x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Daily Security Review

Daily Security Review

Daily Security Review, the premier source for news and information on security threats, Ransomware and vulnerabilities

technology tech news

All Episodes

11:02

MegaRAC CVE-2024-54085 Vulnerability: Critical BMC...

Daily Security Review ·

2025/03/19

A newly discovered critical vulnerability (CVE-2024-54085) in AMI’s MegaRAC Baseboard Management Controller (BMC) software puts thousands of servers at risk—including those from HPE, Asus, and ASRockRack. This flaw allows remote attackers to bypass authentication and take full control of affected servers, enabling malware deployment, firmware tampering, indefinite reboot loops, and even physical damage through over-voltage attacks.In this episode, we break down: 🔹 How this vulnerability

en

9:22

Microsoft Windows March Update Wipes Out Copilot

Daily Security Review ·

2025/03/19

Microsoft’s latest Windows 10 and 11 updates (KB5053598 and KB5053606) have accidentally uninstalled Copilot, the AI assistant, from some users' systems—leaving many relieved rather than frustrated. In this episode, we break down Microsoft’s response, the temporary workaround, and what this says about the ongoing struggles of AI integration in Windows.We’ll discuss:How the Windows update mistakenly removed Copilot.Microsoft’s workaround and why the fix isn’t listed in the Windows release

en

20:22

Hackers Flip the Script: How a Fake Coinbase Email...

Daily Security Review ·

2025/03/18

A new and incredibly deceptive phishing campaign is targeting Coinbase users—but this isn’t your typical scam. Instead of stealing your recovery phrase, attackers are handing you one—a pre-generated phrase they control—tricking users into creating wallets the hackers can drain instantly.Disguised as an official Coinbase email, the attack bypasses traditional security checks, using a convincing story about a court-mandated shift to self-custodial wallets. The emails, which originate from a

en

12:52

Brute-Force on Autopilot: Black Basta’s 'BRUTED' VPN...

Daily Security Review ·

2025/03/17

Black Basta, one of the most notorious ransomware gangs, has taken brute-force attacks to the next level with BRUTED—an automated framework designed to breach VPNs, firewalls, and remote access tools. In this episode, we break down how BRUTED works, its key targets—including Cisco AnyConnect, Fortinet SSL VPN, and Palo Alto GlobalProtect—and why this tool is a game-changer for ransomware operations.Leaked internal chat logs reveal how Black Basta uses BRUTED to automate credential-stuffing

en

14:09

GitHub Action Hijacked: The Supply Chain Attack That...

Daily Security Review ·

2025/03/17

In this episode, we unpack a major supply chain attack that compromised the widely used GitHub Action ‘tj-actions/changed-files’, affecting over 23,000 repositories. Attackers injected malicious code that exposed CI/CD secrets in build logs, creating a potential goldmine for further attacks.We’ll break down: 🔹 How the attack happened – The use of a compromised GitHub Personal Access Token (PAT). 🔹 The impact – CI/CD secrets dumped in plaintext inside workflow logs. 🔹 Why this attack is

en

26:31

Brave Browser Review 🎯 How Safe is This Web Browser?...

Daily Security Review ·

2025/03/17

en

19:33

Bridging the Gap: Developers vs. Security in the Cloud

Daily Security Review ·

2025/03/14

In this episode of The Deep Dive, we explore the ongoing tension between development and security teams in cloud environments. While developers prioritize speed and agility, security teams focus on risk mitigation—leading to friction that can hinder innovation. We discuss how platform teams act as a bridge, aligning both sides to create a secure yet efficient workflow. With insights from industry studies and solutions from Stonefly.com, we uncover strategies to foster collaboration,

en

11:01

Exploring the Dark Web: Unveiling the Hidden Internet 🌐💻

Daily Security Review ·

2025/03/13

Ever wondered what lies beneath the surface of the internet? 🤔 In this deep dive, we uncover the mysteries of the Dark Web—a hidden part of the internet that isn't accessible through regular search engines. But what exactly is the Dark Web, and how does it work? Is it really as dangerous as it seems, or is there more to the story?🚀 In this video, we’ll explore: ✅ What the Dark Web is and how it differs from the Deep Web 🌊 ✅ How people access it using tools like Tor 🕵️‍♂️ ✅ The legal and

en

15:17

Security vulnerabilities: Key Steps for secure Workflows

Daily Security Review ·

2025/03/12

Ever wondered how sensitive credentials—like API keys, passwords, and certificates—end up scattered across your systems? 🤔 This hidden cybersecurity risk, known as secret sprawl, makes organizations an easy target for cybercriminals. 🚨In this episode, we uncover: ✅ The root causes of secret sprawl 🔍 ✅ Why traditional security methods aren’t enough ❌ ✅ How attackers exploit exposed secrets 🎭 ✅ A proven 5-step remediation plan to secure your data 🛡️🔹 Plus, we’ll explore StoneFly’s

en

10:22

The Hidden Threat of Wi-Fi Tracking: How Your Devices...

Daily Security Review ·

2025/03/12

Did you know your phone is constantly mapping Wi-Fi hotspots around you—even when you're not using GPS? In this deep dive, we uncover the unsettling world of Wi-Fi positioning systems, how they track your movements, and the serious privacy risks involved. From global router databases to potential surveillance threats, we explore the implications of this hidden technology. Plus, we share practical steps to protect your privacy, including router settings that can help you opt out. Tune in to

en

6:06

Zero Trust & Data Security: The Future of Protecting...

Daily Security Review ·

2025/03/11

In this episode, we dive into a crucial topic—data security for government agencies. With evolving cyber threats, traditional security measures no longer cut it. We explore the rise of Zero Trust Security, its impact, and how organizations like StoneFly provide encryption, granular access controls, and backup solutions to safeguard critical data. Plus, we discuss why cybersecurity isn’t just for agencies—it’s for everyone. Tune in to learn how to protect sensitive information in an

en

5:41

Japanese telco NTT Communications hacked hackers...

Daily Security Review ·

2025/03/10

panese telecommunications giant NTT Communications Corporation (NTT Com) has disclosed a data breach affecting information from nearly 18,000 corporate clients. The breach was identified on February 5, 2025, when suspicious activity was detected in the company's internal Order Information Distribution System. Immediate measures were taken to restrict access to the compromised system. However, on February 15, further unauthorized access was discovered on another device, which was

en

25:10

1 Million Devices Hit: Inside the Massive...

Daily Security Review ·

2025/03/07

A massive malvertising campaign has compromised one million devices worldwide, using malicious ads on illegal streaming websites to distribute malware. Dubbed Storm-0408, this cybercrime operation leveraged GitHub, Dropbox, and Discord to host payloads, deploying information stealers like Lumma and Doenerium alongside remote access trojans (RATs) like NetSupport. By exploiting Living-off-the-Land techniques, attackers evaded detection, modified security settings, and stole system

en

13:10

Inside the $635K Taylor Swift Ticket Heist:...

Daily Security Review ·

2025/03/07

A cybercrime operation involving the theft and resale of $635,000 worth of concert tickets—primarily for Taylor Swift’s Eras Tour—has been uncovered. New York prosecutors revealed that two employees of a third-party StubHub contractor exploited a vulnerability in the ticketing system, intercepting over 350 ticket orders. By redirecting digital ticket links to themselves and their co-conspirators, the perpetrators resold them for massive profits.In this episode, we break down the details of

en

18:35

Silk Typhoon Strikes: From Direct Breaches to...

Daily Security Review ·

2025/03/06

In this episode, we take an in-depth look at Silk Typhoon, the Chinese state-sponsored cyber espionage group that’s radically shifting its tactics. Moving away from direct breaches, Silk Typhoon is now targeting IT supply chains—exploiting remote management tools, identity systems, and cloud services to infiltrate organizations more stealthily and at scale.We explore how the group leverages stolen API keys, compromised credentials, and zero-day vulnerabilities to access downstream customer

en

11:48

Tracking Stingrays: How Rayhunter Shields Your Mobile...

Daily Security Review ·

2025/03/06

In this episode, we dive into Rayhunter—an open source tool from the EFF designed to detect Stingray devices (cell-site simulators) that compromise your mobile privacy. We break down how Rayhunter leverages an affordable Orbic RC400L mobile hotspot to intercept and analyze control traffic between your device and cell towers, alerting you to suspicious activities like forced 2G downgrades or unusual IMSI requests.Explore the cutting-edge technology behind Rayhunter, its potential to empower

en

17:53

AI-Generated Video of YouTube's CEO Used In Phishing...

Daily Security Review ·

2025/03/05

en

13:28

BackConnect, Microsoft Teams, & Social...

Daily Security Review ·

2025/03/05

The ransomware landscape is shifting, and Black Basta and Cactus are at the center of it. In this episode, we break down the connections between these two ransomware gangs, their shared tactics, and the use of BackConnect malware for stealthy post-exploitation access.We explore how both groups use social engineering via Microsoft Teams—posing as IT help desk personnel—to trick employees into granting them remote access through Windows Quick Assist. With Black Basta reportedly fading and its

en

12:46

OnlyFans Cyberattacks: Fake CAPTCHAs and Malware...

Daily Security Review ·

2025/03/04

Cyberattacks are increasingly targeting OnlyFans users through sophisticated phishing schemes. These attacks leverage fake Cloudflare CAPTCHAs to trick users into running malicious scripts that install malware, such as remote access trojans and keyloggers, and they distribute malware through deceptive links. These links often masquerade as legitimate login pages or special offers, leading to the download of malware-laden files and installation of remote-control software. Defensive

en

17:22

9 Million Downloads, Now Banned: VSCode Extensions...

Daily Security Review ·

2025/02/27

In a shocking move, Microsoft has banned the popular Material Theme – Free and Material Theme Icons – Free extensions from the Visual Studio Marketplace, removing them from millions of VSCode instances after cybersecurity researchers discovered potentially malicious code. With nearly 9 million downloads, these extensions were a staple for developers—until now.What went wrong? In this episode, we break down:✅ The Supply Chain Risk – How an outdated Sanity.io dependency may have been

en

410 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs