x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Daily Security Review

Daily Security Review

Daily Security Review, the premier source for news and information on security threats, Ransomware and vulnerabilities

technology tech news

All Episodes

9:02

From 1,382 to 4 Million: What VeriSource Didn’t Know...

Daily Security Review ·

2025/04/29

In this episode, we investigate the massive data breach at VeriSource Services, Inc. (VSI), a Houston-based HR outsourcing and employee benefits administrator. Initially reported as affecting fewer than 2,000 individuals, the breach has now ballooned to a confirmed 4 million affected people. We trace the timeline from the initial detection of suspicious network activity on February 28, 2024, to the eventual notification of millions of impacted individuals beginning in April 2025.Listeners

en

17:21

Actively Exploited: Commvault Web Shells, Active!...

Daily Security Review ·

2025/04/29

Three actively exploited vulnerabilities—CVE-2025-42599 (Qualitia Active! mail), CVE-2025-3928 (Commvault Web Server), and CVE-2025-1976 (Broadcom Brocade Fabric OS)—have been added to CISA’s KEV catalog. The Qualitia flaw is a remote stack-based buffer overflow (CVSS 9.8) allowing code execution without authentication. Commvault's vulnerability permits authenticated attackers to deploy web shells for persistent access (CVSS 8.8), while Broadcom's code injection flaw lets local admin users

en

11:39

Hard-Coded Havoc: The Fatal Flaws in Planet’s Network...

Daily Security Review ·

2025/04/28

A wave of critical vulnerabilities in Planet Technology’s industrial switches and network management systems could let attackers hijack devices, steal data, and sabotage industrial networks—with no credentials required.In this urgent episode, we dissect:🔓 The 5 worst flaws (CVSS 9.3+)—from hard-coded database passwords to pre-auth command injection—discovered by Immersive Labs’ Kev Breen.🏭 Why factories and critical infrastructure are prime targets: These switches are widely used in

en

14:51

Craft CMS Crisis: The 10.0-Rated RCE Flaw Every...

Daily Security Review ·

2025/04/28

A critical, actively exploited vulnerability (CVE-2025-32432) is wreaking havoc on Craft CMS—allowing attackers to execute arbitrary PHP code on unpatched servers with no authentication required.In this urgent episode, we break down:💥 Why this flaw scores a perfect 10.0 CVSS—the highest severity rating possible.🔍 How hackers are exploiting it: From stealing data to uploading PHP web shells (like filemanager.php) for persistent access.🛠️ The root cause: A Yii framework regression

en

12:44

Policy Puppetry: How a Single Prompt Can Trick...

Daily Security Review ·

2025/04/28

Recent research by HiddenLayer has uncovered a shocking new AI vulnerability—dubbed the "Policy Puppetry Attack"—that can bypass safety guardrails in all major LLMs, including ChatGPT, Gemini, Claude, and more.In this episode, we dive deep into:🔓 How a single, cleverly crafted prompt can trick AI into generating harmful content—from bomb-making guides to uranium enrichment.💻 The scary simplicity of system prompt extraction—how researchers (and hackers) can force AI to reveal its hidden

en

12:49

Lazarus Strikes Again: Inside Operation SyncHole and...

Daily Security Review ·

2025/04/25

In this episode, we break down the most urgent cybersecurity developments from late April 2025—including the Lazarus Group’s high-profile “Operation SyncHole” targeting South Korean industries. Discover how attackers are exploiting newly disclosed vulnerabilities faster than ever, with nearly 1 in 3 CVEs weaponized within 24 hours of publication.We dive deep into the Lazarus Group's tactics, including watering hole attacks, one-day and potential zero-day vulnerabilities in tools like

en

13:54

OAuth Phishing and Microsoft 365: The Hidden Threats...

Daily Security Review ·

2025/04/25

In this episode, we dissect the real-world challenges of securing Microsoft 365 environments—especially for small and medium-sized businesses—amid rising threats and licensing limitations.From Reddit frustrations to official Microsoft documentation, we explore the harsh truth: many essential security features, like alerting on suspicious logins, require Azure AD Premium or Defender for Cloud Apps. Can SMBs still stay secure without these? We look at third-party workarounds and how far

en

12:17

Why Outlook Is Eating Your CPU — And What Microsoft...

Daily Security Review ·

2025/04/25

Microsoft has acknowledged a serious issue affecting users of classic Outlook for Windows: CPU usage spikes up to 50% just from typing emails. First appearing in builds released since November 2024, this bug is now hitting users across several update channels—including Current, Monthly Enterprise, and Insider—leading to power drain, sluggish performance, and user frustration.In this episode, we unpack:What’s causing the CPU spike when typingWhy Microsoft’s workaround is a trade-off between

en

9:14

Trojan Map App: Spyware Targets Russian Soldiers via...

Daily Security Review ·

2025/04/24

A newly discovered Android spyware campaign is targeting Russian military personnel by weaponizing a popular mapping app. Disguised as a cracked version of Alpine Quest Pro, this trojanized app delivers Android.Spy.1292.origin—a powerful surveillance tool that steals data, tracks location in real-time, and downloads secondary payloads to extract confidential files from apps like Telegram and WhatsApp.In this episode, we break down:How the malware is distributed through Telegram and Russian

en

8:47

Blue Shield Breach: 4.7 Million Health Records Leaked...

Daily Security Review ·

2025/04/24

Blue Shield of California has confirmed a data breach affecting 4.7 million members—caused not by hackers, but by a misconfigured Google Analytics setup. Sensitive health information was inadvertently exposed to Google’s ad platforms between April 2021 and January 2024. In this episode, we break down what went wrong, what data was leaked, and what this means for privacy, compliance, and trust in healthcare IT.We’ll also explore:How analytics tools can become security liabilitiesWhy this

en

8:48

$16.6 Billion Lost: The True Cost of Cybercrime in...

Daily Security Review ·

2025/04/24

Cybercrime in the U.S. has reached new, record-breaking heights.In this episode, we dive deep into the FBI's 2024 Internet Crime Complaint Center (IC3) report — a comprehensive look at the economic and human toll of cybercrime in America. With $16.6 billion in reported losses, a 33% increase year-over-year, and 859,532 complaints filed, the data paints a grim picture of just how widespread and costly online threats have become.We’ll unpack:Why fraud and ransomware continue to dominate the

en

8:26

The Second Scam: FBI Warns of IC3 Impersonators...

Daily Security Review ·

2025/04/22

The FBI has issued a stark warning about a growing scam targeting individuals who’ve already been victimized. In this episode, we unpack how fraudsters are impersonating employees of the FBI's Internet Crime Complaint Center (IC3), promising to help victims recover lost funds — only to scam them again.We’ll break down:How the scam works and why it’s spreadingThe tactics scammers use to build trustReal examples, including fake IC3 directors and Telegram outreachWhat the FBI says they will

en

9:13

Inside the Breach: What Recent Cyberattacks Reveal...

Daily Security Review ·

2025/04/16

Cyberattacks are no longer rare shocks—they're a constant drumbeat in the background of our digital lives. In this episode, we take you on a deep dive into some of the most alarming recent data breaches, unpacking how they happened, what went wrong, and what you need to know to stay protected.We kick off with the Western Sydney University breach, where personal data of thousands of students ended up on the dark web, all because of a compromised sign-on system. Then we examine the Office of

en

17:59

Inside Security News : GitHub Supply Chain Attacks,...

Daily Security Review ·

2025/04/15

In this deep-dive episode, we untangle some of today’s most critical cybersecurity threats—from GitHub’s complex quadruple supply chain attack to the rising concerns over Kubernetes vulnerabilities and serious flaws in Next.js. 🧠💻We kick things off with an inside look at StoneFly’s robust approach to data protection, from immutable air-gapped backups to ransomware-resistant infrastructure. Then, we unpack how a simple GitHub token compromise spiraled into a four-level attack chain

en

16:44

Next.js Security Vulnerability: Middleware Bypass...

Daily Security Review ·

2025/04/14

Is your web app truly secure? In this episode, we break down a critical NextJS vulnerability (CVE-2025-29927) that could allow attackers to bypass authentication and access sensitive data—impacting millions of websites. We explain what went wrong, what it means for your projects, and exactly how to fix it (even if you can’t upgrade yet).Then, we pivot to something equally vital: disaster recovery and data protection. Learn how StoneFly's cutting-edge solutions—like immutable snapshots,

en

4:50

Cyberattack Roundup: Lessons from the Latest Breaches...

Daily Security Review ·

2025/03/26

From data breaches at major banks to ransomware crippling healthcare and tech companies, cyber threats are hitting harder than ever. In this episode, we break down the latest wave of attacks, the vulnerabilities being exploited, and what organizations can do to protect their data.Key Takeaways:🔹 Breaking down the latest cyberattacks – Who was hit and how it happened 🔹 Ransomware, supply chain breaches, and stolen credentials – The evolving threat landscape 🔹 Data protection strategies –

en

18:41

Mastering Incident Response: A Guide to Building a...

Daily Security Review ·

2025/03/26

Cyber threats are inevitable, but a strong incident response plan can make all the difference. In this episode, we explore the essential steps for creating an effective incident response strategy, helping organizations detect, respond to, and recover from cyber incidents with minimal disruption.Key Takeaways:🔹 What is an Incident Response Plan? – Why every organization needs one 🔹 Key components of a strong strategy – From detection to recovery 🔹 Best practices for rapid response –

en

15:49

No More Warnings? The Risks of Losing CIPAC’s Cyber...

Daily Security Review ·

2025/03/20

The Department of Homeland Security (DHS) has abruptly shut down the Critical Infrastructure Partnership Advisory Council (CIPAC), the central hub for cybersecurity collaboration between the government and private sector. Why was it shut down? No one knows. What happens next? That’s the real concern.In this episode, we break down why CIPAC was crucial for national cybersecurity, the risks of losing a coordinated threat intelligence network, and what businesses must do to stay protected

en

11:52

517,000 Victims: How a Ransomware Gang Targeted...

Daily Security Review ·

2025/03/20

Over 517,000 individuals are now at risk after the Pennsylvania State Education Association (PSEA) suffered a massive data breach in July 2024—claimed by the Rhysida ransomware gang. Personal, financial, and health data, including Social Security numbers and payment details, were stolen, putting educators and union members at serious risk.In this episode, we break down: 🔹 How Rhysida ransomware infiltrated PSEA’s systems and their 20 BTC ransom demand 🔹 The type of stolen data and what it

en

14:04

DollyWay: The 8-Year WordPress Malware Campaign...

Daily Security Review ·

2025/03/20

For nearly a decade, a malware campaign dubbed DollyWay has silently compromised over 20,000 WordPress websites, evolving from a ransomware and banking trojan distributor to a sophisticated scam redirection network. Researchers at GoDaddy have now uncovered the full scale of this operation, which generates 10 million fraudulent ad impressions per month by redirecting site visitors to fake crypto, gambling, and dating scams.In this episode, we break down: 🔹 How DollyWay exploits WordPress

en

410 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs