x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Cyber Bites

Your weekly dose of cyber security news by Edwin Kwan Stay sharp in the digital world! "Cyber Bites" delivers cybersecurity insights, industry trends, and personal experiences to keep you informed and protected. edwinkwan.substack.com

technology tech news

All Episodes

8:21

Cyber Bites - 31st January 2025

Cyber Bites ·

2025/01/30

* Subaru Flaw Could Have Let Hackers Track and Control Vehicles* Hundreds of Fake Reddit Sites Push Lumma Stealer Malware* Cybersecurity Needs to Start Saying 'No' Again* GitHub Desktop and Other Git Clients Vulnerable to Credential Leaks* Sophisticated Voice Phishing Scam Attempt Exploiting Google Workspace Domain Verification FlawSubaru Flaw Could Have Let Hackers Track and Control Vehicleshttps://samcurry.net/hacking-subaruA critical security vulnerability in Subaru's Starlink service could have

en

7:29

Cyber Bites - 24th January 2025

Cyber Bites ·

2025/01/23

* DDoS Attack Hits Record Breaking 5.6Tbps* Telegram Captcha Trick Lures Users into Running Malicious PowerShell Scripts* 7-Zip Patch Released to Address Mark of the Web Bypass Vulnerability* MasterCard DNS Misconfiguration Exposed for Years* Supply Chain Attack Targets Chrome Extensions, Potentially Impacting MillionsDDoS Attack Hits Record Breaking 5.6Tbpshttps://blog.cloudflare.com/ddos-threat-report-for-2024-q4/Cloudflare has mitigated the largest DDoS attack ever recorded, peaking at a

en

9:35

Cyber Bites - 17th January 2025

Cyber Bites ·

2025/01/16

* Ransomware Gang Exploits AWS Feature to Encrypt and Hold Data Hostage* Phishing Texts Trick iMessage Users into Disabling Security* Fake CrowdStrike Job Offers Used to Distribute Cryptominer* Stealthy WordPress Skimmers Infiltrate Database Tables* A New AI-Driven Ransomware Group Blurs the Lines Between Hacktivism and CybercrimeRansomware Gang Exploits AWS Feature to Encrypt and Hold Data Hostagehttps://www.halcyon.ai/blog/abusing-aws-native-services-ransomware-encrypting-s3-buckets-with-sse-cA

en

6:58

Cyber Bites - 10th January 2025

Cyber Bites ·

2025/01/09

* Cybersecurity in 2024: Top Stories that Rocked the Digital World* Over 4,000 Compromised Systems Exposed Through Hijacked Web Backdoors* Desperate Job Seekers Targeted by WhatsApp Employment Scams* Voice Phishing Rings Target Crypto Investors Using Apple Support Line* Neglected Domains Fuel Rise in Malicious Email CampaignsCybersecurity in 2024: Top Stories that Rocked the Digital Worldhttps://www.bleepingcomputer.com/news/security/the-biggest-cybersecurity-and-cyberattack-stories-of-2024/The year

en

7:13

Cyber Bites - 3rd January 2025

Cyber Bites ·

2025/01/02

* Fake Stars Inflate Popularity of Malicious GitHub Repositories* Cybercriminals Exploit Chrome Web Store to Infect Millions of Users* Malicious Packages Found on Python Package Index and VSCode Marketplace* One Third of Adults Don't Know How to Erase Their Data from an Old Device* New Clickjacking Technique "DoubleClickjacking" Bypasses Security MeasuresFake Stars Inflate Popularity of Malicious GitHub Repositorieshttps://arxiv.org/pdf/2412.13459A new study reveals a significant problem with

en

8:38

Cyber Bites - 27th December 2024

Cyber Bites ·

2024/12/26

* US Government Considers Ban on TP-Link Routers Over Security Concerns* New Phishing Scam Uses Google Calendar to Bypass Spam Filters* Malicious VSCode Extensions Steal Developer Credentials* Large Language Models Pose New Threat in Generating Undetectable Malware* Malicious NPM Packages and VSCode Extensions Target DevelopersUS Government Considers Ban on TP-Link Routers Over Security Concernshttps://www.wsj.com/politics/national-security/us-ban-china-router-tp-link-systems-7d7507e6The U.S

en

7:41

Cyber Bites - 20th December 2024

Cyber Bites ·

2024/12/19

* New Phishing Scam Uses Fake CAPTCHA Tests to Install Malware* Google Releases Open-Source Tool to Speed Up Android Security Patching* The Global Trail of Stolen Smartphones* Year-Long Attack Steals Credentials from Security Researchers and Hackers* Australia Leads the Way in Quantum-Resistant CryptographyNew Phishing Scam Uses Fake CAPTCHA Tests to Install Malwarehttps://au.pcmag.com/security/107245/this-captcha-test-can-trick-windows-users-into-installing-malwareA new phishing scam is targeting

en

7:06

Cyber Bites - 13th December 2024

Cyber Bites ·

2024/12/12

* Cybercriminals Exploit Misconfigured AWS Environments to Steal Sensitive Data* New Phishing Scam Uses Fake Video Conferencing Apps to Steal Data* Millions of WordPress Sites Vulnerable to Payment Fraud via WPForms Plugin* Hackers Find New Way to Bypass Browser Isolation with QR Codes* The Evolving Threat to Software Supply ChainsCybercriminals Exploit Misconfigured AWS Environments to Steal Sensitive Datahttps://www.vpnmentor.com/news/shiny-nemesis-report/A recent cyberattack, believed to be

en

6:52

Cyber Bites - 6th December 2024

Cyber Bites ·

2024/12/05

* Finsure Confirms Data Breach Affecting Broker and Customer Information* Cloudflare Suffers Major Log Loss Incident* Over 8 Million Android Users Hit by Predatory Loan Apps Disguised as Legitimate Tools* Cybercriminals Exploit Job Fears with New Phishing Scam* New Phishing-as-a-Service Platform, Rockstar 2FA, Leverages AiTM Attacks This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

en

7:22

Help! There’s too many Vulnerabilities!

Cyber Bites ·

2024/12/02

This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

en

6:15

Cyber Bites - 29th November 2024

Cyber Bites ·

2024/11/28

* Russian Hackers Leverage Wi-Fi to Bypass Security and Breach Networks* Australia Passes Landmark Cyber Security Legislation* Malicious Python Packages Exploit AI Enthusiasm* Ransomware Attack on Supply Chain Software Disrupts Major Retailers During Holidays* New CWE Methodology Shake up has Cross Site Scripting as 2024's Most Dangerous Software Weakness* Special Thanks to Justin Butterfield for contributing some of the interesting stories for this week’s cyber bites. This is a public episode. If

en

9:12

Cyber Bites - 22nd November 2024

Cyber Bites ·

2024/11/21

* Australia Faces Escalating Cyber Threats Amid Complex Strategic Environment* Sextortion Scams Abuse Microsoft 365 Admin Portal to Bypass Email Filters* Cybercriminals Exploit Black Friday Shopping Season with Phishing Attacks* The Dark World of Online Scams: A Deep Dive* Google Prepares to Launch Shielded Email for Enhanced Privacy This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

en

23:59

A FAIR Approach to Vulnerability Patch Prioritization

Cyber Bites ·

2024/11/18

This is a rebroadcast of Season 1, Episode 10 of AppSec Unlocked.In this episode of AppSec Unlocked, we dive into the fascinating topic of using a FAIR approach to Vulnerability Patch prioritization, where we explore how organizations can better prioritize vulnerabilities in their open-source software using the FAIR model and EPSS. And we have Denny Wan, an expert on FAIR analysis sharing his insights on this innovative approach. This is a public episode. If you would like to discuss this with other

en

5:23

Cyber Bites - 15th November 2024

Cyber Bites ·

2024/11/14

* Google Pixel AI-powered Features To Combat Scam Calls* Apple's New Security Feature: Automatic Reboots to Protect Data* Massive Data Leak Exposes Employee Information from Over 25 Companies* Bitdefender Releases Free Decryptor for ShrinkLocker Ransomware* New Phishing Campaign Uses Fake Copyright Claims to Spread Malware This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

en

9:25

Cyber Bites - 8th November 2024

Cyber Bites ·

2024/11/07

* Cloud Security Concerns Surge in APAC as Data Breaches Remain High* AI-Powered Scams: A Growing Threat* Western Sydney University Suffers Major Data Breach* New FakeCall Malware Targets Android Users for Financial Fraud* UK Regulator Warns Financial Firms After CrowdStrike Outage* OWASP Releases GenAI Security Guidelines This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

en

9:39

Open-Source Vulnerability Management Policy: A...

Cyber Bites ·

2024/11/04

This episode is a replay from our sister podcast AppSec UnlockedIn today's rapidly evolving cybersecurity landscape, managing vulnerabilities in open-source components has become increasingly complex. While traditional approaches relying solely on CVSS scores have their merits, they may not be sufficient to address the exponential growth in discovered vulnerabilities. A more nuanced and scalable approach is needed, one that considers not only severity but also exploitability and potential impact

en

5:32

Your Site Was Hacked, and You Never Knew About It: My...

Cyber Bites ·

2024/10/31

An out of band update on my real life encounter with a supply chain attack This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

en

7:31

Cyber Bites - 1st November 2024

Cyber Bites ·

2024/10/31

* AI Transcription Tool "Whisper" Creates Fabricated Text, Raising Concerns in Healthcare and Beyond* Massive UN Data Leak Exposes Personal Information of Violence Against Women Victims* Mandiant Report: Exploited Vulnerabilities Reach Record Lows in Time to Patch, But Zero-Days on the Rise* Fake Browser Update Malware Targets WordPress Sites via Malicious Plugins* Large-Scale Operation Steals Cloud Credentials from Exposed Git Repositories This is a public episode. If you would like to discuss this

en

5:18

Cyber Bites - 25th October 2024

Cyber Bites ·

2024/10/24

* Anthropic's New AI Can Interact with Computers, Raising Safety Concerns* Internet Archive Hit Again: Exposed Tokens Lead to Zendesk Email Breach* Malicious npm Packages Target Developers' Ethereum Wallets with SSH Backdoor* Half of Businesses Underestimate SaaS Security Risks, Culture Blamed* Cyber Skills Gap Widens, Nearly 90% of Businesses Link Breaches to Lack of Expertise This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit

en

8:36

Cyber Bites - 18th October 2024

Cyber Bites ·

2024/10/17

* North Korean Hackers Target Tech Job Seekers with Fake Interviews and Malware* Internet Archive Hack Exposes Data of 31 Million Users* Australian Government Introduces Sweeping Cybersecurity Bill* Smart TVs: A Privacy Nightmare Fueled by Data Harvesting and Invasive Ads* iPhone Mirroring at Work Exposes Private App Data to Employers This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

en

77 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs