection risks in GitHub workflows, malware campaigns abusing hundreds of GitHub repositories and Go packages, Microsoft's latest identity security developments, and the growing push for online age verification through government-issued IDs and selfies.


00:00 - PreShow Banter™ — The New Mainframes
05:41 - BHIS - Talkin' Bout [infosec] News 2026-07-1

06:24 - Story #1 - Felons, Fraudsters Flog Offensive Cybersecurity Startup
https://blog.otterpwn.com/projects/heavenerhttps://krebsonsecurity.com/2026/07/felons-fraudsters-flog-offensive-cybersecurity-startup/

15:38 - Story #2 - OnlyFans Models Are Accidentally Making Hacked Government Websites Disappear
https://www.wired.com/story/onlyfans-creators-dmca-hacked-government-websites/

20:40 - Story #3 - Vishing actors target Entra passkey enrollment
https://www.okta.com/en-au/blog/threat-intelligence/vishing-actors-target-microsoft-entra-passkey-enrollment-/

32:46 - Story #4 - GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos
https://noma.security/blog/gitlost-how-we-tricked-githubs-ai-agent-into-leaking-private-repos/

46:33 - Story #5 - Network of 200 GitHub Repositories Used for Malware Infection
https://www.securityweek.com/network-of-200-github-repositories-used-for-malware-infection/

48:18 - Story #6 - Microsoft admits Windows 11 has a GDID tracker with no off switch, first documented publicly in an FBI hacker complaint
https://www.windowslatest.com/2026/07/10/you-cant-fully-disable-microsofts-gdid-windows-11-tracker-but-these-settings-limit-what-it-captures/

53:54 - Story #7 - EU Reddit Users Must Verify Age With Government ID or Selfie
https://reclaimthenet.org/eu-reddit-users-must-verify-age-with-government-id-or-selfie

59:38 - Story #8 - Risky Bulletin: All new cars to include a camera aimed at the driver's face
https://news.risky.biz/risky-bulletin-all-new-cars-to-include-a-camera-aimed-at-the-drivers-face/


Brought to you by:
Black Hills Information Security
https://www.blackhillsinfosec.com

Antisyphon Training
https://www.antisyphontraining.com/

Active Countermeasures
https://www.activecountermeasures.com

Wild West Hackin Fest
https://wildwesthackinfest.com


#livestream #infosec #news #BHIS #podcast #Cybersecurity #infosecnews