x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Daily Security Review

Daily Security Review

Daily Security Review, the premier source for news and information on security threats, Ransomware and vulnerabilities

technology tech news

All Episodes

23:11

Weather Station Gateway Exploited: CISA Adds...

Daily Security Review ·

2025/10/06

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a stark warning following confirmation that a command injection vulnerability in Meteobridge weather station devices is now being actively exploited. Tracked as CVE-2025-4008, the flaw allows attackers to execute arbitrary commands via an unauthenticated web interface endpoint, exploiting unsanitized user input.While Meteobridge devices are not designed to be internet-facing, security researchers identified around 100

en

25:30

DrayTek Issues Critical Patch for Router RCE Flaw...

Daily Security Review ·

2025/10/06

A serious unauthenticated remote code execution (RCE) flaw, identified as CVE-2025-10547, has been uncovered in DrayTek’s DrayOS routers. This vulnerability allows attackers to send crafted HTTP or HTTPS requests to the router’s web management interface, potentially leading to memory corruption, system crashes, or full device takeover.The flaw affects 35 models of DrayTek’s Vigor routers, devices widely deployed by small-to-medium businesses (SMBs) and home professionals. While disabling

en

27:25

FTC vs. Sendit: Lawsuit Alleges Data Theft, Fake...

Daily Security Review ·

2025/10/02

The Federal Trade Commission (FTC) has filed a high-profile lawsuit against Sendit, a social media companion app popular among teenagers, and its CEO. The case accuses the company of breaking three major U.S. laws designed to protect consumers and children online.First, the FTC alleges that Sendit violated the Children’s Online Privacy Protection Act (COPPA) by knowingly collecting personal data—such as phone numbers, birthdates, photos, and usernames—from more than 100,000 children under

en

25:16

Broadcom Patches VMware Zero-Day: CVE-2025-41244...

Daily Security Review ·

2025/10/01

Broadcom has released a critical security update addressing six vulnerabilities across VMware products, including four rated high-severity. At the center of the update is CVE-2025-41244, a local privilege escalation flaw affecting VMware Tools and Aria Operations. What makes this vulnerability particularly alarming is that it was actively exploited in the wild as a zero-day since mid-October 2024, nearly a full year before its public disclosure.Security researchers at NVISO Labs attribute

en

29:12

Seven Years, £5.5 Billion, 128,000 Victims – The Case...

Daily Security Review ·

2025/10/01

In a historic case that has captured global attention, UK authorities have secured a conviction against Zhimin Qian (also known as Yadi Zhang), the Chinese national at the center of one of the largest financial crime investigations of the decade. Following a seven-year probe by the Metropolitan Police, investigators uncovered an elaborate fraud and laundering scheme that culminated in the seizure of 61,000 Bitcoin—valued at over £5.5 billion—the largest cryptocurrency seizure in

en

31:52

Cisco ASA/FTD Flaws Under Siege: 50,000 Devices at...

Daily Security Review ·

2025/10/01

Two newly disclosed critical vulnerabilities—CVE-2025-20333 and CVE-2025-20362—are wreaking havoc across the global cybersecurity landscape, with nearly 50,000 Cisco ASA and FTD appliances actively under threat. These flaws enable unauthenticated remote code execution and VPN access compromise, giving attackers an immediate foothold into critical infrastructure. Despite Cisco issuing warnings and patches, exploitation began weeks earlier, suggesting adversaries had advanced knowledge of the

en

16:12

MatrixPDF: The New Phishing Toolkit That Turns Safe...

Daily Security Review ·

2025/10/01

A new cybercrime toolkit called MatrixPDF is changing the phishing landscape by weaponizing one of the most trusted file formats: PDFs. Marketed on cybercrime forums as an “elite document builder” for phishing simulations and blackteaming, MatrixPDF enables attackers to transform ordinary PDFs into highly convincing phishing lures that bypass email security filters—including Gmail’s native protections.Unlike traditional malware-packed attachments, MatrixPDF-generated PDFs contain no

en

27:07

Asahi Brewery Cyberattack Halts Domestic Operations...

Daily Security Review ·

2025/10/01

Asahi Group Holdings, Ltd.—the brewer behind some of the world’s most iconic beers, including Peroni and Grolsch—has been hit by a crippling cyberattack that froze its Japan-based operations. Ordering and shipping have been suspended, customer call centers and service desks are offline, and the company has been forced into damage control. While Asahi’s global operations remain unaffected, this incident highlights just how devastating digital breaches can be for even the most established

en

23:58

Akira Ransomware Exploits SonicWall Flaw with...

Daily Security Review ·

2025/09/30

The Akira ransomware group has once again raised the stakes in cybercrime by exploiting a critical SonicWall vulnerability—CVE-2024-40766—to infiltrate corporate networks through SSL VPN accounts, even those secured with one-time password multi-factor authentication. Once inside, Akira’s affiliates execute one of the most dangerous tactics in modern ransomware: Living Off the Land. By hijacking legitimate, pre-installed IT tools like the Datto RMM platform and backup agents, the attackers

en

28:04

Ex-Hacktivist “Sabu” Backs SafeHill’s $2.6M Bet on...

Daily Security Review ·

2025/09/30

A new cybersecurity startup with an infamous name attached is making headlines. SafeHill—formerly known as Tacticly—has secured $2.6 million in pre-seed funding to accelerate the development of its continuous threat exposure management (CTEM) platform, SecureIQ. Designed to overcome the shortcomings of traditional, point-in-time penetration testing, SecureIQ blends AI-driven continuous asset discovery with human-validated penetration testing, ensuring security teams focus on real,

en

27:34

Jaguar Land Rover Cyberattack Fallout: £1.5B UK...

Daily Security Review ·

2025/09/30

Jaguar Land Rover (JLR), one of the UK’s largest exporters and a key anchor of the nation’s automotive supply chain, has been brought to the brink by a devastating cyberattack. With production lines halted, digital operations crippled, and a data breach confirmed, the UK government stepped in with a massive £1.5 billion support package to stabilize JLR’s finances and protect the 120,000 jobs connected to its supply chain. But the intervention raises serious questions: Did the lack of

en

24:00

CISA’s Sunset Clause: What Happens if America’s Cyber...

Daily Security Review ·

2025/09/30

The Cybersecurity Information Sharing Act (CISA), first enacted in 2015, is facing a critical expiration deadline in September 2025. Without reauthorization, the law that shields companies from liability when sharing cyber threat data with the federal government and industry peers will vanish, leaving organizations exposed to lawsuits and reputational risks. This episode dives deep into the high-stakes debate surrounding CISA’s renewal, exploring how the law enables a “whole animal” view of

en

23:49

Crypto Theft on macOS: XCSSET Malware Swaps Wallet...

Daily Security Review ·

2025/09/30

A new and more dangerous variant of the XCSSET macOS malware has been uncovered by Microsoft, revealing an expanded arsenal of capabilities aimed at financial theft and deeper system compromise. Originally known for spreading through malicious Xcode projects, XCSSET has steadily evolved into one of the most persistent malware families targeting Apple’s ecosystem.The latest analysis highlights a refined four-stage infection chain that culminates in the deployment of a powerful AppleScript

en

26:21

Nine High-Severity Vulnerabilities Expose Cognex...

Daily Security Review ·

2025/09/29

Cybersecurity researchers at Nozomi Networks have uncovered nine high-severity vulnerabilities in several older models of Cognex industrial cameras, including the widely deployed In-Sight 2000, 7000, 8000, and 9000 series. These machine vision systems are vital for modern manufacturing—guiding robots, inspecting products, and ensuring quality control—but the flaws introduce significant risks ranging from hardcoded passwords and authentication bypasses to privilege escalation and

en

28:39

Microsoft Cuts Services to Israeli Military Unit...

Daily Security Review ·

2025/09/29

Microsoft has taken the unprecedented step of cutting off services to an Israeli military unit after internal and external investigations revealed its cloud and AI products were being used for mass surveillance of Palestinians in Gaza and the West Bank. This dramatic reversal came only after sustained reporting by The Associated Press and The Guardian, which uncovered that Israel’s elite cyber intelligence branch, Unit 8200, had dramatically escalated its use of Microsoft Azure services for

en

27:23

Ghana, Senegal, Ivory Coast at the Center of...

Daily Security Review ·

2025/09/29

Interpol has announced the results of a sweeping cybercrime operation across 14 African nations, leading to the arrest of 260 individuals behind romance scams and sextortion schemes. The crackdown, conducted in July and August, exposed the alarming scale of digital exploitation sweeping the continent. Victims—more than 1,400 in total—were deceived, blackmailed, and financially drained, with total losses nearing $2.8 million.The operation highlighted country-specific cases: Ghanaian police

en

22:17

Harrods Data Breach Exposes Customer Details in...

Daily Security Review ·

2025/09/29

Britain is facing a troubling wave of cyberattacks that has shaken some of its most high-profile organizations. Harrods, the world-renowned luxury retailer, confirmed that customer names and contact details were compromised after attackers infiltrated a third-party vendor’s system. While account passwords and payment data were spared, the breach highlights the risks of vendor supply chain security gaps. This latest breach follows a May security scare for Harrods and comes amid broader law

en

29:37

Steam Game BlockBlasters Turns Malicious, Drains...

Daily Security Review ·

2025/09/24

What happens when a trusted gaming platform becomes a weapon for cybercriminals? That’s exactly what unfolded with BlockBlasters, a free-to-play platformer on Steam that turned from harmless fun into a malicious cryptocurrency-draining scheme.For nearly two months, BlockBlasters appeared safe, even earning “Very Positive” reviews. But in late August, the developers pushed an update containing a cryptodrainer payload, which siphoned off crypto from unsuspecting players. The most shocking

en

26:15

Beyond the Inbox: The Rising Threat of Non-Email...

Daily Security Review ·

2025/09/23

Phishing is no longer just an email problem. A new wave of non-email phishing attacks is targeting employees through social media, instant messaging apps, SMS, malicious search engine ads, and even collaboration tools like Slack and Teams. These campaigns are designed to bypass traditional defenses—leaving organizations exposed while attackers exploit overlooked channels of communication.Unlike the inbox-focused phishing most security teams prepare for, these multi-channel attacks are far

en

24:09

Stellantis Data Breach Exposes Contact Info in...

Daily Security Review ·

2025/09/23

Automotive giant Stellantis, the world’s fifth-largest automaker, has confirmed a data breach affecting its North American customers after attackers compromised a third-party service provider’s platform. While no financial data was exposed, the company acknowledged that customer contact details were stolen, prompting advisories to remain vigilant against phishing attempts.According to BleepingComputer, the breach is part of a sweeping campaign by the notorious cyber-extortion group

en

410 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs