🎙️ Let’s Talk About AI Washing!

AI is everywhere right now — and if you’re running an MSP, you’re feeling it from every direction. Your PSA has AI. Your RMM has AI. Your documentation platform has AI. Your quoting tool probably has AI. At this point, we’re all just waiting for the coffee maker to start summarizing tickets. But here’s the problem: not all AI is useful. A lot of it is just… noise.

Got your own questions for Jared and Mike? Click here to submit them and they’ll be featured on a future episode!

📷 Blacksmith at MSPGeekCon!

⚠️ Threat Updates

🔴 Red Hat npm Scope: Backdoored Packages Steal Cloud & CI Secrets (06/02/26)

Attackers hijacked Red Hat’s official @redhat-cloud-services npm scope and pushed backdoored versions of dozens of JavaScript packages that execute an obfuscated preinstall payload during npm install, turning a trusted supply‑chain channel into a credential‑stealing worm that targets GitHub Actions tokens, cloud provider keys (AWS, Azure, GCP), Kubernetes service accounts, SSH keys, npm tokens, and other CI/CD and developer secrets. » More Info

🔴 ChatGPT Shared Links: Malware Phishing via “Official” Chat Pages (06/1/26)

Attackers are abusing ChatGPT’s legitimate shared-content and code-rendering features to host convincingly branded phishing pages on real chatgpt.com URLs, luring users via malicious Google ads and SEO‑poisoned results into “shared chats” and code snippets that pose as outage notices or install guides and then funnel them to fake download flows or embedded curl commands which silently retrieve and execute malware, effectively turning trusted AI-hosted content into a delivery channel for suspected infostealers and other payloads while bypassing many URL reputation checks — meaning organizations that treat anything under chatgpt.com as inherently safe should immediately tighten web and email filtering around AI-tool domains, block direct execution of copied installation commands, train developers and end users to distrust “fix it with this curl command” guidance from shared chats, and instrument endpoint and browser telemetry to detect unusual binary downloads and command-line activity following visits to ChatGPT links, especially those reached via ads or search results. » More Info

🗨️ Parting Words

“Someone asked me, if I were stranded on a desert island what book would I bring: ‘How to Build a Boat.’” — Steven Wright

Are you a vCISO or MSP looking to operationalize security programs? Let’s discuss how Blacksmith Infosec proves that compliance is an opportunity, not a struggle that has to be packaged in FUD!