Signal Check

This episode covers a wave of critical security developments, from an Armenian national pleading guilty to deploying Ryuk ransomware to a severe authentication bypass being actively exploited in Gitea's Docker image. Adrian also digs into GhostLock, a fifteen-year-old Linux kernel flaw that's been hiding in plain sight, reminding us that even the most scrutinized code still harbors ghosts. Stories...

This episode covers a Microsoft Defender patch that came dangerously late, how Windows telemetry helped nab a cybercriminal, and a supply chain attack that hit the Web3 ecosystem hard. We also dig into an Accenture data breach that could ripple across their massive client base, plus a quick detour into ultramarathon training strategy that's all about working smarter, not harder. Stories covered: -...

This episode covers critical security patches from Ubiquiti for UniFi gear, a fifteen-year-old Linux kernel flaw called GhostLock that allows privilege escalation, and a solo attacker who breached AWS in just seventy-two hours using AI and cloud misconfigurations. We also touch on sustainable optimization strategies and John Deere's landmark right-to-repair settlement with the FTC. Stories covered...

This episode digs into a sixteen-year-old Linux kernel flaw that's been lurking in virtualized systems, Accenture's messy data breach with source code now up for sale, and a hidden backdoor baked into Tenda router firmware. We also cover GitHub's GitLost vulnerability that lets attackers pull private data through public repos, plus the usual reminder that scale and reputation don't make anyone imm...

This episode covers a critical Gitea Docker vulnerability exploited just thirteen days after patching, the first fully autonomous LLM-driven ransomware attack called JadePuffer, and a sixteen-year-old KVM hypervisor flaw that lets guest VMs escape to the host. Adrian also digs into how Microsoft used Windows hardware IDs to track down a hacker, proving your device might be less anonymous than you...

This episode covers North Korean hackers flooding developer repositories with over a hundred malicious packages, new credential-stealing tactics like ConsentFix that bypass multi-factor authentication in seconds, and a critical SharePoint vulnerability now being actively exploited two months after its patch. We also dig into what researchers believe is the first fully AI-automated ransomware attac...

This episode digs into a Scattered Spider extradition, the first fully AI-driven ransomware attack, and a Tesla bug bounty that uncovered a $243 million flaw. We also cover an actively exploited SharePoint vulnerability and what it means when the tools running half the enterprise become the entry point. Stories covered: - Alleged Scattered Spider hacker extradited to the United States (BleepingCom...

This episode covers a critical Linux kernel flaw that gives unprivileged users full root access across billions of devices, a clever macOS credential stealer disguising itself as legitimate software, and the takedown of a massive residential proxy network that secretly compromised two million Android devices. Adrian North walks through the early morning signals that matter before the weekend noise...

This episode digs into ransomware crews deploying multi-vector attacks through Citrix vulnerabilities and stolen Fortinet credentials, plus a CISA warning on an actively exploited SharePoint flaw. We also cover the Tesla bug bounty that somehow escalated into a $243 million lesson, and why elite athletes aren't just better at training—they're better at everything around it. Stories covered: - Rans...

This episode covers AI-generated malware that's raising alarms among cybersecurity researchers, a teenage hacker's extradition in the Scattered Spider case, and record-breaking performances at the Western States 100 ultramarathon. Adrian North walks through six signals from the tech and culture landscape before your workday demands attention. It's your early-morning dose of what's moving through t...

This episode digs into a shocking security study revealing that nearly two-thirds of AI chatbot apps on iPhone are leaking user credentials and API keys in plain sight. We also cover RustDuck, a dangerous new botnet targeting home routers and cameras, plus the latest Kali Linux release packed with fresh penetration testing tools. Stories covered: - 282 iOS AI Apps Leak API Keys and Open AI Proxy A...

This episode covers a major Microsoft Edge extension purge, a sneaky supply chain attack using VS Code automation, and a new Linux privilege escalation exploit called pedit COW. Adrian also highlights an incredible ultrarunning performance at Western States before the day's chaos takes over. Stories covered: - Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts (The Hacker N...

This episode digs into three emerging threats targeting the tools developers and security-conscious users rely on most. We cover a sophisticated npm supply chain attack infiltrating GitHub Actions, a Russian phishing campaign hunting Signal backup keys, and a chilling new exploit that weaponizes AI coding agents through hidden instructions. The common thread? Trust is the new attack surface. Stori...

This episode covers the quiet but critical signals from a Sunday morning in late June, including a new framework to help companies manage aging open-source projects before they become security nightmares. We dig into a Russian phishing campaign targeting Signal backup keys, an anonymous GitHub account dropping zero-day exploits into the wild, and why even the most secure tools fail when human trus...

This episode digs into a Cisco SD-WAN zero-day exploit breakdown from Mandiant, a clever macOS malware strain that deceives AI analysis tools with fake error messages, and a former hacker now applying exploit-finding skills to solar energy collection. Adrian North walks through early-morning signals before the noise of the day takes over. Stories covered: - Mandiant reveals how Cisco SD-WAN zero-d...

This episode digs into two actively exploited Cisco vulnerabilities that are making waves — including a zero-day that gave attackers root access to SD-WAN devices. We also cover a new website publicly shaming companies that still don't support passkeys, and a reformed hacker with an unexpected new mission. Stories covered: - Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access (Bl...

This episode covers active exploitation of a Cisco Unified Communications flaw, LastPass confirming another breach through stolen OAuth tokens, and a former hacker who pivoted to solar energy. Adrian digs into why supply chain attacks are now the standard playbook and shares a Runner's World tip on avoiding long-run mistakes. Stories covered: - Cisco Unified CM flaw CVE-2026-20230 now exploited in...

This episode digs into Canada's unprecedented move to remotely clean malware from citizens' devices without permission, Microsoft's attribution of the Mastra AI supply chain attack to North Korean hackers, and a newly published iPhone exploit that lives in hardware Apple can't patch. We also touch on why your best running mentor is probably the local coach who shows up at dawn, not the influencer...

This episode digs into a CISA deadline for a critical Splunk vulnerability that's already being exploited in the wild, a North Korean supply chain attack that poisoned over 140 npm packages, and how a junior hacker used legitimate tools like Tailscale to maintain persistence after losing his primary command server. Adrian breaks down six stories that show how attackers are leveraging trust, timing...

On today's Signal Check, Adrian digs into a North Korean supply chain attack that poisoned over 140 npm packages, an unpatchable iPhone exploit targeting Apple's SecureROM, and a scrappy hacker who kept his operation alive using Tailscale and SSH after losing his C2 server. Plus, millions in Brazil received a mysterious unauthorized emergency alert that nobody can quite explain yet. Stories covere...

This episode covers critical security patches for NGINX that can't wait until Monday, a messy OAuth breach at Klue that gave hackers direct access to Salesforce data, and an unpatchable exploit in millions of older iPhones that Apple can't fix with software. Adrian walks through what moved overnight and why it matters before the weekend noise kicks in. Stories covered: - F5 Patches Two Critical NG...

This episode digs into a patient cryptocurrency clipper campaign running since February, a French attacker who pivoted to legitimate remote tools when their server died, and why Salesforce integrations are becoming a serious supply chain risk. Adrian pulls signal from the noise before the day gets loud. Stories covered: - Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and To...

On today's Signal Check, Adrian North walks through six morning signals including the UK's controversial ID-based age verification law for social media, a sophisticated Android banking trojan called Rokarolla targeting hundreds of apps, and a French cyberattack that used legitimate IT tools to maintain persistent access. It's a sharp look at what moved overnight before the inbox explodes. Stories...

This episode digs into a powerful new Android banking trojan hitting over 200 apps, a federal warning about an actively exploited cPanel plugin, and a leaked membership list from Peter Thiel's ultra-exclusive Dialog retreat. Signal Check covers the threats already moving before your coffee gets cold. Stories covered: - New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds (...

This episode digs into a cascade of high-value security breaches, from a three-vulnerability chain in AI gateway infrastructure to a one-click exploit in Microsoft 365 Copilot that exposed entire workspaces. We also cover a year-long Chinese espionage campaign that weaponized Google Workspace forwarding rules and a LinkedIn job scam that sparked hundreds of comments on Hacker News. Stories covered...