Zum Inhalt springen
Defensive Security Podcast – Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast – Malware, Hacking, Cyber Security & Infosec

NeuDefensive Security Podcast Episode 36121.10.2026 · 34 Min.
Folgen
199
Erscheint
alle zwei Wochen
Letzte Folge
21. Okt. 2026

Über den Podcast

Defensive Security is a weekly information security podcast which reviews recent high profile cyber security breaches, data breaches, malware infections and intrusions to identify lessons that we can learn and apply to the organizations we protect.

Folgen 199

  1. Defensive Security Podcast Episode 361

    34 Min.

    Please consider supporting the DefSec podcast here. Links: 1. ShinyHunters breaks into Clop’s leak site and starts extorting the extortionistshttps://www.darkreading.com/cyberattacks-data-breaches/shinyhunters-h …

    Shownotes

    Please consider supporting the DefSec podcast here.

    Links:

    1. ShinyHunters breaks into Clop’s leak site and starts extorting the extortionists
    https://www.darkreading.com/cyberattacks-data-breaches/shinyhunters-hacked-clop-what-about-clops-victims

    2. CrowdSec kept a leaver’s GitHub access open and lost 170 private repositories
    https://thehackernews.com/2026/09/crowdsec-says-tanstack-npm-attack-led.html

    3. Anthropic’s Glasswing found 225 CVEs, and attackers have exploited exactly one
    https://www.theregister.com/security/2026/09/21/anthropic-linked-cves-pile-up-attackers-mostly-shrug/5298018

    4. One infected laptop at a meter vendor held logins for 167 utility tenants
    https://cyberscoop.com/spycloud-study-water-utilities-infostealer-exposure/

    5. A fake LastPass installer kills 145 security products with a Microsoft-signed driver
    https://thehackernews.com/2026/09/fake-lastpass-authenticator-installer.html

    6. Australia says an OpenAI agent hacked a Medicare portal whose own code let it in
    https://therecord.media/openai-australia-breach-cyber

    7. CISA wants decoys back in your network to catch attackers who log in normally
    https://www.darkreading.com/cybersecurity-operations/deception-by-design-cisa-s-guide-to-tricking-cybercriminals

  2. Defensive Security Podcast Episode 360

    33 Min.

    Please consider supporting the DefSec podcast here. 1. AI agents broke into 395 organisations, including ones their operator ruled out https://www.helpnetsecurity.com/2026/09/11/ai-agents-papercut-ng-mf-attack-c …

    Shownotes

    Please consider supporting the DefSec podcast here.

    1. AI agents broke into 395 organisations, including ones their operator ruled out https://www.helpnetsecurity.com/2026/09/11/ai-agents-papercut-ng-mf-attack-campaign/

    2. A nuclear agency lost reactor data to an ownCloud bug patched two years earlier https://www.darkreading.com/cyberattacks-data-breaches/old-unpatched-flaws-attackers-philippines-nuclear-agency

    3. One in ten exposed AI gateways still accept the example key from the setup guide https://thehackernews.com/2026/09/nearly-1-in-10-exposed-litellm-gateways.html

    4. Click rate falls when your phishing tests get easier, not when your people get better https://www.helpnetsecurity.com/2026/09/11/pistachio-employee-phishing-risk-report/

    5. Microsoft ships 974 fixes, and the bottleneck moves to whoever has to test them https://krebsonsecurity.com/2026/09/microsoft-plugs-nearly-1000-security-holes/

  3. Defensive Security Podcast Episode 359

    36 Min.

    Please consider supporting the DefSec podcast here. 1. CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing https://thehackernews.com/2026/08/cisa-red-team-compromised-two-critical.ht …

    Shownotes

    Please consider supporting the DefSec podcast here.

    1. CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing https://thehackernews.com/2026/08/cisa-red-team-compromised-two-critical.html

    2. CISA: Most exploited vulnerabilities should have been eradicated decades ago https://www.theregister.com/security/2026/08/28/cisa-most-exploited-vulnerabilities-should-have-been-eradicated-decades-ago/5293194

    3. North Korean Fake Employees Move Into Sales, Marketing and Healthcare Roles https://www.helpnetsecurity.com/2026/08/28/north-korean-remote-workers-jobs-sales-and-marketing/

    4. Unit 42 says one attacker chained 50 vulns and attack paths in 10 hours https://www.cybersecuritydive.com/news/frontier-ai-tipping-scales-cyber-adversaries/829088/

    5. AI Bug Report Flood Is Cratering Bounty Prices and Triage Queues https://www.darkreading.com/vulnerabilities-threats/vulnpocalypse-repricing-bug-bounty-economy

  4. Defensive Security Podcast Episode 358

    31 Min.

    Please consider supporting the DefSec podcast here. Stories: Weak IAM affects up to 98% of cloud environmentshttps://www.helpnetsecurity.com/2026/08/14/intruder-cloud-misconfiguration-trends-report/China-Linked …

    Shownotes

    Please consider supporting the DefSec podcast here.

    Stories:

    Weak IAM affects up to 98% of cloud environments
    https://www.helpnetsecurity.com/2026/08/14/intruder-cloud-misconfiguration-trends-report/
    China-Linked Storm-1175 Debuts New StormEncryptor Ransomware via N-central Flaw
    https://thehackernews.com/2026/08/china-linked-hackers-deploy-new.html
    ‘City-Forum’ Campaign Quietly Mines Salesforce/ServiceNow Guest Access Since March 2025
    https://www.darkreading.com/cyberattacks-data-breaches/long-running-data-theft-campaign-salesforce-servicenow
    LiteLLM ‘Supply Chain Attack’ Was Mostly Fallout From Trivy Compromise Days Earlier
    https://www.securityweek.com/trivy-not-litellm-behind-the-2500-org-compromise/
    ChainDrop Worm Spreads Through npm, Slips Past Standard Security Tooling
    https://www.theregister.com/security/2026/08/15/chaindrop-worm-crawls-into-npm-supply-chain-evades-standard-defenses/5287958

  5. Defensive Security Podcast Episode 356

    54 Min.

    Please consider supporting the DefSec podcast here. Stories: https://www.cybersecuritydive.com/news/anthropic-claude-ai-hacking-test/826708 https://thecybersecguru.com/news/openai-ai-agent-containment-escapes-hu …

    Shownotes

    Please consider supporting the DefSec podcast here.

    Stories:

    • https://www.cybersecuritydive.com/news/anthropic-claude-ai-hacking-test/826708
    • https://thecybersecguru.com/news/openai-ai-agent-containment-escapes-hugging-face-investigation/
    • https://www.bleepingcomputer.com/news/security/after-the-break-in-what-attackers-do-once-theyre-already-inside/
    • https://www.darkreading.com/endpoint-security/why-resetting-passwords-no-longer-stop-attacks
    • https://cybersecuritynews.com/adform-advertising-platform-compromised/

  6. Defensive Security Podcast Episode 355

    1 Std. 8 Min.

    https://www.helpnetsecurity.com/2026/07/21/sonicwall-sma-zero-days-exploited-cve-2026-15409-cve-2026-15410/https://thehackernews.com/2026/07/qilin-ransomware-attackers-exploit-pan.htmlhttps://thehackernews.com/2 …

    Shownotes

    https://www.helpnetsecurity.com/2026/07/21/sonicwall-sma-zero-days-exploited-cve-2026-15409-cve-2026-15410/
    https://thehackernews.com/2026/07/qilin-ransomware-attackers-exploit-pan.html
    https://thehackernews.com/2026/07/worlds-largest-ai-model-repository.html
    https://openai.com/index/hugging-face-model-evaluation-security-incident/
    https://www.darkreading.com/identity-access-management-security/identity-attacks-overtake-exploits-top-ransomware-cause
    https://www.helpnetsecurity.com/2026/07/21/estee-lauder-data-breach-oracle-ebs/

  7. Defensive Security Podcast Episode 351

    1 Std. 11 Min.

    Please consider supporting the DefSec podcast here. Links to this week’s stories: https://www.theregister.com/cyber-crime/2026/06/05/if-you-dont-fall-for-these-extortionists-calls-theyll-show-up-with-usb-sticks/ …

    Shownotes

    Please consider supporting the DefSec podcast here.

    Links to this week’s stories:

    https://www.theregister.com/cyber-crime/2026/06/05/if-you-dont-fall-for-these-extortionists-calls-theyll-show-up-with-usb-sticks/5251891

    https://thehackernews.com/2026/06/only-10-of-socs-say-theyre-getting.html?m=1

    https://arstechnica.com/security/2026/06/dashlane-explains-how-attackers-managed-to-download-encrypted-password-vaults/

    https://www.bleepingcomputer.com/news/security/hackers-hijack-thousands-of-sites-for-clickfix-and-fakeupdate-attacks/

    https://krebsonsecurity.com/2026/06/hackers-used-metas-ai-support-bot-to-seize-instagram-accounts/

    https://www.cybersecuritydive.com/news/ai-cybersecurity-hype-reality-check-gartner/821867/0:0

  8. Defensive Security Podcast Episode 350

    1 Std. 8 Min.

    Please consider supporting the DefSec podcast here. Links to this week’s stories: https://www.darkreading.com/threat-intelligence/ai-assisted-exploit-development-scanner-detection …

    Shownotes

    Please consider supporting the DefSec podcast here.

    Links to this week’s stories:

    • https://www.darkreading.com/threat-intelligence/ai-assisted-exploit-development-scanner-detection
    • https://www.bleepingcomputer.com/news/security/california-ag-sues-23andme-over-2023-breach-exposing-health-data/
    • https://www.bleepingcomputer.com/news/security/palo-alto-globalprotect-vpn-auth-bypass-flaw-now-exploited-in-attacks/
    • https://techcrunch.com/2026/05/29/microsoft-under-fire-for-threatening-security-researcher-with-criminal-investigation/
    • https://www.darkreading.com/application-security/megalodon-malware-infects-thousands-github-repos
  9. Defensive Security Podcast Episode 349

    1 Std. 6 Min.

    Please consider supporting the DefSec podcast here. Links to this week’s stories: https://thehackernews.com/2026/05/claude-mythos-ai-finds-10000-high.html …

    Shownotes

    Please consider supporting the DefSec podcast here.

    Links to this week’s stories:

    • https://thehackernews.com/2026/05/claude-mythos-ai-finds-10000-high.html
    • https://www.tenable.com/blog/key-findings-from-the-verizon-dbir-2026
    • https://krebsonsecurity.com/2026/05/cisa-admin-leaked-aws-govcloud-keys-on-github/
    • https://www.bleepingcomputer.com/news/security/grafana-breach-caused-by-missed-token-rotation-after-tanstack-attack/
    • https://www.bleepingcomputer.com/news/security/github-links-repo-breach-to-tanstack-npm-supply-chain-attack/
    • https://thehackernews.com/2026/05/npm-adds-2fa-gated-publishing-and.html
  10. Defensive Security Podcast Episode 348

    57 Min.

    Please consider supporting the DefSec podcast here. Links to this week’s stories: https://www.securityweek.com/openai-hit-by-tanstack-supply-chain-attack/ …

    Shownotes
  11. Defensive Security Podcast Episode 347

    56 Min.

    Please consider supporting the DefSec podcast here. Links to this week’s stories: https://www.bleepingcomputer.com/news/security/instructure-reaches-agreement-with-shinyhunters-to-stop-data-leak/ …

    Shownotes

    Please consider supporting the DefSec podcast here.

    Links to this week’s stories:

    • https://www.bleepingcomputer.com/news/security/instructure-reaches-agreement-with-shinyhunters-to-stop-data-leak/
    • https://www.theregister.com/security/2026/05/06/1-in-8-workers-say-selling-company-logins-is-justifiable/5231104
    • https://www.theregister.com/security/2026/05/02/ai-digs-up-decades-of-code-debt-patch-up/5219734
    • https://www.theregister.com/security/2026/05/11/anthropics-bug-hunting-mythos-was-greatest-marketing-stunt-ever-says-curl-creator/5238111
    • https://www.securityweek.com/cyber-insurance-data-gives-cisos-new-ammo-for-budget-talks/
  12. Defensive Security Podcast Episode 346

    1 Std. 13 Min.

    Please consider supporting the DefSec podcast here. Links to this week’s stories: https://www.darkreading.com/cloud-security/csa-cisos-prepare-post-mythos-exploit-storm …

    Shownotes

    Please consider supporting the DefSec podcast here.

    Links to this week’s stories:

    • https://www.darkreading.com/cloud-security/csa-cisos-prepare-post-mythos-exploit-storm
    • https://www.csoonline.com/article/4159292/insurance-carriers-quietly-back-away-from-covering-ai-outputs.html
    • https://www.livescience.com/technology/artificial-intelligence/hackers-used-ai-to-steal-hundreds-of-millions-of-mexican-government-and-private-citizen-records-in-one-of-the-largest-cybersecurity-breaches-ever
    • https://www.bleepingcomputer.com/news/security/payouts-king-ransomware-uses-qemu-vms-to-bypass-endpoint-security/
    • https://cybermagazine.com/news/how-cybercriminals-breached-gta-maker-rockstar
  13. Defensive Security Podcast Episode 345

    1 Std. 1 Min.

    Please consider supporting the DefSec podcast here. Links to this week’s stories: https://www.darkreading.com/threat-intelligence/axios-attack-complex-social-engineering-industrialized …

    Shownotes

    Please consider supporting the DefSec podcast here.

    Links to this week’s stories:

    • https://www.darkreading.com/threat-intelligence/axios-attack-complex-social-engineering-industrialized
    • https://www.bleepingcomputer.com/news/security/new-venom-phishing-attacks-steal-senior-executives-microsoft-logins/
    • https://www.bleepingcomputer.com/news/security/google-new-unc6783-hackers-steal-corporate-zendesk-support-tickets/
    • https://www.darkreading.com/vulnerabilities-threats/bluehammer-windows-exploit-microsoft-bug-disclosure-issues
    • https://www.businessinsider.com/mercor-lawsuits-data-breach-2026-4
  14. Defensive Security Podcast Episode 344

    57 Min.

    Please consider supporting the DefSec podcast here. Links to stories: https://www.computerweekly.com/news/366640648/Emergency-Microsoft-Oracle-patches-point-to-wider-cyber-issues …

    Shownotes

    Please consider supporting the DefSec podcast here.

    Links to stories:

    • https://www.computerweekly.com/news/366640648/Emergency-Microsoft-Oracle-patches-point-to-wider-cyber-issues
    • https://www.theregister.com/2026/03/27/security_boffins_harvest_bumper_crop/
    • https://thehackernews.com/2026/03/the-hidden-cost-of-cybersecurity.html?m=1
    • https://www.theregister.com/2026/03/24/trivy_compromise_litellm/
    • https://thehackernews.com/2026/03/axios-supply-chain-attack-pushes-cross.html?m=1
  15. Defensive Security Podcast Episode 343

    1 Std. 23 Min.

    Please consider supporting the DefSec podcast here. Here are the links we discuss this week: https://www.darkreading.com/identity-access-management-security/more-attackers-logging-in-not-breaking-in …

    Shownotes

    Please consider supporting the DefSec podcast here.

    Here are the links we discuss this week:

    • https://www.darkreading.com/identity-access-management-security/more-attackers-logging-in-not-breaking-in
    • https://www.bleepingcomputer.com/news/security/stryker-attack-wiped-tens-of-thousands-of-devices-no-malware-needed/
    • https://www.csoonline.com/article/4147833/cisa-urges-it-to-harden-endpoint-management-systems-after-cyberattack-by-pro-iranian-group.html
    • https://arstechnica.com/security/2026/03/widely-used-trivy-scanner-compromised-in-ongoing-supply-chain-attack/
    • https://techcrunch.com/2026/03/21/delve-accused-of-misleading-customers-with-fake-compliance/
  16. Defensive Security Podcast Episode 342B

    1 Std. 4 Min.

    This time it’s not a rerun! ]Please consider supporting the DefSec podcast here. Here are the links we discuss this week: https://www.bleepingcomputer.com/news/security/ransomware-payment-rate-drops-to-record-lo …

    Shownotes

    This time it’s not a rerun!

    ]Please consider supporting the DefSec podcast here.

    Here are the links we discuss this week:

    • https://www.bleepingcomputer.com/news/security/ransomware-payment-rate-drops-to-record-low-as-attacks-surge/
    • https://www.securityweek.com/recent-cisco-catalyst-sd-wan-vulnerability-now-widely-exploited/
    • https://www.darkreading.com/cyberattacks-data-breaches/nation-state-actor-ai-malware-assembly-line
    • https://www.cybersecuritydive.com/news/ransomware-identity-ai-cloudflare/813319/
    • https://thehackernews.com/2026/03/anthropic-finds-22-firefox.html?m=1
  17. Defensive Security Podcast Episode 341

    1 Std. 6 Min.

    Please consider supporting the DefSec podcast here. Here are the links we discuss this week: https://www.bleepingcomputer.com/news/security/amazon-ai-assisted-hacker-breached-600-fortigate-firewalls-in-5-weeks/ …

    Shownotes
  18. Defensive Security Podcast Episode 339

    1 Std. 8 Min.

    Please consider supporting the DefSec podcast here. Links to the stories we cover in this episode: https://www.theregister.com/2026/01/29/faster_patching_please_cry_infoseccers/ …

    Shownotes

    Please consider supporting the DefSec podcast here.

    Links to the stories we cover in this episode:

    • https://www.theregister.com/2026/01/29/faster_patching_please_cry_infoseccers/
    • https://thehackernews.com/2026/01/mandiant-finds-shinyhunters-using.html?m=1
    • https://www.bleepingcomputer.com/news/security/marquis-blames-ransomware-breach-on-sonicwall-cloud-backup-hack/
    • https://thehackernews.com/2026/01/researchers-find-175000-publicly.html?m=1
    • https://www.darkreading.com/application-security/openclaw-ai-runs-wild-business-environments
  19. Defensive Security Podcast Episode 337

    1 Std. 5 Min.

    Want to be the first to hear our episodes each week? Become a Patreon donor here. Links to the stories in this episode: https://www.theregister.com/2026/01/09/pyongyangs_cyberspies_are_turning_qr/ …

    Shownotes

    Want to be the first to hear our episodes each week? Become a Patreon donor here.

    Links to the stories in this episode:

    • https://www.theregister.com/2026/01/09/pyongyangs_cyberspies_are_turning_qr/
    • https://www.scworld.com/perspective/five-ways-to-conduct-a-more-secure-hiring-process
    • https://cybersecuritynews.com/vmware-esxi-exploited-toolkit/
    • https://www.darkreading.com/cyber-risk/ciso-succession-crisis-highlights-turnover-amplifies-security-risks
  20. Defensive Security Podcast Episode 336

    1 Std. 7 Min.

    Want to be the first to hear our episodes each week? Become a Patreon donor here. Links to this week’s stories: https://www.darkreading.com/cyber-risk/cybersecurity-tech-recommended-by-cyber-insurer-claims-data …

    Shownotes

    Want to be the first to hear our episodes each week? Become a Patreon donor here.

    Links to this week’s stories:

    • https://www.darkreading.com/cyber-risk/cybersecurity-tech-recommended-by-cyber-insurer-claims-data
    • https://www.bleepingcomputer.com/news/security/trust-wallet-links-85-million-crypto-theft-to-shai-hulud-npm-attack/
    • https://www.securityweek.com/hacker-claims-theft-of-40-million-conde-nast-records-after-wired-data-leak/
    • https://databreaches.net/2025/12/30/software-company-lacked-downstream-liability-for-data-breach/
    • https://techcrunch.com/2025/12/12/home-depot-exposed-access-to-internal-systems-for-a-year-says-researcher/
  21. Defensive Security Podcast Episode 335

    49 Min.

    Want to be the first to hear our episodes each week? Become a Patreon donor here. Links to this week’s stories: https://www.bleepingcomputer.com/news/security/webrat-malware-spread-via-fake-vulnerability-exploit …

    Shownotes
  22. Defensive Security Podcast Episode 334

    1 Std. 7 Min.

    Want to be the first to hear our episodes each week? Become a Patreon donor here. Merry Christmas and Happy Holidays! Links to this week’s stories: https://krebsonsecurity.com/2025/12/most-parked-domains-now-ser …

    Shownotes
  23. Defensive Security Podcast Episode 333

    1 Std. 12 Min.

    Want to be the first to hear our episodes each week? Become a Patreon donor here. Links to this week’s stories: https://www.theregister.com/2025/12/09/hypervisor_ransomware_attacks_increasing …

    Shownotes
  24. Defensive Security Podcast Episode 332

    1 Std. 2 Min.

    Want to be the first to hear our episodes each week? Become a Patreon donor here. Links to this week’s stories: https://www.darkreading.com/cyberattacks-data-breaches/advanced-security-phishing-tactics …

    Shownotes
  25. Defensive Security Podcast Episode 331B

    1 Std. 10 Min.

    Reposting Episode 331 due to the wrong mp3 attached to the original. Want to be the first to hear our episodes each week? Become a Patreon donor here. Links to this week’s stories …

    Shownotes

    Reposting Episode 331 due to the wrong mp3 attached to the original.

    Want to be the first to hear our episodes each week? Become a Patreon donor here.

    Links to this week’s stories:

    • https://cloud.google.com/blog/topics/threat-intelligence/unc6040-proactive-hardening-recommendations
    • https://www.theregister.com/2025/11/13/chinese_spies_claude_attacks/ / https://www.bleepingcomputer.com/news/security/anthropic-claims-of-claude-ai-automated-cyberattacks-met-with-doubt/
    • https://www.theregister.com/2025/11/14/selfreplicating_supplychain_attack_poisons_150k/
    • https://cyberscoop.com/fortinet-delayed-disclosure-exploited-vulnerability/
    • https://www.bleepingcomputer.com/news/security/piecing-together-the-puzzle-a-qilin-ransomware-investigation/

    Repo

    Want to be the first to hear our episodes each week? Become a Patreon donor here.

    Links to this week’s stories:

    • https://cloud.google.com/blog/topics/threat-intelligence/unc6040-proactive-hardening-recommendations
    • https://www.theregister.com/2025/11/13/chinese_spies_claude_attacks/ / https://www.bleepingcomputer.com/news/security/anthropic-claims-of-claude-ai-automated-cyberattacks-met-with-doubt/
    • https://www.theregister.com/2025/11/14/selfreplicating_supplychain_attack_poisons_150k/
    • https://cyberscoop.com/fortinet-delayed-disclosure-exploited-vulnerability/
    • https://www.bleepingcomputer.com/news/security/piecing-together-the-puzzle-a-qilin-ransomware-investigation/

Hier stehen die neuesten 40 von 199 Folgen. Ältere Folgen findest du im Feed des Podcasts.

Ist das dein Podcast?

Bestätige es mit einem Eintrag in deinem Feed: Du bekommst hier einen Code, trägst ihn als podcast:txt in den Kanal deines Feeds ein, und wir prüfen ihn. Danach steht dein Podcast als „verifiziert“ bei SoundNode.

Einstellungen

Darstellung

Sprache

Bestimmt, welche Sender dir auf der Startseite zuerst gezeigt werden.

Verlauf

Zuletzt gehörte Sender und Folgen und deine letzten Suchen liegen nur in diesem Browser.

Hinweise

Ein kurzer Hinweis, wenn ein Podcast, dem du folgst, eine neue Folge hat. Einzelne Podcasts stellst du über die Glocke auf ihrer Seite ab.

Konto

Favoriten speichern – in der App und auf der Website.

Tastenkürzel

/
Suche öffnen
Leertaste
Abspielen oder anhalten
← →
Im Player: 15 s zurück, 30 s vor (Folgen) · im Regal: nächste Kachel
↑ ↓
Im Regal: Ziel innerhalb der Kachel
Pos1 / Ende
Im Regal: erste bzw. letzte Kachel
Esc
Fenster oder Menü schließen
?
Diese Übersicht
Läuft gerade

Zur Senderseite

Als Nächstes

    Folgen mit „Als Nächstes“ vormerken – sie laufen nach der aktuellen Folge.