Explorez tous les épisodes du podcast Weekly CYBER NEWS

In today’s Cybersecurity Daily, we break down the most critical cyber threats impacting April 2026. OpenAI revokes its macOS signing certificate after the Axios supply chain compromise exposed risks to software-signing pipelines, highlighting how deeply modern attacks can reach into trusted development workflows.

We also cover an actively exploited Adobe Acrobat Reader vulnerability (CVE-2026-34621) that enables remote code execution through malicious PDFs, alongside a rapidly exploited Marimo pre-auth RCE flaw where attackers began harvesting secrets within hours of disclosure.

On the threat actor side, we analyze North Korea’s APT37 campaign, using Facebook, Messenger, and Telegram to deliver RokRAT malware through a trojanized PDF viewer—showing how social engineering is evolving into long-term trust-based intrusion.

Plus, a CPUID supply chain attack distributing malware via CPU-Z and HWMonitor downloads, reinforcing that even official download sources can no longer be fully trusted.

The key takeaway: trust is now the primary attack surface—from code signing to social platforms to software distribution.

In today’s Cybersecurity Alert, we unpack the most critical threats emerging in April 2026. A groundbreaking GPUBreach attack demonstrates how GPU Rowhammer techniques can escalate into full system compromise even bypassing traditional protections like IOMMU—raising serious concerns for AI infrastructure and cloud environments.

We also examine Microsoft’s warning on Storm-1175, a fast-moving threat group deploying Medusa ransomware within hours of exploiting new vulnerabilities across enterprise systems. Meanwhile, attackers are actively targeting the Flowise AI platform with a CVSS 10.0 RCE flaw, exposing thousands of internet-facing instances.

On the geopolitical front, we cover an Iran-linked password spraying campaign targeting Microsoft 365 tenants and DPRK actors abusing GitHub as command-and-control infrastructure. Plus, new developments in ransomware attribution as authorities identify key figures behind REvil and GandCrab.

The key takeaway: attackers are accelerating faster than patch cycles—leveraging hardware, identity, and AI systems as new attack surfaces.

Zero-days are burning. Ransomware is evolving. Even AI agents are now targets.

This week’s Cybersecurity News Roundup delivers a high-impact briefing on actively exploited Chrome and Microsoft vulnerabilities, a critical CVSS 9.9 BeyondTrust RCE under live attack, and the first-ever malicious Outlook add-in stealing thousands of credentials.

We uncover firmware-level Android backdoors, ransomware gangs weaponizing vulnerable drivers, password manager weaknesses affecting millions, and a chilling new shift infostealers harvesting AI agent “souls.”

From nation-state-grade exploits to underground botnets using old-school IRC, this is the frontline of cyber warfare.

Stay sharp. Stay patched. Stay ahead.

A fast, no-fluff breakdown of the week’s biggest cybersecurity stories from zero-days and ransomware arrests to data breaches and emerging threats.

Stay informed in minutes, not hours, and know exactly what matters to security professionals and business leaders.

Sources: The Hacker News, BleepingComputer, SecurityWeek, Cybersecurity Dive

This week’s cybersecurity landscape highlights a surge in active exploitation and real-world impact. Microsoft and Apple released urgent patches for zero-days already used in attacks, while a critical Beyond Trust vulnerability was weaponized within hours of disclosure.

Nation-state groups continue targeting the defense supply chain now including smaller vendors and over 300 malicious browser extensions were caught stealing business credentials at scale. Meanwhile, ransomware actors breached infrastructure through an unpatched mail server, and regulators fined major luxury brands $25 million after millions of customer records were exposed. The message is clear: patching delays, weak access controls, and overlooked attack surfaces are now leading directly to operational and financial consequences.

This week we break down the most urgent cyber threats shaping enterprise risk right now. From active zero-day exploitation of Ivanti EPMM and a critical n8n automation flaw enabling system command execution, to Russian APT28 weaponizing a Microsoft Office zero-day within days of patch release.

We also unpack the expanding Conduent ransomware breach impacting tens of millions and reveal how a previously unknown Asian state-backed group compromised 70 government entities across 37 countries.

If you’re a cybersecurity leader, compliance professional, or executive decision-maker, this episode delivers clear business impact, compliance implications, and actionable steps—without the noise.

Stay informed. Stay ahead.

In today’s episode, we break down the five cybersecurity stories executives need to know right now. We analyze Palo Alto Networks’ move to acquire Chronosphere and what it signals about the convergence of security and IT operations. We cover active exploitation of WordPress plugins putting public-facing websites at risk, and new intelligence showing ransomware groups aggressively targeting the financial services sector.

We also review newly announced security products focused on fraud and endpoint protection, and unpack the World Economic Forum’s 2026 call to prioritize cyber resilience over prevention. Each story is translated into clear business impact, compliance relevance, and actionable next steps for leaders.

The Daily Executive Cyber Brief is a concise cybersecurity podcast built for executives, business leaders, and decision-makers. Each episode breaks down the most important cyber threats, data breaches, and policy developments shaping today’s risk landscape without technical jargon or fear-driven headlines. In under 10 minutes, you’ll understand what happened, why it matters to your business, and what actions leaders should consider next.

A cybersecurity podcast breaking down the most important threats, breaches, and vulnerabilities shaping today’s digital world. Each episode cuts through the noise to explain what happened, why it matters, and what defenders should do next covering cloud security, APT activity, data breaches, AI risks, and critical infrastructure. Built for security professionals, technologists, and anyone who wants practical, real-world security insight without the hype.

A compromised Trust Wallet Chrome extension update led to the theft of over $7 million in cryptocurrency, draining user wallets and triggering a wave of phishing scams. In this episode, we break down how the supply-chain attack happened, how attackers exfiltrated seed phrases, and what crypto users should do immediately to protect their funds.

#BleepingComputers

In this episode, we break down the latest cybersecurity incidents impacting national infrastructure, automotive giants, and software developers. Tune in for a briefing on:

• La Poste Goes Dark: A major network incident, reported as a DDoS attack, has knocked offline the websites and digital services of France's national postal and banking service.Nissan’s Third-Party Breach: Nissan has confirmed that a security breach at Red Hat exposed the personal information of approximately 21,000 customers in Fukuoka, Japan
• Interpol’s Operation Sentinel: A massive coordinated effort across 19 countries resulted in 574 arrests and the seizure of servers linked to ransomware and financial scams.
• Developer Supply Chain Risks: We discuss lotusbail, a malicious npm package disguised as a WhatsApp tool that steals session keys , and "Phantom Shuttle," a malicious Chrome extension charging users a subscription to secretly steal their credentials.

#Bleepingcomputer.com

In this episode of Inside the Breach, we break down real-world cyber incidents targeting Microsoft 365, WhatsApp, AWS, and major institutions worldwide. From advanced phishing platforms and OAuth abuse to cloud cryptomining and large-scale data breaches, we explore how attackers are exploiting trust, automation, and misconfigurations. Designed for security professionals, IT teams, and decision-makers, this episode delivers practical insights to help you recognize emerging threats and strengthen your defenses before the next attack hits.

#bleepingcomputer.com

In today’s Cybersecurity Daily, we break down the biggest threats shaping April 2026. A coordinated npm supply chain attack involving 36 malicious packages is targeting developers through post-install scripts, exploiting Redis and PostgreSQL to deploy persistent backdoors and steal sensitive data.

We also uncover new details behind the Axios npm hack, where attackers used a fake Microsoft Teams error to socially engineer a maintainer and inject malware into widely used packages. Meanwhile, device code phishing attacks have surged over 37x, allowing attackers to hijack sessions and bypass traditional credential-based defenses.

Plus, we analyze the European Commission cloud breach, showing how a single compromised AWS key led to multi-entity data exposure, along with critical ShareFile RCE vulnerabilities and stealthy Linux PHP web shell persistence techniques.

The key takeaway: modern cyber attacks are shifting from exploits to identity, trust, and automation abuse and defenders must adapt fast.

Ransomware attackers are shifting tactics and hypervisors are now in their crosshairs.

In this episode, we uncover why virtualization platforms like ESXi and Hyper-V have become prime targets for modern ransomware operations. A single compromise at the hypervisor level can give attackers control over dozens or even hundreds of virtual machines, bypassing traditional endpoint defenses entirely.

We break down real-world attack techniques, how threat actors move laterally to hypervisors, and why limited visibility at this layer makes detection so difficult. You’ll also hear practical security strategies, from access control and segmentation to patching, monitoring, and immutable backups, that can help reduce risk and improve recovery.

Whether you manage virtual infrastructure or make security decisions for your organization, this episode explains why hypervisor security can no longer be an afterthought.

A new Android malware-as-a-service called Cellik is changing how mobile attacks work by hiding malicious code inside apps that look and function like legitimate Google Play Store downloads.

In this episode, we break down how Cellik allows attackers to trojanize trusted apps, bypass user suspicion, and potentially evade mobile security protections. We explore its powerful capabilities, including screen streaming, credential theft, hidden browser abuse, and real-time device control and why this represents a serious shift in mobile threat tactics.

Whether you’re an Android user, IT professional, or security leader, this episode explains what’s happening, why it matters, and the practical steps you should take to protect your devices from stealthy mobile malware.

#Bleepingcomputer

In this episode, we break down Google’s decision to shut down its Dark Web Report feature and what it means for everyday users and security professionals alike. Once designed to alert users when personal data surfaced on the dark web, the tool will officially stop monitoring in January 2026 raising questions about visibility, accountability, and user protection.

We also explore the broader threat landscape, including newly linked Chinese hacking groups exploiting critical vulnerabilities, a surge in Chrome zero-day exploits, and the rise of malware campaigns abusing trusted platforms like ChatGPT and Google Ads.

Whether you’re a cybersecurity professional or just trying to stay safe online, this episode delivers practical insights, real-world implications, and what steps you should take next to protect your digital identity.

#bleepingcomputer.com

By the end of this training, you will be able to:

• Identify common AI-related threats (prompt injection, data leaks, zero-click attacks, model manipulation).
• Recognize how AI tools like ChatGPT, Gemini, Perplexity, Copilot, and AI IDEs can introduce risk.
• Protect company data when using AI tools.
• Safely interact with AI assistants and browser-based agents.
• Report suspicious activity involving AI platforms.

This episode breaks down the latest wave of AI-driven cyber threats from zero-click Google Drive wipe attacks to critical vulnerabilities hitting React Server Components, AI IDEs, and Apache Tika. We explore how attackers weaponize polite emails, hidden URL fragments, and prompt injections to steal data, execute code, and compromise entire systems. Stay ahead with insights into the emerging risks of agentic AI and what organizations must do to protect themselves.

Stay ahead of the week’s most impactful cybersecurity events with CyberShock Weekly, where we break down the breaches, exploits, and law-enforcement operations shaping today’s digital threat landscape. Each episode delivers clear, concise analysis including major corporate cyberattacks like the £196M hit to Jaguar Land Rover, extortion attempts against Checkout.com, and DoorDash’s latest data breach. We unpack active exploitation campaigns such as the Fortinet FortiWeb admin-creation flaw, malware-laden Android photo frames, and global police operations dismantling thousands of criminal servers. We also spotlight legal and policy moves, like Google’s lawsuit targeting large-scale smishing platforms. Perfect for cybersecurity professionals, IT teams, and anyone tracking the nonstop evolution of cyber risks, this podcast turns complex incidents into actionable intelligence.

www.bleepingcomputer.com

Dive into the world of emerging cyber threats with clear, concise breakdowns of the latest security incidents affecting organizations worldwide. This podcast unpacks active malware operations like the resurgence of DanaBot, deep-dives into zero-day attacks targeting platforms such as Citrix NetScaler and Cisco ISE, and exposes how threat actors exploit enterprise tools like Triofox for remote code execution. We also cover critical vendor patches including major fixes from SAP to help listeners understand risk, impact, and defensive steps. Whether you’re a security analyst, IT admin, or cybersecurity enthusiast, each episode gives you fast, actionable intelligence to stay ahead of attackers.

In this episode, we break down the essentials of password and authentication security why long, memorable passphrases beat short complex ones, and how multi-factor authentication (MFA) can stop attackers in their tracks. Through real-world scenarios, we reveal how reused passwords can open the door to devastating breaches and what steps you can take today to protect both your personal and professional accounts.

Stay tuned to learn practical strategies for building stronger digital habits and keeping your data and your organization safe.

In this week’s episode of CyberFrontline, we dive into the latest wave of global cyber incidents shaking both government and corporate networks. From a suspected foreign breach inside the U.S. Congressional Budget Office to Cisco’s urgent patch release for zero-day firewall exploits, the digital battlefield is heating up. We also examine how hackers are using Microsoft Hyper-V to hide Linux-based malware, the state-sponsored breach of SonicWall’s cloud backups, and a data leak at Hyundai AutoEver America exposing sensitive personal information.

Join us as we break down each attack, identify the threat actors behind them, and discuss what these incidents mean for national security, business resilience, and your own digital defense.

https://www.bleepingcomputer.com

https://thehackernews.com

In this episode, we dive deep into the latest cybersecurity revelations shaking the tech world from the discovery of multiple ChatGPT vulnerabilities to the rise of advanced Android malware and WordPress exploits. Learn how attackers are manipulating AI models like GPT-5 through indirect prompt injections, what “memory poisoning” really means, and how malicious apps on Google Play reached over 42 million downloads. We’ll also explore Microsoft Teams impersonation flaws and the chilling Operation SkyCloak espionage campaign targeting defense networks.

Tune in for a fast-paced breakdown of the newest cyber trends, expert insights, and real-world implications for everyday users and security professionals alike.

https://www.bleepingcomputer.com

https://thehackernews.com

In today’s episode of Cybersecurity Today, we break down the most critical cyber threats shaping April 2026. A major European Commission cloud breach linked to a stolen AWS key highlights the cascading impact of supply chain attacks, exposing data across dozens of EU institutions.

We also uncover a sophisticated Axios npm supply chain compromise tied to North Korean actors, showing how social engineering is now targeting open-source maintainers at scale. Meanwhile, attackers are actively exploiting the React2Shell vulnerability in Next.js apps, compromising hundreds of systems and harvesting cloud credentials, API keys, and sensitive secrets.

Plus, we analyze a $285 million crypto governance takeover, new ShareFile pre-auth RCE vulnerabilities, and SparkCat mobile malware stealing crypto wallet recovery phrases directly from photo galleries.

This episode explores a key theme: identity, trust, and human workflows are now the primary attack surface not just code vulnerabilities.

This week, we dig into a wild cyber-to-physical crossover: threat actors abusing legitimate remote monitoring tools (ScreenConnect, SimpleHelp, PDQ Connect, and more) to infiltrate freight and logistics firms then rerouting real-world shipments for theft. We also cover an alleged University of Pennsylvania breach tied to mass emails and a claimed trove of 1.2M donor records. Finally, we scan fresh mobile threats: BankBot-YNRK and DeliveryRAT, Android malware families built for stealthy credential theft and fraud. We’ll break down the tradecraft, the indicators you can actually use, and practical defenses you can implement today.

https://www.bleepingcomputer.com

https://thehackernews.com

In this episode, we explore major cyber incidents shaking the world from the extradition of a Conti ransomware member to the U.S., to a surge of NFC malware stealing credit cards across Europe, state-backed hackers breaching telecom networks, and CISA’s urgent directive to patch exploited VMware flaws. Stay informed with the week’s most critical cybersecurity stories, insights, and defense takeaways.

bleepingcomputer.com

This episode dives into this week’s biggest cybersecurity stories from Microsoft’s global DNS outage and Canada’s critical infrastructure breaches to new phishing attacks on LinkedIn executives and malicious npm packages targeting developers. Tune in for expert insights, key lessons, and actionable takeaways to stay ahead in the ever-evolving cyber landscape.

bleepingcomputer.com

This week’s cybersecurity roundup dives deep into the latest global threats, data breaches, and legal shakeups in the digital world. From malicious npm packages stealing developer credentials across multiple platforms to CISA’s urgent warnings on active software exploits, we uncover how threat actors are evolving their tactics.

We also explore Microsoft’s mounting legal trouble over Copilot 365 subscriptions, the rise of AI-powered workflow tools, a Chrome zero-day exploited by Italian spyware vendors, and Google’s rebuttal of false Gmail breach rumors.

Stay informed as we analyze how these events impact developers, enterprises, and everyday users — with actionable takeaways on protecting your systems, maintaining compliance, and strengthening digital resilience.

Source: The Hacker News

Source: BleepingComputer

This episode covers the week's biggest cybersecurity stories. A widespread campaign is exploiting critical, outdated vulnerabilities in WordPress plugins GutenKit and Hunk Companion, with millions of attacks already blocked. Microsoft has issued emergency out-of-band patches to fix a critical, potentially wormable remote code execution flaw in Windows Server Update Service (WSUS) after a proof-of-concept exploit was made public.

Amazon explains its massive AWS outage, tracing the 14-hour incident back to a major DNS failure in its DynamoDB infrastructure. We also look at the "YouTube Ghost Network," a malicious operation using over 3,000 videos on hacked channels to distribute stealer malware disguised as game cheats and pirated software.

Plus, a breakdown of the "Smishing Triad," a China-linked group behind 194,000 malicious domains used for global phishing scams , and a new infostealer built from the RedTiger tool that targets Discord accounts and payment data. Finally, a recap of Pwn2Own Ireland 2025, where hackers earned over $1 million for finding 73 zero-day vulnerabilities.

bleepingcomputer.com

https://thehackernews.com

This week on Weekly Cyber News, we unpack a surge of major cybersecurity stories shaking the tech world. From a critical Figma MCP flaw that let hackers execute remote code, to OpenAI’s crackdown on Russian, North Korean, and Chinese hackers misusing ChatGPT for cyberattacks. We also dive into Salesforce’s bold refusal to pay ransom after a massive data breach, Google’s new AI tool that rewrites vulnerable code before hackers can exploit it, and a chilling new campaign by Vietnam’s BatShadow group targeting job seekers with “Vampire Bot” malware.

Stay informed, stay secure — your frontline defense starts with knowledge.

Source: The Hacker News, BleepingComputer

This episode unpacks a wave of critical vulnerabilities shaking the cybersecurity world — from a 13-year-old Redis flaw earning a perfect CVSS 10.0 score to active exploits targeting Oracle E-Business Suite and GoAnywhere servers. Learn how ransomware groups like Cl0p and Medusa are weaponizing these bugs, and what immediate steps organizations should take to defend their infrastructure.

Sources:

The Hacker News

#CyberSecurity

#InfoSec

#DataBreach

#Ransomware

#Privacy

#ZeroTrust

#CloudSecurity

#ThreatIntel

#Malware

#WeeklyCyberNews

#CyberPodcast

#SecurityAwareness

This week’s episode dives into major cyber incidents shaking the digital world — Oracle rushes to patch a zero-day exploited by Cl0p, Discord faces a data breach through a third-party provider, and a Chinese cyber group runs a global SEO fraud ring. Stay tuned for fast insights and key takeaways from the frontlines of cybersecurity.

Sources:

BleepingComputer

The Hacker News

#CyberSecurity

#InfoSec

#DataBreach

#Ransomware

#Privacy

#ZeroTrust

#CloudSecurity

#ThreatIntel

#Malware

#WeeklyCyberNews

#CyberPodcast

#SecurityAwareness

This episode covers the latest cybersecurity turmoil — Microsoft confirms a GoAnywhere exploit tied to Medusa ransomware, and Red Hat faces extortion from ShinyHunters after a major data breach. Tune in for quick insights into how threat groups are evolving and what organizations can learn from these high-impact attacks.

Sources:

BleepingComputer

The Hacker News

#CyberSecurity

#InfoSec

#DataBreach

#Ransomware

#Privacy

#ZeroTrust

#CloudSecurity

#ThreatIntel

#Malware

#WeeklyCyberNews

#CyberPodcast

#SecurityAwareness

Stay ahead of cyber threats with this week’s Cyber Breach Breakdown. We cover the latest headlines — from WestJet’s massive data breach and Allianz Life’s exposure of 1.5M records to Klopatra, a new Android banking trojan using hidden VNC access. Plus, insights on Adobe Analytics’ data leak, Milesight router smishing attacks, Microsoft’s Windows 11 25H2 update, and cutting-edge research exposing flaws in Intel and AMD security. Clear, practical takeaways from the biggest security stories of the week.

Sources:

BleepingComputer

The Hacker News

#CyberSecurity

#InfoSec

#DataBreach

#Ransomware

#Privacy

#ZeroTrust

#CloudSecurity

#ThreatIntel

#Malware

#WeeklyCyberNews

#CyberPodcast

#SecurityAwareness

Stay ahead of today’s rapidly evolving threat landscape in this episode of Cybersecurity Breakdown. We cover major April 2026 cybersecurity developments, including a massive software supply chain attack impacting tools like Trivy, KICS, and LiteLLM, exposing hundreds of thousands of systems and sensitive credentials.

We also dive into the latest Google Chrome zero-day vulnerability (CVE-2026-5281) actively exploited in the wild, and why urgent patching is critical for enterprises. On the mobile front, we analyze a WhatsApp spyware campaign using fake iOS apps, highlighting the growing role of social engineering in surveillance operations.

Plus, Apple’s response to the DarkSword exploit kit, Cisco’s critical vulnerability patches, and new insights from the World Economic Forum on AI-powered fraud, now a global-scale cyber risk.

This episode breaks down what matters most: supply chain security, mobile threats, browser exploits, and AI-driven cybercrime trends—and what security professionals must do next.

Stay ahead of the curve with this week’s deep dive into the biggest cybersecurity stories. From Cisco ASA zero-day exploits deploying custom malware (RayInitiator & LINE VIPER) and CISA’s emergency directive to North Korea’s AkdoorTea backdoor, malicious Rust crates stealing crypto keys, and the Vane Viper ad-fraud network generating over 1 trillion DNS queries, we break down what these threats mean for enterprises, developers, and everyday users.

Plus, hear about passkeys security debates, federal breaches, and mobile leaks — all in one concise briefing. Whether you’re an IT pro, a security analyst, or just someone who wants to understand the risks shaping our digital world, this episode delivers the insights you need.

#CyberSecurity #ZeroDay #CiscoASA #CISA #Malware #Ransomware #AdFraud #DNS #RustLang #CryptoSecurity #Solana #Ethereum #NorthKoreaHackers #Backdoor #CyberThreats #WeeklyCyberNews #Infosec #ThreatIntel #Podcast

#BleepingComputer

#The Hacker News

A ransomware attack on Collins Aerospace’s MUSE system caused major flight delays and cancellations across European airports from September 19–22, 2025. We break down the disruption, its impact on passengers, and the risks of third-party dependencies in aviation.

Source:Bleepingcomputers

This week: The U.S. sanctions Southeast Asian cyber scam networks stealing billions, hackers exploit exposed Docker APIs with botnet potential, Microsoft patches 81 flaws including two zero-days, Plex suffers another data breach, and npm packages with billions of weekly downloads are hijacked in a supply-chain attack.

Source: BleepingComputer

2025-09-09 23:08

Explore the hidden world of zero-days, data breaches, and digital defense. This episode unpacks how cyber threats evolve and what it takes to stay protected in today’s relentless cyber battlefield.

Resources From for podcast.

https://shorturl.at/OzMBi

https://shorturl.at/c7iDG

https://shorturl.at/7Q710

In this episode, we break down how phishing works from fake HR emails to urgent account warnings — and show you how to spot the red flags before it’s too late. Learn how to protect your credentials, recognize suspicious links, and report phishing attempts like a pro.

In this episode, we break down the latest cybersecurity threats shaking the digital world—from supply chain compromises like the Axios npm attack to AI-driven fraud becoming a global risk. As attackers increasingly target the very systems we trust package managers, AI platforms, and update channels we explore what this means for organizations and defenders. If trust is the new vulnerability, how do we secure it? Stay ahead with sharp insights into today’s most critical cyber threats.

A concise daily intelligence report on the latest cyber threats, nation-state activity, and security trends built for defenders, analysts, and tech leaders.

In today’s episode, we break down the most critical cybersecurity stories shaping the threat landscape right now. From OpenAI patching serious data exfiltration and command injection flaws, to active exploitation of Citrix NetScaler vulnerabilities, attackers are increasingly targeting the systems we trust the most. We also explore the rise of advanced malware campaigns like DeepLoad, developer-focused phishing through GitHub, and major breaches impacting the European Commission and healthcare provider CareCloud.

The key theme? Cyber risk is shifting toward trust layers AI agents, identity infrastructure, developer workflows, and cloud platforms. If you care about where cybersecurity is heading next, this is an episode you don’t want to miss.

This week in cybersecurity: global corporations and critical infrastructure are under pressure. Paint giant AkzoNobel confirms a ransomware breach with 170GB of sensitive data stolen, while LexisNexis faces fallout after millions of records including government emails are leaked online. Meanwhile, a China-linked AI tool dubbed CyberStrikeAI is automating firewall exploitation across 55 countries, signaling a dangerous shift toward AI-powered cyber warfare. In mobile security, Motorola partners with GrapheneOS to bring hardened privacy-focused devices mainstream. And to top it off, Facebook suffers a massive worldwide outage, sparking speculation about possible infrastructure failures.

Stay tuned as we break down what this means for organizations, governments, and you.

Tonight in cyber: social engineers are being recruited for $1,000 per call, zero-day exploits are tied to nation-state brokers, and supply chain attacks are silently compromising developers.

From SLH’s vishing-for-hire campaign targeting IT help desks, to malicious NuGet packages infecting ASP.NET applications, to active exploitation of Cisco SD-WAN authentication bypass flaws — the threat landscape is accelerating.

We break down Chinese cyber-espionage campaigns, ransomware-linked data breaches, U.S. sanctions over stolen zero-days, and the growing impact of AI-driven security disruption shaking the market.

This is your frontline briefing on the breaches, exploits, and global cyber power plays shaping today’s digital battlefield. Stay informed. Stay vigilant.

In this episode, we cover the biggest cybersecurity threats making headlines right now — including the critical “Bleeding Llama” vulnerability impacting Ollama AI servers, a supply-chain attack that turned the official JDownloader site into a malware delivery platform, and alarming breaches at Polish water treatment facilities. We also break down the latest Ivanti zero-day under active exploitation, the Quasar Linux RAT targeting developer credentials and cloud secrets, and the Braintrust breach that may have exposed customer AI provider keys. From AI infrastructure security to real-world OT attacks, this episode explains what defenders, developers, and businesses need to watch closely this week.

This week on the podcast, we break down the cyberattacks targeting critical infrastructure in Poland, a dangerous new Linux “Dirty Frag” privilege escalation exploit, and the latest Ivanti zero-day already being exploited in the wild. We also cover the Quasar Linux RAT targeting developer credentials for software supply chain attacks, the alleged Trellix source code breach, and a new Claude browser extension vulnerability exposing AI agents to takeover. If you want the biggest cybersecurity stories explained clearly and fast, this episode covers what defenders need to know right now.

This week in cybersecurity, we break down a 15-year-old OpenSSH flaw enabling stealthy root access, a surge in AI prompt injection attacks, and a breach impacting a major utility technology provider. We also uncover how attackers are exploiting Microsoft Teams for malware delivery and why AI infrastructure vulnerabilities are now weaponized within hours. Stay ahead of evolving cyber threats with insights that matter.Source highlights from SecurityWeek, BleepingComputer, and The Hacker News.

Hijacked AI assistants and 12-hour patch windows