x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Daily Security Review

Daily Security Review

Daily Security Review, the premier source for news and information on security threats, Ransomware and vulnerabilities

technology tech news

All Episodes

46:40

Free Wi-Fi Loophole Lets Hackers Breach Smart Bus...

Daily Security Review ·

2025/08/11

A new cybersecurity investigation has revealed that the same free passenger Wi-Fi offered on many smart buses is directly connected to critical onboard systems — creating a massive, exploitable security gap. Researchers demonstrated that, with no network segmentation in place, anyone on the free Wi-Fi could pivot into systems controlling driver assistance, GPS tracking, and operational data.Once inside, they uncovered command injection flaws, unencrypted communications, and even hidden

en

48:07

ReVault: Critical Dell Firmware Flaws Allow Windows...

Daily Security Review ·

2025/08/08

In a powerful reminder that hardware security is just as critical as software defense, Cisco Talos researchers have uncovered “ReVault,” a collection of five high-severity firmware vulnerabilities in Dell’s ControlVault3 subsystem. These flaws impact over 100 Dell laptop models, including the Latitude, Precision, and XPS series—devices used widely across enterprise, government, and high-security environments.**ReVault allows attackers with physical access to bypass Windows login, implant

en

36:56

Air France–KLM Data Breach Exposes Customer Info via...

Daily Security Review ·

2025/08/07

The aviation industry has suffered yet another major cybersecurity incident. Air France and KLM have confirmed a data breach impacting customer records via an external customer service platform. While no sensitive financial or identity documents were compromised, attackers successfully accessed unspecified customer data—prompting both airlines to notify authorities and warn affected individuals to remain vigilant against suspicious communications.This episode explores what we know about the

en

37:29

Critical Flaws in CyberArk Conjur and HashiCorp Vault...

Daily Security Review ·

2025/08/07

Enterprise secrets managers—long considered the most secure components in modern infrastructure—are now under fire. In a groundbreaking report, cybersecurity firm Cyata revealed 14 critical zero-day vulnerabilities across CyberArk Conjur and HashiCorp Vault, exposing flaws that allow unauthenticated attackers to achieve remote code execution (RCE), privilege escalation, and even full system takeover—all without a password or token.These aren’t just theoretical risks. The vulnerabilities

en

56:52

Prompt Injection Nightmare: Critical AI...

Daily Security Review ·

2025/08/07

Enterprise AI assistants are revolutionizing productivity—but they’re also opening new doors for cyberattacks. In this episode, we explore explosive research from Zenity Labs, which reveals that leading AI tools like ChatGPT, Microsoft Copilot, Google Gemini, Cursor, and Salesforce Einstein are vulnerable to prompt injection attacks—a class of exploit that can silently hijack these systems without user interaction.These aren’t theoretical flaws. Through real-world demonstrations at Black

en

46:37

From Google to LVMH: ShinyHunters’ Salesforce...

Daily Security Review ·

2025/08/07

A new wave of cyber extortion is sweeping across global enterprises, and the battlefield is Salesforce CRM. The notorious **ShinyHunters group—tracked internally by Google as UNC6040/UNC6240—**has launched a coordinated series of breaches using vishing (voice phishing) to compromise employee credentials, exfiltrate sensitive customer data, and demand ransoms to prevent public leaks.Among the victims: Google, Adidas, Qantas, Allianz Life, Cisco, and subsidiaries of LVMH, with some companies

en

31:43

Cisco Hit by Vishing Attack: CRM Breach Exposes...

Daily Security Review ·

2025/08/06

Cisco has confirmed a new data breach after a vishing (voice phishing) attack tricked a company representative into exposing access to a third-party CRM system. Detected on July 24, 2025, the breach compromised basic user details such as names, emails, and phone numbers of Cisco.com registrants. While the data was non-sensitive, the incident underscores a rising and dangerous trend: cybercriminals bypassing traditional defenses by exploiting the human factor.In this episode, we unpack how

en

52:37

Ox Security Unveils Agent Ox: AI Tool That Writes...

Daily Security Review ·

2025/08/06

The world of application security is shifting dramatically as AI begins to move from simply flagging vulnerabilities to actively fixing them. Ox Security has launched Agent Ox, a groundbreaking AI-powered extension designed to automate secure, organization-specific code fixes. Unlike generic coding assistants that offer boilerplate advice, Agent Ox analyzes each company’s unique codebase and runtime environment to deliver tailored, context-aware solutions.This episode explores how Agent Ox

en

34:45

Meta Deletes 6.8 Million Scam Accounts as AI-Powered...

Daily Security Review ·

2025/08/06

Meta has removed 6.8 million accounts tied to criminal scam centers in the first half of 2025, marking one of the most aggressive crackdowns on digital fraud in the company’s history. The move comes amid an alarming surge in online scams that cost global victims $16.6 billion in 2024 alone, a 33% increase from the year before. Many of these scams are linked to transnational criminal networks operating out of Southeast Asia—especially Cambodia and Myanmar—where thousands of trafficking

en

30:59

Meta Found Liable: Jury Rules Against Tech Giant in...

Daily Security Review ·

2025/08/06

In a landmark decision, a California jury has ruled Meta guilty of violating user privacy laws in a class-action lawsuit tied to the popular Flo Health period tracking app. Plaintiffs alleged that Meta, through embedded software tools and tracking pixels, collected deeply personal menstrual and fertility data — from period dates to pregnancy goals — without user consent, weaponizing it for targeted advertising.While Google and Flo settled earlier, Meta chose to fight in court, denying the

en

66:45

TSMC Insider Threat: Six Arrested in Taiwan Over 2nm...

Daily Security Review ·

2025/08/05

In a stunning development, Taiwanese authorities have arrested six individuals suspected of stealing trade secrets from Taiwan Semiconductor Manufacturing Co. (TSMC), the world’s most advanced semiconductor producer. At the heart of the case is TSMC’s 2-nanometer (2nm) chip technology, a crown jewel in the global race for next-generation AI and high-performance computing power.This marks the first major prosecution under Taiwan’s 2022 National Security Act, underscoring the escalating risk

en

55:37

Approov Secures £5M to Fortify Mobile App and API...

Daily Security Review ·

2025/08/05

In a major step for mobile and API cybersecurity, Approov, the Edinburgh-based security firm specializing in real-time mobile attestation and API protection, has raised £5 million (approximately $6.7 million) in Series A funding. The round, led by the Investment Fund for Scotland with support from Souter Investments, Lanza techVentures, and Scottish Enterprise, will fuel the expansion of Approov’s research and development hub in Scotland while driving global growth.Founded in 2012, Approov

en

67:32

Pwn2Own Ireland 2025: $1M WhatsApp Exploit Bounty...

Daily Security Review ·

2025/08/05

This October, Pwn2Own Ireland 2025 will take over Cork with one of the most ambitious cybersecurity competitions yet. Co-sponsored by Meta and organized by Trend Micro’s Zero Day Initiative (ZDI), the event is putting record-breaking payouts on the line — including up to $1 million for a zero-click WhatsApp exploit that can deliver remote code execution.From October 21-24, elite hackers and security researchers will go head-to-head across a diverse set of categories designed to reflect

en

62:48

Nvidia Triton Inference Server Vulnerabilities Expose...

Daily Security Review ·

2025/08/05

A major warning has hit the AI community: Nvidia’s Triton Inference Server — one of the most widely used open-source platforms for deploying and scaling AI models — has been found to contain critical vulnerabilities that could allow attackers to take complete remote control of affected systems.The discovery, made by cloud security firm Wiz, revealed a chain of flaws that escalate from information disclosure to remote code execution (RCE), enabling attackers to not only steal valuable AI

en

43:50

CISA & FEMA Release $100M in Cybersecurity Grants to...

Daily Security Review ·

2025/08/04

The U.S. Department of Homeland Security, through CISA and FEMA, has announced over $100 million in new cybersecurity grant funding for Fiscal Year 2025 — a critical investment aimed at protecting America’s most vulnerable digital frontlines. The funding is split between the State and Local Cybersecurity Grant Program (SLCGP), allocating $91.7 million, and the Tribal Cybersecurity Grant Program (TCGP), providing $12.1 million.In this episode, we explore how these funds will be used to

en

86:28

AI Jailbreaks on the Rise: How Hackers Are Extracting...

Daily Security Review ·

2025/08/04

In this episode, we examine the rapidly growing threat of AI jailbreaks — a cybersecurity challenge reshaping the landscape of large language models (LLMs) and enterprise chatbots. According to the IBM 2025 Cost of a Data Breach Report, 13% of all data breaches now involve AI systems, with the vast majority stemming from jailbreak attacks that circumvent developer-imposed guardrails.A highlight of our discussion is Cisco’s “instructional decomposition” jailbreak technique, which shows how

en

40:18

350,000 Patient Records Exposed: Inside the Northwest...

Daily Security Review ·

2025/08/04

In this episode, we investigate the Northwest Radiologists data breach, a devastating cyberattack that compromised the personal and medical information of approximately 350,000 patients in Washington State between January 20 and January 25, 2025. What began as a so-called “network disruption” was later revealed to be a massive breach that exposed a treasure trove of sensitive data — including names, Social Security numbers, health records, and financial information.This case study

en

76:35

Critical Honeywell Experion PKS Vulnerabilities...

Daily Security Review ·

2025/07/31

In this episode, we analyze the multiple vulnerabilities recently disclosed in Honeywell’s Experion Process Knowledge System (PKS), a widely deployed industrial control and automation solution that underpins operations in energy, chemical plants, manufacturing, healthcare, and transportation sectors worldwide. Reported by CISA and Positive Technologies, these flaws range from remote code execution (RCE) to denial-of-service (DoS), giving attackers the potential to disrupt or manipulate

en

36:36

Auto-Color Linux Malware Exploits SAP Zero-Day...

Daily Security Review ·

2025/07/31

In this episode, we uncover the Auto-Color Linux malware, a stealthy and highly persistent Remote Access Trojan (RAT) that is rapidly emerging as one of the most dangerous threats of 2025. First identified by Palo Alto Networks’ Unit 42 and later analyzed by Darktrace, Auto-Color has now been linked to active exploitation of CVE-2025-31324, a critical SAP NetWeaver vulnerability with a perfect CVSS score of 10.0.This malware isn’t your average Linux RAT. It employs shared object injection,

en

54:17

Inside the July 2025 PyPI Phishing Scam: How Hackers...

Daily Security Review ·

2025/07/31

In this episode, we investigate the growing cybersecurity storm targeting the Python Package Index (PyPI) — the backbone of Python’s software distribution ecosystem. A recent phishing campaign in July 2025 has developers on high alert, as attackers impersonated PyPI using a deceptive domain (pypj.org) to trick maintainers into handing over their credentials. Victims were directed to a convincing PyPI lookalike site where their credentials were stolen — and silently relayed to PyPI’s

en

410 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs