x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Daily Security Review

Daily Security Review

Daily Security Review, the premier source for news and information on security threats, Ransomware and vulnerabilities

technology tech news

All Episodes

20:34

HoundBytes Launches WorkHorse to Eliminate SOC Tier 1...

Daily Security Review ·

2025/09/23

Cybersecurity firm HoundBytes has officially launched WorkHorse, an automated security analyst designed to solve one of the biggest pain points in modern Security Operations Centers (SOCs): the Tier 1 bottleneck. Overwhelmed by a constant flood of raw alerts, Tier 1 analysts often suffer from burnout and slow triage times, putting organizations at risk. WorkHorse is built to replace these repetitive tasks with intelligent automation, eliminating alert fatigue and enabling analysts to focus

en

29:58

Toronto’s Mycroft Raises $3.5M to Bring AI Security...

Daily Security Review ·

2025/09/23

Toronto-based cybersecurity startup Mycroft has stepped out of stealth with a bold promise: to give startups and small-to-midsize businesses (SMBs) the kind of enterprise-grade security typically reserved for Fortune 500 companies. Acting as an AI-powered “Security and Compliance Officer,” Mycroft deploys autonomous AI agents that manage an organization’s entire security and IT stack. From cloud and application security to device management, automatic remediation, and compliance auditing,

en

10:29

FBI Issues Guidance as Fraudsters Pose as IC3 to...

Daily Security Review ·

2025/09/23

The FBI has issued a warning to the public about a cyber campaign impersonating the Internet Crime Complaint Center (IC3), using spoofed websites to trick victims into handing over sensitive information and money. Between December 2023 and February 2025, the agency received more than 100 reports of malicious activity tied to fake IC3 domains. Threat actors behind this scheme employ domain spoofing, making slight alterations to the legitimate IC3 web address, and even using sponsored search

en

22:08

Fraudulent GitHub Repos Spread Atomic Stealer Malware...

Daily Security Review ·

2025/09/22

A new cyber campaign is actively targeting macOS users with the Atomic Stealer (AMOS) malware, leveraging fake GitHub repositories disguised as legitimate software downloads. Security researchers tracking the campaign report that the operators are impersonating trusted brands such as LastPass, 1Password, Dropbox, Notion, and Shopify to lure unsuspecting victims. Using search engine optimization (SEO) poisoning, attackers ensure that their malicious sites rank highly in Google and Bing

en

10:50

Netskope’s IPO Raises $908M: SASE Leader Surges 18%...

Daily Security Review ·

2025/09/22

Netskope, a California-based cybersecurity firm specializing in secure access service edge (SASE) solutions, has officially gone public in one of the largest cybersecurity IPOs of 2025. Trading on the Nasdaq under the ticker symbol NTSK, the company raised more than $908 million by selling shares at $19 each. Investor enthusiasm was evident as the stock climbed 18% on its first day, closing at $22.49 and boosting Netskope’s valuation from $7.3 billion at IPO to approximately $8.6

en

24:17

SPLX Exposes AI Exploit: Prompt Injection Tricks...

Daily Security Review ·

2025/09/22

A startling new report from AI security platform SPLX reveals how attackers can bypass the built-in guardrails of AI agents like ChatGPT through a sophisticated exploit involving prompt injection and context poisoning. Traditionally, AI models are programmed to refuse solving CAPTCHAs, one of the most widely deployed tools for distinguishing humans from bots. But SPLX researchers demonstrated that a staged, multi-step conversation can manipulate an AI agent into compliance. By first

en

23:50

Brussels, Berlin, London Hit Hard as Cyber Disruption...

Daily Security Review ·

2025/09/22

A cyberattack on Collins Aerospace, a U.S.-based provider of passenger check-in and baggage handling software, plunged major European airports into chaos over the weekend. Beginning late Friday, the disruption rippled across hubs in Brussels, Berlin, and London, crippling critical check-in systems and forcing a reversion to manual operations. Brussels Airport was hardest hit, canceling nearly half of all Monday departures after the provider admitted it could not yet deliver a secure system

en

22:35

Novakon Ignored Security Reports on ICS Weaknesses,...

Daily Security Review ·

2025/09/20

A new security report has revealed serious, unpatched vulnerabilities in industrial control system (ICS) products manufactured by Novakon, a Taiwan-based subsidiary of iBASE Technology. Security researchers at CyberDanube identified five categories of flaws affecting Novakon’s Human-Machine Interfaces (HMIs), including an unauthenticated buffer overflow that allows remote code execution with root privileges. Other weaknesses include directory traversal, weak authentication, excessive

en

23:00

RevengeHotels Cybercrime Group Adopts AI and VenomRAT...

Daily Security Review ·

2025/09/19

The cybercrime group known as RevengeHotels, also tracked as TA558, has launched a new wave of attacks against the hospitality sector, evolving its tactics with the help of Artificial Intelligence (AI) and a powerful new malware strain, VenomRAT. Active since 2015, RevengeHotels has long targeted hotels, travel agencies, and tourism businesses to steal credit card data from guests and travelers. But in 2025, the group has demonstrated a major leap in sophistication.In its latest

en

26:15

ShadowLeak: Server-Side Data Theft Attack Discovered...

Daily Security Review ·

2025/09/19

A groundbreaking new cyberattack dubbed ShadowLeak has been uncovered targeting ChatGPT’s Deep Research capability, marking a dangerous escalation in AI-related threats. Unlike prior exploits such as AgentFlayer and EchoLeak, which operated on the client side, ShadowLeak weaponized OpenAI’s own cloud infrastructure to silently exfiltrate sensitive data—without requiring any user interaction.Discovered by researchers at Radware, the attack began with a specially crafted email containing

en

28:50

WatchGuard Firebox Vulnerability Could Let Hackers...

Daily Security Review ·

2025/09/19

A new critical vulnerability, CVE-2025-9242, has been discovered in WatchGuard Firebox firewalls, putting thousands of networks worldwide at risk. The flaw stems from an out-of-bounds write bug in the Fireware OS’s iked process, which could allow a remote, unauthenticated attacker to execute arbitrary code. If exploited, this would grant full control of a device meant to protect the organization’s perimeter—a worst-case scenario for defenders.The vulnerability specifically affects devices

en

32:02

How SystemBC’s 1,500 Infected VPS Servers Fuel...

Daily Security Review ·

2025/09/19

The SystemBC proxy botnet has quietly become one of the most persistent pillars of the cybercrime ecosystem. First detected in 2019, SystemBC is less about stealth and more about scale. It maintains an average of 1,500 compromised commercial virtual private servers (VPS) around the world, providing a powerful, high-bandwidth proxy network for cybercriminal operations.SystemBC enables a wide range of malicious activity: concealing command-and-control (C2) traffic, routing ransomware

en

12:33

Tiffany & Co. Data Breach Exposes Gift Card Details...

Daily Security Review ·

2025/09/18

Tiffany and Company, the iconic luxury jeweler under the LVMH umbrella, has confirmed a serious data breach impacting over 2,500 customers across the United States and Canada. On or around May 12, 2025, hackers infiltrated Tiffany’s internal systems, compromising sensitive customer data tied to gift cards. Exposed information includes names, email addresses, postal addresses, phone numbers, sales data, as well as gift card numbers and PINs—data that could be exploited for targeted scams and

en

24:33

Lakera’s Gandalf Network Joins Check Point in $300M...

Daily Security Review ·

2025/09/18

In a major strategic move, Check Point Software Technologies has announced the acquisition of Lakera, a Zurich and San Francisco–based AI security firm founded by former Google and Meta AI researchers. Valued at around $300 million, the acquisition will close in late 2025 and serve as the foundation for Check Point’s new Global Center of Excellence for AI Security. This comes at a critical time, as enterprises increasingly embed generative AI, large language models (LLMs), and autonomous

en

34:50

Shai-Hulud Exposes Fragility of the Open-Source...

Daily Security Review ·

2025/09/17

A major supply chain attack is underway in the npm ecosystem. Dubbed Shai-Hulud, this worm-style campaign began with the compromise of the popular @ctrl/tinycolor package and has since infected at least 187 npm packages, including some published under CrowdStrike’s official account. The malware, designed to spread automatically, abuses the legitimate security tool TruffleHog to scan for API keys, tokens, and cloud credentials, then exfiltrates them while creating rogue GitHub Actions

en

20:27

ChatGPT Calendar Vulnerability Exposes User Emails in...

Daily Security Review ·

2025/09/17

A critical vulnerability has been uncovered in ChatGPT’s new calendar integration, exposing how attackers could exfiltrate sensitive user data—particularly emails—through a deceptively simple exploit. Security researchers at EdisonWatch, led by Eito Miyamura, demonstrated how a malicious calendar invitation could contain hidden instructions that ChatGPT would execute when a user checked their calendar. Shockingly, the victim doesn’t even need to accept the invite: the moment ChatGPT reads

en

22:03

CrowdStrike Acquires Pangea to Launch AI Detection...

Daily Security Review ·

2025/09/17

At Fal.Con 2025, CrowdStrike announced one of its boldest moves yet: the acquisition of AI security startup Pangea. The deal signals CrowdStrike’s intent to redefine the future of cybersecurity by protecting not just endpoints and networks, but the entire AI lifecycle. Pangea, founded in 2021, is known for cutting-edge tools like AI Guard, which prevents sensitive data leaks from generative AI applications, and Prompt Guard, which blocks prompt injection and jailbreak attacks. These

en

27:03

RaccoonO365: $100K Phishing-as-a-Service Scheme Taken...

Daily Security Review ·

2025/09/17

Microsoft and Cloudflare have successfully dismantled RaccoonO365, a global phishing-as-a-service (PhaaS) operation that had been running for over a year. This criminal platform, marketed on Telegram and used by up to 200 subscribers, enabled attackers to craft realistic Microsoft 365 phishing campaigns, complete with fake login pages, email lures, and QR code traps. The operation facilitated the theft of more than 5,000 user credentials across 94 countries, with healthcare organizations

en

61:18

AI-Generated Phishing and Deepfakes Supercharge...

Daily Security Review ·

2025/09/17

Social engineering has reclaimed center stage as today’s most reliable intrusion vector—and it’s not just email anymore. Recent warnings from law enforcement and national cyber centers underscore how adversaries exploit human psychology to “log in, not hack in,” bypassing hardened perimeters with phishing, vishing (voice phishing) against IT help desks, smishing, and polished impersonation. These campaigns pair urgency, intimidation, and empathy ploys with modern twists like deepfake

en

41:45

Phoenix Attack Breaks DDR5 Rowhammer Defenses: Root...

Daily Security Review ·

2025/09/16

The infamous Rowhammer vulnerability, long thought to be contained by new DRAM protections, has resurfaced with devastating force. Academic researchers, working with Google, have unveiled the Phoenix attack, a breakthrough Rowhammer variant that shatters the defenses of DDR5 memory chips. Despite the industry’s investment in Target Row Refresh (TRR) and Error Correcting Codes (ECC), Phoenix exploits “blind spots” in SK Hynix DDR5 DIMMs—the world’s leading DRAM manufacturer—using novel

en

410 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs