Pastime | Podcast
Pastime
Search

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security is a weekly information security podcast which reviews recent high profile cyber security breaches, data breaches, malware infections and intrusions to identify lessons that we can learn and apply to the organizations we protect.

Defensive Security Podcast Episode 352

Jul 03 2026 | 01:02:30

Please consider supporting the DefSec podcast here.
This week’s stories:
https://www.securityweek.com/npm-12-will-change-script-execution-behavior-to-prevent-supply-chain-attacks/
https://www.bleepingcomputer.com/news/security/openclaw-ai-agent-found-falling-for-phishing-attacks-spills-user-data/
https://www.cybersecuritydive.com/news/cisa-vulnerability-remediation-prioritization-directive/822504/
https://www.bleepingcomputer.com/news/security/chinese-hackers-hijack-auth-flow-spy-on-isolated-network-for-a-decade/
https://doublepulsar.com/an-update-on-fortibleed-whats-happening-with-victim-orgs-c0671a50e7f4

Defensive Security Podcast Episode 351

Jun 27 2026 | 01:11:02

Please consider supporting the DefSec podcast here.
Links to this week’s stories:
https://www.theregister.com/cyber-crime/2026/06/05/if-you-dont-fall-for-these-extortionists-calls-theyll-show-up-with-usb-sticks/5251891
https://thehackernews.com/2026/06/only-10-of-socs-say-theyre-getting.html?m=1
https://arstechnica.com/security/2026/06/dashlane-explains-how-attackers-managed-to-download-encrypted-password-vaults/
https://www.bleepingcomputer.com/news/security/hackers-hijack-thousands-of-sites-for-clickfix-and-fakeupdate-attacks/
https://krebsonsecurity.com/2026/06/hackers-used-metas-ai-support-bot-to-seize-instagram-accounts/
https://www.cybersecuritydive.com/news/ai-cybersecurity-hype-reality-check-gartner/821867/0:0

Defensive Security Podcast Episode 350

Jun 10 2026 | 01:07:44

Please consider supporting the DefSec podcast here.

Links to this week’s stories:

https://www.darkreading.com/threat-intelligence/ai-assisted-exploit-development-scanner-detection
https://www.bleepingcomputer.com/news/security/california-ag-sues-23andme-over-2023-breach-exposing-health-data/
https://www.bleepingcomputer.com/news/security/palo-alto-globalprotect-vpn-auth-bypass-flaw-now-exploited-in-attacks/
https://techcrunch.com/2026/05/29/microsoft-under-fire-for-threatening-security-researcher-with-criminal-investigation/
https://www.darkreading.com/application-security/megalodon-malware-infects-thousands-github-repos

Defensive Security Podcast Episode 349

Jun 04 2026 | 01:05:57

Please consider supporting the DefSec podcast here.
Links to this week’s stories:

https://thehackernews.com/2026/05/claude-mythos-ai-finds-10000-high.html
https://www.tenable.com/blog/key-findings-from-the-verizon-dbir-2026
https://krebsonsecurity.com/2026/05/cisa-admin-leaked-aws-govcloud-keys-on-github/
https://www.bleepingcomputer.com/news/security/grafana-breach-caused-by-missed-token-rotation-after-tanstack-attack/
https://www.bleepingcomputer.com/news/security/github-links-repo-breach-to-tanstack-npm-supply-chain-attack/
https://thehackernews.com/2026/05/npm-adds-2fa-gated-publishing-and.html

Defensive Security Podcast Episode 348

May 24 2026 | 00:56:30

Please consider supporting the DefSec podcast here.

Links to this week’s stories:

https://www.securityweek.com/openai-hit-by-tanstack-supply-chain-attack/
https://thehackernews.com/2026/05/developer-workstations-are-now-part-of.html
https://thehackernews.com/2026/05/ivanti-fortinet-sap-vmware-n8n-patch.html
https://www.theregister.com/cyber-crime/2026/05/14/security-pros-doubt-canvas-attackers-really-deleted-stolen-student-data/5240799

https://www.theregister.com/cyber-crime/2026/05/14/security-pros-doubt-canvas-attackers-really-deleted-stolen-student-data/5240799

Defensive Security Podcast Episode 347

May 22 2026 | 00:56:05

Please consider supporting the DefSec podcast here.
Links to this week’s stories:

https://www.bleepingcomputer.com/news/security/instructure-reaches-agreement-with-shinyhunters-to-stop-data-leak/
https://www.theregister.com/security/2026/05/06/1-in-8-workers-say-selling-company-logins-is-justifiable/5231104
https://www.theregister.com/security/2026/05/02/ai-digs-up-decades-of-code-debt-patch-up/5219734
https://www.theregister.com/security/2026/05/11/anthropics-bug-hunting-mythos-was-greatest-marketing-stunt-ever-says-curl-creator/5238111
https://www.securityweek.com/cyber-insurance-data-gives-cisos-new-ammo-for-budget-talks/

Defensive Security Podcast Episode 346

May 15 2026 | 01:12:32

Please consider supporting the DefSec podcast here.

Links to this week’s stories:

https://www.darkreading.com/cloud-security/csa-cisos-prepare-post-mythos-exploit-storm
https://www.csoonline.com/article/4159292/insurance-carriers-quietly-back-away-from-covering-ai-outputs.html
https://www.livescience.com/technology/artificial-intelligence/hackers-used-ai-to-steal-hundreds-of-millions-of-mexican-government-and-private-citizen-records-in-one-of-the-largest-cybersecurity-breaches-ever
https://www.bleepingcomputer.com/news/security/payouts-king-ransomware-uses-qemu-vms-to-bypass-endpoint-security/
https://cybermagazine.com/news/how-cybercriminals-breached-gta-maker-rockstar

Defensive Security Podcast Episode 345

Apr 22 2026 | 01:00:30

Please consider supporting the DefSec podcast here.

Links to this week’s stories:

https://www.darkreading.com/threat-intelligence/axios-attack-complex-social-engineering-industrialized
https://www.bleepingcomputer.com/news/security/new-venom-phishing-attacks-steal-senior-executives-microsoft-logins/
https://www.bleepingcomputer.com/news/security/google-new-unc6783-hackers-steal-corporate-zendesk-support-tickets/
https://www.darkreading.com/vulnerabilities-threats/bluehammer-windows-exploit-microsoft-bug-disclosure-issues
https://www.businessinsider.com/mercor-lawsuits-data-breach-2026-4

Defensive Security Podcast Episode 344

Apr 14 2026 | 00:56:30

Please consider supporting the DefSec podcast here.

Links to stories:

https://www.computerweekly.com/news/366640648/Emergency-Microsoft-Oracle-patches-point-to-wider-cyber-issues
https://www.theregister.com/2026/03/27/security_boffins_harvest_bumper_crop/
https://thehackernews.com/2026/03/the-hidden-cost-of-cybersecurity.html?m=1
https://www.theregister.com/2026/03/24/trivy_compromise_litellm/
https://thehackernews.com/2026/03/axios-supply-chain-attack-pushes-cross.html?m=1

Defensive Security Podcast Episode 343

Apr 04 2026 | 01:22:52

Please consider supporting the DefSec podcast here.
Here are the links we discuss this week:

https://www.darkreading.com/identity-access-management-security/more-attackers-logging-in-not-breaking-in
https://www.bleepingcomputer.com/news/security/stryker-attack-wiped-tens-of-thousands-of-devices-no-malware-needed/
https://www.csoonline.com/article/4147833/cisa-urges-it-to-harden-endpoint-management-systems-after-cyberattack-by-pro-iranian-group.html
https://arstechnica.com/security/2026/03/widely-used-trivy-scanner-compromised-in-ongoing-supply-chain-attack/
https://techcrunch.com/2026/03/21/delve-accused-of-misleading-customers-with-fake-compliance/

Defensive Security Podcast Episode 342B

Mar 28 2026 | 01:04:12

This time it’s not a rerun!
]Please consider supporting the DefSec podcast here.
Here are the links we discuss this week:

https://www.bleepingcomputer.com/news/security/ransomware-payment-rate-drops-to-record-low-as-attacks-surge/
https://www.securityweek.com/recent-cisco-catalyst-sd-wan-vulnerability-now-widely-exploited/
https://www.darkreading.com/cyberattacks-data-breaches/nation-state-actor-ai-malware-assembly-line
https://www.cybersecuritydive.com/news/ransomware-identity-ai-cloudflare/813319/
https://thehackernews.com/2026/03/anthropic-finds-22-firefox.html?m=1

Defensive Security Podcast Episode 341

Mar 09 2026 | 01:06:14

Please consider supporting the DefSec podcast here.
Here are the links we discuss this week:
https://www.bleepingcomputer.com/news/security/amazon-ai-assisted-hacker-breached-600-fortigate-firewalls-in-5-weeks/
https://www.theregister.com/2026/02/16/open_source_registries_fund_security/
https://www.bleepingcomputer.com/news/security/infostealer-malware-found-stealing-openclaw-secrets-for-first-time/
https://www.securityweek.com/api-threats-grow-in-scale-as-ai-expands-the-blast-radius/
https://www.theregister.com/2026/02/19/rmm_rat_trustconnect/

Defensive Security Podcast Episode 340

Feb 24 2026 | 01:03:37

Please consider supporting the DefSec podcast here.
Links to this week’s stories:
https://www.theregister.com/2026/02/02/notepad_hijacking_lotus_blossom/
https://www.bleepingcomputer.com/news/security/fake-job-recruiters-hide-malware-in-developer-coding-challenges/
https://www.bleepingcomputer.com/news/security/amos-infostealer-targets-macos-through-a-popular-ai-app/
https://www.theregister.com/2026/02/10/ai_agents_messaging_apps_data_leak/
https://www.theregister.com/2026/02/11/payroll_pirates_business_social_engineering/

Defensive Security Podcast Episode 339

Feb 16 2026 | 01:07:41

Please consider supporting the DefSec podcast here.
Links to the stories we cover in this episode:

https://www.theregister.com/2026/01/29/faster_patching_please_cry_infoseccers/
https://thehackernews.com/2026/01/mandiant-finds-shinyhunters-using.html?m=1
https://www.bleepingcomputer.com/news/security/marquis-blames-ransomware-breach-on-sonicwall-cloud-backup-hack/
https://thehackernews.com/2026/01/researchers-find-175000-publicly.html?m=1
https://www.darkreading.com/application-security/openclaw-ai-runs-wild-business-environments

Defensive Security Podcast Episode 338

Feb 02 2026 | 00:58:17

Please consider supporting the DefSec podcast here.
Links to the stories we cover in this episode:
https://www.bleepingcomputer.com/news/security/hackers-exploit-security-testing-apps-to-breach-fortune-500-firms/
https://www.securityweek.com/analysis-of-6-billion-passwords-shows-stagnant-user-behavior/
https://www.theregister.com/2026/01/20/group_ib_ai_cycercrime_subscriptions/
https://www.bleepingcomputer.com/news/security/voidlink-cloud-malware-shows-clear-signs-of-being-ai-generated/
https://arstechnica.com/security/2026/01/mandiant-releases-rainbow-table-that-cracks-weak-admin-password-in-12-hours/

Defensive Security Podcast Episode 337

Jan 26 2026 | 01:05:26

Want to be the first to hear our episodes each week?  Become a Patreon donor here.
Links to the stories in this episode:

https://www.theregister.com/2026/01/09/pyongyangs_cyberspies_are_turning_qr/
https://www.scworld.com/perspective/five-ways-to-conduct-a-more-secure-hiring-process
https://cybersecuritynews.com/vmware-esxi-exploited-toolkit/
https://www.darkreading.com/cyber-risk/ciso-succession-crisis-highlights-turnover-amplifies-security-risks

Defensive Security Podcast Episode 336

Jan 15 2026 | 01:07:24

Want to be the first to hear our episodes each week?  Become a Patreon donor here.
Links to this week’s stories:

https://www.darkreading.com/cyber-risk/cybersecurity-tech-recommended-by-cyber-insurer-claims-data
https://www.bleepingcomputer.com/news/security/trust-wallet-links-85-million-crypto-theft-to-shai-hulud-npm-attack/
https://www.securityweek.com/hacker-claims-theft-of-40-million-conde-nast-records-after-wired-data-leak/
https://databreaches.net/2025/12/30/software-company-lacked-downstream-liability-for-data-breach/
https://techcrunch.com/2025/12/12/home-depot-exposed-access-to-internal-systems-for-a-year-says-researcher/

Defensive Security Podcast Episode 334

Dec 25 2025 | 01:07:21

Want to be the first to hear our episodes each week?  Become a Patreon donor here.
Merry Christmas and Happy Holidays!
Links to this week’s stories:
https://krebsonsecurity.com/2025/12/most-parked-domains-now-serving-malicious-content/
https://thehackernews.com/2025/12/russia-linked-hackers-use-microsoft-365.html?m=1
https://cybersecuritynews.com/amazon-catches-north-korean-it-worker/
https://www.darkreading.com/application-security/fake-proof-ai-slop-hobble-defenders
https://www.helpnetsecurity.com/2025/12/17/cisco-secure-email-cve-2025-20393/

Defensive Security Podcast Episode 333

Dec 20 2025 | 01:11:50

Want to be the first to hear our episodes each week?  Become a Patreon donor here.

Links to this week’s stories:

https://www.theregister.com/2025/12/09/hypervisor_ransomware_attacks_increasing

https://www.bleepingcomputer.com/news/security/react2shell-flaw-exploited-to-breach-30-orgs-77k-ip-addresses-vulnerable

https://www.infosecurity-magazine.com/news/log4shell-downloaded-40-million

https://www.infosecurity-magazine.com/news/ncsc-raises-alarms-prompt

https://thehackernews.com/2025/12/researchers-uncover-30-flaws-in-ai.html?m=1

Defensive Security Podcast Episode 332

Dec 13 2025 | 01:02:13

Want to be the first to hear our episodes each week?  Become a Patreon donor here.
Links to this week’s stories:
https://www.darkreading.com/cyberattacks-data-breaches/advanced-security-phishing-tactics
https://www.theregister.com/2025/11/28/posthog_shaihulud/?td=keepreading / https://posthog.com/blog/nov-24-shai-hulud-attack-post-mortem
https://www.theregister.com/2025/11/27/scattered_lapsus_hunters_zendesk/
https://www.theregister.com/2025/11/25/akira_ransomware_acquisitions
Browser extensions pushed malware to 4.3M Chrome, Edge users • The Register

Defensive Security Podcast Episode 331B

Dec 02 2025 | 01:10:28

Reposting Episode 331 due to the wrong mp3 attached to the original.

Want to be the first to hear our episodes each week?  Become a Patreon donor here.
Links to this week’s stories:

https://cloud.google.com/blog/topics/threat-intelligence/unc6040-proactive-hardening-recommendations
https://www.theregister.com/2025/11/13/chinese_spies_claude_attacks/ / https://www.bleepingcomputer.com/news/security/anthropic-claims-of-claude-ai-automated-cyberattacks-met-with-doubt/
https://www.theregister.com/2025/11/14/selfreplicating_supplychain_attack_poisons_150k/
https://cyberscoop.com/fortinet-delayed-disclosure-exploited-vulnerability/
https://www.bleepingcomputer.com/news/security/piecing-together-the-puzzle-a-qilin-ransomware-investigation/


Repo
Want to be the first to hear our episodes each week?  Become a Patreon donor here.
Links to this week’s stories:

https://cloud.google.com/blog/topics/threat-intelligence/unc6040-proactive-hardening-recommendations
https://www.theregister.com/2025/11/13/chinese_spies_claude_attacks/ / https://www.bleepingcomputer.com/news/security/anthropic-claims-of-claude-ai-automated-cyberattacks-met-with-doubt/
https://www.theregister.com/2025/11/14/selfreplicating_supplychain_attack_poisons_150k/
https://cyberscoop.com/fortinet-delayed-disclosure-exploited-vulnerability/
https://www.bleepingcomputer.com/news/security/piecing-together-the-puzzle-a-qilin-ransomware-investigation/

Defensive Security Podcast Episode 330

Nov 24 2025 | 01:01:31

Want to be the first to hear our episodes each week?  Become a Patreon donor here.
Links to this week’s stories:

https://www.cybersecuritydive.com/news/nevada-ransomware-attack-traced-back-to-malware-download-by-employee/805011/
https://cloud.google.com/blog/topics/threat-intelligence/threat-actor-usage-of-ai-tools
https://www.darkreading.com/application-security/owasp-highlights-supply-chain-risks-new-top-10
https://www.computerweekly.com/news/366634363/Google-Dont-get-distracted-by-AI-focus-on-real-cyber-threats

Defensive Security Podcast Episode 329

Nov 13 2025 | 00:59:50

https://www.youtube.com/watch?v=3BaNujBx62Y

Want to be the first to hear our episodes each week?  Become a Patreon donor here.
Links to this week’s stories:
https://www.theregister.com/2025/11/03/mit_sloan_updates_ai_ransomware_paper/
https://www.theregister.com/2025/10/29/ey_exposes_4tb_sql_database/
https://www.darkreading.com/cyber-risk/zombie-projects-rise-again-undermine-security
https://www.darkreading.com/cloud-security/cloud-outages-highlight-need-resilient-secure-infrastructure-recovery

Defensive Security Podcast Episode 328

Nov 03 2025 | 00:54:10

Want to be the first to hear our episodes each week?  Become a Patreon donor here.

Links we discuss this week:
https://thehackernews.com/2025/10/self-spreading-glassworm-infects-vs.html?m=1
https://www.cybersecuritydive.com/news/artificial-intelligence-security-risks-ey-report/803490/
https://www.cybersecuritydive.com/news/ai-augment-security-identity-soc/803608/
https://www.darkreading.com/cyber-risk/best-end-user-security-awareness-programs-arent-about-awareness-anymore
https://www.bleepingcomputer.com/news/security/hackers-now-exploiting-critical-windows-server-wsus-flaw-in-attacks/

Defensive Security Podcast Episode 327

Oct 27 2025 | 01:00:23

Want to be the first to hear our episodes each week?  Become a Patreon donor here.
Links to this week’s stories:
https://www.cybersecurity-insiders.com/how-ai-will-shape-the-future-of-cyber-defense-a-one-three-and-five-year-outlook/
https://www.helpnetsecurity.com/2025/10/15/f5-big-ip-data-breach/
https://www.bleepingcomputer.com/news/security/fake-lastpass-bitwarden-breach-alerts-lead-to-pc-hijacks/
https://blogs.microsoft.com/on-the-issues/2025/10/16/mddr-2025/
https://www.theguardian.com/technology/2025/oct/19/global-cyber-attack-russian-hack-solarwinds-stress-health

Defensive Security Podcast Episode 326

Oct 21 2025 | 01:06:30

Want to be the first to hear our episodes each week?  Become a Patreon donor here.
Here are the stories we discuss this week:
https://cybersecuritynews.com/hackers-actively-compromising-databases/
https://www.bleepingcomputer.com/news/security/hackers-target-university-hr-employees-in-payroll-pirate-attacks/
https://securityaffairs.com/183154/security/threat-actors-steal-firewall-configs-impacting-all-sonicwall-cloud-backup-users.html
https://www.theregister.com/2025/10/07/gen_ai_shadow_it_secrets/
https://thehackernews.com/2025/10/from-phishing-to-malware-ai-becomes.html?m=1
https://databreaches.net/2025/10/12/from-sizzle-to-drizzle-to-fizzle-the-massive-data-leak-that-wasnt/

Defensive Security Podcast Episode 325

Oct 13 2025 | 01:03:07

Want to be the first to hear our episodes each week?  Become a Patreon donor here.
Here are links to the stories we discuss this week:
https://www.theregister.com/2025/09/29/postmark_mcp_server_code_hijacked/
https://www.bleepingcomputer.com/news/security/oracle-patches-ebs-zero-day-exploited-in-clop-data-theft-attacks/
https://www.bleepingcomputer.com/news/security/westjet-data-breach-exposes-travel-details-of-12-million-customers/
https://www.cybersecuritydive.com/news/material-cybersecurity-breaches-unreported/760892/
https://www.securityweek.com/red-hat-confirms-gitlab-instance-hack-data-theft/
https://www.securityweek.com/hackers-extorting-salesforce-after-stealing-data-from-dozens-of-customers/
https://databreaches.net/2025/10/04/just-days-before-its-data-might-be-leaked-qantas-airways-obtained-a-permanent-injunction/

Defensive Security Podcast Episode 324

Oct 06 2025 | 01:19:57

Here are links to the stories we discuss this week:

https://cloud.google.com/blog/topics/threat-intelligence/brickstorm-espionage-campaign
https://thehackernews.com/2025/09/github-mandates-2fa-and-short-lived.html
https://www.theregister.com/2025/09/23/gartner_ai_attack/
https://www.bleepingcomputer.com/news/security/sonicwall-releases-sma100-firmware-update-to-wipe-rootkit-malware/
https://www.zdnet.com/article/battered-by-cyberattacks-salesforce-faces-a-trust-problem-and-a-potential-class-action-lawsuit/

Defensive Security Podcast Episode 323

Sep 29 2025 | 00:50:47

Please follow us on YouTube! 
Want episodes a week early?  Consider becoming a Patreon sponsor of the DefSec podcast here.

Here are links to the stories we talked about this week:
https://krebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/
https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/
https://blog.lastpass.com/posts/attack-targeting-macs-via-github-pages
https://cybersecuritynews.com/finwise-insider-breach/
https://arstechnica.com/security/2025/09/how-weak-passwords-and-other-failings-led-to-catastrophic-breach-of-ascension/