Episodes
This episode covers the discovery of a severe PHP vulnerability allowing remote code execution, shares beginner tips for enhancing cybersecurity, dives into the first GPU cache side channel attack, addresses concerns over NIST database update delays, and unveils Fujitsu's internal malware breach. Join us for an insightful discussion on these pressing cybersecurity challenges.
Published 03/20/24
This episode delves into Fujitsu's recent cybersecurity dilemma, where malware discovery on its network has possibly led to the exposure of millions of customer records. We explore the implications, the investigation process, and what this means for data security standards.
Published 03/19/24
This episode delves into the critical cybersecurity incident involving Change Healthcare and explores the broader implications of cyber threats across various industries, including healthcare, technology, and government. We delve into the urgent need for improved cybersecurity measures, highlight recent cyberattacks on Google, Microsoft, and reveal strategies to combat these evolving digital vulnerabilities. Tune in for an in depth analysis of the current cybersecurity landscape, insights on...
Published 03/18/24
This episode dives into a recent major data breach involving personal IDs, offers essential advice on secure JavaScript usage over TOR, and explores the efficacy of modifying HTTPS request source addresses to exploit server vulnerabilities. Tune in for expert insights on enhancing your digital security and privacy strategies.
Published 03/18/24
This episode dives into the latest cybersecurity concerns, including the potential data breach at the BBC Health Board, innovative approaches to remove personal data from the internet, a personal stalker hacker saga, and the hacking of subreddits for misinformation. Plus, explore strategies to secure the supply chain of trust and mitigate third party risks. Essential listening for CTOs and CISOs.
Published 03/16/24
Discover how Microsoft's Copilot for Security aims to revolutionize cybersecurity through AI, amidst challenges like false security alarms and sophisticated cybercrime tactics such as the RedCurl group's maneuvers and the DarkGate malware's exploitation of Windows vulnerabilities.
Published 03/15/24
An overview of cybersecurity credential stuffing attack, focussing on credential stuffing attack
Published 03/14/24
Discover how Microsoft is revolutionizing cybersecurity with Copilot for Security, its AI powered platform set to tackle cyber threats more effectively. We'll also delve into the recent breaches involving stolen source code and the proactive measures taken by Microsoft, including the release of crucial patches for 61 vulnerabilities. Furthermore, explore the implications of false security alerts from major companies and the steps to enhance digital security.
Published 03/14/24
In this episode, we cover a spectrum of cybersecurity issues, from a warning about potential password leaks due to suspicious cookies, to the intricacies of using socat for Privilege Escalation. We also discuss the critical lessons from a phishing scam victim, the importance of two factor authentication, the role of undetectable droppers and payloads in cybersecurity, and the significance of Row Level Security for data protection.
Published 03/13/24
This podcast episode delves into recent security vulnerabilities affecting WordPress plugins, including Cross Site Scripting in the Zoom and Profile Box plugins, compromised sites due to the Popup Builder plugin, unauthorized privilege escalation in LadiApp, and SQL injection in Hide My WP. We explore the implications for site owners and the necessary steps to mitigate these risks.
Published 03/12/24
This episode delves into the recent cybersecurity challenges and developments across major tech giants, the healthcare sector, and the efforts of law enforcement agencies. From Apple's critical updates to Microsoft's battle with hackers, and the pressing threats in healthcare cybersecurity, we explore the significant strides and setbacks in digital security today. Join us as we unravel the complexities of protecting data and infrastructure in our digital age, highlighting key incidents,...
Published 03/11/24
This episode covers the US embassy evacuation in Haiti amid gang violence, the UK's financial commitment to securing mosques and Muslim schools, advice for a university student specialized in cybersecurity, and safety tips for Tor users on the Brave browser.
Published 03/11/24
Explore the complex world of cybersecurity as we delve into the Midnight Blizzard's sophisticated attacks on Microsoft, exposing how nation state hackers are escalating their efforts to compromise global tech giants. We'll also cover the arrest of an ex Google engineer for stealing trade secrets, a significant data breach at the US's top cybersecurity agency, and privacy concerns raised by 'X's new feature. Discover Microsoft's response and efforts to safeguard against these advanced threats.
Published 03/10/24
Explore the daring cyber intrusion by the Kremlin backed hacker group Midnight Blizzard APT29 or Cozy Bear into Microsoft, resulting in the theft of source code and access to sensitive company emails. Understand the implications of these attacks on Microsoft's security and the potential risks to customer data, all while uncovering the ties to Russia's intelligence services.
Published 03/09/24
This episode delves into the case of Linwei Ding, a former Google engineer accused of stealing AI secrets for Chinese competitors, and Google's strategic launch of a Cybersecurity Center of Excellence in Tokyo. Plus, get insights on safeguarding your Chrome extensions. Tune in for an expert analysis on these unfolding cybersecurity narratives.
Published 03/08/24
Explore the story of Linwei Ding, a former Google engineer, charged with purloining AI technologies for China's advantage, and learn about Google's new cybersecurity strides with its Center of Excellence in Tokyo.
Published 03/07/24
This episode delves into the arrest of Linwei Ding, a former Google engineer accused of stealing AI secrets for competitors in China, and Google's strategic move to bolster cyber defenses with a new Cybersecurity Center of Excellence in Tokyo.
Published 03/07/24
Explore the arrest of Linwei Ding, accused of stealing AI secrets from Google for Chinese competitors, and Google's new Cybersecurity center in Tokyo aimed at bolstering global cyber defenses.
Published 03/07/24
Explore the case of Linwei Ding, a former Google engineer charged with stealing AI secrets for Chinese firms, and Google's countermove with a Cybersecurity Center in Tokyo.
Published 03/07/24
An overview of cybersecurity Secure Online Transactions, focussing on Introduction to Secure Online Transactions
Published 03/07/24
Explore the recent cybersecurity breach tied to UnitedHealth Group's tech division, Change Healthcare's 22M ransom to BlackCat, and subsequent actions by the US government and legal challenges. Learn about the implications for healthcare data security and the support offered by HHS to affected entities.
Published 03/07/24
Explore the future of cybersecurity with us as we delve into the transition towards PassKeys, the NSA's guidance on zero trust architecture, and the recent spike in cybersecurity mergers and acquisitions. We'll also discuss the peculiar use of the QEMU emulator by adversaries and the implications of data espionage activities in Ukraine.
Published 03/06/24
This episode covers a range of security issues from the demand for Haiti's Prime Minister's resignation and a mass jailbreak, to the latest in cybersecurity with a public PoC for CVE 2023 6895. We'll also explore the advancements in the Applied Emulation series for decrypting Ursnif strings and discuss a new cybersecurity e learning bundle from TechRepublic. Additionally, we touch on the police action in Aachen, Germany, due to a hostage situation.
Published 03/05/24
This in depth podcast examines the recent major ransomware attack on Change Healthcare, affecting U.S. healthcare services and other industries. It highlights the evolving threats from groups like the BlackCat gang, state sponsored actors, and how incidents like these signify the need for stronger digital defenses across sectors. The episode also covers the FBI's increased efforts against cybercrime, including detailing a significant security challenge faced by GitHub with malicious...
Published 03/04/24
This episode delves into real life cybersecurity dilemmas faced by individuals, including compromised devices, privacy breaches, and the challenge of recovering hacked accounts. We tackle topics such as HttpOnly Token issues, unauthorized access prevention, and the complexities of dealing with large tech companies during security crises. Join us for insights into securing personal digital life against increasingly sophisticated threats.
Published 03/04/24