Podcasts about Breach

In August 2005, one of the most powerful storms ever recorded in the Gulf of Mexico barrelled toward the United States. When Hurricane Katrina finally struck land, it devastated hundreds of miles of shoreline, but the disaster that captured the world's attention unfolded in one place above all: the city of New Orleans.   Within hours of the storm passing, the flood defence levees meant to protect the city broke, and it began to fill with water. What followed the natural disaster was a crisis that raised profound questions about preparedness, inequality, and the ability and willingness of a modern nation to protect one of its own great cities.   But why was New Orleans so vulnerable in the first place? What was the response in the wake of the hurricane and flooding? And what did the disaster reveal about the systems of engineering, government and society that were supposed to protect it? This is a Short History Of Hurricane Katrina. A Noiser podcast production. Hosted by John Hopkins. With thanks to Jed Horne, a Pulitzer Prize-winning reporter and author of Breach of Faith: Hurricane Katrina and the Near Death of a Great American City. Written by Sean Coleman | Produced by Kate Simants | Production Assistant: Chris McDonald | Exec produced by Katrina Hughes | Sound supervisor: Tom Pink | Sound design by Mirianna Pitman-Latham and Matthew Peaty | Assembly edit by Dorry Macaulay | Compositions by Oliver Baines, Dorry Macaulay, Tom Pink | Mix & mastering: Cody Reynolds-Shaw Unlock the next two episodes of Short History Of… right now by subscribing to Noiser+. You'll also get ad-free listening and early access to shows across the Noiser podcast network, including Real Survival Stories and Sherlock Holmes Short Stories. Just click the subscription banner at the top of the feed, or head to www.noiser.com/subscriptions to get started. Learn more about your ad choices. Visit podcastchoices.com/adchoices

LastPass says Klue breach affected customer information, but passwords remain secure. Attackers begin exploiting Cisco Unified CM vulnerability. CISA flags actively exploited Ubiquiti and Lantronix flaws, urges rapid patching. DifyTap flaws could expose private AI conversations across tenants. Researchers find AI plugin registry let unofficial tools masquerade as trusted software. xpl0itrs launches leak site, signaling shift toward full-service cyber extortion. Ransomware attack hits Indian auto giant Bajaj Auto. U.S. presses Meta to submit AI models for national security reviews. Alleged criminal marketplace administrator extradited to the US. U.S. expands sanctions against Cambodian scam network tied to cyber fraud operations. On today's Industry Voices segment, we are joined by Mike Masciulli, Managing Director, Migration Products and Services at Semperis, discussing RC4 and AD Migration: The Break Scenarios Hiding in Your Source Domain. And a lesson in access control. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest On today's Industry Voices segment, we are joined by Mike Masciulli, Managing Director, Migration Products and Services at Semperis, discussing RC4 and AD Migration: The Break Scenarios Hiding in Your Source Domain. If you enjoyed this conversation, check out the full interview here. Selected Reading Password manager maker LastPass says hackers stole customer support case data during Klue breach (TechCrunch) Klue says hackers stole credential from 2022 that led to customer data breaches (TechCrunch) Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks (BleepingComputer) U.S. CISA adds Ubiquiti UniFi OS and Lantronix EDS5000 plugin flaws to its Known Exploited Vulnerabilities catalog (SecurityAffairs)  DifyTap: Zafran discovers how attackers can silently wiretap AI data across tenants on a platform powering 1M+ apps  (Zafran)  23 ClawHub Plugins Squat Official Org Scopes (Manifold Security)  Cyber Intel Brief: xpl0itrs Leak Site Launch (Dataminr)  Indian auto giant Bajaj Auto hit by ransomware incident (The Record)  U.S. Presses Meta to Agree to A.I. Reviews as Security Concerns Rise (NY Times) Algerian Man Extradited to US for Running Cybercrime Marketplaces (SecurityWeek) US adds sanctions against accused Cambodian scammers Prince Group (Reuters) Ushering in the Next Frontier of Quantum Innovation (The White House)  Meta Exposed Data Internally From Its Controversial Employee-Tracking Program (WIRED)  Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

For most of the internet's life, proving identity has meant proving something you know or something you hold: a password, a code, a text message. Kevin Surace, CEO of TokenCore, argues that era is closing fast. As one of the people who helped invent the AI assistant at General Magic, he has a clear view of why the same technology now makes faces and voices simple to fake. Why isn't MFA enough? Because it protects a weak foundation. A decade-old paper mapped fifteen ways to defeat SMS codes, auth apps, and push approvals. Few attackers bothered with them until platforms like Salesforce and Microsoft made those methods mandatory. Now the attack has moved to where the door is. Surace walks through one of the common methods: an AI-written phishing email from a service you already trust, a PDF, and a pixel-perfect login page generated in moments. The credentials you enter relay to an attacker who is logging into the real site in real time. The push prompt asks if it is you, you approve, and the intruder is inside within minutes. The numbers back it up. Palo Alto Networks Unit 42 found that roughly ninety percent of successful intrusions over the past year involved hacked identity, almost all of them MFA or auth apps. The people compromised had privileged access, which means they had MFA in place. So what actually works? Surace makes the case for biometric-assured identity, a category Gartner projects growing into a twelve billion dollar market. TokenCore ties access to a fingerprint stored only on your device, the exact domain your account lives on, and physical proximity over a short-range wireless link. Look-alike domains never register, remote relays never get close enough, and the company never holds your biometric. The hardware comes as a ring, a portable, or a node about the size of an AirTag, and it is FIDO2 compatible, so it works with existing single sign-on. Most customers go passwordless once it is running. The reaction Surace hears most often from security leaders is that they can finally sleep at night. This is a Brand Spotlight. A Brand Spotlight is a ~15 minute conversation designed to explore the guest, their company, and what makes their approach unique. Learn more: https://www.studioc60.com/creation#spotlight GUEST Kevin Surace, Chief Executive Officer, TokenCore LinkedIn: https://www.linkedin.com/in/ksurace/ RESOURCES Learn more about TokenCore: https://www.tokencore.com Are you interested in telling your story? ▶︎ Full Length Brand Story: https://www.studioc60.com/content-creation#full ▶︎ Brand Spotlight Story: https://www.studioc60.com/content-creation#spotlight ▶︎ Brand Highlight Story: https://www.studioc60.com/content-creation#highlight KEYWORDS Kevin Surace, TokenCore, Sean Martin, brand story, brand marketing, marketing podcast, brand spotlight, biometric assured identity, identity security, multi-factor authentication, MFA bypass, phishing resistant authentication, FIDO2, credential theft, passwordless, deepfake, AI security, account takeover, Unit 42, Gartner Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

Today I'm joined by Paul J Daly and Kyle Mountsier, Co-founders at More Than Cars. Paul and Kyle break down exactly how a single exposed API key can hand a hacker access to an entire dealer management system, why dealerships are uniquely at risk given the volume of sensitive customer data they store, and what the best operators are doing to build securely before the first major breach hits the industry. Topics: 00:25 Dealerships' Most Under-Resourced Dept. 02:40 Why Auto Ads Are The Worst. 04:50 The $734 Symptom Dealers Ignore. 09:50 How One Dealer Cut Ad Cost By $200. 18:10 The Widget Killing Your Conversion. 24:25 Lost 50% Of Staff, Sales Soared. 27:45 The Knowledge Graph Every Dealer Needs. 46:10 Rebrand As A Hospitality Business. This episode is brought to you by: 1. Uber for Business - Dealers, give your customers what they want: courtesy Uber rides. To learn how Uber for Business can help you drive customer loyalty, one ride at a time, visit @ here today to learn more. 2. Reynolds and Reynolds - Turn cars faster and increase profit with AutoVision, an end-to-end inventory management suite that optimizes every step of the used vehicle lifecycle. Visit @ here for more info. 3. CDG Dealer Platform – Dealer intelligence, all in one place. Give your dealership a competitive edge @ here. Check out Car Dealership Guy's stuff: For dealers: CDG Circles ➤ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://cdgcircles.com/⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Industry job board ➤ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠http://jobs.dealershipguy.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Dealership recruiting ➤ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠http://www.cdgrecruiting.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Fix your dealership's social media ➤ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠http://www.trynomad.co⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Request to be a podcast guest ➤ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠http://www.cdgguest.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ For industry vendors: Advertise with Car Dealership Guy ➤ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠http://www.cdgpartner.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Industry job board ➤ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠http://jobs.dealershipguy.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Request to be a podcast guest ➤ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠http://www.cdgguest.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Car Dealership Guy Socials: X ➤ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠x.com/GuyDealership⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Instagram ➤ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠instagram.com/cardealershipguy/⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ TikTok ➤ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠tiktok.com/@guydealership⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ LinkedIn ➤ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠linkedin.com/company/cardealershipguy⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Threads ➤ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠threads.net/@cardealershipguy⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Facebook ➤ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠facebook.com/profile.php?id=100077402857683⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Everything else ➤ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠dealershipguy.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

You asked, we answered!

It started with what looked like a routine query from a politician to a council office. In 2019, staff at Wexford County Council believed they were dealing with a standard request made by then councillor Fionntán Ó Súilleabháin on behalf of a constituent, and so they responded as normal. But alarm bells went off four years later when a woman contacted the council asking why her confidential records had been released without her knowledge or consent. The man who received the files is a Sinn Féin activist and the brother of a Provisional IRA bomber. After conducting an investigation, the council admitted there was a breach of personal data and formally apologised to the woman in question. Ó Súilleabháin, now a Sinn Féin TD, is now facing a legal battle following the data breach, with party leader Mary Lou McDonald appearing to stand by him. On this episode of The Indo Daily, host Katie Byrne is joined by Irish Independent Ireland Editor Fionnán Sheahan who details his exclusive investigation. The Indo Daily is part of the Trust Project. You can see our ethics policies at independent.ie/ourjournalismSee omnystudio.com/listener for privacy information.

A data breach at business analytics platform Klue spreads to security firms, a hacker breaches Brazil's national alert system, North Koreans are behind the Mastra supply chain attack, and a new, unfixable vulnerability has been found in Apple's A12 and A13 chips. Show notes Risky Bulletin: Klue breach impacts security firms

The high-stakes gamble of Cornwallis's ghost camp pays off at dawn, exposing a hidden web of espionage and bribery run by William Read and Thomas Munro within the Mysorean ranks. But as the siege pushes toward its absolute limit, the fate of Bangalore comes down to a desperate midnight assault on March 21, 1791. In the conclusion of this two-part special, Ramjee Chandran chronicles the harrowing final hours of the campaign: the elite "Forlorn Hope" navigating a two-foot-wide causeway under a sky illuminated by Mysorean fireballs, the tragic collapse of an exhausted garrison, and the heroic death of Killedar Bahadur Khan. Key Details from the Script: The Ghost Camp Success: At dawn on March 17, Mysorean gunners unleashed a devastating, carefully targeted artillery salvo directly into Cornwallis's cavalry lines. Though the barrage tore through the canvas tents and churned up the landscape, the tents were entirely empty. Cornwallis's deception saved thousands of cavalry horses from being slaughtered, preserving British mobility for the rest of the campaign. The Espionage of Read and Munro: To bypass the slow Madras administration, Cornwallis relied on Captain William Read and a young, language-proficient officer named Thomas Munro to run a sophisticated network of hircarrahs (intelligence runners). They successfully bribed and cultivated paid informants deep inside Bahadur Khan's own staff, mapping out Mysore's heavy batteries in real-time. (A historical detour: during this period, Munro translated a Persian manuscript containing the "pound of flesh" story that predated Shakespeare's Merchant of Venice). The Arithmetic of Fatigue: Expecting an immediate British assault on March 20, Tipu Sultan threw 700 elite dismounted cavalrymen into the fort as reinforcements. The defenders stayed awake in a state of high alert for over 24 hours, maintaining constant fire. When the assault failed to materialise during the day of the 21st, the garrison succumbed to profound exhaustion—leaving them unable to hold watch when the true midnight attack finally commenced. The Blank Cartridge Deception: On the day of the assault, the British concentrated heavy fire on the towers overlooking the eastern curtain wall breach near the Delhi Gate. For one full hour leading up to the attack, Colonel Giles ordered his men to switch to blank cartridges. The continuous noise and smoke successfully kept the defenders pinned away from the walls while allowing the storming parties to quietly slip into position undetected. The Path of the Forlorn Hope: At 11:00 PM under absolute secrecy, the "Forlorn Hope"—a sergeant, twelve men, two lieutenants, and thirty elite soldiers—led the advance. To reach the breach, they had to cross a narrow, 100-yard causeway that the defenders had cut through, leaving a ledge just two feet wide. Soldiers crossed in single file in total darkness before the fort erupted with defensive blue lights and explosive fireballs that illuminated the night like the noon sun. The Fall and the Tragedy: Led by the Forlorn Hope and supported by the Madras Sappers carrying scaling ladders, the British fought their way up the jagged breach, igniting brutal hand-to-hand combat across the ramparts. Within an hour, the fort fell. In the chaotic aftermath, retreating garrison troops collided with a crowd of sheltering women and children in a narrow gateway; unable to distinguish between them in the dark, British troops killed over 1,400 people. The Death of a Hero: The silver-bearded Killedar, Bahadur Khan, fought to his final breath, sustaining nearly as many wounds "as were inflicted on Caesar in the capitol." Impressed by his gallantry, the British offered his remains to Tipu Sultan, who wept and requested he be buried where he fell. The British buried the veteran defender with full military honors, attended by senior Muslim officers from the British ranks. We gratefully acknowledge the support of the Prestige Group, that makes this podcast possible. Follow The History Of Bangalore on social, here: Instagram: https://www.instagram.com/historyofbangalore/ Facebook: https://www.facebook.com/HistoryOfBangalore Twitter: https://twitter.com/HistoryOfBLR YouTube: https://youtube.com/@HistoryOfBangalore?si=mnH3BsYfI4BUU234 iHeartRadio: https://www.iheart.com/podcast/1323-the-history-of-bangalore-163453722/ Follow Ramjee Chandran on Instagram and Twitter: @ramjeechandran The theme music for the show was composed by German-Indian Koln based percussionist, Ramesh Shotham. Ramjee Chandran's photos by Asha Thadani. RESEARCH AND SOURCES: All our episodes are based on published research and archive records. To request information about our sources, write to hob@explocity.com. Let us know if you are a researcher (either institutional or independent) and also provide some information about why you need this information. Researchers will get priority. We only have time to engage serious, academic queries so please understand if we do not respond to casual requests.

Police clean ups SocGholish-infected sites tied to Evil Corp Klue OAuth breach linked to Icarus Salesforce data theft attacks Warner warns of CISA cuts, staffing gaps in letter to acting chief  Get the show notes here: https://cisoseries.com/cybersecurity-news-police-clean-wordpress-sites-klue-oauth-breach-warners-cisa-warnings/ Huge thanks to our sponsor, ThreatLocker Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind cloud adoption. Behind AI. Behind automation. And behind every major technology decision. ThreatLocker helps organizations take a Zero Trust approach to that challenge—giving them greater control over what can execute, what can access their environment, and what users and applications are allowed to do. That's why ThreatLocker is proud to support Cyber Security Headlines. Because security works best when innovation and control move together.  

Send us Fan MailJoin hosts Alex Sarlin and special guest co-host Thomas Rodgers of Whiteboard Advisors as they explore the latest developments in AI, edtech policy, learning outcomes, cybersecurity, and the future of AI-powered education.✨ Episode Highlights:[00:03:39] Anthropic's Claude Fable launch sparks discussion about the next generation of AI capabilities[00:09:07] Meta launches a workforce academy initiative focused on data center and skilled trade careers[00:17:47] The growing edtech and AI “techlash” raises questions about technology's role in schools[00:20:01] Why screen-time debates often overlook the quality of technology use in classrooms[00:29:50] New NAEP results show recovery among 9-year-olds but continued challenges for older students[00:30:38] Reading for fun among 13-year-olds continues its long-term decline[00:33:23] Code.org rebrands as CodeAI, signaling a broader shift toward AI literacyPlus, special guests:[00:34:57] Yi Ng, Founder of Curiosities AI, on designing AI that builds curiosity, critical thinking, and communication skills[01:11:23] Dr. Rob Abel, Former CEO of 1EdTech and Founder of EdTech Futures, on the Instructure Canvas breach, cybersecurity risks, and accountability in edtech infrastructure

Under Oslo Art Weekend 2026 inviterte Formue til en samtale mellom den norske kunstneren Ane Graff og den koreanske kuratoren Seolhui Lee. Samtalen dreier rundt Graffs utstilling A Reality Made of Breach på OSL Contemporary. Episoden er laget i samarbeid med Oslo Art Weekend, OSL Contemporary og Formue, tatt opp foran publikum hos Formue 30. mai 2026.

Welcome to the Identity Theft Resource Center's Weekly Breach Breakdown for June 19, 2026. I'm Tim Walden. Thanks to SentiLink for their continued support of the podcast and the ITRC. Each week, we look at the most recent events and trends related to data security and privacy. This week, we are looking at a significant shift in how artificial intelligence can be integrated into our daily lives. Specifically, bringing AI into our wallets. Follow on LinkedIn: linkedin.com/company/idtheftcenter/ Follow on Instagram: instagram.com/idtheftcenter/ Follow on Facebook: facebook.com/IDTheftResourceCenter/ Follow on X: twitter.com/IDTheftCenter Follow on TikTok: www.tiktok.com/@idtheftcenter_ Follow on YouTube: www.youtube.com/@IDTheftCenter

Plus - Mike Myers Says Austin Powers 4 Will Happen; GTA Online Is Adding a Massive New Heist in July, to Keep You Busy Until GTA 6 Arrives Learn more about your ad choices. Visit podcastchoices.com/adchoices

Jerry opens the show with a personal story about his storage unit, explaining how after he notified his provider that he was leaving due to rising costs, they suddenly offered him a better deal to stay. He reflects on the tactic companies use to retain customers only after they’ve decided to leave rather than rewarding loyalty upfront. Next, Jerry discusses a concerning cyber breach involving Crime Stoppers, which may have exposed anonymous tipsters on the dark web. He’s joined by NEWSTALK 1010 tech expert Carmi Levy, who explains. Young people are being recruited through messaging apps to carry out targeted shootings. Marcell Wilson, founder of the One By One Movement, joins the show to discuss what’s driving this trend. Finally, Jerry explores the growth of Canada’s reverse mortgage market, now approaching $11 billion. He speaks with real estate expert Frank Leo about the risks involved, and whether this financial tool is a smart solution.

Brothers, this episode is for you.James sits down and delivers a Father's Day message that every Catholic father needs to hear. He starts with the hard truth: America is in a fatherlessness catastrophe. One in four children grows up without their biological father. The research on what that produces is not subtle. And some of the most dangerous absences are not the men who walked out the front door — but the men who are still sitting at the dinner table and have already checked out.But this episode is not about guilt. It is about weight and dignity and the sacred office that most men are carrying without ever being told what it actually is.James unpacks why Jesus calls God Father. He walks through Saint Joseph: a man who never speaks a single word in Scripture, who just acts, stays, protects, and obeys. He talks about the thanklessness of faithful fatherhood and how staying anyway is one of the most countercultural things a man can do in 2026.And then he gets personal. The exhaustion. The moments of checking out. The weight of running a home, working full time, homeschooling, podcasting, and still trying to show up. This one is honest.

The latest North State and California news on our airwaves for Wednesday, June 17, 2026.

This episode examines recent healthcare data breaches and settlements, including the $4 million IBJI case involving extended attacker dwell time, Mission Community Hospital's $1.5 million RansomHouse extortion settlement, and third-party vendor risks exposed by the La Perouse billing breach. We also discuss Rutgers University research showing hospitals using third-party tracking pixels are 46 percent more likely to experience breaches, emphasizing the critical need for system patching, vendor oversight, and web property audits.

Fortinet patches a new critical FortiSandbox flaw GitHub to disable npm install scripts by default to stop supply chain attacks Nottingham University announces data breach Get the show notes here: https://cisoseries.com/cybersecurity-news-fortinet-patches-fortisandbox-github-disables-npm-scripts-nottingham-university-breach/ Thanks to our episode sponsor, Doppel Social engineering attacks look trustworthy — a routine request, an internal email, a familiar face on a call.   But Doppel sees through the disguise. Our AI-native platform detects and disrupts attacks across every channel, while training employees to recognize deepfakes and deception.   We fight relentlessly to protect your business, brand, and people.   Doppel. Outpacing what's next in social engineering.   Learn more at doppel.com.

Everton have been ordered by a Premier League Independent Disciplinary Commission to pay nearly £40 million in compensation and interest to Burnley following a legal claim over Profitability and Sustainability Rules (PSR) breaches. Host Ian Croll is joined by the Liverpool Echo's Everton FC correspondent Joe Thomas to break down a decision that the club has branded "fundamentally flawed in both law and fact." Burnley's case relies on the legal principle of 'loss of chance,' arguing that if Everton's point deduction had been applied during the 2021/22 season, the Blues would have been relegated and the Clarets would have stayed up.  The club has already launched an official appeal, warning that this sets a "dangerous and unworkable precedent for English football." Ian and Joe discuss what this massive ruling means for the club's finances, how The Friedkin Group (TFG) is responding, and why the club insists this won't trigger any future PSR sanctions. What are your thoughts on this breaking news? Drop a comment below!

Billions Flow Out Of Zcash After AI-Discovered Vulnerability #Crypto #Cryptocurrency #podcast #BasicCryptonomics #Bitcoin  Website: ⁠⁠⁠⁠https://CryptoTalk.FM Facebook: ⁠⁠⁠⁠@ThisIsCTR⁠⁠⁠⁠ Chapters (00:00:01) - Crypto Talk Radio(00:02:58) - CryptoTalk FM: News, Topics, and More(00:03:31) - Does the Treasury Under Attack Impact Crypto?(00:11:44) - Does a Crypto Startup Need a Bank?(00:16:56) - Zcash: AI Found a Breach in the Code(00:18:07) - All the Crypto Hype You Can Read

This episode covers the rising costs and restrictions surrounding AI agents, including token consumption, model access policies, and the growing dependence on AI tools for security work. The hosts discuss Troy Hunt's retrospective on Have I Been Pwned reaching its 1,000th tracked breach, examining why breach disclosures appear to be slowing and how GDPR and CCPA requirements affect notification practices. Additional topics include password and email hygiene, the value of breach-notification services, AI infrastructure and data center costs, and new research mapping AI-enabled cyber threats to the MITRE ATT&CK framework.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis

Anyone can build software with AI now, and millions of people are giving it a try. But when AI can spin up an app in minutes, are security risks slipping through the cracks?

Your dental plan just became your biggest security problem. DentaQuest — one of the largest dental-benefits companies in America — had the personal and health data of 2.6 million people dumped online, and almost none of those people ever chose to do business with them. If you think your own company is too careful for this, the newest numbers say otherwise. *Confidence you can't prove is just exposure wearing a smile.* Bryan Hornung and Randy Bryan break down this week's stories — for the executives, owners, and operators who don't have time to keep up with cyber news but can't afford to be blindsided by it either. (Reginald Andre is out this week — back next episode.) First up: the DentaQuest breach. The extortion crew ShinyHunters stole 234 gigabytes of data, tried to shake DentaQuest down for a ransom, and when the company didn't pay, they dumped the whole thing on a leak site. Inside that pile: names, birthdates, phone numbers, Medicaid IDs, and health-insurance details on 2.6 million people. The detail that should make you angry — researchers found roughly 1.7 million Social Security numbers in a separate folder, and a large share of them appear to belong to children. A stolen kid's SSN is gold to a fraudster, because nobody checks a nine-year-old's credit for ten years. And here's the part every business owner needs to hear: most victims never picked DentaQuest at all — their employer or their state Medicaid program did. Somebody else's vendor became your breach. Then we close on the mirror. A brand-new survey of 4,400 small and mid-size businesses found that owners have never felt more secure — 68% are confident they can stop an attack, and 75% trust they can respond. The problem? 45% of them got breached in the last year anyway. The number that stops you cold: among businesses hit more than once, confidence actually went UP — to 91% in the U.S. Meanwhile two-thirds still don't turn on multi-factor authentication, and only about 17% encrypt their data — the cheap, boring controls that stop most attacks. The average breach at a company under 500 people now runs about $3.31 million. Owners are scared of sci-fi AI malware while the rip current — phishing, weak passwords, no monitoring — is the thing actually pulling them under. Two stories, one crack running through both: somebody assumed they were covered, and the assumption was the vulnerability. The fix isn't more fear or more confidence — it's proof. In this episode, we discuss: • How 2.6 million people got exposed by a company most of them never chose. • Why ShinyHunters' "pay-or-we-leak" model makes your backups useless. • Why a stolen child's Social Security number is worth more than yours. • How small businesses can feel 68% confident and still get breached 45% of the time. • Why getting hit twice somehow makes owners MORE confident — and why that's backwards. • The two cheap controls two-thirds of businesses still skip. • How to replace "I feel secure" with proof you can actually show. Security Squawk is a weekly podcast and live stream for business owners and executives. Support the show: buymeacoffee.com/securitysquawk

FaZe ZooMaa, Enable, Parasite, Benj, and Attach break down the first day of the Call of Duty League Minor matches!

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

What happens when an AI agent inside your company starts behaving like an insider threat? In part two, Steve Moore picks the thread back up with former FBI operative Eric O'Neill to explore how agentic AI is rewriting cybersecurity, the legal traps that follow a breach, and why the modern CISO must think like a spy hunter.Eric opens with a sobering reality: ransomware victims who decline to pay are re-attacked at staggering rates. He explains why criminals treat cybercrime as a business, invest weeks in reconnaissance—mapping SharePoint, harvesting file trees, and studying access patterns—and why a botched recovery hands them the same door twice.The conversation turns to the new insider threat hiding in plain sight: rogue AI agents. Eric shares a real case in which one executive's casual query exposed the next round of layoffs and triggered coordinated lawsuits. They unpack how agents inherit excessive access, how attackers hijack them once inside, and why organizations are now building insider-threat programs to monitor AI behavior.Eric argues AI is an accelerant on every unresolved problem—weak identity management, entitlement drift, missing asset inventories, and absent data classification. They debate whether IT and security should be unified under the CISO, why the CISO needs a direct line to the board, and the legal landmines that follow a breach, from cyber insurance to the “reasonable steps” standard.The episode closes with Eric's advice for any new CISO: put “spy hunter” on your resume. Counterintelligence, not perimeter defense, is the discipline that wins today. Tune in for part two of a story-driven conversation on why preparation, mindset, and threat hunting beat any single technology.Key Topics• Why ransomware victims who decline to pay get re-attacked• How attackers map SharePoint, file trees, and access patterns• The new insider threat: rogue and hijacked AI agents• A real case of an AI agent exposing an HR layoff list• Shadow IT and the cost of banning AI outright• Permission structures and second-level reviews for agent actions• Why AI exposes gaps in identity, asset, and data classification• Unifying IT and security under the CISO• Why the CISO needs a direct line to the board• Legal traps: cyber insurance, reasonable steps, and missed alerts• The CISO as counterintelligence officer and spy hunterGuest BioEric O'Neill is a former FBI counterintelligence operative, attorney, and bestselling author who helped bring down Robert Hanssen—the most damaging spy in FBI history. He is the founder of NeXasure AI and co-founder of The Georgetown Group, and his undercover work was dramatized in the film Breach. Eric is the author of Gray Day and Spies, Lies, and Cybercrime.Connect with Eric on LinkedIn or at ericoneill.net.GET A DEMO:

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

Send us Fan MailThe breach that takes down a company often does not kick in the front door. It walks in through a “simple” integration you set up months ago, powered by a token no one remembered to rotate. We start with a real-world Zapier-style scenario and unpack how researchers chained together a harmless-looking code block, an AWS Lambda environment, and a misconfigured IAM role to reach private repository files and ultimately an NPM token that could enable a supply chain attack.From there, we zoom out to the bigger cloud security problem: non-human identities. Service accounts, API keys, and OAuth tokens multiply fast, and they are frequently overprivileged, poorly tracked, and left active long after an integration is retired. We also talk about why SaaS-to-SaaS connections are so hard to secure, and why agentic AI makes visibility even more urgent. If you do not know what systems are connected, what data crosses those links, and who owns the risk, you are effectively trusting an invisible tunnel into your environment.To make this actionable, we lay out a four-phase third-party risk management (TPRM) framework you can apply immediately: build a vendor and integration inventory with tiering, run real due diligence (SOC 2 Type II, ISO 27001, data access scope, subprocessors and fourth parties), lock protections into contracts (DPA language, right to audit, breach notification expectations), then enforce ongoing monitoring and governance with quarterly token reviews, logging, and incident response playbooks. If you are studying for the CISSP, you will also see exactly how this maps to Domain 1, Domain 3, Domain 4, and Domain 5.Subscribe for more practical CISSP training, share this with a teammate who owns vendor approvals, and leave a review so more security pros can find it. What is the one integration you would audit first?Gain exclusive access to 360 FREE CISSP Practice Questions at FreeCISSPQuestions.com and have them delivered directly to your inbox!  Don't miss this valuable opportunity to strengthen your CISSP exam preparation and boost your chances of certification success. Join now and start your journey toward CISSP mastery today!

Welcome to the Identity Theft Resource Center's Weekly Breach Breakdown for June 5, 2026. I'm Tatiana Cuadras, Communications Assistant for the ITRC. Thanks to Sentilink for their continued support of the podcast and the ITRC. Each week, we break down the latest in data security and privacy, and this week, we have a story that's a little different. It's not about criminals targeting everyday people or businesses. It's about ransomware groups targeting each other. Grab your popcorn. Follow on LinkedIn: linkedin.com/company/idtheftcenter/ Follow on Instagram: instagram.com/idtheftcenter/ Follow on Facebook: facebook.com/IDTheftResourceCenter/ Follow on X: twitter.com/IDTheftCenter Follow on TikTok: www.tiktok.com/@idtheftcenter_ Follow on YouTube: www.youtube.com/@IDTheftCenter

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

NEW MERCH AVAILABLE NOW⁠⁠⁠⁠⁠⁠⁠⁠⁠ ROT: We're off to Europe, and the silly travel shirts are on the way. Sketch Tank: Listener Dan's hilarious auditions to be in the Jacob Elordi Sketch. Shannon Noll sung on a plane - Harry is NOT happy with the safety breaches. Yappers: The most inappropriate fire instagram edit in history + 6-7 is well and truly alive. Schemes: Free Bunnings plants, free Beers with a burger, and unlimited money at the pokies HACK. Listener submitted KIF soundboard HERE ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠JOIN OUR PATREON FOR HEAPS OF BONUS STUFF⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Learn more about your ad choices. Visit megaphone.fm/adchoices

Originally recorded: Friday May 29, 2026In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.A large-scale software supply chain attack dubbed “Megalodon” infected thousands of GitHub repositories with credential-stealing malware in a highly automated campaign that unfolded over a six-hour period on May 18, 2026.Researchers from OX Security have identified a malicious npm package named “mouse5212-super-formatter” that was designed to steal files from Anthropic Claude AI environments by targeting the “/mnt/user-data” directory.Convenience store giant 7-Eleven disclosed a data breach tied to an attack that occurred on April 8, 2026, involving systems that contained franchise-related documents. SecurityWeek article Matt references.CISA has issued an urgent warning about a critical vulnerability in the LiteSpeed cPanel Plugin, tracked as CVE-2026-48172, which is already being actively exploited in the wild.Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform.This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows. Start today for free at limacharlie.io.

The Cybercrime Magazine Podcast brings you daily cybercrime news on WCYB Digital Radio, the first and only 7x24x365 internet radio station devoted to cybersecurity. Stay updated on the latest cyberattacks, hacks, data breaches, and more with our host. Don't miss an episode, airing every half-hour on WCYB Digital Radio and daily on our podcast. Listen to today's news at https://soundcloud.com/cybercrimemagazine/sets/cybercrime-daily-news. Brought to you by our Partner, Evolution Equity Partners, an international venture capital investor partnering with exceptional entrepreneurs to develop market leading cyber-security and enterprise software companies. Learn more at https://evolutionequity.com

Glassworm botnet gets shattered China overhauls world's biggest surveillance network Charter confirms ShinyHunters data breach Check out your show notes here: https://cisoseries.com/cybersecurity-news-glassworm-botnet-shattered-china-overhauls-surveillance-charter-confirms-shinyhunters-breach/ Huge thanks to our sponsor, Guardsquare AI is speeding up development, but at what cost? While ninety-six percent of teams now use AI tools, eighty-one percent report that AI-generated code has introduced new vulnerabilities into their mobile apps. In a world with automated threats, you need multi-layered, polymorphic security to stay ahead of the curve. Learn more at Guardsquare.com.

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

The privacy commissioner has recommended a central vetting process for GP apps, following the Manage My Health data breach. It found Health NZ and Manage My Health "failed in their responsibilities" to have adequate security controls when hundreds of thousands of medical files were stolen in a cyber attack. The Commissioner says GP practices need to review their security settings and third party providers. Luke Bradford, President and Chair of the Royal New Zealand College of General Practitioners spoke to Ingrid Hipkiss.

Trump diverts about $1.8 billion in taxpayers's money to his cronies—just call him President Slush Fund. Ben riffs. Kevin Ryan talks about the lessons he learned from his recent Senate campaign. From there he covers everything from Hegseth in Kentucky to George Washington at Valley Forge. A shout out to Robin Kelly. A call for ranked-choice voting. A plea for a separation between church and state. A recital from Henry the Fifth. And a few words about the paradox of saying Happy Memorial Day. Kevin is the state director for Veterans For All Voters. His views are his own. See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

In this first episode of our summer series on Disputing with God, we are reading the story of the Golden Calf, Exodus 32:1-20 and 30-35. We've read it together before, but the regular lectionary stops us pretty early in its unfolding ... and we found that moving farther into the story directed our eyes not to the Israelites or to God, but to the space between them–their relationship, still fairly new and fragile. And you know what else is right between them–our man Moses, holding the tablets, trying to reach in both directions at once. What's left after this kind of rupture? What's possible?

What if your weakness is actually where God's power is revealed the most? In this sermon from 2 Corinthians 12, Pastor Jordan Porr walks through Paul's suffering, the “thorn in the flesh,” and the powerful truth that God's grace is sufficient even in our darkest moments. If you've ever asked “Why am I suffering?” this message will point you back to the hope, strength, and comfort found in Christ alone

Timestamps: 0:00 Microsoft 365 Update 1:02 GitHub Breach 1:58 Nvidia GPU Security Update 4:06 QUICK BITS INTRO 4:11 Meta Releases Reddit-like App 4:34 Riot's Vanguard Anti-Cheat Hits Cheaters Hard 5:05 Discord Enables End-to-End Encryption 5:31 Spotify and UMG Reach AI Deal 6:14 Pizza Hut Sued by Franchisee Over AI NEW SOURCES: https://lmg.gg/Bdpll Learn more about your ad choices. Visit megaphone.fm/adchoices

GitHub confirms a major supply chain breach after a malicious Visual Studio Code extension reportedly gave attackers linked to TeamPCP access to roughly 3,800 internal repositories. The bigger issue: developer workstations now hold some of the most sensitive secrets in modern software organizations. Also today: Microsoft begins phasing out SMS-based authentication for personal accounts, calling text-message authentication a growing fraud risk as it shifts toward phishing-resistant passkeys. Researchers also disclose a nine-year-old Linux privilege escalation flaw, CVE-2026-46333, nicknamed SSH-Keysign-Pwn, which can allow root-level access with local machine access. And Proton publicly threatens to leave Canada rather than comply with proposed surveillance legislation it says would undermine its no-logs privacy promise. Cybersecurity Today would like to thank Material Security for sponsoring this podcast. Material Security provides faster, more complete detection and response for email, identity, and data threats inside Google Workspace and Microsoft 365. You can contact them at material[dot]security. If cybersecurity, privacy, and digital infrastructure matter to your business, this is the daily briefing you need. Timestamps: 00:00 Top Stories Rundown 00:24 GitHub Supply Chain Breach 01:09 Developer Workstations at Risk 02:31 Microsoft Ditches SMS MFA 04:15 Linux Root Escalation Flaw 06:11 Proton vs Canada Surveillance Bill 08:03 Wrap Up and Sign Off #cybersecurity #github #microsoft #linux #protonvpn #privacy #databreach #supplychainattack #infosec #cybernews

GitHub Breach https://x.com/github/status/2056949168208552080 Agentic Threat Intelligence Feed - VS Code Extensions https://agentmesh.knostic.ai/extensions More NGINX Vulnerabilities https://x.com/nebusecurity/status/2057071579876753643 https://my.f5.com/manage/s/article/K000161307 Microsoft Publishes YellowKey Mitigation CVE-2026-45585 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45585 Incomplete Sonicwall Patch CVE-2024-12802 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0001

On this week's show Patrick Gray, Adam Boileau and James Wilson discuss the week's cybersecurity news. They cover: GitHub announced a possible breach CISA leaks important creds, keys in public repo Awful vulnerability in Bitlocker renders it useless without a PIN So. Many. Patches. Polish Government urges officials to ditch Signal for mSzyfr Much, much more This week's show is brought to you by Thinkst Canary. Thinkst's founder, Haroon Meer, is this week's sponsor guest. He joined James Wilson to talk about how doing “the basics” in security isn't trivially easy. This episode is also available on YouTube. Show notes GitHub on X: "We are investigating unauthorized access to GitHub's internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub's internal repositories (such as our customers' enterprises, organizations, and repositories), we are closely" / X CISA Admin Leaked AWS GovCloud Keys on Github – Krebs on Security Experts Confirm the Fast16 Malware Was Sabotaging Nuclear Weapons Tests, Likely in Iran Iran hackers: Hackers have breached tank readers at gas stations; officials suspect Iran is responsible | CNN Politics War and Data Centers Are Driving Up the Cost of Fiber-Optic Cable Microsoft on pace to break annual vulnerability record as AI-driven patch wave takes hold | The Record from Recorded Future News NCSC's Ollie Whitehouse on surviving the "bugpocalypse" - Risky Business Media Defense at AI speed: Microsoft's new multi-model agentic security system tops leading industry benchmark | Microsoft Security Blog Project Glasswing: what Mythos showed us Linus Torvalds says AI-powered bug hunters have made Linux security mailing list ‘almost entirely unmanageable' First public macOS kernel memory corruption exploit on Apple M5 OpenAI launches Daybreak to combat cyber threats | Cybersecurity Dive Zero-day exploit completely defeats default Windows 11 BitLocker protections - Ars Technica GitHub - Wack0/bitlocker-attacks: A list of public attacks on BitLocker · GitHub Catalin Cimpanu: "The Polish government has advi…" - Mastodon CISA orders all federal agencies to patch exploited bug in Cisco SD-WAN systems by Sunday | The Record from Recorded Future News CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED) Huawei zero-day attack behind last year's crash of Luxembourg's entire telecoms network | The Record from Recorded Future News Patch bypass allows hackers to exploit prior flaw in SonicWall SSL-VPN | Cybersecurity Dive Microsoft disrupts Fox Tempest malware-signing-as-a-service platform tied to ransomware gangs | The Record from Recorded Future News Streamer Realtime Deepfakes Himself into Mr. Beast, Says He Loves 'Touching Little Boys'

What if the cybersecurity industry has spent decades fighting the wrong battle? In this episode of Tech Talks Daily, I sat down with Benny Czarny, founder and CEO of OPSWAT, to discuss why he believes the traditional "detect and respond" model is no longer enough in a world where AI is accelerating cyber threats faster than security teams can react. Benny joined me to discuss his new book, Cybersecurity Upside Down, which combines personal stories from building OPSWAT with a bold argument for rethinking how organizations approach cyber defense altogether. His central belief is simple but provocative: detection-based security has trapped the industry in a losing cycle in which attackers need to succeed only once, while defenders are forced into a constant state of reaction. During our conversation, Benny explained how his thinking evolved after realizing that even layering dozens of antivirus engines and sandboxing technologies still failed to stop malicious files reliably. That realization ultimately pushed him toward a prevention-first philosophy built around Deep Content Disarm and Reconstruction, or CDR. Rather than trying to determine whether a file is malicious, the approach assumes files may already be dangerous and regenerates clean, safe versions before they ever reach users or systems. We also explored how generative AI is changing the cybersecurity landscape in ways many organizations still underestimate. Benny shared why AI is dramatically reducing the time required to create malware, weaponize exploits, and scale attacks, effectively giving even inexperienced attackers capabilities once reserved for nation states or advanced cybercriminal groups. He also raised concerns that AI data lakes could become contaminated with malicious content, creating entirely new risks for organizations rushing to deploy large language models without securing the data feeding them. One of the most fascinating aspects of the discussion was the psychology and culture within cybersecurity teams. Benny argued that the industry often celebrates visible incident response activity while undervaluing quiet prevention. In a world dominated by alerts, dashboards, and SOC metrics, truly preventing attacks can almost appear invisible, despite potentially delivering far greater security outcomes. We also talked about the sectors Benny believes are most exposed today, including energy, manufacturing, and critical infrastructure operators that still rely heavily on reactive security models while facing growing operational and regulatory complexity. He explained why some industries are advancing faster than others and why compliance mandates could become a major catalyst for broader prevention-first adoption. Beyond cybersecurity itself, this episode also offered a fascinating look into Benny's entrepreneurial journey, what he learned building OPSWAT over two decades, how AI helped him research and structure his book, and why he is now even producing a cybersecurity-focused TV series called Into the Breach, designed to make complex security concepts easier for wider audiences to understand. This conversation challenges many of the assumptions the cybersecurity industry has normalized for years. Whether you work in security, IT leadership, compliance, or want to understand how AI is reshaping digital risk, this episode offers a very different perspective on what modern cyber resilience could look like in practice.

Security operations for MSPs are undergoing a structural shift from simply deploying additional tools to establishing a liability-focused accountability model, where the ability to provide operational evidence of controls is becoming as critical as the tools themselves. This shift is catalyzed by corporate insurance, procurement, and third-party verification structures—such as those cited by WatchGuard, Assurix, and the NIST AI cybersecurity overlays—demanding verifiable security outcomes and alignment with external standards, rather than relying on provider assertions alone. Survey data referenced from Cybersmart and Beta News reveals that 75% of MSPs experienced at least one breach in the past year, while 54% endured multiple incidents; concurrently, SMB buyers state security is a top priority, but only 13% of microbusinesses operate proactively. According to WatchGuard's global survey of 842 professionals, 94% of clients using dedicated MSPs feel adequately protected, yet 58% indicate intent to change providers within three years—highlighting a disconnect between perceived and delivered value. The emergence of Assurixs' live MSP Trustmark, based on 64 operational controls, further formalizes evidence requirements as market prerequisites. These dynamics are reinforced by shifts in insurer behavior and regulatory alignment. Huntress and Acrisure are collectively rolling out a cyber insurance package contingent on adoption of Huntress's managed detection and response, explicitly tying coverage eligibility to verifiable provider-side controls. The maturing of NIST's AI cybersecurity overlays introduces new standardized control checklists likely to become operational requirements. Additionally, reports from Omdia and MSP Channel Insights note that vendor ecosystems are now rewarded for integrating security as an outcome with automation and multi-tenant integration—reflecting market demand for reliable, defensible evidence of controls. For MSPs and IT leaders, these developments drive the need to restructure contracts to clearly delineate evidence obligations, manage liability exposure, and price evidence production as a formal deliverable rather than as unreimbursed support. Failing to do so risks absorbing unfunded post-incident evidence work, margin erosion, and loss of control over the security value conversation. Operationally, maintaining live accreditations, standing up a formal evidence management function, and explicitly excluding unmanaged SaaS, identity, and AI workflows from baseline service tiers are becoming necessary to maintain profitability and accountability. 00:00 Breach, Then Switch  04:52 SaaS Blind Spot 07:16 Prove or Pay 10:24 Why Do We Care?  Supported by:  Zero Networks HaloPSA   

President and senior lecturer of Repairers of the Breach and Moral Mondays, Bishop William J. Barber II reflects on their rally outside the White House yesterday and their challenge to distorted theology that justifies war and policy violence.Become a supporter of this podcast: https://www.spreaker.com/podcast/tavis-smiley--6286410/support.

Interview with Dimitri Sirota from BigID Most organizations think AI risk lives in the model – or the identity. It doesn't. It lives in the data. In this episode, BigID's CEO reframes the conversation: why legacy access controls are breaking down, why visibility into sensitive data is the missing foundation, and what it takes to govern humans and machines under a single, accountable framework. Segment Resources: BigID's Agent Access Management Guide BigID's podcast, CTRL + ALT + AI This Week's Topic: Cascading Breaches We're seeing more and more 3rd and 4th party attacks that chain through multiple layers of compromised tools and services. In this topic segment, we discuss the two main aspects of this trend: How we can stop the chain of breaches from a third party library, vendor, or service provider How this might get handled at the legal, contractual, and organizational levels We discuss two big recent examples: Sonicwall's 2025 breach of their cloud firewall configuration backup service The compromise of Aqua Security's widely used Trivy open source tool The Weekly Enterprise News Finally, in the enterprise security news, Funding and M&A courtesy of the Security, Funded newsletter We have evidence that attackers are leveraging AI now (this sounds like old news, but there was little to no evidence before, when people were claiming this) The Angry admin problem emerges again Vulnerability information is getting crazy to keep up with Breach information is getting crazy to keep up with You can give your Agents an allowance now - don't spend it all in one place Are vulnerabilities sparse or dense? Mythos, as a model, isn't all that special Deploy your own deception sensors! Japan made something weird. Again. All that and more, on this episode of Enterprise Security Weekly. Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-459

At least seven people were killed by Israeli strikes in Lebanon, according to health officials Hosted on Acast. See acast.com/privacy for more information.

Hosted by Josh Tomar!  https://twitter.com/tomamoto https://www.twitch.tv/tomamoto Editing, Narration & Production by The Disciple https://twitter.com/The__Disciple https://www.youtube.com/@TheOnlyDisciple Subscribe on Spotify!  https://open.spotify.com/show/5OgfQg3svBwSUiU0zGqhet Please Review us on Apple Podcasts!  https://podcasts.apple.com/us/podcast/redwood-bureau/id1597996941 Find more shows like Redwood Bureau at https://eerie.fm/ Learn more about your ad choices. Visit podcastchoices.com/adchoices