Épisodes

  • Defensive Security Podcast Episode 360

    Defensive Security Podcast Episode 360
    Sep 29 2026
    Please consider supporting the DefSec podcast here. 1. AI agents broke into 395 organisations, including ones their operator ruled out https://www.helpnetsecurity.com/2026/09/11/ai-agents-papercut-ng-mf-attack-campaign/ 2. A nuclear agency lost reactor data to an ownCloud bug patched two years earlier https://www.darkreading.com/cyberattacks-data-breaches/old-unpatched-flaws-attackers-philippines-nuclear-agency 3. One in ten exposed AI gateways still accept the example key from the setup guide https://thehackernews.com/2026/09/nearly-1-in-10-exposed-litellm-gateways.html 4. Click … Continue reading "Defensive Security Podcast Episode 360"
    Afficher plus Afficher moins
    33 min
  • Defensive Security Podcast Episode 359

    Defensive Security Podcast Episode 359
    Sep 29 2026
    Please consider supporting the DefSec podcast here. 1. CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing https://thehackernews.com/2026/08/cisa-red-team-compromised-two-critical.html 2. CISA: Most exploited vulnerabilities should have been eradicated decades ago https://www.theregister.com/security/2026/08/28/cisa-most-exploited-vulnerabilities-should-have-been-eradicated-decades-ago/5293194 3. North Korean Fake Employees Move Into Sales, Marketing and Healthcare Roles https://www.helpnetsecurity.com/2026/08/28/north-korean-remote-workers-jobs-sales-and-marketing/ 4. Unit 42 says one attacker chained 50 vulns and attack … Continue reading "Defensive Security Podcast Episode 359"
    Afficher plus Afficher moins
    36 min
  • Defensive Security Podcast Episode 358

    Defensive Security Podcast Episode 358
    Sep 29 2026
    Please consider supporting the DefSec podcast here. Stories: Weak IAM affects up to 98% of cloud environmentshttps://www.helpnetsecurity.com/2026/08/14/intruder-cloud-misconfiguration-trends-report/China-Linked Storm-1175 Debuts New StormEncryptor Ransomware via N-central Flawhttps://thehackernews.com/2026/08/china-linked-hackers-deploy-new.html‘City-Forum’ Campaign Quietly Mines Salesforce/ServiceNow Guest Access Since March 2025https://www.darkreading.com/cyberattacks-data-breaches/long-running-data-theft-campaign-salesforce-servicenowLiteLLM ‘Supply Chain Attack’ Was Mostly Fallout From Trivy Compromise Days Earlierhttps://www.securityweek.com/trivy-not-litellm-behind-the-2500-org-compromise/ChainDrop Worm Spreads Through npm, Slips Past Standard Security Toolinghttps://www.theregister.com/security/2026/08/15/chaindrop-worm-crawls-into-npm-supply-chain-evades-standard-defenses/5287958
    Afficher plus Afficher moins
    31 min
  • Defensive Security Podcast Episode 352

    Defensive Security Podcast Episode 352
    Jul 3 2026
    Please consider supporting the DefSec podcast here. This week’s stories: https://www.securityweek.com/npm-12-will-change-script-execution-behavior-to-prevent-supply-chain-attacks/ https://www.bleepingcomputer.com/news/security/openclaw-ai-agent-found-falling-for-phishing-attacks-spills-user-data/ https://www.cybersecuritydive.com/news/cisa-vulnerability-remediation-prioritization-directive/822504/ https://www.bleepingcomputer.com/news/security/chinese-hackers-hijack-auth-flow-spy-on-isolated-network-for-a-decade/ https://doublepulsar.com/an-update-on-fortibleed-whats-happening-with-victim-orgs-c0671a50e7f4
    Afficher plus Afficher moins
    1 h et 3 min
  • Defensive Security Podcast Episode 353

    Defensive Security Podcast Episode 353
    Jul 11 2026
    Please consider supporting the DefSec podcast here. Links to stories: https://www.securityweek.com/massive-password-spray-campaign-targeting-azure-cli/ https://thehackernews.com/2026/07/2026-cybersecurity-assessment-gap.html https://www.cybersecuritydive.com/news/klue-investigating-supply-chain-attack-salesforce-integrations/823532/ https://www.bleepingcomputer.com/news/security/over-900-oracle-e-business-instances-exposed-to-ongoing-attacks https://www.darkreading.com/cyber-risk/third-party-breaches-teaches-education-lesson-vendor-risk
    Afficher plus Afficher moins
    59 min
  • Defensive Security Podcast Episode 354

    Defensive Security Podcast Episode 354
    Jul 26 2026
    Please consider supporting the DefSec podcast here. Stories: https://www.theregister.com/security/2026/07/07/enterprise-ai-still-smarting-from-leaping-before-looking/5267353 https://www.theregister.com/security/2026/07/07/github-ai-agent-leaks-private-repos-when-asked-nicely/5267924 https://www.bleepingcomputer.com/news/security/fake-it-support-calls-on-microsoft-teams-push-etherrat-malware/ https://databreaches.net/2026/07/04/adapthealth-says-attackers-sweet-talked-their-way-into-cloud-systems-and-stole-patient-data https://thehackernews.com/2026/07/ai-agent-exploits-langflow-rce-to.html
    Afficher plus Afficher moins
    50 min
  • Defensive Security Podcast Episode 355

    Defensive Security Podcast Episode 355
    Aug 8 2026
    https://www.helpnetsecurity.com/2026/07/21/sonicwall-sma-zero-days-exploited-cve-2026-15409-cve-2026-15410/https://thehackernews.com/2026/07/qilin-ransomware-attackers-exploit-pan.htmlhttps://thehackernews.com/2026/07/worlds-largest-ai-model-repository.htmlhttps://openai.com/index/hugging-face-model-evaluation-security-incident/https://www.darkreading.com/identity-access-management-security/identity-attacks-overtake-exploits-top-ransomware-causehttps://www.helpnetsecurity.com/2026/07/21/estee-lauder-data-breach-oracle-ebs/
    Afficher plus Afficher moins
    1 h et 8 min
  • Defensive Security Podcast Episode 357

    Defensive Security Podcast Episode 357
    Aug 15 2026
    Please consider supporting the DefSec podcast here. Stories: 1. Ransomware Gangs Bypass the CEO, Target the 40-Something IT Managerhttps://www.theregister.com/security/2026/08/09/ransomware-gangs-skip-the-ceo-head-straight-for-the-40-something-it-manager/5284499 2. Ransomware Attacks Spike While Industry Attention Shifts to AIhttps://www.theregister.com/security/2026/08/07/ransomware-attacks-spike-as-world-distracted-by-ai/5284934 3. ChainDrop supply chain compromise: Anatomy of a self-propagating wormhttps://www.microsoft.com/en-us/security/blog/2026/08/04/chaindrop-supply-chain-compromise-anatomy-self-propagating-worm/ 4. AI Agent Tried to Backdoor a Real Open-Source Repo During a Security Testhttps://thehackernews.com/2026/08/claude-mythos-5-tried-to-backdoor-real.html 5. Cloudflare Ditches … Continue reading "Defensive Security Podcast Episode 357"
    Afficher plus Afficher moins
    1 h