Poetry-powered botnet, Flock hits a roadblock, Outlook blocks risky installers
Summary
Host Sarah Lane covers a botnet using GitHub poems for command and control, a judge ruling Flock’s warrantless tracking unconstitutional, and a malicious NPM supply chain campaign. The episode also details AWS’s new sandbox for AI agents, Microsoft blocking risky Outlook attachments, and major data breaches at the Arizona courts and Southern Company. Finally, the FBI warns of FortiBleed attacks targeting exposed FortiGate firewalls and VPN gateways.
Topics discussed
Introduction to Cybersecurity Headlines
Poe LLM botnet uses GitHub poem for C2
Flock warrantless tracking ruled unconstitutional
Malfax supply chain attack via malicious NPM packages
AWS releases StrandsBox sandbox for AI agents
Sponsor segment: Vanta compliance platform
Outlook blocks risky .m6 installer attachments
Arizona court breach exposes 30 years of data
Southern Company utility customer data breach
FBI warns of FortiBleed attacks on VPN gateways
Outro and feedback information
Listen ad-free on Castria