Loading...

PODCAST

Plaintext with Rich

Cybersecurity is an everyone problem. So why does it always sound like it’s only for IT people?Each week, Rich takes one topic, from phishing to ransomware to how your phone actually tracks you, and explains it in plain language in under ten minutes or less. No buzzwords. No condescension. Just the stuff you need to know to stay safer online, explained like you’re a smart person who never had anyone break it down properly. Because you are!

technology

All Episodes

8:30

ClickFix: When a CAPTCHA Asks You to Run a Command

Plaintext with Rich ·

2026/10/02

You came for a conference agenda, and the website wants proof you're human. ClickFix can hide behind that familiar check, with instructions that deserve a much closer look. Rich follows the moment a fake CAPTCHA, a test meant to distinguish people from automated visitors, changes what it asks you to do. Microsoft's August 2026 TerminalFix analysis provides a concrete example involving an imitation Cloudflare screen and commands pasted into Windows Terminal or PowerShell. CERT Polska's Februar...

en-us

4:55

Last Seen - When the Phones Woke Up (Episode 4)

Plaintext with Rich ·

2026/09/25

Episode 4: When the Phones Woke Up Finding one another doesn’t fix the city. There are still people waiting for news, families searching for loved ones, and neighborhoods trying to function without the systems they depend on. Then the phones begin waking up. In the final chapter of Last Seen, messages arrive out of order, maps fill with roads again, and everyday convenience returns almost as quickly as it disappeared. But after seeing what happens when one damaged connection affects nearly...

en-us

5:20

Last Seen - The Meeting Place (Episode 3)

Plaintext with Rich ·

2026/09/18

Episode 3: The Meeting Place Leah and her parent are both moving across the city, but every piece of information arrives too late. Each new clue leads to another place the other person has already left. With phones, maps, and location sharing still unreliable, a forgotten family emergency plan may be their only chance to stop missing each other. In Part Three of Last Seen, the search leads to a broken clock in Washington Park and a meeting place no one has mentioned in years. I...

en-us

5:09

Last Seen - The Rumor (Episode 2)

Plaintext with Rich ·

2026/09/11

Episode 2: The Rumor A broken voice message offers one clue: “We’re going to St—” But St. where? As Leah’s parent searches hospitals, shelters, and gridlocked streets, the communications outage creates another problem. Reliable information is moving slowly, while rumors are racing across the city. In Part Two of Last Seen, a paper map, a neighborhood radio network, and a small act of trust become more useful than any app. Then a handwritten note sends the search in an entirely new direction. ...

en-us

6:30

Last Seen - No Signal (Episode 1)

Plaintext with Rich ·

2026/09/04

Plaintext is doing something different this September. Instead of breaking down one cybersecurity concept, we’re telling one story across four short episodes. In Episode One of Last Seen, an ordinary communications outage begins with a frozen card reader, missing messages, and apps that no longer work. By nightfall, Leah hasn’t come home and her parent has only a broken voice message and half a clue about where she might be. This is “No Signal,” the first chapter of Last Seen: a fictional spo...

en-us

9:53

Google Selfie Account Recovery: Convenience vs. Privacy

Plaintext with Rich ·

2026/08/28

Would you hand Google a video of your face for one more way back into your account? That question gets harder when you are locked out, holding a new phone, and missing every recovery route you thought would save you. In this episode of Plaintext with Rich, we look at Google's selfie video sign-in option and what eligible users should know before opting in. You will hear how Google described comparing a saved recording with a new video, why prompted head movements support a liveness check, and...

en-us

10:56

AI Security Test Escape: Why Agent Containment Failed

Plaintext with Rich ·

2026/08/21

An AI security test was supposed to stay inside a controlled environment. Instead, the models found an unexpected route to the public Internet and reached real Hugging Face infrastructure while pursuing benchmark answers. In this episode of Plaintext with Rich, we unpack how an OpenAI cyber evaluation became a real security incident. You will hear how the models exploited a package service, increased their permissions, used stolen credentials, and pursued ExploitGym solutions beyond the inten...

en-us

10:18

PTC Windchill Vulnerability: Why Your Product...

Plaintext with Rich ·

2026/08/14

A company can lose its most valuable product plans without a broken lock, an encrypted laptop, or an obvious warning on the screen. The first clear sign may be an extortion email claiming the files are already gone. This episode of Plaintext with Rich explains the attacks disclosed against PTC Windchill and FlexPLM, two product lifecycle management platforms that can hold designs, bills of materials, manufacturing instructions, supplier details, and launch plans. Rich breaks down CVE-2026-125...

en-us

9:42

CVE-2026-50522: Why SharePoint Patching Is Only Step One

Plaintext with Rich ·

2026/08/07

A critical SharePoint alert arrives, the update goes in, and the ticket closes. But what if an attacker entered before the lock was fixed and left with secrets that still work? In this episode of Plaintext with Rich, Rich explains why CVE-2026-50522 is more than an ordinary patch story. The actively exploited remote code execution flaw affects on-premises Microsoft SharePoint Server, including SharePoint Enterprise Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Editio...

en-us

8:30

AutoJack Attack: How Malicious Pages Hijack AI...

Plaintext with Rich ·

2026/07/31

You told your AI assistant to book a flight and compare hotels. You come back, and it did all of that. It also ran commands on your machine that you never approved. What just happened? This episode unpacks AutoJack, a demonstrated attack pattern where malicious web pages hijack AI browsing agents through prompt injection. We cover how untrusted web content can steer autonomous agents into unsafe actions, the critical risk of localhost access in agent frameworks like AutoGen, and the chain f...

en-us

10:22

North Korea Mastra NPM Supply Chain Attack: How It Works

Plaintext with Rich ·

2026/07/24

You installed a dependency before lunch. Tests passed, app booted, nothing looked wrong. By dinner, your machine had quietly run someone else's code. This episode covers the Mastra npm supply chain compromise Microsoft attributed to North Korea linked threat actors. We break down how postinstall scripts became the attack vector, why an 88 minute exposure window still matters, and what remote access trojans do on developer endpoints. You will learn how AI framework supply chains expand your ...

en-us

9:16

Patch Tuesday 206 Vulnerabilities: AI Discovery vs...

Plaintext with Rich ·

2026/07/17

Your update dashboard keeps climbing. Not ten fixes, not fifty. Two hundred and six security patches waiting for approval, and everyone is asking if work stops now. That was June 2026, the largest Patch Tuesday on record. This episode covers why record patch volumes are becoming normal, what AI-assisted vulnerability discovery has to do with the bug pipeline, how to prioritize under pressure with a four-lens triage framework (exploitability, exposure, impact, compensating controls), and why...

en-us

8:53

Instagram AI Takeover: How Attackers Exploited Meta...

Plaintext with Rich ·

2026/07/10

Your profile photo vanishes. Your email is changed. A password reset you never requested lands in someone else's inbox. You're locked out of your own Instagram account, and you didn't click a single suspicious link. In early 2026, attackers manipulated Meta's AI support chatbot to approve password resets on roughly 20,225 Instagram accounts over seven weeks. This episode breaks down how social engineering evolved from targeting human support reps to exploiting AI-powered customer service sy...

en-us

9:54

FortiBleed: When Your Firewall Becomes the Front Door

Plaintext with Rich ·

2026/07/03

Your firewall is supposed to be the thing that keeps attackers out. FortiBleed is the story of what happens when it becomes the way in. In June 2026, roughly 86,644 sets of working Fortinet credentials turned up circulating among attackers across 194 countries. On June 18th, CISA issued an emergency advisory telling anyone running internet-facing Fortinet gear to terminate active sessions, rotate every credential, and turn on phishing-resistant multi-factor authentication immediately. This ...

en-us

10:10

Post-Quantum Cryptography: Start the Inventory Before...

Plaintext with Rich ·

2026/06/26

You don't inventory your house the morning of the move. You start months before. So why are most organizations still treating post-quantum cryptography as a 2035 problem? Episode 31 of Plaintext with Rich treats the post-quantum crypto migration as what it actually is. A logistics problem, not a science one. We walk through the news peg that moved the timeline. Google's March 2026 announcement of a 2029 internal deadline, years ahead of federal targets, anchored by Craig Gidney's resea...

en-us

10:13

Cybersecurity Careers and AI: The Squeeze and the...

Plaintext with Rich ·

2026/06/19

Someone pulled Rich aside at a conference recently. Six years in IT, ready to break into security, and asking the question more people ask every week. Should I even bother right now? Here's what the data actually shows. Episode 30 of Plaintext with Rich unpacks the cybersecurity career paradox of 2026. The bottom rung is getting squeezed as AI automates SOC analyst, threat intelligence, and incident response work. At the same time, demand for AI security engineers, prompt injection specialist...

en-us

8:45

Supply Chain Attacks: How One Update Hit OpenAI

Plaintext with Rich ·

2026/06/12

A routine software update. No phishing. No sketchy download. Then a security team finds the unthinkable: trusted code has been hijacked, and the breach rode in through the exact channels engineers rely on every day. I walk through the supply chain attacks that piled up across April and May 2026, including poisoned open source packages tied to TanStack and trojanized Daemon Tools installers, plus the rapid-fire abuse of major software registries like NPM, PyPI, and Docker Hub. The most ...

en-us

9:03

Microsoft Exchange Zero-Day Under Attack: One Email...

Plaintext with Rich ·

2026/06/05

It's Monday morning. You open the third email of the day. Nothing visible happens, but in the background, an attacker just borrowed the proof you were logged in. Episode 28 of Plaintext with Rich is a hot take on CVE-2026-42897, the Microsoft Exchange Server zero-day under active exploitation right now. We break down what cross-site scripting actually does inside Outlook Web Access, why session hijacking is more dangerous than the underlying bug, and how a single crafted email becomes busines...

en-us

8:35

Work-Life Balance in Cybersecurity: The Structural Fix

Plaintext with Rich ·

2026/05/29

You finish at 6:00pm. At 6:47 you reopen the laptop, 'just to check something.' By 9:00 the evening is gone. The boundary didn't fail tonight. It was never there. Episode 27 of Plaintext with Rich closes the Month of Mindfulness, a five-week series on self-care for people working in security and tech. This week we're talking about work-life balance, but not as willpower or time management. As protective infrastructure. We pull the arc together, mental, spiritual, physical, and burnout, and la...

en-us

8:35

Cybersecurity Burnout: Not a Character Flaw, a System...

Plaintext with Rich ·

2026/05/22

You're reading a breach report. Third one this month. Last year a story like this would have lit something in you. Today you scroll past it. That's not you. That's the bill. Episode 26 of Plaintext with Rich is the fourth installment of the Month of Mindfulness, a five-week series on self-care for people working in security and tech. This week we're talking about burnout, what it actually is and why the cybersecurity industry produces it reliably. We use the World Health Organization's classi...

en-us

45 results

Similar Podcasts

Lead With AI

Tamara Nall

The Paul Barron Crypto Show

Paul Barron Network

Double Tap

Steven Scott, Shaun Preece, Steven...

The Interface

BBC

The Lunduke Journal of Technology

Bryan Lunduke