Curated cybersecurity video content, discussions, interviews, presentations, and educational material from YouTube.
334 articles
The hosts discuss a DDoS record reported by Cloudflare and cyber incidents affecting Jaguar Land Rover, Circle K stores in China, and Collins Aerospace, alongside a Secret Service claim about a seized communications network.
A tutorial demonstrates using Amazon Q Developer to query AWS WAF logs for SQL injection and cross-site scripting requests, then create an IP set and add a blocking rule. The presenter shows commands for review and execution.
The video discusses a compromised npm maintainer account used to publish malicious JavaScript packages. The malware targeted crypto wallets and developer credentials, then used stolen npm tokens to compromise more packages. Hosts recommend dependency and secret-protect
A Binary Ninja developer demonstrates recording and replaying WinDbg traces for reverse engineering and previews unreleased memory-query and code-coverage features.
A report discussed by the hosts says two self-described ethical hackers accessed RBI International’s AWS environment, exposing employee information and an admin token with access to 30,000 restaurant locations. The hosts say RBI fixed the issues quickly.
The video demonstrates Google’s Magika, an AI-based file type detection utility, showing batch detection and confidence scores. It notes that Magika may provide less detail for DLL files than the file utility.
A tutorial outlines seven API security practices: authentication, authorization, rate limiting, input validation, monitoring, replay-attack protection, and API discovery to identify unprotected endpoints.
Hosts discuss claims that SLH demanded Google fire two employees and stop investigating its network, threatening to leak a database. They note the group pairing is unconfirmed and Google has made no public statement.
The hosts discuss Google’s planned Android developer verification, reports of malicious Play Store apps with 19 million installs, and risks including stolen developer identities and signing keys.
The hosts discuss a briefly active Telegram channel claiming Shiny Hunters, Scattered Spider and Lapsis$ were developing a ransomware-as-a-service operation called Shiny Spider. Telegram removed the channel after three days; the alliance remains unverified.
The hosts discuss a reported 9 GB leak attributed to a supposed North Korean operation, including backdoors, phishing sites, a private Cobalt Strike beacon and access credentials. The leak’s authenticity and the operator’s attribution remain uncertain.
The video says the T dating safety app exposed more than a million records, including photo IDs, selfies and hundreds of private messages, after data was left in an unsecured storage bucket.
The speakers discuss a SharePoint vulnerability chain that can lead to remote code execution and administrator privileges, the reported delay between disclosure and patch availability, and the challenges organizations face in applying patches.
The hosts cite a DHS memo alleging Salt Typhoon compromised a state Army National Guard network in 2024, collecting configurations, credentials and diagrams. They also discuss reported security risks from DoD’s digital escort program.
A payment-solutions employee reportedly sold credentials for $920, helping attackers steal $140 million from banks. The video says $30–40 million was laundered through cryptocurrency and notes key incident details remain undisclosed.
Nick Bradley and Dave Bales say a widely reported 16-million-password collection combines data from older breaches rather than representing a new breach. They recommend strong passwords, MFA and changing passwords after a confirmed breach.
The hosts warn that unsubscribe links in unsolicited emails can lead to malicious sites or confirm an inbox is active. They recommend using email-client protections, including Apple Mail’s option to unsubscribe without an external redirect.
Microsoft announced a strategic collaboration with Crowdstrike to clarify threat actor naming. The hosts discuss potential benefits for tracking and coordination, along with practical concerns about maintaining a shared system.
The hosts warn that linking personal and work accounts in OneDrive sync could expose company information. They say users may see an opt-in prompt and administrators can block the link through policy, though the feature’s activation details are unclear.
The hosts urge caution over unverified cyberattack claims about the Spain-Portugal blackout, noting an ongoing investigation and the grid operator’s cyber-incident denial. They also discuss a Kofense-reported phishing campaign impersonating TAP Air Portugal to steal *
A report discussed in the video describes scammers using an automated smishing kit to send fake toll-payment texts. The hosts recommend avoiding links in unsolicited messages and verifying tolls through official channels.
Ginoah explains a patched Solana validator vulnerability introduced in version 1.16 and demonstrates how a malicious program could exploit memory mapping to achieve remote code execution.
