x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Daily Security Review

Daily Security Review

Daily Security Review, the premier source for news and information on security threats, Ransomware and vulnerabilities

technology tech news

All Episodes

62:05

IoT Security Crisis: Dahua Smart Camera...

Daily Security Review ·

2025/07/31

In this episode, we examine the alarming discovery of critical security vulnerabilities in Dahua smart cameras, one of the world’s most widely deployed surveillance systems. Researchers at Bitdefender uncovered two zero-click flaws — CVE-2025-31700 and CVE-2025-31701 — that allow unauthenticated remote attackers to gain root access to Dahua devices. Exploited through the ONVIF protocol and an undocumented RPC upload endpoint, these flaws bypass integrity checks, enabling attackers to

en

17:11

Dropzone AI Secures $37M to Tackle Alert Fatigue with...

Daily Security Review ·

2025/07/30

In this episode, we dive into Dropzone AI’s landmark $37 million Series B funding round, bringing the company’s total raised to over $57 million. Backed by major investors, Dropzone AI is accelerating the development of its AI-powered SOC analysts — tools designed to autonomously investigate and resolve security alerts across critical threat categories like phishing, insider threats, and compromised accounts.The cybersecurity industry is at a turning point. With hybrid work, widespread

en

96:30

Axonius Buys Cynerio for $100M+: Closing Healthcare’s...

Daily Security Review ·

2025/07/30

In this episode, we explore Axonius’s landmark acquisition of Cynerio, a healthcare cybersecurity company specializing in protecting vulnerable medical devices like MRI machines, infusion pumps, and ventilators. The deal — valued at over $100 million in cash and stock — marks Axonius’s first-ever acquisition and signals a major strategic expansion into the healthcare sector. Already valued at $2.6 billion, Axonius is now positioning itself as a leader in securing one of the most overlooked

en

42:00

Critical Lenovo Firmware Flaws Expose Millions to...

Daily Security Review ·

2025/07/30

In this episode, we examine a critical firmware security crisis shaking Lenovo devices worldwide. Security researchers at Binarly have uncovered six serious vulnerabilities in the Insyde BIOS firmware used in Lenovo’s IdeaCentre and Yoga product lines. Four of these flaws, rated high severity, reside in the System Management Mode (SMM) — a privileged execution mode sometimes called “Ring -2.” Exploiting these vulnerabilities allows attackers to deploy persistent UEFI implants that can

en

36:50

Promptfoo Secures $18.4M to Combat AI Security...

Daily Security Review ·

2025/07/30

In this episode, we dive into Promptfoo’s groundbreaking $18.4 million Series A funding round, led by Insight Partners and supported by Andreessen Horowitz, bringing the AI security startup’s total funding to $23.4 million. Founded in 2024, Promptfoo has quickly emerged as a leader in securing Large Language Models (LLMs) and generative AI applications against critical threats like prompt injections, data leaks, hallucinations, and compliance violations.With its open-source tools already

en

23:58

1.1 Million Private Messages Leaked: Inside the Tea...

Daily Security Review ·

2025/07/29

A platform designed to protect women’s safety in dating has instead become a nightmare for its users. In this episode, we uncover the catastrophic Tea app data breach, which exposed more than 59 GB of highly sensitive user data due to a fundamental security failure: a completely public Firebase storage bucket with no authentication, no encryption, and no internal checks.Among the compromised data were 13,000 government ID selfies collected for user verification, over 59,000 user-generated

en

76:30

Job Scams, Corporate Espionage, and Digital...

Daily Security Review ·

2025/07/29

Deepfake technology has evolved from a fringe novelty into one of the most serious cybersecurity and national security threats of our time. In this episode, we examine how artificial intelligence–generated synthetic media is being weaponized to impersonate CEOs, manipulate elections, infiltrate corporate networks, and damage reputations worldwide.We explore shocking real-world cases, including a $25 million deepfake video call scam where criminals impersonated a CFO to defraud a company,

en

83:13

Microsoft Exposes Major macOS Flaws in Transparency,...

Daily Security Review ·

2025/07/29

In this episode, we dive deep into Microsoft Threat Intelligence’s latest findings on two critical macOS vulnerabilities that shook Apple’s privacy defenses. The flaws, identified as CVE-2025-31199 (Sploitlight) and CVE-2024-44133 (HM Surf), specifically targeted Apple’s Transparency, Consent, and Control (TCC) framework, the system designed to guard user data and manage app permissions. Sploitlight exploited Spotlight’s plugin mechanism to access sensitive files like Photos.sqlite and

en

24:25

Aeroflot in Chaos: How Hackers Crippled Russia’s...

Daily Security Review ·

2025/07/29

On July 28, 2025, Aeroflot—Russia’s largest state-owned airline—was brought to its knees in one of the most severe cyberattacks since the country’s invasion of Ukraine in 2022. The sophisticated assault, carried out by Ukrainian hacktivist group Silent Crow and the Belarusian Cyber-Partisans, led to the cancellation of more than 100 flights, stranded thousands of passengers across Moscow’s Sheremetyevo Airport and beyond, and triggered chaos at every level of Russia’s aviation sector.The

en

44:17

Neferpitou Claims Cyberattack on French Naval Defense...

Daily Security Review ·

2025/07/29

French defense contractor Naval Group, a cornerstone of Europe’s naval defense industry, is facing a high-stakes cybersecurity crisis. A threat actor known as “Neferpitou” claims to have exfiltrated 1TB of sensitive data, including combat management system (CMS) source code for submarines and frigates, technical documents, developer virtual machines, and internal communications. Initially demanding payment within 72 hours, Neferpitou later posted the entire dataset on DarkForums, a

en

36:51

Root Evidence Launches With $12.5M to Redefine...

Daily Security Review ·

2025/07/28

In July 2025, a team of seasoned cybersecurity leaders launched Root Evidence, a Boise-based startup with a mission to revolutionize how organizations tackle vulnerability management. Armed with $12.5 million in seed funding led by Ballistic Ventures, founders Jeremiah Grossman, Robert Hansen, Heather Konold, and Lex Arquette are setting out to fix one of cybersecurity’s most persistent problems: the overwhelming flood of vulnerabilities and the inability of security teams to focus on the

en

41:21

NASCAR Hit by Medusa Ransomware: 1TB of Data Stolen...

Daily Security Review ·

2025/07/28

In April 2025, NASCAR became the latest victim of a major cyberattack, with hackers infiltrating its network between March 31 and April 3. During the breach, personal information—including names and Social Security numbers—was exfiltrated from NASCAR’s systems. In response, the organization has notified affected individuals, activated its incident response plan, engaged a leading cybersecurity firm, and offered free credit and identity monitoring services.But the story doesn’t end there

en

55:59

Scattered Spider Strikes Again: Inside the VMware...

Daily Security Review ·

2025/07/28

In this episode, we examine the sophisticated operations of Scattered Spider—also known as Muddled Libra, UNC3944, and Octo Tempest—a financially motivated cybercriminal group that has redefined the ransomware threat landscape. Recently highlighted by Google’s Threat Intelligence Group (GTIG), Scattered Spider has escalated its attacks by targeting VMware vSphere and ESXi environments, seizing control of hypervisors to disable backups, steal sensitive data, and deploy ransomware with

en

44:03

Koske Malware Hides in Panda Images, Weaponizes AI to...

Daily Security Review ·

2025/07/25

A new and highly sophisticated malware strain named Koske is redefining the threat landscape for Linux environments. Suspected to be partially developed using artificial intelligence, Koske introduces novel and highly evasive techniques, blending image files, rootkits, and adaptive cryptomining logic to create a stealthy and persistent backdoor into systems worldwide.What sets Koske apart is its ingenious use of polyglot files—specifically, JPEG images of panda bears that look harmless to

en

39:19

Operation Checkmate: BlackSuit Ransomware’s Dark Web...

Daily Security Review ·

2025/07/25

BlackSuit, the ransomware strain known for crippling critical sectors and demanding multi-million dollar payouts, has just suffered a devastating blow. In a coordinated international law enforcement operation codenamed "Operation Checkmate," authorities—including the U.S. Department of Justice, Homeland Security Investigations, FBI, Europol, the UK’s NCA, Dutch and German police, and more—have seized BlackSuit’s dark web extortion platforms. These takedowns included the gang’s negotiation

en

34:14

Coyote Malware Exploits Microsoft UI Automation in...

Daily Security Review ·

2025/07/25

A new banking trojan called Coyote has emerged as a groundbreaking cyber threat, becoming the first known malware in the wild to exploit Microsoft’s User Interface Automation (UIA) framework—an accessibility tool originally designed to help users interact with Windows interfaces. But in the hands of attackers, UIA becomes a weapon of stealth and precision.Primarily targeting Brazilian banking and crypto users, Coyote uses sophisticated techniques to extract credentials from over 60

en

31:12

No Fix Coming: Remote Code Execution Flaw in 1,300 LG...

Daily Security Review ·

2025/07/25

A newly disclosed critical vulnerability, CVE-2025-7742, is putting hundreds of LG Innotek LNV5110R security cameras at risk around the world—including within critical infrastructure. This high-severity authentication bypass flaw allows remote attackers to gain full administrative control without credentials, giving them access to live camera feeds, the ability to disable or disrupt device functionality, and the opportunity to pivot deeper into internal networks.The most alarming detail? LG

en

74:36

ToolShell Exploited: China-Linked Hackers Breach NNSA...

Daily Security Review ·

2025/07/24

In one of the most concerning state-sponsored cyber incidents of the year, Chinese hackers exploited zero-day vulnerabilities in Microsoft SharePoint to breach the networks of the National Nuclear Security Administration (NNSA)—the U.S. agency responsible for managing the nation's nuclear arsenal. The attackers, part of a suspected Chinese state-sponsored group, used a sophisticated chain of vulnerabilities dubbed ToolShell, targeting not only the NNSA but also other high-profile U.S. and

en

41:44

Massive NPM Breach: Malicious Packages Spread via...

Daily Security Review ·

2025/07/24

In this episode, we expose the alarming supply chain attack that compromised millions of JavaScript projects across the globe. This sophisticated breach targeted the NPM ecosystem, infecting widely-used packages like eslint-config-prettier and is, through a coordinated phishing campaign and the exploitation of non-expiring legacy access tokens.Attackers began by impersonating the official npm registry with a typosquatted domain (npnjs[.]com), stealing credentials from developers via fake

en

44:38

Clorox Sues Cognizant Over $356M Cyberattack: Who's...

Daily Security Review ·

2025/07/24

In one of the most dramatic cybersecurity legal battles of the past year, Clorox has filed a lawsuit against IT services giant Cognizant, accusing the company of gross negligence that allegedly enabled a catastrophic 2023 cyberattack. The breach wreaked havoc on Clorox's operations—causing widespread product shortages, a multibillion-dollar hit to its market cap, and an estimated $356 million in damages.At the center of the controversy? A series of alleged failures by Cognizant's help desk

en

410 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs