エピソード

  • Defensive Security Podcast Episode 360

    Defensive Security Podcast Episode 360
    2026/09/29
    Please consider supporting the DefSec podcast here. 1. AI agents broke into 395 organisations, including ones their operator ruled out https://www.helpnetsecurity.com/2026/09/11/ai-agents-papercut-ng-mf-attack-campaign/ 2. A nuclear agency lost reactor data to an ownCloud bug patched two years earlier https://www.darkreading.com/cyberattacks-data-breaches/old-unpatched-flaws-attackers-philippines-nuclear-agency 3. One in ten exposed AI gateways still accept the example key from the setup guide https://thehackernews.com/2026/09/nearly-1-in-10-exposed-litellm-gateways.html 4. Click … Continue reading "Defensive Security Podcast Episode 360"
    続きを読む 一部表示
    33 分
  • Defensive Security Podcast Episode 359

    Defensive Security Podcast Episode 359
    2026/09/29
    Please consider supporting the DefSec podcast here. 1. CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing https://thehackernews.com/2026/08/cisa-red-team-compromised-two-critical.html 2. CISA: Most exploited vulnerabilities should have been eradicated decades ago https://www.theregister.com/security/2026/08/28/cisa-most-exploited-vulnerabilities-should-have-been-eradicated-decades-ago/5293194 3. North Korean Fake Employees Move Into Sales, Marketing and Healthcare Roles https://www.helpnetsecurity.com/2026/08/28/north-korean-remote-workers-jobs-sales-and-marketing/ 4. Unit 42 says one attacker chained 50 vulns and attack … Continue reading "Defensive Security Podcast Episode 359"
    続きを読む 一部表示
    36 分
  • Defensive Security Podcast Episode 358

    Defensive Security Podcast Episode 358
    2026/09/29
    Please consider supporting the DefSec podcast here. Stories: Weak IAM affects up to 98% of cloud environmentshttps://www.helpnetsecurity.com/2026/08/14/intruder-cloud-misconfiguration-trends-report/China-Linked Storm-1175 Debuts New StormEncryptor Ransomware via N-central Flawhttps://thehackernews.com/2026/08/china-linked-hackers-deploy-new.html‘City-Forum’ Campaign Quietly Mines Salesforce/ServiceNow Guest Access Since March 2025https://www.darkreading.com/cyberattacks-data-breaches/long-running-data-theft-campaign-salesforce-servicenowLiteLLM ‘Supply Chain Attack’ Was Mostly Fallout From Trivy Compromise Days Earlierhttps://www.securityweek.com/trivy-not-litellm-behind-the-2500-org-compromise/ChainDrop Worm Spreads Through npm, Slips Past Standard Security Toolinghttps://www.theregister.com/security/2026/08/15/chaindrop-worm-crawls-into-npm-supply-chain-evades-standard-defenses/5287958
    続きを読む 一部表示
    31 分
  • Defensive Security Podcast Episode 357

    Defensive Security Podcast Episode 357
    2026/08/15
    Please consider supporting the DefSec podcast here. Stories: 1. Ransomware Gangs Bypass the CEO, Target the 40-Something IT Managerhttps://www.theregister.com/security/2026/08/09/ransomware-gangs-skip-the-ceo-head-straight-for-the-40-something-it-manager/5284499 2. Ransomware Attacks Spike While Industry Attention Shifts to AIhttps://www.theregister.com/security/2026/08/07/ransomware-attacks-spike-as-world-distracted-by-ai/5284934 3. ChainDrop supply chain compromise: Anatomy of a self-propagating wormhttps://www.microsoft.com/en-us/security/blog/2026/08/04/chaindrop-supply-chain-compromise-anatomy-self-propagating-worm/ 4. AI Agent Tried to Backdoor a Real Open-Source Repo During a Security Testhttps://thehackernews.com/2026/08/claude-mythos-5-tried-to-backdoor-real.html 5. Cloudflare Ditches … Continue reading "Defensive Security Podcast Episode 357"
    続きを読む 一部表示
    1 時間
  • Defensive Security Podcast Episode 356

    Defensive Security Podcast Episode 356
    2026/08/15
    54 分
  • Defensive Security Podcast Episode 355

    Defensive Security Podcast Episode 355
    2026/08/08
    https://www.helpnetsecurity.com/2026/07/21/sonicwall-sma-zero-days-exploited-cve-2026-15409-cve-2026-15410/https://thehackernews.com/2026/07/qilin-ransomware-attackers-exploit-pan.htmlhttps://thehackernews.com/2026/07/worlds-largest-ai-model-repository.htmlhttps://openai.com/index/hugging-face-model-evaluation-security-incident/https://www.darkreading.com/identity-access-management-security/identity-attacks-overtake-exploits-top-ransomware-causehttps://www.helpnetsecurity.com/2026/07/21/estee-lauder-data-breach-oracle-ebs/
    続きを読む 一部表示
    1 時間 8 分
  • Defensive Security Podcast Episode 354

    Defensive Security Podcast Episode 354
    2026/07/26
    Please consider supporting the DefSec podcast here. Stories: https://www.theregister.com/security/2026/07/07/enterprise-ai-still-smarting-from-leaping-before-looking/5267353 https://www.theregister.com/security/2026/07/07/github-ai-agent-leaks-private-repos-when-asked-nicely/5267924 https://www.bleepingcomputer.com/news/security/fake-it-support-calls-on-microsoft-teams-push-etherrat-malware/ https://databreaches.net/2026/07/04/adapthealth-says-attackers-sweet-talked-their-way-into-cloud-systems-and-stole-patient-data https://thehackernews.com/2026/07/ai-agent-exploits-langflow-rce-to.html
    続きを読む 一部表示
    50 分
  • Defensive Security Podcast Episode 353

    Defensive Security Podcast Episode 353
    2026/07/11
    Please consider supporting the DefSec podcast here. Links to stories: https://www.securityweek.com/massive-password-spray-campaign-targeting-azure-cli/ https://thehackernews.com/2026/07/2026-cybersecurity-assessment-gap.html https://www.cybersecuritydive.com/news/klue-investigating-supply-chain-attack-salesforce-integrations/823532/ https://www.bleepingcomputer.com/news/security/over-900-oracle-e-business-instances-exposed-to-ongoing-attacks https://www.darkreading.com/cyber-risk/third-party-breaches-teaches-education-lesson-vendor-risk
    続きを読む 一部表示
    59 分