The hosts explain how malicious calendar invites can bypass controls and potentially expose credential hashes, recommend disabling automatic invite acceptance, and discuss reported X passkey lockouts and uncertainty about CISA’s future.
The hosts discuss AWS outages they say were not cyberattacks, a withdrawn claim that AI powers over 80% of ransomware attacks, and scams using hijacked hotel accounts or fake WhatsApp messages to solicit travelers’ payment details.
The hosts discuss pro-Russia hackers who mistook a For Scout honeypot for a Dutch water facility, F5 Networks’ report of persistent access and exfiltrated source code and undisclosed-vulnerability information, and the risks of forced patching.
The hosts discuss active exploitation of an Oracle E-Business Suite vulnerability, an extortion attack on UK nursery chain Kido that led to two arrests, and the benefits and implementation challenges of passkeys.
The hosts discuss a DDoS record reported by Cloudflare and cyber incidents affecting Jaguar Land Rover, Circle K stores in China, and Collins Aerospace, alongside a Secret Service claim about a seized communications network.
The video discusses a compromised npm maintainer account used to publish malicious JavaScript packages. The malware targeted crypto wallets and developer credentials, then used stolen npm tokens to compromise more packages. Hosts recommend dependency and secret-protect
A report discussed by the hosts says two self-described ethical hackers accessed RBI International’s AWS environment, exposing employee information and an admin token with access to 30,000 restaurant locations. The hosts say RBI fixed the issues quickly.
Hosts discuss claims that SLH demanded Google fire two employees and stop investigating its network, threatening to leak a database. They note the group pairing is unconfirmed and Google has made no public statement.
The hosts discuss Google’s planned Android developer verification, reports of malicious Play Store apps with 19 million installs, and risks including stolen developer identities and signing keys.
The hosts discuss a briefly active Telegram channel claiming Shiny Hunters, Scattered Spider and Lapsis$ were developing a ransomware-as-a-service operation called Shiny Spider. Telegram removed the channel after three days; the alliance remains unverified.
The hosts discuss a reported 9 GB leak attributed to a supposed North Korean operation, including backdoors, phishing sites, a private Cobalt Strike beacon and access credentials. The leak’s authenticity and the operator’s attribution remain uncertain.
The video says the T dating safety app exposed more than a million records, including photo IDs, selfies and hundreds of private messages, after data was left in an unsecured storage bucket.
The speakers discuss a SharePoint vulnerability chain that can lead to remote code execution and administrator privileges, the reported delay between disclosure and patch availability, and the challenges organizations face in applying patches.
The hosts cite a DHS memo alleging Salt Typhoon compromised a state Army National Guard network in 2024, collecting configurations, credentials and diagrams. They also discuss reported security risks from DoD’s digital escort program.
A payment-solutions employee reportedly sold credentials for $920, helping attackers steal $140 million from banks. The video says $30–40 million was laundered through cryptocurrency and notes key incident details remain undisclosed.
Nick Bradley and Dave Bales say a widely reported 16-million-password collection combines data from older breaches rather than representing a new breach. They recommend strong passwords, MFA and changing passwords after a confirmed breach.
The hosts warn that unsubscribe links in unsolicited emails can lead to malicious sites or confirm an inbox is active. They recommend using email-client protections, including Apple Mail’s option to unsubscribe without an external redirect.
Microsoft announced a strategic collaboration with Crowdstrike to clarify threat actor naming. The hosts discuss potential benefits for tracking and coordination, along with practical concerns about maintaining a shared system.
The hosts warn that linking personal and work accounts in OneDrive sync could expose company information. They say users may see an opt-in prompt and administrators can block the link through policy, though the feature’s activation details are unclear.
The hosts urge caution over unverified cyberattack claims about the Spain-Portugal blackout, noting an ongoing investigation and the grid operator’s cyber-incident denial. They also discuss a Kofense-reported phishing campaign impersonating TAP Air Portugal to steal *
A report discussed in the video describes scammers using an automated smishing kit to send fake toll-payment texts. The hosts recommend avoiding links in unsolicited messages and verifying tolls through official channels.
