Loading...

PODCAST

Tech Talks With Kinsoft

Tech Talks with Kinsoft is your insider pass to the ever-evolving world of technology. We break down the latest in tech news, cybersecurity trends, and emerging innovations shaping our digital future. Whether you’re a seasoned IT pro, a curious techie, or a business leader navigating digital transformation, our conversations are packed with insights, real-world takeaways, and a healthy dose of tech-savvy clarity. Hosted by the Kinsoft team with decades of industry expertise—because in tech, staying

technology tech news

All Episodes

20:56

Stake - A Breach at the Broker Behind the Broker, and...

Tech Talks With Kinsoft ·

2026/10/06

Sydney-based investing platform Stake has told customers that a breach at its US broker partner, DriveWealth, exposed personal and account information that Stake shares with DriveWealth to open US trading accounts. Stake's own systems, app and website were not affected. Revolut and New Zealand's Hatch customers were caught up in the same incident.Timeline. 4–5 September (US) — unauthorised access to DriveWealth's network via what DriveWealth calls a "sophisticated social engineering campaign";

en

22:28

Last Week in Tech - Citrix's Shut-It-Down Weekend, a...

Tech Talks With Kinsoft ·

2026/10/04

Last Week in Tech for Monday 5 October 2026, covering the week from 27 September.Citrix NetScaler zero-days (27 Sep). CVE-2026-88771 (unauthenticated command execution, all deployments including default config) and CVE-2026-88772 (memory overflow, RCE when DTLS is on — the VPN default). Citrix: CVSS v4.0 9.5 for both. Fixed in 14.1-73.37, 13.1-64.23 and FIPS/NDcPP builds; 12.1 and 13.0 are end-of-life with no patch. CISA KEV 27 Sep, deadline 30 Sep. Mandiant: exploitation since at least 3 Sep,

en

13:19

BigCommerce - One Stolen App Key, Hundreds of Stores,...

Tech Talks With Kinsoft ·

2026/10/01

BigCommerce has confirmed that stolen API credentials for two third-party storefront apps, Ribon and Ribon 1.5, were used to take shopper data from merchant stores and inject malicious scripts into a small number of storefronts. BigCommerce says its own platform was not breached.Who's involved. BigCommerce, founded in Sydney in 2009 and now operated by Nasdaq-listed Commerce.com, hosts online stores for tens of thousands of businesses and supports more than 1,200 third-party apps. Ribon and Ribon

en

21:49

Services Australia - The AI Agent That Wouldn't Take...

Tech Talks With Kinsoft ·

2026/09/29

On 24 September 2026 (AEST), Prime Minister Anthony Albanese announced that an OpenAI AI agent had gained unauthorised access to a Services Australia system — the Medicare Statistics Reporting Service, a legacy public-facing portal of aggregate statistics, separate from the systems that handle Medicare claims, payments and personal records.Timeline. 18 June — during internal research into public medicine spending, an OpenAI model is repeatedly refused by the portal, finds a way around the controls,

en

22:32

Last Week in Tech - F5 and Check Point Under Fire, a...

Tech Talks With Kinsoft ·

2026/09/27

Last Week in Tech for Monday 28 September 2026, covering the week from 21 September.F5 BIG-IP APM zero-day (22 Sep). CVE-2026-94127, heap overflow enabling unauthenticated RCE. F5 scores it CVSS v3.1 9.8 and CVSS v4.0 9.3. Exploitable only where APM acts as an OAuth authorisation server with an access policy and OAuth profile on the same virtual server. Added to CISA KEV the same day, federal deadline 25 Sep. Hotfixes for 17.1.x, 17.5.x and 21.1.0, plus an iRule workaround via F5 Support

en

22:22

Boston Scientific - One Network Box, Two Weeks...

Tech Talks With Kinsoft ·

2026/09/24

A catch-up episode, recorded after the fact. The investigation had concluded and been published by 23 September (AEST).US medical device maker Boston Scientific lost roughly two weeks of manufacturing and shipping to a cyber intrusion in which, according to CrowdStrike, nothing was encrypted and no data was taken.Timeline (US time). 25 August: system availability issues traced to an unauthorised third party; containment begins and CrowdStrike is engaged. 26 August: voluntary SEC disclosure. 30

en

16:54

Canva - The Feedback Tool With a Key to the CRM, and...

Tech Talks With Kinsoft ·

2026/09/22

A catch-up episode, recorded after the fact; developments after 23 September are flagged.Canva's own platform wasn't breached, but enterprise customer contact details and contract documents were exposed through Canny, a customer-feedback tool Canva had connected to its Salesforce CRM.Timeline. 28 August: Canny tells another customer, VRChat, that an unauthorised party accessed one of its internal systems; VRChat says forensics found no further activity after that date. 29 August: Canny tells Canva

en

23:00

Last Week in Tech - Cisco's Double Zero-Day, the...

Tech Talks With Kinsoft ·

2026/09/20

Last Week in Tech for the week of 14 to 20 September 2026. Recorded after the fact to fill a missed slot; later developments are flagged.Cisco: two exploited zero-days. CVE-2026-76461 (14 Sep), Secure Email Gateway: unauthenticated SQL injection in email parsing, root via a crafted email, no user interaction. Cisco: CVSS v3.1 9.8. Fixed in 15.5.5-014, 16.0.4-302, 16.5.0-780. CVE-2026-76460 (16 Sep), Identity Services Engine: API authentication bypass to root, CVSS v3.1 10.0, no workaround beyond

en

21:57

JetBrains - The Patch They Wrote, the Server They...

Tech Talks With Kinsoft ·

2026/09/17

JetBrains has disclosed that attackers breached Cadence — its PyCharm-integrated cloud compute service — through one of its own unpatched TeamCity servers, using a vulnerability in a JetBrains product that JetBrains had already patched and publicly warned about.What Cadence is: a JetBrains-hosted service that integrates with PyCharm through an optional plugin and lets users run their projects on cloud compute resources. Cadence uses TeamCity to orchestrate that work.The flaw: CVE-2026-63077 in

en

20:24

Mathspace - 1,079,819 People, a 23-Day Gap, and the...

Tech Talks With Kinsoft ·

2026/09/15

Sydney edtech company Mathspace has disclosed a data breach affecting 1,079,819 students, parents and guardians, teachers and staff across Australia and New Zealand. The cause was not an unavailable patch — it was a vulnerability-notification process that never escalated the advisory to anyone who could act.The flaw: CVE-2026-72898, an unauthenticated SQL injection in Metabase's password reset endpoint, granting administrator access without a valid login. CVSS v3.1 base score 10.0 and CVSS v4.0 base

en

20:14

Last Week in Tech - The Biggest Patch Tuesday Ever, a...

Tech Talks With Kinsoft ·

2026/09/14

Last Week in Tech for Monday 14 September 2026, covering 7 to 13 September.Microsoft's largest Patch Tuesday ever (8 Sep): around 970 CVEs — 974 per Microsoft's own release note, 964 per Tenable, 966 per BleepingComputer. Two were already being exploited, both Windows privilege escalation, both CVSS v3.1 7.8: CVE-2026-85880 (ALPC heap buffer overflow) and CVE-2026-81963 (Windows Update Stack link-following), per Tenable the first Update Stack flaw ever caught being exploited. Both are local

en

22:55

153 Million Driver's Licences - The Scanner at the...

Tech Talks With Kinsoft ·

2026/09/10

A dark web shop, 153 million driver's licence scans, an FBI investigation, and the scanner at your front desk.What was found. On 1 September, KrebsOnSecurity reported a dark web service called "Nexus" advertising more than 153 million US and Canadian driver's licence scans, plus 10 million+ ID cards, 3 million+ travel documents and 579,000+ medical cards. Records contained six images per document — front and back in normal, infrared and ultraviolet light — with date and time stamps. The listing

en

22:11

PaperCut - 9:42 on a Thursday, Three Emergency...

Tech Talks With Kinsoft ·

2026/09/08

A Melbourne software company, a print server, and three emergency patches in six days.The company. PaperCut Software International, founded 1998 by Chris Dance and Matt Doran, headquartered in Melbourne with offices in Portland and London. Privately held, still founder-led. PaperCut's own figure: around 100 million users across more than 70,000 organisations.The timeline. 27 August, 9:42am AEST — an education-sector customer reports a compromised PaperCut MF server; a second organisation reports

en

19:53

Last Week in Tech - Nvidia Buys Hugging Face, GPT-6...

Tech Talks With Kinsoft ·

2026/09/06

Last Week in Tech for Monday 7 September 2026, covering 30 August to 6 September.Nvidia to acquire Hugging Face for US$12.93bn. Confirmed by Nvidia on 3 September, expected to close in the first half of 2027 subject to regulatory approval. Nvidia states the platform serves 18 million+ developers, 3 million+ models and 200,000+ companies, and has committed that Nvidia compute will not be required to build on or deploy through it.OpenAI ships GPT-6 "Astra" (3 September). OpenAI says it is the first

en

21:00

Manchester Airports Group - 8.7 Million Travellers,...

Tech Talks With Kinsoft ·

2026/09/03

Manchester Airports Group – 8.7 Million Travellers, and the API Keys Sitting in Plain SightA deep-dive into the largest known customer data breach at a British airport operator — and the claimed entry vector any developer could have spotted.On 27 August 2026, Manchester Airports Group (MAG) — operator of Manchester, London Stansted and East Midlands airports — disclosed that an unauthorised third party had stolen customer data from its commercial systems: car park bookings, lounges, Fast Track and

en

20:53

Quest Apartment Hotels - 1.5 Million Guest Records,...

Tech Talks With Kinsoft ·

2026/09/01

Quest Apartment Hotels – 1.5 Million Guest Records, and the Attacker Who Never Touched Quest's SystemsA deep-dive into Australia's biggest hospitality breach of 2026 — and the vendor-ecosystem attack pattern behind it.On Monday 17 August 2026, Quest Apartment Hotels — 160+ properties, founded in Melbourne in 1988, majority-owned since 2017 (and fully since 2022) by Singapore's The Ascott Limited — identified unauthorised access to a database system. The entry point wasn't Quest's own network: the

en

21:18

Last Week in Tech - Nvidia Doubles, Meta Pays $18...

Tech Talks With Kinsoft ·

2026/08/30

Last Week in Tech – Nvidia Doubles, Meta Pays $18 Billion, and the Musk–Altman Feud Reaches Your Code EditorYour Monday roundup of the technology and security stories that mattered to Australian businesses in the week of 24–30 August 2026.In this episode:Nvidia's record quarter (26 Aug). Revenue US$96.2bn, up 106% year-on-year; data centre US$89bn (~93% of the company); Q3 guided to ~US$108bn and CFO Colette Kress forecasting ~70% growth for fiscal 2028. What an accelerating AI capex cycle means for

en

25:13

Metabase - The Reporting Tool That Held Every Key,...

Tech Talks With Kinsoft ·

2026/08/27

A deep-dive on CVE-2026-72898, the unauthenticated SQL injection zero-day exploited against Metabase Cloud in early August 2026.Two corrections to our roundup of 17 August, made on air. A CVE has since been assigned - CVE-2026-72898, added to CISA's Known Exploited Vulnerabilities catalogue on 11 August and rated 10.0 under both CVSS v3.1 and v4.0. And LexisNexis has explicitly ruled out any connection between its service outage and this flaw: the similarly-named Nexis Metabase API is an unrelated

en

20:44

Bendigo Bank - 1,598 Accounts, One Password, and the...

Tech Talks With Kinsoft ·

2026/08/25

On 11 August 2026, Bendigo and Adelaide Bank accepted a proposed $8 million penalty over a March 2023 cyber attack on Service One Alliance Bank. The court documents contain a sentence worth reading twice: at the time the attack began, 1,598 customer accounts were protected by the password 123456.The timeline. 2020: penetration testing identifies security weaknesses in the Alliance Bank environment. Not remediated. October 2022: a threat actor attempts brute-force login attacks and fails; the board

en

21:54

Last Week in Tech - Nvidia Turns GPUs Into an Asset...

Tech Talks With Kinsoft ·

2026/08/23

Your Monday roundup of the technology and security stories that mattered to Australian businesses in the week of 10-16 August 2026.Nvidia's $500bn financing platforms (10 Aug). MOUs with Apollo, BlackRock, Blackstone, Brookfield, Goldman Sachs and KKR to mobilise third-party capital for AI compute. Why an MOU is not a contract, and the reported - but not company-confirmed - 25% loan backstop.The AI price war (11-14 Aug). Gemini 3.7 Flash three weeks after 3.6 at half the price; GPT-5.6 Luna cut

en

131 results

Similar Podcasts

Lead With AI

Tamara Nall

The Automated Daily

TrendTeller

My Weird Prompts

Daniel Rosehill

LessWrong (Curated & Popular)

LessWrong

脈報

思思主播