x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Cyber Bites

Your weekly dose of cyber security news by Edwin Kwan Stay sharp in the digital world! "Cyber Bites" delivers cybersecurity insights, industry trends, and personal experiences to keep you informed and protected. edwinkwan.substack.com

technology tech news

All Episodes

5:39

Cyber Bites - 14th March 2025

Cyber Bites ·

2025/03/13

* Critical PHP Vulnerability Under Mass Exploitation Worldwide* Hacktivist Group Claims Responsibility for X Outages, Musk Blames "Massive Cyberattack"* Cybercriminals Use Bogus Copyright Claims to Spread Malware on YouTube* Former Software Developer Found Guilty of Sabotaging Employer's Systems* Melbourne Man Charged in Mobile Number Porting ScamCritical PHP Vulnerability Under Mass Exploitation

en

7:47

Cyber Bites - 7th March 2025

Cyber Bites ·

2025/03/06

* Disney Engineer's Life Destroyed by Malicious AI Download* Global Security Flaw Exposes Sensitive Employee Data and Physical Vulnerabilities* Malicious PyPi Package Pirating Deezer Music for Years* Code Security Remains Crucial, Even in Hardened Environments* Google Introduces AI Scam Detection for Android2025_03_07 - Google Disney Engineer's Life Destroyed by Malicious AI Downloadhttps://www.wsj.com/tech/cybersecurity/disney-employee-ai-tool-hacker-cyberattack-3700c931A former Disney engineer,

en

6:22

Cyber Bites - 28th February 2025

Cyber Bites ·

2025/02/27

* Russian Threat Actors Target Signal Messenger Accounts* Australian Fertility Services Giant Genea Suffers Data Breach* Australia Bans Kaspersky Products on Government Systems Over Security Concerns* PayPal "New Address" Feature Abused in Widespread Phishing Scam* Apple Disables iCloud End-to-End Encryption in UK Following Government DemandRussian Threat Actors Target Signal Messenger Accountshttps://cloud.google.com/blog/topics/threat-intelligence/russia-targeting-signal-messenger/Google's Threat

en

6:55

Cyber Bites - 21st February 2025

Cyber Bites ·

2025/02/20

* "whoAMI" Attack Exploits AWS for Code Execution* Chinese Hackers Exploit Cisco Devices in Global Telecom Attacks* Australian National University Investigates Alleged Ransomware Attack* Phishing Season 2025: Zscaler Predicts Increased Sophistication and New Threats* Chinese Cybercriminals Revive Carding with Mobile Wallet Attacks"whoAMI" Attack Exploits AWS for Code Executionhttps://www.bleepingcomputer.com/news/security/whoami-attacks-give-hackers-code-execution-on-amazon-ec2-instances/Security

en

7:57

Cyber Bites - 14th February 2025

Cyber Bites ·

2025/02/13

* Chinese AI App DeepSeek Banned From Australian Government Devices* OpenAI Data Breach Alleged: 20 Million Logins Reportedly Stolen* Apple Removes Apps Infected with "SparkCat" Malware* Australian Healthcare Sector Hardest Hit by Cyberattacks: Report* Securing the No-Code SDLC: A New Approach NeededChinese AI App DeepSeek Banned From Australian Government Deviceshttps://www.sbs.com.au/news/article/chinese-ai-app-deepseek-banned-on-all-australian-government-devices/lm9udv4etThe Australian government

en

8:45

Cyber Bites - 7th February 2025

Cyber Bites ·

2025/02/06

* PyPI Introduces Project Archiving to Improve Security and Transparency* DeepSeek Exposes Database with Over 1 Million Chat Records* Google Blocked 2.36 Million Risky Android Apps in 2024* 20% Increase in Exploited Vulnerabilities in 2024* "Infrastructure Laundering": How Chinese Crime Groups Abuse US Cloud ServicesPyPI Introduces Project Archiving to Improve Security and Transparencyhttps://blog.pypi.org/posts/2025-01-30-archival/The Python Package Index (PyPI) has implemented a new "Project

en

8:21

Cyber Bites - 31st January 2025

Cyber Bites ·

2025/01/30

* Subaru Flaw Could Have Let Hackers Track and Control Vehicles* Hundreds of Fake Reddit Sites Push Lumma Stealer Malware* Cybersecurity Needs to Start Saying 'No' Again* GitHub Desktop and Other Git Clients Vulnerable to Credential Leaks* Sophisticated Voice Phishing Scam Attempt Exploiting Google Workspace Domain Verification FlawSubaru Flaw Could Have Let Hackers Track and Control Vehicleshttps://samcurry.net/hacking-subaruA critical security vulnerability in Subaru's Starlink service could have

en

7:29

Cyber Bites - 24th January 2025

Cyber Bites ·

2025/01/23

* DDoS Attack Hits Record Breaking 5.6Tbps* Telegram Captcha Trick Lures Users into Running Malicious PowerShell Scripts* 7-Zip Patch Released to Address Mark of the Web Bypass Vulnerability* MasterCard DNS Misconfiguration Exposed for Years* Supply Chain Attack Targets Chrome Extensions, Potentially Impacting MillionsDDoS Attack Hits Record Breaking 5.6Tbpshttps://blog.cloudflare.com/ddos-threat-report-for-2024-q4/Cloudflare has mitigated the largest DDoS attack ever recorded, peaking at a

en

9:35

Cyber Bites - 17th January 2025

Cyber Bites ·

2025/01/16

* Ransomware Gang Exploits AWS Feature to Encrypt and Hold Data Hostage* Phishing Texts Trick iMessage Users into Disabling Security* Fake CrowdStrike Job Offers Used to Distribute Cryptominer* Stealthy WordPress Skimmers Infiltrate Database Tables* A New AI-Driven Ransomware Group Blurs the Lines Between Hacktivism and CybercrimeRansomware Gang Exploits AWS Feature to Encrypt and Hold Data Hostagehttps://www.halcyon.ai/blog/abusing-aws-native-services-ransomware-encrypting-s3-buckets-with-sse-cA

en

6:58

Cyber Bites - 10th January 2025

Cyber Bites ·

2025/01/09

* Cybersecurity in 2024: Top Stories that Rocked the Digital World* Over 4,000 Compromised Systems Exposed Through Hijacked Web Backdoors* Desperate Job Seekers Targeted by WhatsApp Employment Scams* Voice Phishing Rings Target Crypto Investors Using Apple Support Line* Neglected Domains Fuel Rise in Malicious Email CampaignsCybersecurity in 2024: Top Stories that Rocked the Digital Worldhttps://www.bleepingcomputer.com/news/security/the-biggest-cybersecurity-and-cyberattack-stories-of-2024/The year

en

7:13

Cyber Bites - 3rd January 2025

Cyber Bites ·

2025/01/02

* Fake Stars Inflate Popularity of Malicious GitHub Repositories* Cybercriminals Exploit Chrome Web Store to Infect Millions of Users* Malicious Packages Found on Python Package Index and VSCode Marketplace* One Third of Adults Don't Know How to Erase Their Data from an Old Device* New Clickjacking Technique "DoubleClickjacking" Bypasses Security MeasuresFake Stars Inflate Popularity of Malicious GitHub Repositorieshttps://arxiv.org/pdf/2412.13459A new study reveals a significant problem with

en

8:38

Cyber Bites - 27th December 2024

Cyber Bites ·

2024/12/26

* US Government Considers Ban on TP-Link Routers Over Security Concerns* New Phishing Scam Uses Google Calendar to Bypass Spam Filters* Malicious VSCode Extensions Steal Developer Credentials* Large Language Models Pose New Threat in Generating Undetectable Malware* Malicious NPM Packages and VSCode Extensions Target DevelopersUS Government Considers Ban on TP-Link Routers Over Security Concernshttps://www.wsj.com/politics/national-security/us-ban-china-router-tp-link-systems-7d7507e6The U.S

en

7:41

Cyber Bites - 20th December 2024

Cyber Bites ·

2024/12/19

* New Phishing Scam Uses Fake CAPTCHA Tests to Install Malware* Google Releases Open-Source Tool to Speed Up Android Security Patching* The Global Trail of Stolen Smartphones* Year-Long Attack Steals Credentials from Security Researchers and Hackers* Australia Leads the Way in Quantum-Resistant CryptographyNew Phishing Scam Uses Fake CAPTCHA Tests to Install Malwarehttps://au.pcmag.com/security/107245/this-captcha-test-can-trick-windows-users-into-installing-malwareA new phishing scam is targeting

en

7:06

Cyber Bites - 13th December 2024

Cyber Bites ·

2024/12/12

* Cybercriminals Exploit Misconfigured AWS Environments to Steal Sensitive Data* New Phishing Scam Uses Fake Video Conferencing Apps to Steal Data* Millions of WordPress Sites Vulnerable to Payment Fraud via WPForms Plugin* Hackers Find New Way to Bypass Browser Isolation with QR Codes* The Evolving Threat to Software Supply ChainsCybercriminals Exploit Misconfigured AWS Environments to Steal Sensitive Datahttps://www.vpnmentor.com/news/shiny-nemesis-report/A recent cyberattack, believed to be

en

6:52

Cyber Bites - 6th December 2024

Cyber Bites ·

2024/12/05

* Finsure Confirms Data Breach Affecting Broker and Customer Information* Cloudflare Suffers Major Log Loss Incident* Over 8 Million Android Users Hit by Predatory Loan Apps Disguised as Legitimate Tools* Cybercriminals Exploit Job Fears with New Phishing Scam* New Phishing-as-a-Service Platform, Rockstar 2FA, Leverages AiTM Attacks This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

en

7:22

Help! There’s too many Vulnerabilities!

Cyber Bites ·

2024/12/02

This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

en

6:15

Cyber Bites - 29th November 2024

Cyber Bites ·

2024/11/28

* Russian Hackers Leverage Wi-Fi to Bypass Security and Breach Networks* Australia Passes Landmark Cyber Security Legislation* Malicious Python Packages Exploit AI Enthusiasm* Ransomware Attack on Supply Chain Software Disrupts Major Retailers During Holidays* New CWE Methodology Shake up has Cross Site Scripting as 2024's Most Dangerous Software Weakness* Special Thanks to Justin Butterfield for contributing some of the interesting stories for this week’s cyber bites. This is a public episode. If

en

9:12

Cyber Bites - 22nd November 2024

Cyber Bites ·

2024/11/21

* Australia Faces Escalating Cyber Threats Amid Complex Strategic Environment* Sextortion Scams Abuse Microsoft 365 Admin Portal to Bypass Email Filters* Cybercriminals Exploit Black Friday Shopping Season with Phishing Attacks* The Dark World of Online Scams: A Deep Dive* Google Prepares to Launch Shielded Email for Enhanced Privacy This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

en

23:59

A FAIR Approach to Vulnerability Patch Prioritization

Cyber Bites ·

2024/11/18

This is a rebroadcast of Season 1, Episode 10 of AppSec Unlocked.In this episode of AppSec Unlocked, we dive into the fascinating topic of using a FAIR approach to Vulnerability Patch prioritization, where we explore how organizations can better prioritize vulnerabilities in their open-source software using the FAIR model and EPSS. And we have Denny Wan, an expert on FAIR analysis sharing his insights on this innovative approach. This is a public episode. If you would like to discuss this with other

en

5:23

Cyber Bites - 15th November 2024

Cyber Bites ·

2024/11/14

* Google Pixel AI-powered Features To Combat Scam Calls* Apple's New Security Feature: Automatic Reboots to Protect Data* Massive Data Leak Exposes Employee Information from Over 25 Companies* Bitdefender Releases Free Decryptor for ShrinkLocker Ransomware* New Phishing Campaign Uses Fake Copyright Claims to Spread Malware This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

en

83 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs