Klingons, Stop and Shop, OvHCloud, Microsoft, Plex2Shell, ReactOS, and Aaran Leyland - SWN #626
Summary
Host Doug White covers a 26% drop in cybersecurity hiring due to AI adoption and discusses the Stop & Shop breach. The episode analyzes the OVH Cloud CLI malware incident, a ConnectWise credential compromise, and the DHS ban on DeepSeek. Guest Aaron Leland examines the Shiny Hunters ransomware case, highlighting the risks of unvetted negotiators and potential insider threats within the incident response supply chain.
Topics discussed
Intro, season banter, and university bus fare
Cybersecurity job market decline and AI impact
Sponsor: Network Security Virtual Summit
Stop and Shop app outage and confirmed breach
OVH Cloud CLI compromised with infostealer malware
ConnectWise credential leak and API trust gaps
DHS bans DeepSeek AI in federal agencies
Plex to Shell vulnerabilities and patching delays
OpenAI meeting room bugging and physical security
Sponsor: ThreatLocker Zero Trust
Aaron Leland on Shiny Hunters and negotiator ethics
React OS milestone and closing remarks
Listen ad-free on Castria