Defensive Security Podcast Episode 325

Want to be the first to hear our episodes each week?  Become a Patreon donor here.
Here are links to the stories we discuss this week:
https://www.theregister.com/2025/09/29/postmark_mcp_server_code_hijacked/
https://www.bleepingcomputer.com/news/security/oracle-patches-ebs-zero-day-exploited-in-clop-data-theft-attacks/
https://www.bleepingcomputer.com/news/security/westjet-data-breach-exposes-travel-details-of-12-million-customers/
https://www.cybersecuritydive.com/news/material-cybersecurity-breaches-unreported/760892/
https://www.securityweek.com/red-hat-confirms-gitlab-instance-hack-data-theft/
https://www.securityweek.com/hackers-extorting-salesforce-after-stealing-data-from-dozens-of-customers/
https://databreaches.net/2025/10/04/just-days-before-its-data-might-be-leaked-qantas-airways-obtained-a-permanent-injunction/