Cisco zero-day goes straight to root, BambooToken branches into Linux, CenterPoint breach claim hits 7M+
Summary
Sarah Lane covers a Cisco 0-day granting root access, Bamboo Token malware, and a CenterPoint Energy breach affecting 7 million customers. The episode also details Ukraine’s new cyber chief, fake hire risks, a WooCommerce plugin flaw, and Tachin’s cybercrime marketplace. Additionally, it examines the Kremlin Chrome extension malware and its use of Ethereum smart contracts for command and control.
Topics discussed
Introduction and Cisco 0-day vulnerability
Cisco Secure Email Gateway root access flaw
Bamboo Token malware targets Windows and Linux
CenterPoint Energy data breach hits 7 million
Ukraine appoints new cyber coordination lead
Sponsor segment: Vanta
Fake hires gain days of network access
Survey on fraudulent candidate detection rates
CISA warnings on AI-driven job fraud
WooCommerce plugin flaw allows web shells
Tachin group cybercrime marketplace on Telegram
Tachin's services and financial claims
Kremlin malware forges Chrome extensions
Elastic findings on Brazilian banking malware
Outro and feedback information
Listen ad-free on Castria