Webcams go to war, Kimsuky sends invites, Anthropic blocks copycats
Oct 14, 2026 · 7m
This episode covers a webcam hack in Israel, North Korean malware targeting Ukrainian officials, and Anthropic's new defenses against AI model distillation.
The Department of Know: South Korean bank hacks, agents target Wikipedia, ransomware recovery fraud
Oct 9, 2026 · 33m
Host Rich Straffolino discusses a botnet using GitHub poetry for C2, Meta's rushed fix for Muse VM escapes, and an ASOS breach involving unauthorized push notifications.
Poetry-powered botnet, Flock hits a roadblock, Outlook blocks risky installers
Oct 8, 2026 · 7m
Host Sarah Lane covers a botnet using GitHub poems for command and control, a judge ruling Flock’s warrantless tracking unconstitutional, and a malicious NPM supply chain campaign.
Gemini 4 enters the ring, MI5 flags research ties, Custom GPTs deliver malware
Oct 1, 2026 · 7m
Sarah Lane covers Google's Gemini 4 Argon release, MI5's warning on Chinese research funding, and a ClickFix attack via malicious custom GPTs.
The Department of Know: NCSC's AI "inconvenient truth," automated payment skimming, CISA's CVE plan
Sep 25, 2026 · 34m
Hosts Rich Straelin, Dmitry Sokolovsky, and Christian Fresh discuss a trio of AI agent security incidents, including OpenAI Codex sandbox escapes and…
OpenAI hacks Australia health, Astrana Health breached, TeamCity flaw exploited
Sep 25, 2026 · 7m
Steve Prentice covers a major AI agent breach of Australia’s Medicare portal, prompting legal action against OpenAI, alongside other rogue AI hacking incidents.
ShinyHunters peeks at FBI assignments, WordPress flaw wastes no time, Pentagon's cyber appetite grows
Sep 24, 2026 · 7m
Host Sarah Lane covers a 5,000-row FBI spreadsheet leak, a critical WordPress RCE flaw, and a GitLab token vulnerability.
The Department of Know: Passkeys phished, Cisco hits root, nuclear red lines for AI
Sep 18, 2026 · 34m
Host Sarah Lane discusses passkey phishing, fraudulent hires, and airline liability waivers with guests Jason Thomas and Jay Wilson.
Nuclear-style AI safeguards, AI legislation shelved, CISA's decoy guidance
Sep 18, 2026 · 7m
Steve Prentice covers nuclear AI safeguards urged by US and China experts, the delay of the Frontier Act AI safety bill to 2027, and CISA’s new cyber decoy guidance.
Cisco zero-day goes straight to root, BambooToken branches into Linux, CenterPoint breach claim hits 7M+
Sep 16, 2026 · 7m
Sarah Lane covers a Cisco 0-day granting root access, Bamboo Token malware, and a CenterPoint Energy breach affecting 7 million customers.
The Department of Know: Liquid drained, CISA urges change, agentic whistleblowers
Sep 11, 2026 · 33m
Host Rich Strain joins CISOs Alexandra Landger and Mark Eggleston to discuss the "Gambling Goblin" phishing campaign, a browser backdoor toolkit, and US accusations of Chinese AI model distillation.
PEEP browser backdoors, $320M Liquid exploit, BigBear beats MFA
Sep 8, 2026 · 8m
Sarah Lane covers a wave of critical threats, including the "Peep" browser backdoor, a $320M Liquid Network exploit, and the "Big Bear" MFA bypass phishing service.
MikroTik routers hijacked, Russian data center threats, UK cybercrime losses surge
Sep 7, 2026 · 7m
Steve Prentice covers a MicroTik SSH exploit, new Russian data center security mandates, and a surge in UK account hack losses.
ServiceNow vulnerabilities warning, PaperCut zero-day, McKesson healthcare breach
Aug 31, 2026 · 7m
Steve Prentice covers ServiceNow’s critical AI flaws, a PaperCut 0-day, and a massive McKesson breach claimed by Shiny Hunters.
Manchester Airports breach, ATF agency breach, clothier Carhartt breach
Aug 28, 2026 · 7m
Steve Prentice covers several major security incidents, including data breaches at Manchester Airports Group, the ATF, and Carhart.
SynkLoader throws in the kitchen sink, NIST flags multi-cloud sprawl, ReliaQuest blocks a ShinyHunters swing
Aug 25, 2026 · 6m
Hosted by Sarah Lane, this episode covers SynLoader’s advanced capabilities, including a fake lock screen for credential theft.