Top level domain theft, Yandex attacked, Cisco Nexus flaws
Summary
Hosted by Steve Prentice, this episode covers attackers hijacking top-level domains to steal Google certificates and a Ukrainian drone strike on a Yandex data center. It also details critical Cisco Nexus switch flaws, active exploitation of a new Atlassian vulnerability, and the Shai-Hulud worm targeting AI infrastructure. Additionally, the show reports on a sophisticated phishing kit, rising web data leaks in Japan, and the DOJ charging a ransomware recovery CEO for fraud.
Topics discussed
Attackers hijack top-level domains for Google certificates
Ukrainian drone strike hits major Yandex data center
Cisco warns of critical flaws in Nexus switches
Attackers target Atlassian vulnerability post-disclosure
Sponsor segment: Vanta compliance automation
Waza Fish Kit targets banking and government sectors
Shai-Hulud worm compromises AI infrastructure via TensorLake
Japan sees sharp rise in web data leaks via API abuse
DOJ charges ransomware recovery CEO for fraud
Outro and feedback information
Listen ad-free on Castria