🎧 Subscribe to the podcast feed Security News CISA Warns of Exploited Gitea Vulnerability (SecurityWeek) — CISA issued an alert for an actively exploited vulnerability in the Gitea self-hosted Git service; organisations running Gitea internally should treat this as a priority patch. Alabama Launches Investigation Into OpenAI's Alleged Hack…
🎧 Subscribe to the podcast feed Security News US sanctions Iranian cyber actors as UK discloses power plant attack (The Record) — Iran-linked actors caused an operational shutdown of a UK power generation facility; the US responded with sanctions against the responsible Iranian cyber operators. Sleepwalker backdoor targets Windows machines (The…
🎧 Subscribe to the podcast feed Security News North Korean Rust supply chain attack — full scope still emerging (BleepingComputer / SecurityWeek) The poisoned arrayref crate (1M+ monthly downloads) remains the key story as attribution to DPRK actors is confirmed. Developer teams running Rust build pipelines should audit dependency chains now. Microsoft Entra…
🎧 Subscribe to the podcast feed Security Stories AI as operational attack capability Federal advisories this week confirmed AI-generated code has been used in actual attacks against critical infrastructure controllers — not proof-of-concept, not lab work. Real operations. China-linked SilkParasite used AI-assisted malware in Central Asia. A…
🎧 Subscribe to the podcast feed Security News Hackers infect Android car head units with proxy botnet malware (BleepingComputer) Supply-chain attack on legitimate device-update apps silently enlists compromised in-vehicle Android systems into a proxy botnet — no visible symptoms to the owner. The attack surface has reached automotive infotainment.…
🎧 Subscribe to the podcast feed Ransomware Activity 69 victims · 20 groups · 48-hour window ending 22 Aug 2026 ⚠️ = healthcare or critical infrastructure TheGentlemen — 16 victims VictimCountrySector Ariel EnergiaITEnergy & Utilities AquaseaNOEnergy & Utilities Oceanica InternacionalWSTransportation CAZ InvestmentsBZFinancial Services ARBEITERKAMMERNATProfessional Services ESCON GroupUSManufacturing Akatake EngineeringJPManufacturing Magdalena Grand Beach Golf R…
75+ ransomware victims across 25 groups including Kingston Technology, Capgemini Engineering, U.S. Bank, and Indonesian Police data. Two urgent TrueConf CVEs on CISA KEV.…
46 victims, 18 groups. AI-generated exploitation code targeting Siemens PLCs at critical infrastructure. CareCloud breach affects 3.7M patients. Two UK victims. Password spraying up 155x.…