x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Daily Security Review

Daily Security Review

Daily Security Review, the premier source for news and information on security threats, Ransomware and vulnerabilities

technology tech news

All Episodes

13:51

Multi-Stage Phishing Attacks Now Use Google...

Daily Security Review ·

2025/06/02

Recent phishing campaigns have entered a new phase—one where trust is weaponized. In this episode, we break down how cybercriminals are exploiting legitimate services like Google Apps Script and Google Firebase Storage to host phishing pages, evade detection, and steal credentials. Using cleverly crafted lures such as fake DocuSign notifications, invoice alerts, and even deceptive CAPTCHA prompts, these attackers are bypassing traditional email and web filters by operating under the guise

en

17:34

Inside the AVCheck Takedown: How Law Enforcement...

Daily Security Review ·

2025/06/02

In this episode, we unpack the international takedown of AVCheck, one of the largest counter antivirus (CAV) services used by cybercriminals to test and fine-tune malware before deployment. Led by Dutch authorities and supported by agencies from the U.S., Germany, France, and others, this operation marks a major win in Operation Endgame—a sweeping initiative targeting malware infrastructure, ransomware syndicates, and initial access brokers.AVCheck enabled attackers to simulate antivirus

en

15:06

ConnectWise Breach: Nation-State Exploits...

Daily Security Review ·

2025/05/30

ConnectWise has confirmed a cyberattack targeting ScreenConnect, its remote access solution used by thousands of Managed Service Providers (MSPs). The breach is reportedly tied to a sophisticated nation-state actor and linked to CVE-2025-3935, a critical ViewState code injection vulnerability that could allow Remote Code Execution (RCE).In this episode, we dissect what happened, why it matters, and what MSPs need to do right now. We cover the technical details behind CVE-2025-3935,

en

14:10

Browser vs. GPU: Firefox 139 Collides with NVIDIA...

Daily Security Review ·

2025/05/30

In this episode, we dive into the graphical corruption saga triggered by Firefox version 139, released on May 27, 2025. Aimed at uncovering what went wrong, we review reports from across the web detailing how the update wreaked havoc for Windows users running NVIDIA graphics cards—particularly those with multi-monitor setups using mixed refresh rates.We discuss the symptoms users experienced: severe flickering, video playback issues, and flashing web pages that rendered the browser unusable

en

20:08

Unbound Raises $4M to Secure Generative AI in the...

Daily Security Review ·

2025/05/30

In this episode, we break down the recent $4 million seed funding round for Unbound, a startup tackling one of the biggest unsolved problems in enterprise AI: how to stop employees from leaking sensitive data through ungoverned use of Generative AI tools.Unbound’s AI Gateway aims to be the missing link between rapid AI adoption and responsible usage—offering real-time redaction of sensitive prompts, intelligent model routing, and deep usage analytics. With early adopters already preventing

en

16:18

Windows Updates, Reimagined: Inside Microsoft’s...

Daily Security Review ·

2025/05/29

Microsoft is taking direct aim at one of the biggest pain points in the Windows ecosystem: update fragmentation. In this episode, we dive deep into the details of Microsoft’s newly announced Windows-native update orchestration platform, currently in private preview. We explore how this unified infrastructure aims to centralize updates for all apps, drivers, and core OS components under the familiar Windows Update umbrella—bringing it more in line with the seamless update experiences of

en

18:38

Systemd as a Weapon: How PumaBot Exploits Linux...

Daily Security Review ·

2025/05/29

Linux systems are under siege—particularly in the world of IoT and internet-exposed servers. In this episode, we dissect PumaBot, a new GoLang-based botnet that's turning Linux IoT devices into cryptomining workhorses. We’ll break down how attackers brute-force SSH credentials, install malware disguised as legitimate services, and use systemd for stealthy persistence.We dive deep into ATT&CK technique T1501, where systemd services like redis.service or mysqI.service are hijacked or

en

17:22

The LexisNexis Breach: 364,000 Records Exposed via...

Daily Security Review ·

2025/05/29

On December 25, 2024, while most businesses were offline, a serious data breach struck LexisNexis Risk Solutions—exposing the personal data of over 360,000 individuals. The twist? The attack vector wasn’t a direct hack, but an indirect compromise through a third-party GitHub repository. Even more concerning, the breach went undetected until April 1, 2025.In this episode, we break down the timeline, scope, and implications of the LexisNexis incident. We examine how the company’s own privacy

en

12:30

Ransomware Hits MathWorks: Week-Long Outage Disrupts...

Daily Security Review ·

2025/05/28

On this episode, we dissect the ransomware attack that brought MathWorks—a cornerstone software provider for engineers, scientists, and educators—to a grinding halt. The attack, which began on May 18, 2025, and was officially confirmed on May 26, crippled a wide range of customer-facing and internal systems, from MATLAB Online and ThingSpeak to license distribution and downloads.We examine the timeline of the incident, MathWorks’ response, and what services remain down or degraded even as

en

14:27

Zscaler Acquires Red Canary: What It Means for...

Daily Security Review ·

2025/05/28

The cybersecurity market is booming, projected to triple in size from $215 billion in 2025 to $697 billion by 2035. This explosive growth is being fueled by rising cyber threats, the digital transformation of global businesses, and an urgent need for advanced security operations. One of the clearest signals of this momentum? Zscaler’s acquisition of Red Canary—a leading Managed Detection and Response (MDR) provider.In this episode, we unpack Zscaler’s strategic decision to acquire Red

en

16:47

DragonForce Breaches MSPs via SimpleHelp Flaws:...

Daily Security Review ·

2025/05/28

In this episode, we unpack a critical supply chain breach that’s rattled the cybersecurity world: the exploitation of multiple zero-day vulnerabilities in SimpleHelp Remote Support Software — most notably CVE-2024-57726, a privilege escalation flaw scored 9.9 by the NVD.Threat actors linked to the DragonForce ransomware operation and the Scattered Spider group are actively leveraging these vulnerabilities to infiltrate Managed Service Providers (MSPs), hijack their remote management

en

13:50

Fentanyl, Firearms, and $200M in Crypto: Dark Web...

Daily Security Review ·

2025/05/27

This episode dives deep into Operation RapTor, one of the largest international crackdowns on dark web crime to date. We analyze how coordinated law enforcement actions across ten countries led to the arrest of 270 individuals, the seizure of $200 million in currency and digital assets, and the dismantling of major darknet marketplaces including Incognito, Tor2Door, and Bohemia.We explore the persistence and evolution of dark web crime—how vendors are adapting by migrating to smaller,

en

12:27

Marlboro-Chesterfield Pathology Ransomware Breach:...

Daily Security Review ·

2025/05/27

In this episode, we take a deep dive into the recent Marlboro-Chesterfield Pathology (MCP) ransomware attack—one of the most significant healthcare breaches of 2025. On January 16th, MCP detected unauthorized activity on its internal systems. Just days later, the SAFEPAY ransomware group claimed responsibility, posting stolen data—over 30GB of sensitive information affecting 235,911 individuals—on the dark web.We examine what data was exposed, the organization’s response, and the broader

en

22:54

How Infostealers Like Stealc Use TikTok Accounts to...

Daily Security Review ·

2025/05/27

In this episode, we dive deep into the underground cybercrime ecosystem powering the surge of modern infostealers—Stealc, Vidar, and LummaC2. These malware strains aren't just code—they're full-service products sold as Malware-as-a-Service (MaaS), giving even low-skilled attackers access to powerful data theft tools.We break down how these stealers are delivered through clever deception tactics like ClickFix, which uses fake pop-ups on shady streaming sites to trick users into pasting

en

28:34

The Great Screenshot Scandal: Microsoft Recall and...

Daily Security Review ·

2025/05/26

In this episode, we dive deep into the growing tension between AI innovation and data privacy through the lens of a major controversy: Microsoft’s Windows 11 Recall feature. Designed to screenshot nearly everything a user does every few seconds, Recall creates a searchable visual archive of on-screen activity. But while Microsoft claims it enhances productivity, critics call it “spyware,” “creepy,” and a “privacy nightmare.”Leading the charge against Recall is Signal Messenger, which has

en

28:48

Bumblebee Malware Returns: IT Pros Targeted Through...

Daily Security Review ·

2025/05/26

In this episode, we break down the resurgence of the Bumblebee malware loader and its latest distribution method: blackhat SEO campaigns and trojanized software installers. By mimicking legitimate download pages through typosquatted domains and poisoning Bing search results, attackers are tricking IT professionals into unknowingly infecting their own networks.We explore how malware is being embedded into fake versions of tools like Milestone XProtect, RVTools, WinMTR, and Zenmap—critical

en

14:45

FBI Warns of Luna Moth Tactics: Inside the Silent...

Daily Security Review ·

2025/05/26

In this episode, we dive into the evolving tactics of the Silent Ransom Group (SRG)—also known as Luna Moth—a cybercriminal outfit that has shifted from traditional phishing to a new, more deceptive strategy: impersonating IT support over the phone. Their latest victims? U.S. law firms, targeted for the sensitive data they hold and the large financial transactions they handle.We explore how SRG uses legitimate remote access tools like Zoho Assist and AnyDesk to silently exfiltrate data

en

25:57

Trust Exploited: Unpacking the macOS Malware...

Daily Security Review ·

2025/05/23

A growing cyber threat is targeting macOS users who rely on Ledger cold wallets to secure their cryptocurrency. In this episode, we dissect the anti-Ledger malware campaign—an increasingly sophisticated phishing operation that impersonates the trusted Ledger Live application to trick users into revealing their 24-word recovery phrases. Once entered, these phrases give attackers full access to empty the victims’ wallets.We examine how this threat evolved from simple data-stealing to focused

en

11:23

$21M Seized and DanaBot, Qakbot, and Bumblebee...

Daily Security Review ·

2025/05/23

In this episode, we break down the latest and most impactful phase of Operation Endgame, the international law enforcement campaign targeting the backbone of the ransomware ecosystem. Between May 19–22, authorities executed a sweeping takedown of 300 servers, neutralized 650 domains, and seized €3.5 million in cryptocurrency, adding to a total of €21.2 million seized over the course of the operation.We explore how this phase zeroed in on Malware-as-a-Service (MaaS) and loader operations —

en

18:50

From TikTok to Total Compromise: The Rise of Social...

Daily Security Review ·

2025/05/23

In this episode, we dive into the alarming surge of infostealer malware campaigns leveraging social media platforms, particularly TikTok, as their distribution vector. Threat actors are exploiting trending content—especially around AI tools like Sora, ChatGPT, and Google Gemini AI, and popular software like CapCut and MidJourney—to bait unsuspecting users into executing malicious PowerShell commands or downloading disguised malware.We examine how the Malware-as-a-Service (MaaS) economy

en

410 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs