Please consider supporting the DefSec podcast here.

This week’s stories:

https://www.securityweek.com/npm-12-will-change-script-execution-behavior-to-prevent-supply-chain-attacks/

https://www.bleepingcomputer.com/news/security/openclaw-ai-agent-found-falling-for-phishing-attacks-spills-user-data/

https://www.cybersecuritydive.com/news/cisa-vulnerability-remediation-prioritization-directive/822504/

https://www.bleepingcomputer.com/news/security/chinese-hackers-hijack-auth-flow-spy-on-isolated-network-for-a-decade/

https://doublepulsar.com/an-update-on-fortibleed-whats-happening-with-victim-orgs-c0671a50e7f4

Please consider supporting the DefSec podcast here.

Links to stories:

https://www.securityweek.com/massive-password-spray-campaign-targeting-azure-cli/

https://thehackernews.com/2026/07/2026-cybersecurity-assessment-gap.html

https://www.cybersecuritydive.com/news/klue-investigating-supply-chain-attack-salesforce-integrations/823532/

https://www.bleepingcomputer.com/news/security/over-900-oracle-e-business-instances-exposed-to-ongoing-attacks

https://www.darkreading.com/cyber-risk/third-party-breaches-teaches-education-lesson-vendor-risk

Please consider supporting the DefSec podcast here.

Links to this week’s stories:

https://www.theregister.com/cyber-crime/2026/06/05/if-you-dont-fall-for-these-extortionists-calls-theyll-show-up-with-usb-sticks/5251891

https://thehackernews.com/2026/06/only-10-of-socs-say-theyre-getting.html?m=1

https://arstechnica.com/security/2026/06/dashlane-explains-how-attackers-managed-to-download-encrypted-password-vaults/

https://www.bleepingcomputer.com/news/security/hackers-hijack-thousands-of-sites-for-clickfix-and-fakeupdate-attacks/

https://krebsonsecurity.com/2026/06/hackers-used-metas-ai-support-bot-to-seize-instagram-accounts/

https://www.cybersecuritydive.com/news/ai-cybersecurity-hype-reality-check-gartner/821867/0:0