Saltar al contenido
Defensive Security Podcast – Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast – Malware, Hacking, Cyber Security & Infosec

NuevoDefensive Security Podcast Episode 36121 de octubre de 2026 · 34 min
Episodios
199
Se publica
cada dos semanas
Último episodio
21 Oct 2026

Sobre el podcast

Defensive Security is a weekly information security podcast which reviews recent high profile cyber security breaches, data breaches, malware infections and intrusions to identify lessons that we can learn and apply to the organizations we protect.

Episodios 199

  1. Defensive Security Podcast Episode 361

    34 min

    Please consider supporting the DefSec podcast here. Links: 1. ShinyHunters breaks into Clop’s leak site and starts extorting the extortionistshttps://www.darkreading.com/cyberattacks-data-breaches/shinyhunters-h …

    Notas del episodio

    Please consider supporting the DefSec podcast here.

    Links:

    1. ShinyHunters breaks into Clop’s leak site and starts extorting the extortionists
    https://www.darkreading.com/cyberattacks-data-breaches/shinyhunters-hacked-clop-what-about-clops-victims

    2. CrowdSec kept a leaver’s GitHub access open and lost 170 private repositories
    https://thehackernews.com/2026/09/crowdsec-says-tanstack-npm-attack-led.html

    3. Anthropic’s Glasswing found 225 CVEs, and attackers have exploited exactly one
    https://www.theregister.com/security/2026/09/21/anthropic-linked-cves-pile-up-attackers-mostly-shrug/5298018

    4. One infected laptop at a meter vendor held logins for 167 utility tenants
    https://cyberscoop.com/spycloud-study-water-utilities-infostealer-exposure/

    5. A fake LastPass installer kills 145 security products with a Microsoft-signed driver
    https://thehackernews.com/2026/09/fake-lastpass-authenticator-installer.html

    6. Australia says an OpenAI agent hacked a Medicare portal whose own code let it in
    https://therecord.media/openai-australia-breach-cyber

    7. CISA wants decoys back in your network to catch attackers who log in normally
    https://www.darkreading.com/cybersecurity-operations/deception-by-design-cisa-s-guide-to-tricking-cybercriminals

  2. Defensive Security Podcast Episode 360

    33 min

    Please consider supporting the DefSec podcast here. 1. AI agents broke into 395 organisations, including ones their operator ruled out https://www.helpnetsecurity.com/2026/09/11/ai-agents-papercut-ng-mf-attack-c …

    Notas del episodio

    Please consider supporting the DefSec podcast here.

    1. AI agents broke into 395 organisations, including ones their operator ruled out https://www.helpnetsecurity.com/2026/09/11/ai-agents-papercut-ng-mf-attack-campaign/

    2. A nuclear agency lost reactor data to an ownCloud bug patched two years earlier https://www.darkreading.com/cyberattacks-data-breaches/old-unpatched-flaws-attackers-philippines-nuclear-agency

    3. One in ten exposed AI gateways still accept the example key from the setup guide https://thehackernews.com/2026/09/nearly-1-in-10-exposed-litellm-gateways.html

    4. Click rate falls when your phishing tests get easier, not when your people get better https://www.helpnetsecurity.com/2026/09/11/pistachio-employee-phishing-risk-report/

    5. Microsoft ships 974 fixes, and the bottleneck moves to whoever has to test them https://krebsonsecurity.com/2026/09/microsoft-plugs-nearly-1000-security-holes/

  3. Defensive Security Podcast Episode 359

    36 min

    Please consider supporting the DefSec podcast here. 1. CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing https://thehackernews.com/2026/08/cisa-red-team-compromised-two-critical.ht …

    Notas del episodio

    Please consider supporting the DefSec podcast here.

    1. CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing https://thehackernews.com/2026/08/cisa-red-team-compromised-two-critical.html

    2. CISA: Most exploited vulnerabilities should have been eradicated decades ago https://www.theregister.com/security/2026/08/28/cisa-most-exploited-vulnerabilities-should-have-been-eradicated-decades-ago/5293194

    3. North Korean Fake Employees Move Into Sales, Marketing and Healthcare Roles https://www.helpnetsecurity.com/2026/08/28/north-korean-remote-workers-jobs-sales-and-marketing/

    4. Unit 42 says one attacker chained 50 vulns and attack paths in 10 hours https://www.cybersecuritydive.com/news/frontier-ai-tipping-scales-cyber-adversaries/829088/

    5. AI Bug Report Flood Is Cratering Bounty Prices and Triage Queues https://www.darkreading.com/vulnerabilities-threats/vulnpocalypse-repricing-bug-bounty-economy

  4. Defensive Security Podcast Episode 358

    31 min

    Please consider supporting the DefSec podcast here. Stories: Weak IAM affects up to 98% of cloud environmentshttps://www.helpnetsecurity.com/2026/08/14/intruder-cloud-misconfiguration-trends-report/China-Linked …

    Notas del episodio

    Please consider supporting the DefSec podcast here.

    Stories:

    Weak IAM affects up to 98% of cloud environments
    https://www.helpnetsecurity.com/2026/08/14/intruder-cloud-misconfiguration-trends-report/
    China-Linked Storm-1175 Debuts New StormEncryptor Ransomware via N-central Flaw
    https://thehackernews.com/2026/08/china-linked-hackers-deploy-new.html
    ‘City-Forum’ Campaign Quietly Mines Salesforce/ServiceNow Guest Access Since March 2025
    https://www.darkreading.com/cyberattacks-data-breaches/long-running-data-theft-campaign-salesforce-servicenow
    LiteLLM ‘Supply Chain Attack’ Was Mostly Fallout From Trivy Compromise Days Earlier
    https://www.securityweek.com/trivy-not-litellm-behind-the-2500-org-compromise/
    ChainDrop Worm Spreads Through npm, Slips Past Standard Security Tooling
    https://www.theregister.com/security/2026/08/15/chaindrop-worm-crawls-into-npm-supply-chain-evades-standard-defenses/5287958

  5. Defensive Security Podcast Episode 356

    54 min

    Please consider supporting the DefSec podcast here. Stories: https://www.cybersecuritydive.com/news/anthropic-claude-ai-hacking-test/826708 https://thecybersecguru.com/news/openai-ai-agent-containment-escapes-hu …

    Notas del episodio

    Please consider supporting the DefSec podcast here.

    Stories:

    • https://www.cybersecuritydive.com/news/anthropic-claude-ai-hacking-test/826708
    • https://thecybersecguru.com/news/openai-ai-agent-containment-escapes-hugging-face-investigation/
    • https://www.bleepingcomputer.com/news/security/after-the-break-in-what-attackers-do-once-theyre-already-inside/
    • https://www.darkreading.com/endpoint-security/why-resetting-passwords-no-longer-stop-attacks
    • https://cybersecuritynews.com/adform-advertising-platform-compromised/

  6. Defensive Security Podcast Episode 355

    1 h 8 min

    https://www.helpnetsecurity.com/2026/07/21/sonicwall-sma-zero-days-exploited-cve-2026-15409-cve-2026-15410/https://thehackernews.com/2026/07/qilin-ransomware-attackers-exploit-pan.htmlhttps://thehackernews.com/2 …

    Notas del episodio

    https://www.helpnetsecurity.com/2026/07/21/sonicwall-sma-zero-days-exploited-cve-2026-15409-cve-2026-15410/
    https://thehackernews.com/2026/07/qilin-ransomware-attackers-exploit-pan.html
    https://thehackernews.com/2026/07/worlds-largest-ai-model-repository.html
    https://openai.com/index/hugging-face-model-evaluation-security-incident/
    https://www.darkreading.com/identity-access-management-security/identity-attacks-overtake-exploits-top-ransomware-cause
    https://www.helpnetsecurity.com/2026/07/21/estee-lauder-data-breach-oracle-ebs/

  7. Defensive Security Podcast Episode 351

    1 h 11 min

    Please consider supporting the DefSec podcast here. Links to this week’s stories: https://www.theregister.com/cyber-crime/2026/06/05/if-you-dont-fall-for-these-extortionists-calls-theyll-show-up-with-usb-sticks/ …

    Notas del episodio

    Please consider supporting the DefSec podcast here.

    Links to this week’s stories:

    https://www.theregister.com/cyber-crime/2026/06/05/if-you-dont-fall-for-these-extortionists-calls-theyll-show-up-with-usb-sticks/5251891

    https://thehackernews.com/2026/06/only-10-of-socs-say-theyre-getting.html?m=1

    https://arstechnica.com/security/2026/06/dashlane-explains-how-attackers-managed-to-download-encrypted-password-vaults/

    https://www.bleepingcomputer.com/news/security/hackers-hijack-thousands-of-sites-for-clickfix-and-fakeupdate-attacks/

    https://krebsonsecurity.com/2026/06/hackers-used-metas-ai-support-bot-to-seize-instagram-accounts/

    https://www.cybersecuritydive.com/news/ai-cybersecurity-hype-reality-check-gartner/821867/0:0

  8. Defensive Security Podcast Episode 350

    1 h 8 min

    Please consider supporting the DefSec podcast here. Links to this week’s stories: https://www.darkreading.com/threat-intelligence/ai-assisted-exploit-development-scanner-detection …

    Notas del episodio

    Please consider supporting the DefSec podcast here.

    Links to this week’s stories:

    • https://www.darkreading.com/threat-intelligence/ai-assisted-exploit-development-scanner-detection
    • https://www.bleepingcomputer.com/news/security/california-ag-sues-23andme-over-2023-breach-exposing-health-data/
    • https://www.bleepingcomputer.com/news/security/palo-alto-globalprotect-vpn-auth-bypass-flaw-now-exploited-in-attacks/
    • https://techcrunch.com/2026/05/29/microsoft-under-fire-for-threatening-security-researcher-with-criminal-investigation/
    • https://www.darkreading.com/application-security/megalodon-malware-infects-thousands-github-repos
  9. Defensive Security Podcast Episode 349

    1 h 6 min

    Please consider supporting the DefSec podcast here. Links to this week’s stories: https://thehackernews.com/2026/05/claude-mythos-ai-finds-10000-high.html …

    Notas del episodio

    Please consider supporting the DefSec podcast here.

    Links to this week’s stories:

    • https://thehackernews.com/2026/05/claude-mythos-ai-finds-10000-high.html
    • https://www.tenable.com/blog/key-findings-from-the-verizon-dbir-2026
    • https://krebsonsecurity.com/2026/05/cisa-admin-leaked-aws-govcloud-keys-on-github/
    • https://www.bleepingcomputer.com/news/security/grafana-breach-caused-by-missed-token-rotation-after-tanstack-attack/
    • https://www.bleepingcomputer.com/news/security/github-links-repo-breach-to-tanstack-npm-supply-chain-attack/
    • https://thehackernews.com/2026/05/npm-adds-2fa-gated-publishing-and.html
  10. Defensive Security Podcast Episode 348

    57 min

    Please consider supporting the DefSec podcast here. Links to this week’s stories: https://www.securityweek.com/openai-hit-by-tanstack-supply-chain-attack/ …

    Notas del episodio
  11. Defensive Security Podcast Episode 347

    56 min

    Please consider supporting the DefSec podcast here. Links to this week’s stories: https://www.bleepingcomputer.com/news/security/instructure-reaches-agreement-with-shinyhunters-to-stop-data-leak/ …

    Notas del episodio

    Please consider supporting the DefSec podcast here.

    Links to this week’s stories:

    • https://www.bleepingcomputer.com/news/security/instructure-reaches-agreement-with-shinyhunters-to-stop-data-leak/
    • https://www.theregister.com/security/2026/05/06/1-in-8-workers-say-selling-company-logins-is-justifiable/5231104
    • https://www.theregister.com/security/2026/05/02/ai-digs-up-decades-of-code-debt-patch-up/5219734
    • https://www.theregister.com/security/2026/05/11/anthropics-bug-hunting-mythos-was-greatest-marketing-stunt-ever-says-curl-creator/5238111
    • https://www.securityweek.com/cyber-insurance-data-gives-cisos-new-ammo-for-budget-talks/
  12. Defensive Security Podcast Episode 346

    1 h 13 min

    Please consider supporting the DefSec podcast here. Links to this week’s stories: https://www.darkreading.com/cloud-security/csa-cisos-prepare-post-mythos-exploit-storm …

    Notas del episodio

    Please consider supporting the DefSec podcast here.

    Links to this week’s stories:

    • https://www.darkreading.com/cloud-security/csa-cisos-prepare-post-mythos-exploit-storm
    • https://www.csoonline.com/article/4159292/insurance-carriers-quietly-back-away-from-covering-ai-outputs.html
    • https://www.livescience.com/technology/artificial-intelligence/hackers-used-ai-to-steal-hundreds-of-millions-of-mexican-government-and-private-citizen-records-in-one-of-the-largest-cybersecurity-breaches-ever
    • https://www.bleepingcomputer.com/news/security/payouts-king-ransomware-uses-qemu-vms-to-bypass-endpoint-security/
    • https://cybermagazine.com/news/how-cybercriminals-breached-gta-maker-rockstar
  13. Defensive Security Podcast Episode 345

    1 h 1 min

    Please consider supporting the DefSec podcast here. Links to this week’s stories: https://www.darkreading.com/threat-intelligence/axios-attack-complex-social-engineering-industrialized …

    Notas del episodio

    Please consider supporting the DefSec podcast here.

    Links to this week’s stories:

    • https://www.darkreading.com/threat-intelligence/axios-attack-complex-social-engineering-industrialized
    • https://www.bleepingcomputer.com/news/security/new-venom-phishing-attacks-steal-senior-executives-microsoft-logins/
    • https://www.bleepingcomputer.com/news/security/google-new-unc6783-hackers-steal-corporate-zendesk-support-tickets/
    • https://www.darkreading.com/vulnerabilities-threats/bluehammer-windows-exploit-microsoft-bug-disclosure-issues
    • https://www.businessinsider.com/mercor-lawsuits-data-breach-2026-4
  14. Defensive Security Podcast Episode 344

    57 min

    Please consider supporting the DefSec podcast here. Links to stories: https://www.computerweekly.com/news/366640648/Emergency-Microsoft-Oracle-patches-point-to-wider-cyber-issues …

    Notas del episodio

    Please consider supporting the DefSec podcast here.

    Links to stories:

    • https://www.computerweekly.com/news/366640648/Emergency-Microsoft-Oracle-patches-point-to-wider-cyber-issues
    • https://www.theregister.com/2026/03/27/security_boffins_harvest_bumper_crop/
    • https://thehackernews.com/2026/03/the-hidden-cost-of-cybersecurity.html?m=1
    • https://www.theregister.com/2026/03/24/trivy_compromise_litellm/
    • https://thehackernews.com/2026/03/axios-supply-chain-attack-pushes-cross.html?m=1
  15. Defensive Security Podcast Episode 343

    1 h 23 min

    Please consider supporting the DefSec podcast here. Here are the links we discuss this week: https://www.darkreading.com/identity-access-management-security/more-attackers-logging-in-not-breaking-in …

    Notas del episodio

    Please consider supporting the DefSec podcast here.

    Here are the links we discuss this week:

    • https://www.darkreading.com/identity-access-management-security/more-attackers-logging-in-not-breaking-in
    • https://www.bleepingcomputer.com/news/security/stryker-attack-wiped-tens-of-thousands-of-devices-no-malware-needed/
    • https://www.csoonline.com/article/4147833/cisa-urges-it-to-harden-endpoint-management-systems-after-cyberattack-by-pro-iranian-group.html
    • https://arstechnica.com/security/2026/03/widely-used-trivy-scanner-compromised-in-ongoing-supply-chain-attack/
    • https://techcrunch.com/2026/03/21/delve-accused-of-misleading-customers-with-fake-compliance/
  16. Defensive Security Podcast Episode 342B

    1 h 4 min

    This time it’s not a rerun! ]Please consider supporting the DefSec podcast here. Here are the links we discuss this week: https://www.bleepingcomputer.com/news/security/ransomware-payment-rate-drops-to-record-lo …

    Notas del episodio

    This time it’s not a rerun!

    ]Please consider supporting the DefSec podcast here.

    Here are the links we discuss this week:

    • https://www.bleepingcomputer.com/news/security/ransomware-payment-rate-drops-to-record-low-as-attacks-surge/
    • https://www.securityweek.com/recent-cisco-catalyst-sd-wan-vulnerability-now-widely-exploited/
    • https://www.darkreading.com/cyberattacks-data-breaches/nation-state-actor-ai-malware-assembly-line
    • https://www.cybersecuritydive.com/news/ransomware-identity-ai-cloudflare/813319/
    • https://thehackernews.com/2026/03/anthropic-finds-22-firefox.html?m=1
  17. Defensive Security Podcast Episode 341

    1 h 6 min

    Please consider supporting the DefSec podcast here. Here are the links we discuss this week: https://www.bleepingcomputer.com/news/security/amazon-ai-assisted-hacker-breached-600-fortigate-firewalls-in-5-weeks/ …

    Notas del episodio
  18. Defensive Security Podcast Episode 339

    1 h 8 min

    Please consider supporting the DefSec podcast here. Links to the stories we cover in this episode: https://www.theregister.com/2026/01/29/faster_patching_please_cry_infoseccers/ …

    Notas del episodio

    Please consider supporting the DefSec podcast here.

    Links to the stories we cover in this episode:

    • https://www.theregister.com/2026/01/29/faster_patching_please_cry_infoseccers/
    • https://thehackernews.com/2026/01/mandiant-finds-shinyhunters-using.html?m=1
    • https://www.bleepingcomputer.com/news/security/marquis-blames-ransomware-breach-on-sonicwall-cloud-backup-hack/
    • https://thehackernews.com/2026/01/researchers-find-175000-publicly.html?m=1
    • https://www.darkreading.com/application-security/openclaw-ai-runs-wild-business-environments
  19. Defensive Security Podcast Episode 338

    58 min

    Please consider supporting the DefSec podcast here. Links to the stories we cover in this episode: https://www.bleepingcomputer.com/news/security/hackers-exploit-security-testing-apps-to-breach-fortune-500-firms …

    Notas del episodio
  20. Defensive Security Podcast Episode 337

    1 h 5 min

    Want to be the first to hear our episodes each week? Become a Patreon donor here. Links to the stories in this episode: https://www.theregister.com/2026/01/09/pyongyangs_cyberspies_are_turning_qr/ …

    Notas del episodio

    Want to be the first to hear our episodes each week? Become a Patreon donor here.

    Links to the stories in this episode:

    • https://www.theregister.com/2026/01/09/pyongyangs_cyberspies_are_turning_qr/
    • https://www.scworld.com/perspective/five-ways-to-conduct-a-more-secure-hiring-process
    • https://cybersecuritynews.com/vmware-esxi-exploited-toolkit/
    • https://www.darkreading.com/cyber-risk/ciso-succession-crisis-highlights-turnover-amplifies-security-risks
  21. Defensive Security Podcast Episode 336

    1 h 7 min

    Want to be the first to hear our episodes each week? Become a Patreon donor here. Links to this week’s stories: https://www.darkreading.com/cyber-risk/cybersecurity-tech-recommended-by-cyber-insurer-claims-data …

    Notas del episodio

    Want to be the first to hear our episodes each week? Become a Patreon donor here.

    Links to this week’s stories:

    • https://www.darkreading.com/cyber-risk/cybersecurity-tech-recommended-by-cyber-insurer-claims-data
    • https://www.bleepingcomputer.com/news/security/trust-wallet-links-85-million-crypto-theft-to-shai-hulud-npm-attack/
    • https://www.securityweek.com/hacker-claims-theft-of-40-million-conde-nast-records-after-wired-data-leak/
    • https://databreaches.net/2025/12/30/software-company-lacked-downstream-liability-for-data-breach/
    • https://techcrunch.com/2025/12/12/home-depot-exposed-access-to-internal-systems-for-a-year-says-researcher/
  22. Defensive Security Podcast Episode 335

    49 min

    Want to be the first to hear our episodes each week? Become a Patreon donor here. Links to this week’s stories: https://www.bleepingcomputer.com/news/security/webrat-malware-spread-via-fake-vulnerability-exploit …

    Notas del episodio
  23. Defensive Security Podcast Episode 334

    1 h 7 min

    Want to be the first to hear our episodes each week? Become a Patreon donor here. Merry Christmas and Happy Holidays! Links to this week’s stories: https://krebsonsecurity.com/2025/12/most-parked-domains-now-ser …

    Notas del episodio
  24. Defensive Security Podcast Episode 333

    1 h 12 min

    Want to be the first to hear our episodes each week? Become a Patreon donor here. Links to this week’s stories: https://www.theregister.com/2025/12/09/hypervisor_ransomware_attacks_increasing …

    Notas del episodio
  25. Defensive Security Podcast Episode 332

    1 h 2 min

    Want to be the first to hear our episodes each week? Become a Patreon donor here. Links to this week’s stories: https://www.darkreading.com/cyberattacks-data-breaches/advanced-security-phishing-tactics …

    Notas del episodio
  26. Defensive Security Podcast Episode 331B

    1 h 10 min

    Reposting Episode 331 due to the wrong mp3 attached to the original. Want to be the first to hear our episodes each week? Become a Patreon donor here. Links to this week’s stories …

    Notas del episodio

    Reposting Episode 331 due to the wrong mp3 attached to the original.

    Want to be the first to hear our episodes each week? Become a Patreon donor here.

    Links to this week’s stories:

    • https://cloud.google.com/blog/topics/threat-intelligence/unc6040-proactive-hardening-recommendations
    • https://www.theregister.com/2025/11/13/chinese_spies_claude_attacks/ / https://www.bleepingcomputer.com/news/security/anthropic-claims-of-claude-ai-automated-cyberattacks-met-with-doubt/
    • https://www.theregister.com/2025/11/14/selfreplicating_supplychain_attack_poisons_150k/
    • https://cyberscoop.com/fortinet-delayed-disclosure-exploited-vulnerability/
    • https://www.bleepingcomputer.com/news/security/piecing-together-the-puzzle-a-qilin-ransomware-investigation/

    Repo

    Want to be the first to hear our episodes each week? Become a Patreon donor here.

    Links to this week’s stories:

    • https://cloud.google.com/blog/topics/threat-intelligence/unc6040-proactive-hardening-recommendations
    • https://www.theregister.com/2025/11/13/chinese_spies_claude_attacks/ / https://www.bleepingcomputer.com/news/security/anthropic-claims-of-claude-ai-automated-cyberattacks-met-with-doubt/
    • https://www.theregister.com/2025/11/14/selfreplicating_supplychain_attack_poisons_150k/
    • https://cyberscoop.com/fortinet-delayed-disclosure-exploited-vulnerability/
    • https://www.bleepingcomputer.com/news/security/piecing-together-the-puzzle-a-qilin-ransomware-investigation/

Aquí están los 40 episodios más recientes de 199. Los anteriores están en el feed del podcast.

¿Es tu podcast?

Confírmalo con una entrada en tu feed: aquí recibes un código, lo añades como podcast:txt en el canal de tu feed y nosotros lo comprobamos. Después tu podcast aparecerá como «verificado» en SoundNode.

Ajustes

Visualización

Idioma

Determina qué emisoras ves primero en la página de inicio.

Historial

Las emisoras y episodios escuchados recientemente y tus últimas búsquedas solo se guardan en este navegador.

Avisos

Un breve aviso cuando un pódcast que sigues tiene un episodio nuevo. Puedes desactivar pódcast concretos con la campana de su página.

Cuenta

Guarda tus favoritos: en la app y en la web.

Atajos de teclado

/
Abrir búsqueda
Espacio
Reproducir o pausar
← →
En el reproductor: 15 s atrás, 30 s adelante (episodios) · en una fila: siguiente tarjeta
↑ ↓
En una fila: destino dentro de la tarjeta
Inicio / Fin
En una fila: primera o última tarjeta
Esc
Cerrar ventana o menú
?
Este resumen
Reproduciendo ahora

Ir a la emisora

A continuación

    Añade episodios con «A continuación»: sonarán después del episodio actual.