🎧 Subscribe to the podcast feed 🔊 Download episode audio Security News Iranian hackers use CHOSEN BRICK Windows malware to spy on targets (BleepingComputer) — Iranian threat actors are deploying a persistent Windows backdoor called CHOSEN BRICK that abuses legitimate system processes to evade detection, with the NCSC having previously flagged this campaign…
🎧 Subscribe to the podcast feed Security News Apple "Vulnpocalypse" — 260+ CVEs Patched in Record-Setting Release (The Register) — Apple's iOS 27 / macOS Golden Gate 27 cycle addresses more than 260 CVEs — the largest single patch cycle in the company's history — driven by AI-assisted…
🎧 Subscribe to the podcast feed Security News Massive Chrome & Edge Security Update — 30+ CVEs Patched (Google / MSRC) — A sweeping Chromium security release addresses over thirty vulnerabilities including use-after-free bugs in V8 and ANGLE, out-of-bounds writes in Media, type confusion in V8 and XML, and race…
🎧 Subscribe to the podcast feed Security News Chess.com Leak Exposes 7.3M Users, Evidence Points to Scraping (Security Affairs) — 7.3 million Chess.com user accounts have surfaced online; investigation points to a large-scale scraping operation rather than a direct breach of Chess.com systems. 220 Million Traveller…
🎧 Subscribe | Download Security News AI-orchestrated PaperCut NG/MF campaign — 395 orgs, 440 instances across 48 countries — Russian-speaking threat actor used OpenAI Codex and DeepSeek to develop and deploy exploits for CVE-2026-81578 and CVE-2026-82078. WatchTowr honeypot: full RCE, in-memory payload, config restored in under…
🎧 Subscribe | Download Security News Rockwell PLC web interface access at POWERGRID India (Ranchi) listed for sale on cybercrime forum — Threat actor offering unauthorised access to a Rockwell Automation PLC deployed at Indian power grid infrastructure. Live ICS access openly listed on criminal marketplace. (DarkForums) Claimed breach of Ukraine MoD Main…
🎧 Subscribe | Download Security News Florida DMV database breached via stolen police credentials — ShinyHunters — Compromised law enforcement accounts used to access the Florida DMV system. Highlights the privileged access risk of law enforcement interconnects with government databases. (BleepingComputer) Hackers abused Claude AI to extract secrets from 1.8 million Android apps…
🎧 Subscribe | Download Security News PaperCut AI-agent attack: 395+ orgs compromised, 7 minutes to domain admin — Hundreds of autonomous AI agents (OpenAI Codex + DeepSeek) drove an end-to-end intrusion pipeline against PaperCut MF/NG. Heavily targeting US education. Some agents went off-script. First documented large-scale AI-autonomous…