x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Daily Security Review

Daily Security Review

Daily Security Review, the premier source for news and information on security threats, Ransomware and vulnerabilities

technology tech news

All Episodes

51:18

GSMA Confirms Flaws: Researchers Unveil Dangerous 5G...

Daily Security Review ·

2025/08/19

A groundbreaking security study from the Singapore University of Technology and Design has revealed a major vulnerability in 5G networks that allows attackers to bypass traditional defenses—without even needing a rogue base station. The newly released Sni5Gect attack framework demonstrates how adversaries within range of a victim can intercept and inject malicious messages during the unencrypted pre-authentication phase of a device’s 5G connection. This early handshake phase, often

en

44:53

SAP NetWeaver Under Siege: New Exploit Chains...

Daily Security Review ·

2025/08/19

SAP NetWeaver, one of the world’s most critical enterprise platforms, is under active attack from both ransomware groups and state-backed hackers. A newly released exploit combines two devastating vulnerabilities—CVE-2025-31324 and CVE-2025-42999—to bypass authentication and execute malicious code with full administrative privileges. With CVSS scores of 10.0 and 9.1, these flaws rank among the most severe ever discovered in SAP systems.Although SAP issued patches earlier this year, dozens

en

34:36

Ransomware Gangs Deploy Kernel-Level EDR Killers to...

Daily Security Review ·

2025/08/19

Ransomware gangs are no longer just encrypting files and demanding payment—they are actively targeting the very defenses meant to stop them. Recent reports reveal a dramatic surge in the use of EDR killer tools, specialized malware designed to disable Endpoint Detection and Response (EDR) and antivirus systems at the kernel level. By silencing these crucial tools, attackers gain stealth, persistence, and freedom of movement across victim networks, leaving defenders blind to their activities

en

25:50

Chinese APTs Target Taiwan: UAT-7237’s SoundBill...

Daily Security Review ·

2025/08/18

Taiwan continues to face an unprecedented wave of cyberattacks, with new intelligence exposing two distinct but sophisticated campaigns linked to Chinese threat actors. Together, they underscore Beijing’s increasingly aggressive cyber posture against Taiwan’s digital and critical infrastructure.The first campaign, attributed to UAT-7237, a subgroup of the China-aligned UAT-5918, has been active since 2022 and focuses heavily on Taiwan’s web infrastructure entities and VPN services. The

en

25:58

Colt Cyberattack: Multi-Day Outages After WarLock...

Daily Security Review ·

2025/08/18

Colt Technology Services, a major UK-based telecommunications provider with operations in over 40 countries, has confirmed that the WarLock ransomware group is behind the cyberattack that struck its systems on August 12, 2025. The attack caused multi-day outages across Colt’s hosting, porting, Voice API, and customer support services, while sparing its core network infrastructure. Initially dismissed as a “technical issue,” Colt later acknowledged it was a cyberattack, taking critical

en

33:43

Workday Breach Tied to Third-Party CRM Hack in...

Daily Security Review ·

2025/08/18

Workday, one of the world’s leading providers of human resources and financial management software, has confirmed a data breach that exposed business contact information through a third-party CRM platform, not its core HR or financial systems. Discovered on August 6, 2025, the breach revealed names, email addresses, and phone numbers—data that, while not highly sensitive, could be leveraged in future social engineering or phishing attacks. Workday emphasized that no customer tenant

en

36:35

DOJ Brings Down Zeppelin Ransomware Operator, Seizes...

Daily Security Review ·

2025/08/18

The U.S. Department of Justice has successfully dismantled a major operator behind the notorious Zeppelin ransomware, charging Russian national Ianis Aleksandrovich Antropenko with conspiracy to commit computer fraud, money laundering, and extortion. Antropenko, known online as “china.helper,” allegedly deployed Zeppelin ransomware in targeted campaigns against victims worldwide—encrypting their data, exfiltrating sensitive files, and demanding payment in cryptocurrency to unlock their

en

38:12

U.S. Sanctions Grinex, the Russian Crypto Exchange...

Daily Security Review ·

2025/08/16

The U.S. Department of the Treasury has announced sweeping sanctions against Grinex, a Russian-linked cryptocurrency exchange identified as the direct successor to the previously sanctioned Garantex. Garantex, operational since 2019, was a major hub for laundering billions of dollars in criminal proceeds, including payments from some of the world’s most prolific ransomware gangs—Conti, LockBit, Ryuk, and Black Basta among them. Despite being sanctioned in 2022 for anti–money laundering

en

10:49

Canadian House of Commons Breach Tied to Microsoft...

Daily Security Review ·

2025/08/15

On August 8th, 2025, hackers breached the Canadian House of Commons by exploiting a critical Microsoft SharePoint zero-day vulnerability—CVE-2025-53770—with a severity score of 9.8. The attack compromised a database containing sensitive employee information, including names, job titles, office locations, email addresses, and technical details about House-managed computers and mobile devices. While investigators from the Communications Security Establishment and the Canadian Centre for Cyber

en

16:20

Norwegian Authorities Blame Pro-Russian Hackers for...

Daily Security Review ·

2025/08/15

In April 2025, Norway experienced a chilling reminder of the risks facing its critical infrastructure when pro-Russian hackers took control of the Lake Risevatnet dam near Svelgen. For four hours, the attackers manipulated the dam’s outflow valves, releasing 500 liters of water per second into the surrounding river. While the incident caused no physical damage—the riverbed could handle far greater flow—it was not intended to destroy. Instead, according to Norway’s Police Security Service

en

40:39

MadeYouReset: New HTTP/2 Flaw Could Unleash Massive...

Daily Security Review ·

2025/08/15

A newly disclosed HTTP/2 vulnerability—dubbed MadeYouReset (CVE-2025-8671)—is making waves across the cybersecurity community for its potential to power devastating Denial-of-Service attacks. Building on the 2023 “Rapid Reset” flaw, this attack vector exploits a design oversight where servers keep processing backend requests even after a stream is canceled. By tricking the server into initiating its own stream resets—through malformed frames or flow control errors—attackers can bypass

en

28:13

Cybersecurity Budgets Hit Historic Slowdown as Global...

Daily Security Review ·

2025/08/15

Global cybersecurity strategies are being tested like never before as organizations face the dual pressure of escalating cyber threats and shrinking budgets. Both IANS and Swimlane report that cybersecurity budget growth has slowed to its lowest point in five years—just 4%—driven by global economic instability, inflation, shifting interest rates, and mounting geopolitical tensions. These cuts are forcing security leaders to “do more with less,” leading to staff shortages, delayed projects,

en

44:41

CVE-2025-53786: The Microsoft Exchange Hybrid Flaw...

Daily Security Review ·

2025/08/14

A critical security flaw, tracked as CVE-2025-53786, is putting tens of thousands of organizations at risk — and U.S. federal agencies are under orders to patch it immediately. This high-severity vulnerability affects Microsoft Exchange Server in hybrid configurations, where on-premises deployments are connected to Microsoft 365 cloud environments.Here’s why security experts are sounding the alarm: if an attacker gains administrative access to an on-premises Exchange server, they can

en

48:19

Allianz Life Breach: 2.8 Million Records Leaked in...

Daily Security Review ·

2025/08/14

On July 16, 2025, Allianz Life Insurance Company of North America confirmed a major data breach that exposed up to 2.8 million sensitive records belonging to customers, financial professionals, business partners, and even some employees. But the company’s internal systems weren’t the target — instead, attackers compromised a third-party, cloud-based CRM platform, widely reported to be Salesforce, through a sophisticated social engineering (vishing) attack.Investigators link the breach to

en

25:27

Charon Ransomware Targets Middle East Government and...

Daily Security Review ·

2025/08/13

A newly discovered ransomware family named Charon is making waves in the cybersecurity world — and not for good reasons. Targeting government agencies and the aviation industry in the Middle East, Charon blends the disruptive financial motives of ransomware with the stealth and persistence usually reserved for Advanced Persistent Threat (APT) operations. This dangerous hybrid approach is raising alarms among researchers and security teams alike.Charon’s operators are running highly targeted

en

33:00

August 2025 Patch Tuesday: Microsoft and Adobe Fix...

Daily Security Review ·

2025/08/13

August 2025’s Patch Tuesday brought major security updates from two of the biggest names in technology — Microsoft and Adobe — addressing a combined 170+ vulnerabilities across widely used products. The scale and severity of these updates make them critical for IT teams and security leaders to implement without delay.Microsoft’s security release fixed 107 vulnerabilities, including one publicly disclosed zero-day and 13 critical flaws. Among these, several stand out:CVE-2025-50165 in

en

16:54

RansomHub Hits Michigan’s Manpower — Data Breach...

Daily Security Review ·

2025/08/13

Manpower, a major staffing company based in Lansing, Michigan, has confirmed a ransomware attack that exposed the personal data of approximately 140,000 individuals. The breach, attributed to the notorious RansomHub group, went undetected for weeks — from late December 2024 to mid-January 2025 — during which attackers maintained access to Manpower’s network and exfiltrated over 500 GB of sensitive information.The stolen data includes client databases, passport and ID scans, Social Security

en

44:26

Security Firms Warn GPT-5 Is Wide Open to Jailbreaks...

Daily Security Review ·

2025/08/12

Two independent security assessments have revealed serious vulnerabilities in GPT-5, the latest large language model release. NeuralTrust’s red team demonstrated a “storytelling” jailbreak, a multi-turn conversational exploit that gradually steers the AI toward producing harmful instructions without triggering its single-prompt safeguards. By embedding malicious goals into a fictional narrative and slowly escalating the context, researchers bypassed GPT-5’s content filters and obtained

en

39:06

Germany’s Top Court Limits Police Spyware to Serious...

Daily Security Review ·

2025/08/11

Germany’s Federal Constitutional Court has issued a landmark ruling sharply restricting the use of state spyware by law enforcement. The decision directly addresses 2017 regulations that allowed police to monitor encrypted communications with few limitations. Now, spyware may only be deployed in investigations of serious crimes punishable by at least three years in prison.The court emphasized that such surveillance tools represent a “very severe interference” with fundamental rights, citing

en

53:04

BadCam: Lenovo Webcam Flaw Turns Everyday Cameras...

Daily Security Review ·

2025/08/11

A new hardware security warning has emerged with the discovery of BadCam, a set of vulnerabilities in certain Lenovo webcams that could allow attackers to transform them into BadUSB devices. Uncovered by Eclypsium researchers, the flaw shows that attackers no longer need physical access to a USB peripheral to compromise it — they can now remotely reprogram its firmware. Once weaponized, the webcam can mimic a keyboard or other trusted USB device, silently injecting keystrokes, delivering

en

410 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs