All topics
We’re back from a fun July 4th break, and this week’s news brings us the emergence of a nasty bug in many AI coding assistants, the approaching tipping point for macOS malware, and how AI-enabled phishing kits are changing the game. Plus: Some weird news about a former ransomware negotiator who was working with threat […]
It’s a non-AI podcast! This week we dig into the new Gaslight macOS implant that tries to trick security researchers with some anti-forensics techniques, then we discuss the Operation Endgame takedown of some malware infrastructure, and finally we discuss a Cisco Catalyst SD-WAN bug that was exploited as a zero day. Links Google analysis of […]
Gaslight is a Rust-based backdoor that researchers from SentinelOne have attributed to DPRK-aligned threat actors.
The campaign targets high-value individuals and organizations in the cryptocurrency, digital assets, and finance sectors.
This week was a cornucopia of zero days. We talk about the six (!) actively exploited vulnerabilities that Microsoft patched this week in its February update (2:46), then we discuss the one that Apple fixed in iOS 26.3, a vulnerability that has been used in what the company calls an “extremely sophisticated attack” against a few individuals (7:24). […]
That vulnerability also was patched in macOS, but the active exploitation that Apple disclosed was against iOS only.
