New SharePoint exploit, Australian OpenAI hack developments, Kiteworks urges stoppage
Summary
Steve Prentice covers a new SharePoint code injection flaw now under active exploitation, alongside doubts about an alleged OpenAI hack of an Australian health portal. Kiteworks urges customers to shut down its platform following credible threat intelligence, while Microsoft pauses an Office update after license deactivation issues. The episode also details active exploitation of unpatched Citrix NetScaler zero-days and Shiny Hunters’ WAF bypass for Oracle PeopleSoft. Finally, it reports on a Welsh police cyberattack and the guilty plea of a Rydox marketplace operator.
Topics discussed
Microsoft SharePoint flaw exploited in the wild
Doubts emerge regarding OpenAI hack of Australian portal
Kiteworks urges customers to stop using platform
Microsoft pauses update after Office license deactivations
Sponsor segment: Inteazer AI SOC
Ryox admin faces 20-year prison sentence
Unpatched Citrix NetScaler RCE 0-days under exploitation
Shiny Hunters upgrades Oracle PeopleSoft attacks
Welsh police force suffers cyber attack
Listen ad-free on Castria