https://cybersecpods.com The home of cybersecurity podcasts. Curated shows on threat intel, identity, cloud security, red team, blue team, and more — with the latest episodes always at your fingertips. en-us Tue, 06 Oct 2026 10:00:00 GMT https://cybersecpods.com/podcasts/ciso-series-podcast/data-is-the-new-oil-in-that-its-useless-until-you-refine-it/ https://cybersecpods.com/podcasts/ciso-series-podcast/data-is-the-new-oil-in-that-its-useless-until-you-refine-it/ Tue, 06 Oct 2026 10:00:00 GMT All links and images can be found on CISO Series This week's episode is hosted by me, David Spark , producer of CISO Series and Andy Ellis , principal of Duha. Joining us is Jake Lorz , vp information technology and CISO, Cintas . In this episode: Security's identity crisis The AI that never has a bad day Your permissions have secrets Nobody wrote it down A huge thanks to our sponsor, ThreatLocker An AI-generated attack may be new, but it still needs to execute, access data, and move through your environment. ThreatLocker applies enforceable controls at each of those points, limiting what atta CISO Series Podcast https://cybersecpods.com/podcasts/down-the-security-rabbithole/three-dollars-to-hack-your-stack/ https://cybersecpods.com/podcasts/down-the-security-rabbithole/three-dollars-to-hack-your-stack/ Tue, 06 Oct 2026 10:00:00 GMT TL;DR: Mehul joins Rafal live from BSides Atlanta to talk about how AI is changing how vulnerabilities are found and exploited at scale and cost. It's an interesting conversation about how much it costs to break into an organization's software stack. Video: https://youtu.be/kGajA9ipsp4 Guest Mehul Revankar Description A disclosed vulnerability no longer needs weeks of hacker effort. When exploitation becomes an automated, agentic workflow measured in minutes and dollars of compute, the way we rank risk, plan patching, and measure security maturity has to change. Recorded live at B-Sides Atlant Down the Security Rabbithole Podcast (DtSR) https://cybersecpods.com/podcasts/application-security-weekly/getting-granular-with-access-attributes-and-intent-alex-olivier-asw-403/ https://cybersecpods.com/podcasts/application-security-weekly/getting-granular-with-access-attributes-and-intent-alex-olivier-asw-403/ Tue, 06 Oct 2026 09:00:00 GMT The principle of least privilege access is ubiquitous in recommendations, but perhaps too uncommon in practice. Alex Olivier explains how the AuthZen Working Group has been approaching new standards, guidelines, and practical deployment patterns to make it easier for orgs to establish more refined and correct access policies. It's a problem that predates LLMs, but also one that agents and MCPs made all the more acute. We talk about what intent means when trying to constrain agents' activities, what role LLMs have in policy decisions, and how LLMs can help create a much-needed inventory of acce Application Security Weekly (Audio) https://cybersecpods.com/podcasts/click-here/russia-is-building-the-internet-putin-always-wanted/ https://cybersecpods.com/podcasts/click-here/russia-is-building-the-internet-putin-always-wanted/ Tue, 06 Oct 2026 07:00:00 GMT Across Russia, the internet keeps going dark. The Kremlin says the blackouts are necessary to stop Ukrainian drones. But critics say it is really helping Vladimir Putin accomplish something he’s been working toward for years: an internet the Kremlin can control — and, when it wants to, cut off from the rest of the world. Learn about your ad choices: dovetail.prx.org/ad-choices Click Here https://cybersecpods.com/podcasts/cyber-security-headlines/google-pauses-bug-bounties-atb-faces-extortion-exchange-flaw-exposes-mailboxes/ https://cybersecpods.com/podcasts/cyber-security-headlines/google-pauses-bug-bounties-atb-faces-extortion-exchange-flaw-exposes-mailboxes/ Tue, 06 Oct 2026 07:00:00 GMT Google pauses open-source bug bounties amid AI spam Ukraine's largest grocery chain hit by extortion attack Exchange flaw exposes other users' mailboxes Get the show notes here: https://cisoseries.com/cybersecurity-news-october-6-2026/ Huge thanks to our sponsor, Vanta Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more Cybersecurity Headlines https://cybersecpods.com/podcasts/darknet-diaries/180-conti/ https://cybersecpods.com/podcasts/darknet-diaries/180-conti/ Tue, 06 Oct 2026 07:00:00 GMT The word Conti struck fear in IT departments across the world. It's a type of ransomware that you hope to never come across. Like most ransomware gangs, the Conti group fell apart. But what's special about this story is how it fell apart. Because it fell apart in a very public, messy, scandalous way. Featuring investigative journalist Geoff White and cyber threat researcher Alex Holden. Sponsors This show is brought to you by Doppel . Doppel stops AI attacks with digital risk protection, human risk management, and email security on a unified social engineering defense platform. doppel.com This Darknet Diaries https://cybersecpods.com/podcasts/hacking-humans/loose-lips-sink-ai-ships-omitb/ https://cybersecpods.com/podcasts/hacking-humans/loose-lips-sink-ai-ships-omitb/ Tue, 06 Oct 2026 07:00:00 GMT Welcome in! You’ve entered, Only Malware in the Building. Join us each month to sip tea and solve mysteries about today’s most interesting threats. Your host is ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Selena Larson⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ , ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Proofpoint⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ intelligence analyst and host of their podcast ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠DISCARDED⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ . Inspired by the residents of a building in New York’s exclusive upper west side, Selena is joined by her co-hosts ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠N2K Networks⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Dave Bittner⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ and ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Keith Mularski⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ , former FBI cybercrime inve Hacking Humans https://cybersecpods.com/podcasts/hacking-humans/spam-noun-word-notes/ https://cybersecpods.com/podcasts/hacking-humans/spam-noun-word-notes/ Tue, 06 Oct 2026 07:00:00 GMT Please enjoy this encore of Word Notes. Unsolicited, unwanted, and sometimes malicious electronic messages indiscriminately transmitted to a large number of people. CyberWire Glossary link: ⁠https://thecyberwire.com/glossary/spam⁠ Audio reference link: zumpzump, 2007. Monty Python - Spam [Video]. YouTube. URL ⁠https://www.youtube.com/watch?v=anwy2MPT5RE⁠ . Hacking Humans https://cybersecpods.com/podcasts/decipher-security-podcast/catch-me-if-you-can-with-shea-serrano/ https://cybersecpods.com/podcasts/decipher-security-podcast/catch-me-if-you-can-with-shea-serrano/ Tue, 06 Oct 2026 04:00:00 GMT Bestselling author, podcaster, and all around great guy Shea Serrano joins Dennis Fisher and Lindsey O’Donnell-Welch to explore why Catch Me If You Can is more than a con-artist story: it’s a hacker classic and master class in social engineering, confidence, and deception. We unpack Leonardo DiCaprio’s performance, Spielberg’s tension-building, and the film’s memorable cast and scenes. Along the way, the conversation connects the movie to hacker culture and cybersecurity, and asks why Frank Abagnale’s cons still fascinate us today. Links Subscribe to Shea's Good Movie newsletter: https://subst Decipher Security Podcast https://cybersecpods.com/podcasts/cyberwire-daily/a-new-ai-task-force-takes-shape/ https://cybersecpods.com/podcasts/cyberwire-daily/a-new-ai-task-force-takes-shape/ Mon, 05 Oct 2026 20:30:00 GMT The President launches a new federal AI task force. South Korea investigates financial sector data leaks. AI slop overwhelms a Google bug bounty program. Citrix patches an exploited zero-day. Stealthy malware hides inside Asian email security appliances. Apple tightens macOS privacy around AI agents. Attackers exploit a critical Rejetto File Server flaw. The Senate advances healthcare cybersecurity legislation. Monday business briefing. Our guest is Jared Shepard, CEO of Hypori, with insights on how the military is adopting AI technologies. A real good password…isnt’. Remember to leave us a 5- CyberWire Daily https://cybersecpods.com/podcasts/microsoft-healthcare-security-brief/rubrik-part-1/ https://cybersecpods.com/podcasts/microsoft-healthcare-security-brief/rubrik-part-1/ Mon, 05 Oct 2026 18:34:35 GMT Hello! Welcome to today’s episode of the Healthcare Security Brief podcast, where we will explore the evolving landscape of cybersecurity and the partnerships helping healthcare organizations stay resilient. Today, we’re excited to have Josh Howell, Healthcare CTO of Rubrik. Rubrik is a leading cloud data management and security company that provides comprehensive solutions for data protection, recovery, and management across hybrid cloud environments. In part 1 of our discussion with Josh, we dig into topics such as cyber resilience, security of last resort, the healthcare defender, attacks a Microsoft Healthcare Security Brief https://cybersecpods.com/podcasts/microsoft-healthcare-security-brief/abnormal-ai/ https://cybersecpods.com/podcasts/microsoft-healthcare-security-brief/abnormal-ai/ Mon, 05 Oct 2026 18:10:33 GMT Hello! Welcome to today’s episode of the Healthcare Security Brief podcast, where we will explore the evolving landscape of cybersecurity and the partnerships helping healthcare organizations stay resilient. Today, we’re excited to welcome Brett Ferancy, the Strategic Alliance Manager for Abnormal AI. Abnormal AI is a leading AI security platform that leverages machine learning to stop sophisticated inbound attacks and detect compromised accounts across email and connected applications. In today's discussion with Brett, we dig into topics such as speed and precision of attacks being observed, Microsoft Healthcare Security Brief https://cybersecpods.com/podcasts/the-443/microsoft-digital-defense-report-the-443-podcast-episode-390/ https://cybersecpods.com/podcasts/the-443/microsoft-digital-defense-report-the-443-podcast-episode-390/ Mon, 05 Oct 2026 17:49:48 GMT This week on the podcast, we cover a few takeaways from Microsoft's recent Digital Defense Report. Before that, we discuss the recent Citrix Netscaler zero-days that were potentially under active exploit for weeks before disclosure before reviewing an interesting a bug bounty report on a Microsoft internal tool that was exposed externally. The 443 - Security Simplified https://cybersecpods.com/podcasts/cybercrime-magazine/cybercrime-wire-for-oct-5-2026-data-breach-at-denmarks-national-registry-wcyb-di/ https://cybersecpods.com/podcasts/cybercrime-magazine/cybercrime-wire-for-oct-5-2026-data-breach-at-denmarks-national-registry-wcyb-di/ Mon, 05 Oct 2026 14:05:47 GMT The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we’re following. If there’s a cyberattack, hack, or data breach you should know about, then we’re on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com Cybercrime Magazine Podcast https://cybersecpods.com/podcasts/daily-defsec-brief/cyber-security-news-for-october-5-2026-daily-defsec-brief/ https://cybersecpods.com/podcasts/daily-defsec-brief/cyber-security-news-for-october-5-2026-daily-defsec-brief/ Mon, 05 Oct 2026 13:45:25 GMT 1. NetScaler SAML flaw exploited after last fix — CVE-2026-88779 — Fixed: 14.1-73.41 or 13.1-64.28 — federal due 2026-10-07 — Do: Update NetScaler again if it uses SAML — https://support.citrix.com/external/article/CTX697174/citrix-netscaler-adc-and-citrix-netscale.html 2. AI-found Rejetto HFS flaw now exploited — CVE-2026-61500 — Fixed: 3.2.1 — Do: Upgrade Rejetto HFS or take it offline — https://www.cve.org/CVERecord?id=CVE-2026-61500 3. Malicious VS Code themes on official Marketplace — Do: Allowlist the VS Code extensions developers use — https://socket.dev/blog/glassworm-vscode-themes 4. Daily DefSec Brief https://cybersecpods.com/podcasts/cybercrime-magazine/cybercrime-news-for-oct-5-2026-openai-fires-researchers-over-info-sharing-wcyb-d/ https://cybersecpods.com/podcasts/cybercrime-magazine/cybercrime-news-for-oct-5-2026-openai-fires-researchers-over-info-sharing-wcyb-d/ Mon, 05 Oct 2026 13:40:35 GMT The Cybercrime Magazine Podcast brings you daily cybercrime news on WCYB Digital Radio, the first and only 7x24x365 internet radio station devoted to cybersecurity. Stay updated on the latest cyberattacks, hacks, data breaches, and more with our host. Don't miss an episode, airing every half-hour on WCYB Digital Radio and daily on our podcast. Listen to today's news at https://soundcloud.com/cybercrimemagazine/sets/cybercrime-daily-news. Brought to you by our Partner, Evolution Equity Partners, an international venture capital investor partnering with exceptional entrepreneurs to develop marke Cybercrime Magazine Podcast https://cybersecpods.com/podcasts/enterprise-security-weekly/state-of-the-ai-soc-regulating-ai-and-can-ai-agents-feel-pain-aqsa-taylor-esw-47/ https://cybersecpods.com/podcasts/enterprise-security-weekly/state-of-the-ai-soc-regulating-ai-and-can-ai-agents-feel-pain-aqsa-taylor-esw-47/ Mon, 05 Oct 2026 09:00:00 GMT Interview with Aqsa Taylor Exaforce's Chief Security Evangelist, Aqsa, joins us to discuss the current state of the AI SOC and why it covers so much more than it did over 2 years ago, when our podcast first started covering this market. Exaforce also recently released AI Security and its ExaGo mobile app - we're very excited about the possibility of analyzing incidents at the grocery store! This segment is sponsored by Exaforce. Visit https://securityweekly.com/exaforce to learn more about them! Topic Segment - Regulating AI The AI industry's sandbox escapes have had a big impact on everyone a Enterprise Security Weekly (Audio) https://cybersecpods.com/podcasts/identity-at-the-center/452-when-identity-becomes-critical-infrastructure-with-shea-mcgrew/ https://cybersecpods.com/podcasts/identity-at-the-center/452-when-identity-becomes-critical-infrastructure-with-shea-mcgrew/ Mon, 05 Oct 2026 09:00:00 GMT Shea McGrew, Chief Technology Officer at Maricopa County, returns to Identity at the Center one year after episode 376 to take on a question she first raised at our Identity After Dark session: when does digital identity become critical infrastructure? Jeff and Jim talk with Shea about how a county broadband and digital equity project led her to see digital trust as the thread running through every digital government service, and why that trust depends on identity. The conversation covers building an external identity portal for residents, designing for consent and privacy from the start, why Identity at the Center https://cybersecpods.com/podcasts/cyber-security-headlines/warlock-continues-sharepoint-exploits-shinyhunters-member-flips-chinas-ai-espion/ https://cybersecpods.com/podcasts/cyber-security-headlines/warlock-continues-sharepoint-exploits-shinyhunters-member-flips-chinas-ai-espion/ Mon, 05 Oct 2026 07:00:00 GMT Warlock ransomware continues to exploit year-old SharePoint flaws ShinyHunters member detained in Jordan China-aligned espionage group targets American AI policy experts Get the show notes here: https://cisoseries.com/cybersecurity-news-warlock-continues-sharepoint-exploits-shinyhunters-member-flips-chinas-ai-espionage/ Huge thanks to our sponsor, Vanta Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an Cybersecurity Headlines https://cybersecpods.com/podcasts/shared-security-podcast/meta-muse-when-your-ai-assistant-becomes-the-attack-surface/ https://cybersecpods.com/podcasts/shared-security-podcast/meta-muse-when-your-ai-assistant-becomes-the-attack-surface/ Mon, 05 Oct 2026 04:00:00 GMT Meta Muse is designed to work across a user’s inbox, calendar, browser, connected apps, and other personal services. That makes it useful—and makes its delegated authority a security problem worth examining. Tom Eston and Scott Wright discuss Meta’s stated guardrails for Muse, including isolated execution, connector separation, credential boundaries, and approval flows. They also examine reporting on a Muse authentication-token issue and why a compromised token can matter more when an agent is authorized to act across a person’s digital life. The conversation also covers privacy expectations, Shared Security Podcast https://cybersecpods.com/podcasts/sans-internet-stormcenter-daily-cyber-security-podcast-stormcast/sans-stormcast-monday-october-5th-2026-funny-user-agents-fortmail-0-day-gitlab-p/ https://cybersecpods.com/podcasts/sans-internet-stormcenter-daily-cyber-security-podcast-stormcast/sans-stormcast-monday-october-5th-2026-funny-user-agents-fortmail-0-day-gitlab-p/ Mon, 05 Oct 2026 02:00:02 GMT User Agent Strings Curiosities https://isc.sans.edu/diary/User%20Agent%20Strings%20Curiosities/33394 FortiMail Improper limitation of a pathname to a restricted directory CVE-2026-104286 https://fortiguard.fortinet.com/psirt/FG-IR-26-175 Critical GitLab Vulnerability CVE-2026-90970 https://docs.gitlab.com/releases/patches/other-patches/patch-release-gitlab-ai-gateway-19-4-1-released/ Updates to Full Disk Access in macOS https://developer.apple.com/news/?id=p6zjojqw My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) https://cybersecpods.com/podcasts/open-source-security/dependency-attacks-in-2026-with-james-matchett/ https://cybersecpods.com/podcasts/open-source-security/dependency-attacks-in-2026-with-james-matchett/ Mon, 05 Oct 2026 00:00:00 GMT Josh chats with James Matchett from Cloudsmith about a new report they put out. It has some scary looking statistics in it about how organizations are using dependencies. There are some surprising numbers in there, but the story is really one of defense in depth. There's no single thing we can do here, it's all about knowing what you have every step of the way. It's easy to say, but certainly a challenge to do right. James is a ton of fun to chat with and filled with energy and knowledge. The show notes and blog post for this episode can be found at https://opensourcesecurity.io/2026/2026-10-j Open Source Security https://cybersecpods.com/podcasts/nolimitsecu/fuites-de-cles-privee/ https://cybersecpods.com/podcasts/nolimitsecu/fuites-de-cles-privee/ Sun, 04 Oct 2026 20:39:49 GMT Episode #552 Fuites de clés privées Avec guillaume valadon et Gaëtan Ferry Référence : https://www.sstic.org/2026/presentation/private-key-leaks_insights-from-certificate-transparency/ The post Fuites de clés privée appeared first on NoLimitSecu . NoLimitSecu https://cybersecpods.com/podcasts/lock-and-code/a-true-tale-of-virtual-kidnapping-re-air/ https://cybersecpods.com/podcasts/lock-and-code/a-true-tale-of-virtual-kidnapping-re-air/ Sun, 04 Oct 2026 17:00:00 GMT On Thursday, December 28, 2023, at 8:30 pm in the Utah town of Riverdale, the city police began investigating what they believed was a kidnapping. 17-year-old foreign exchange student Kai Zhuang was missing, and according to Riverdale Police Chief Casey Warren , Zhuang was believed to be “forcefully taken” from his home, and “being held against his will.” The evidence leaned in police’s favor. That night, Zhuang’s parents in China reportedly received a photo of Zhuang in distress. They’d also received a ransom demand. But as police in Riverdale and across the state of Utah would soon learn, th Lock and Code https://cybersecpods.com/podcasts/cyber-crime-junkies/real-ai-deception-why-you-keep-falling-for-it-chaos-panel/ https://cybersecpods.com/podcasts/cyber-crime-junkies/real-ai-deception-why-you-keep-falling-for-it-chaos-panel/ Sun, 04 Oct 2026 16:00:00 GMT See how social engineering and content influence shape the online risks facing young people today. We are analyzing a recent panel discussion regarding the intersection of digital platforms and modern manipulation tactics. The participants examine how specific messaging on platforms like Instagram can impact younger audiences, often blurring the lines between entertainment and genuine risk. We also explore the mechanics of AI deception used to create these environments. By understanding these patterns, leaders can better defend against the cybersecurity risks and broader digital threats that a Cyber Crime Junkies https://cybersecpods.com/podcasts/cyberwire-daily/earths-expanding-attack-surface-t-minus-space-cyber-briefing/ https://cybersecpods.com/podcasts/cyberwire-daily/earths-expanding-attack-surface-t-minus-space-cyber-briefing/ Sun, 04 Oct 2026 05:00:00 GMT As space infrastructure expands, so too does the need for cybersecurity expertise beyond securing traditional spacecraft. Host Maria Varmazis speaks with ⁠Milenk Starcevic⁠ , Head of Cybersecurity at ⁠Vision Space⁠ , and ⁠Andrzej “Andy” Olchawa⁠ , Senior Cybersecurity Engineer also at Vision Space, about the growing space cybersecurity field. They discuss the role of compliance and auditing, how cybersecurity professional can develop space-specific skills, and how emerging capabilities are expanding the attack surface. Like what you heard? Be sure to subscribe to our free Signals and Space Bri CyberWire Daily https://cybersecpods.com/podcasts/cyber-crime-junkies/danger-of-hollywood-hacker-myth/ https://cybersecpods.com/podcasts/cyber-crime-junkies/danger-of-hollywood-hacker-myth/ Sat, 03 Oct 2026 16:00:00 GMT Stop believing the Hollywood cybercrime myth. Learn the reality of digital attacks and how to protect your organization. Author Frank Riccardi joins us dispelling the dangerous Hack Myths. His new book Control Alt PWN is excellent. Grab your copy here if this interests you. https://a.co/d/0fEk5bis Real cybercrime is rarely about flashy code on a screen; it is about human manipulation. We analyze how social engineering is used to bypass security protocols, often starting with a simple, unexpected phone call that compromises your team. By stripping away the fiction, you gain the clarity needed t Cyber Crime Junkies https://cybersecpods.com/podcasts/inside-darknet/137-iloveyou/ https://cybersecpods.com/podcasts/inside-darknet/137-iloveyou/ Sat, 03 Oct 2026 08:40:00 GMT Tausende Liebesbriefe landen im Posteingang, kurz darauf schalten Unternehmen und Behörden ihre E-Mail-Systeme ab. Wir folgen den Mails um die Welt und einer Spur zurück nach Manila. Inside Darknet https://cybersecpods.com/podcasts/cyberwire-daily/play-to-win-pay-to-lose-research-saturday/ https://cybersecpods.com/podcasts/cyberwire-daily/play-to-win-pay-to-lose-research-saturday/ Sat, 03 Oct 2026 07:00:00 GMT Today we are joined by Jean-Pierre Mouton , Senior Threat Intelligence Consultant at GuidePoint Security , discussing their work on "How Play Achieves Encryption." Play ransomware, also known as PlayCrypt, continues to target organizations across multiple sectors using a consistent double-extortion playbook that combines data theft with widespread encryption. A recent investigation details how the group gained access through a SonicWall VPN, moved laterally using tools such as Mimikatz and PsExec, exfiltrated sensitive data, and used the victim’s own SentinelOne uninstallation utility to disab CyberWire Daily https://cybersecpods.com/podcasts/cyber-security-headlines/the-department-of-know-shinyhunters-vs-fbi-kiteworks-shutdown-and-hundreds-of-or/ https://cybersecpods.com/podcasts/cyber-security-headlines/the-department-of-know-shinyhunters-vs-fbi-kiteworks-shutdown-and-hundreds-of-or/ Fri, 02 Oct 2026 21:21:00 GMT Read all the stories at CISOSeries.com . This week's Department of Know is hosted by Rich Stroffolino, with guests Brett Conlon , CISO, American Century Investments , and Nick Espinosa , host, Deep Dive Radio Show . Missed the live show? Check it out on YouTube. The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com . Big thanks to our sponsor, Intezer. If you caught our tips this week, they pointed one direction: investigate everything, and keep the evidence. That's a hard promise to make with people. It's an eas Cybersecurity Headlines https://cybersecpods.com/podcasts/security-weekly-news-audio/ram-muse-cloudsyncd-springsteen-software-persistence-and-michael-jenkins-michael/ https://cybersecpods.com/podcasts/security-weekly-news-audio/ram-muse-cloudsyncd-springsteen-software-persistence-and-michael-jenkins-michael/ Fri, 02 Oct 2026 21:00:00 GMT RAM, Muse, CloudSyncD, Springsteen, Who Owns Your Software?, Persistence, Michael Jenkins, CTO of ThreatLocker, and More on this episode of the Security Weekly News. Segment Resources: https://www.bleepingcomputer.com/news/security/malicious-ai-agents-steal-600k-credit-cards-infect-100-plus-sites-with-skimmers/ This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them! Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-621 Security Weekly News (Audio) https://cybersecpods.com/podcasts/cyberwire-daily/a-rough-week-for-safety/ https://cybersecpods.com/podcasts/cyberwire-daily/a-rough-week-for-safety/ Fri, 02 Oct 2026 20:30:00 GMT OpenAI fires safety researchers for mishandling sensitive information. CISA looks to secure the next 250. Dell patches six critical flaws, while attackers exploit a FortiMail zero-day. Warlock ransomware expands its reach, and Star Blizzard scales up its phishing. Researchers map maritime GPS spoofing. An alleged Iranian hacker is extradited to the U.S., and law enforcement takes down KillSec. Our guests are John Kindervag and Dr. Chase Cunningham, discussing their new book "Cyber Resilience at Machine Speed: The Zero Trust Model for the AI Era". Clippy’s back, and this time he wants your wall CyberWire Daily https://cybersecpods.com/podcasts/three-buddy-problem/why-is-anthropic-afraid-of-glm-53/ https://cybersecpods.com/podcasts/three-buddy-problem/why-is-anthropic-afraid-of-glm-53/ Fri, 02 Oct 2026 19:30:00 GMT ( Presented by TLPBLACK : A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals. ) Three Buddy Problem - Episode 115 : We into Anthropic's Frontier Red Team fear-mongering on Zhipu's open-weight GLM 5.3 model and wonder why the AI labs' cyber programs do so little for defenders. Plus, Citrix NetScaler zero-days, a new iOS zero-day tied to WhatsApp, AI agents that act on your behalf, and whether security teams should buy DGX Sparks to run models locally. Cast: Juan Andres Guerrero-Saade , Ryan Naraine Three Buddy Problem https://cybersecpods.com/podcasts/decipher-security-podcast/edge-devices-under-attack-a-threatcon-preview-and-communication-breakdowns/ https://cybersecpods.com/podcasts/decipher-security-podcast/edge-devices-under-attack-a-threatcon-preview-and-communication-breakdowns/ Fri, 02 Oct 2026 18:32:32 GMT Today we have for you a buffet of zero days being exploited in edge security products, including Citrix and Fortinet, then we discuss the importance of communications from vendors when bad things happen, and finally we preview VulnCheck's THREATCON1, which takes place next week. Decipher Security Podcast https://cybersecpods.com/podcasts/cyber-crime-junkies/kurt-long-built-an-app-so-your-messages-cant-be-sold/ https://cybersecpods.com/podcasts/cyber-crime-junkies/kurt-long-built-an-app-so-your-messages-cant-be-sold/ Fri, 02 Oct 2026 16:00:00 GMT Kurt Long CEO and founder of BUNKR (https://www.bunkr.life/) an affordable all-in-one app with secure messaging, password management, and secure file storage. We discuss new approaches to safe and private messaging apps, how to keep criminals out of your private data, and why online privacy is important to freedom. Chapters 01:09 Kurt Long's Work at the Kennedy Space Center 10:14 The Importance of Healthcare Security 20:45 The Risks and Implications of Deepfake Technology 25:51 Introduction to Bunker 27:00 Bunker's Pricing and Affordability 30:06 Bunker's Architecture and Zero Trust Approach 3 Cyber Crime Junkies https://cybersecpods.com/podcasts/cybercrime-magazine/cybercrime-wire-for-oct-3-4-2026-weekend-update-wcyb-digital-radio/ https://cybersecpods.com/podcasts/cybercrime-magazine/cybercrime-wire-for-oct-3-4-2026-weekend-update-wcyb-digital-radio/ Fri, 02 Oct 2026 15:20:43 GMT The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we’re following. If there’s a cyberattack, hack, or data breach you should know about, then we’re on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com Cybercrime Magazine Podcast https://cybersecpods.com/podcasts/the-cyber-threat-perspective/your-employee-got-hacked-now-what-or-ep-198/ https://cybersecpods.com/podcasts/the-cyber-threat-perspective/your-employee-got-hacked-now-what-or-ep-198/ Fri, 02 Oct 2026 15:00:00 GMT Users will get compromised. Someone will click the link, and credentials will get stolen. The question that really matters is what happens next. In this episode, Spencer and Brad walk through the Post-Compromise Risk Framework (PRID), a simple, repeatable way for IT and security teams to judge how exposed their environment is once an attacker gets in. Using a real-world-style ClickFix scenario involving "Susie in accounting," they trace how one compromised account can lead to lateral movement, credential dumping and sensitive data exposure. They also cover why so many of those steps go undetec The Cyber Threat Perspective https://cybersecpods.com/podcasts/decipher-security-podcast/the-citrix-netscaler-zero-day-saga-or-ben-harris/ https://cybersecpods.com/podcasts/decipher-security-podcast/the-citrix-netscaler-zero-day-saga-or-ben-harris/ Fri, 02 Oct 2026 14:27:20 GMT Ben Harris of watchTowr joins Dennis Fisher to walk through the Citrix NetScaler zero days that emerged over the weekend, from first detection of exploitation to reporting to finally some patches and why vendor communication is so vital in these cases. Decipher Security Podcast https://cybersecpods.com/podcasts/cybercrime-magazine/cybercrime-wire-for-oct-2-2026-polish-invoicing-platform-suffers-data-breach-wcy/ https://cybersecpods.com/podcasts/cybercrime-magazine/cybercrime-wire-for-oct-2-2026-polish-invoicing-platform-suffers-data-breach-wcy/ Fri, 02 Oct 2026 14:19:26 GMT The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we’re following. If there’s a cyberattack, hack, or data breach you should know about, then we’re on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com Cybercrime Magazine Podcast https://cybersecpods.com/podcasts/cybercrime-magazine/cybercrime-news-for-oct-2-2026-spokane-schools-back-online-after-cyberattack-wcy/ https://cybersecpods.com/podcasts/cybercrime-magazine/cybercrime-news-for-oct-2-2026-spokane-schools-back-online-after-cyberattack-wcy/ Fri, 02 Oct 2026 13:29:31 GMT The Cybercrime Magazine Podcast brings you daily cybercrime news on WCYB Digital Radio, the first and only 7x24x365 internet radio station devoted to cybersecurity. Stay updated on the latest cyberattacks, hacks, data breaches, and more with our host. Don't miss an episode, airing every half-hour on WCYB Digital Radio and daily on our podcast. Listen to today's news at https://soundcloud.com/cybercrimemagazine/sets/cybercrime-daily-news. Brought to you by our Partner, Evolution Equity Partners, an international venture capital investor partnering with exceptional entrepreneurs to develop marke Cybercrime Magazine Podcast https://cybersecpods.com/podcasts/cybercrime-magazine/talking-cyber-solar-storm-threatens-gps-driverless-cars-heather-engel-strategic-/ https://cybersecpods.com/podcasts/cybercrime-magazine/talking-cyber-solar-storm-threatens-gps-driverless-cars-heather-engel-strategic-/ Fri, 02 Oct 2026 13:00:16 GMT According to Futurism.com, a recent solar storm that alarmed researchers as GPS readings veered off by 33 feet, which was reportedly enough to crash self-driving cars. In this episode, host Amanda Glassner is joined by Heather Engel, Managing Partner at Strategic Cyber Partners, to discuss. To learn more about today's stories, visit https://cybercrimewire.com • For more on cybersecurity, visit us at https://cybersecurityventures.com. Cybercrime Magazine Podcast https://cybersecpods.com/podcasts/daily-defsec-brief/cyber-security-news-for-october-2-2026-daily-defsec-brief/ https://cybersecpods.com/podcasts/daily-defsec-brief/cyber-security-news-for-october-2-2026-daily-defsec-brief/ Fri, 02 Oct 2026 12:27:16 GMT 1. FortiMail zero-day exploited, no patch yet — CVE-2026-104286 — federal due 2026-10-04 — Do: Take FortiMail's admin interface off the internet — https://fortiguard.fortinet.com/psirt/FG-IR-26-175 2. Warlock still breaking in through SharePoint — CVE-2025-49704, CVE-2025-49706, CVE-2025-53770 (+ 2 more) — Do: Patch SharePoint, then rotate its machine keys — https://www.security.com/threat-intelligence/warlock-ransomware-critical-infrastructure 3. Kiteworks fixes 126 flaws, one pre-auth root — CVE-2026-54154 — Fixed: 9.5.1 (EPG 9.4.1) — Do: Upgrade Kiteworks to the current release — https://cy Daily DefSec Brief https://cybersecpods.com/podcasts/7-minute-security/7ms-742-babys-first-n8n/ https://cybersecpods.com/podcasts/7-minute-security/7ms-742-babys-first-n8n/ Fri, 02 Oct 2026 12:07:00 GMT Hey friends! I've got some personal and work travel this week, so I'm skipping the tangents (mostly) and jumping straight into something I'm nerdily excited about: Baby's First n8n . If you're not familiar, n8n is a platform for chaining together and automating just about anything your heart desires – and naturally, my heart desires automating away the boring parts of pentesting. In this episode I cover how I finally got hip to n8n (late to the party, as always), the Black Hills webcast that nudged me into it, how I fed Claude my Frankenstein "Swiss Army" pentest script and asked it to turn pu 7 Minute Security https://cybersecpods.com/podcasts/entra-chat/your-ai-coding-agent-is-creating-secrets-you-dont-know-about/ https://cybersecpods.com/podcasts/entra-chat/your-ai-coding-agent-is-creating-secrets-you-dont-know-about/ Fri, 02 Oct 2026 09:50:25 GMT Ask a coding agent to build something that talks to another service and watch what it does. It creates a client secret. Then another one. As Arturo Lucatero puts it, next thing you know you have ten secrets that were created without you knowing about it. At the speed AI is moving, he thinks we could be cleaning up a few million new secrets within six months. That would undo a lot of hard work. Under Microsoft’s Secure Future Initiative, Microsoft spent years removing secrets from its own estate and helping customers do the same with managed identities and workload identity federation. The agen Entra.Chat https://cybersecpods.com/podcasts/click-here/how-ai-can-debunk-a-conspiracy-theory-in-8-minutes/ https://cybersecpods.com/podcasts/click-here/how-ai-can-debunk-a-conspiracy-theory-in-8-minutes/ Fri, 02 Oct 2026 07:00:00 GMT Once someone believes a conspiracy theory, can anything change their mind? Researchers tried something unexpected: an AI chatbot. After just eight minutes of conversation, some conspiracy theorists were significantly less convinced. What did the bot know about changing minds that we don’t? Learn about your ad choices: dovetail.prx.org/ad-choices Click Here https://cybersecpods.com/podcasts/cyber-security-headlines/ai-readiness-reports-killsec-takedown-openai-website-scraping/ https://cybersecpods.com/podcasts/cyber-security-headlines/ai-readiness-reports-killsec-takedown-openai-website-scraping/ Fri, 02 Oct 2026 07:00:00 GMT Report suggests AI and quantum threat preparedness is lacking Authorities seize KillSec extortion group arrest leader Dozens more prominent websites scraped by OpenAI software Get the show notes here: https://cisoseries.com/cybersecurity-news-ai-readiness-reports-killsec-takedown-openai-website-scraping/ Huge thanks to our episode sponsor, Intezer Today's tip: treat every false positive like a bug report against a detection rule. Fix the rule, and that noise stops coming back. Intezer does that for you, so your SOC gets quieter over time instead of louder. Intezer . The AI SOC trusted by Sales Cybersecurity Headlines https://cybersecpods.com/podcasts/risky-business-features/bug-count-sounds-impressive-but-means-little/ https://cybersecpods.com/podcasts/risky-business-features/bug-count-sounds-impressive-but-means-little/ Fri, 02 Oct 2026 03:42:22 GMT In this solo Risky Business Features episode, James Wilson explains why “number of bugs” fixed in any given update is a misleading metric. We’ve seen up to 1,000 individual bug fixes in a single update recently, but that doesn’t give defenders the full picture they need to manage risks. Not all bugs are equally exploitable, so the industry needs to catch up to the bugpocalypse with more transparency. And maybe an entirely different approach to patching. Show notes Risky Business Features https://cybersecpods.com/podcasts/risky-bulletin/authorities-dismantle-killsec-group/ https://cybersecpods.com/podcasts/risky-bulletin/authorities-dismantle-killsec-group/ Fri, 02 Oct 2026 02:57:07 GMT Authorities dismantle the KillSec hacking group, South Africa thwarts a ransomware attack against air traffic control systems, the US sanctions Venezuelan ATM hackers and a Chinese APT targets AI experts. Show notes Risky Bulletin: Authorities dismantle KillSec group, arrest members across Europe Risky Bulletin https://cybersecpods.com/podcasts/sans-internet-stormcenter-daily-cyber-security-podcast-stormcast/sans-stormcast-friday-october-2nd-2026-screenconnect-abuse-chatgpt-abuse-spoofin/ https://cybersecpods.com/podcasts/sans-internet-stormcenter-daily-cyber-security-podcast-stormcast/sans-stormcast-friday-october-2nd-2026-screenconnect-abuse-chatgpt-abuse-spoofin/ Fri, 02 Oct 2026 02:00:02 GMT ScreenConnect Client (Ab)used by Attackers https://isc.sans.edu/diary/ScreenConnect+Client+Abused+by+Attackers/33388/#comments Attackers abuse ChatGPT to deliver RAT via ClickFix https://www.huntress.com/blog/chatgpt-custom-gpts-clickfix-rat?_sp=51406044-aa1d-4278-a4e7-adb5b8ef84b2.1790890760100 Spoofing iCloud From Address https://sec-consult.com/blog/detail/from-anyoneicloudcom-spoofing-arbitrary-apple-icloud-identities/ Sender spoofing in Proton Mail via display-name homograph https://alonsovidales.github.io/protonmail-sender-spoofing/ My Upcoming Classes https://www.sans.org/profiles/dr-jo SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) https://cybersecpods.com/podcasts/hacked/the-gta-6-leak-with-a-dollar250000-crypto-question/ https://cybersecpods.com/podcasts/hacked/the-gta-6-leak-with-a-dollar250000-crypto-question/ Fri, 02 Oct 2026 00:01:00 GMT It's a good old chatty chat. We dig into the GTA 6 leak, with a strange crypto angle to it. Harnesses like Open-claw become consumer products with Muse and dots. And other stuff? Lots Hacked is presented by NordLayer. NordLayer is a network security platform for modern teams. NordLayer gives companies centralized control over who can access their systems, keeps every connection fast and encrypted, and requires no additional hardware or complex infrastructure. nordlayer.com/hackedpodcast Learn more about your ad choices. Visit podcastchoices.com/adchoices Hacked