Daily Cyber Briefing

Today, we dive into Operation ZeroDisco, where threat actors deployed rootkits onto older Cisco routers by exploiting a recent zero-day. We also analyze the consequences of the Discord breach, F5's revelation of a nation-state attack that stole source code, and the massive crypto "pig butchering" scam that led to the seizure of over $14 billion in Bitcoin.

Today, we unpack the massive October 2025 Patch Tuesday, covering exploited Windows zero-days, critical vulnerabilities in Adobe Connect and major ICS vendors like Red Lion, Siemens, and Rockwell. Plus, a deep dive into why enterprise organizations must ditch synced passkeys for device-bound credentials to prevent sophisticated authentication downgrade attacks.

This morning, we dive deep into major zero-day exploitation, including the Cl0p campaign targeting Oracle EBS, which has claimed Harvard University as a victim. We also dissect the new Pixnapping attack stealing 2FA codes from Android phones and examine the urgent implications of the RMPocalypse flaw affecting AMD's confidential computing.

Host Mike Housch dissects Apple's massive $2 million bug bounty expansion, focusing on incentives for finding zero-click RCEs, and analyzes the high-stakes Salesforce customer data leaks claimed by the Scattered LAPSUS$ Hunters extortion group. We also cover critical warnings about the "Payroll Pirate" university salary attacks and the dismantling of the global GXC Team Crime-as-a-S...

Today we dive into the staggering 2 billion cryptocurrency heist linked to North Korea and explore how sophisticated threat groups are abusing trusted corporate platforms like Microsoft Teams for financial extortion. We also look at the massive pushback against the E.U.'s controversial "Chat Control" proposal and unveil a new, almost unbelievable attack that turns your standard opti...

This week on Cyber Scoops & Digital Shenanigans, host Mike Housch delves into the recent credential stuffing campaign targeting DraftKings users and the sophisticated exploitation of a critical Oracle E-Business Suite zero-day flaw. We also examine breaches at military radio manufacturer BK Technologies and beer giant Asahi, emphasizing how even essential and everyday businesses are prime targ...

In this episode of Cyber Scoops & Digital Shenanigans , host Mike Housch unpacks the week’s most critical cyber incidents shaking enterprises worldwide, from SharePoint zero-days and AI-powered phishing campaigns to rising healthcare ransomware, industrial control system breaches, and mobile malware stealing bank credentials. With billions in crypto losses and attackers outpacing EDR defenses,...

Mike and Angela break down a massive Motility dealership software breach impacting 766,000 people, a wiretap-style attack that cracks Intel’s SGX, hackers raiding Oracle ERP customers, and a critical Red Hat OpenShift AI bug. They also dig into cybercriminals bragging about 28,000 new victims and why detection gaps still leave organizations blind. Real stories, real impact, and a few laughs along...

 Autonomous AI is crashing against the rocks of reality, stalled by a massive trust crisis and fears over governance, while chip giants brush off a $50 hardware hack that breaks their confidential computing promises. We also dissect Broadcom's zero-day silence and the never-ending nightmare of identity theft for major corporations like WestJet.

The feds are nuking essential threat sharing programs just as core security legislation lapses, leaving state and local governments scrambling for defenses and exposed to novel threats. Plus, we explore a critical Sudo flaw exploited in the wild, and ask why international brewing giant Asahi couldn't keep its production lines—and its delicious beer—safe from digital shenanigans.

Today we dissect the new wave of low-profile, high-impact cybercrime, starting with Akira ransomware operators leveraging legitimate IT tools to blend in, giving defenders only hours to respond. Then, we scrutinize the UK government's massive financial intervention following the JLR attack, asking: Did that £1.5 billion bailout just paint a giant target on the UK?

Today, we expose nation-state spies playing the 400-day waiting game and the pure negligence of major vendors dragging their feet while zero-days rip through critical infrastructure. Plus, we talk North Korean identity theft rings recruiting Western devs and how a $5 domain hijacked Salesforce's high-tech AI agents.

Forget your exotic zero-days; today, we break down how basic security failures are wiping centuries-old businesses off the map because of one weak password. We also dig into the massive, hidden telecom network in New York City that could have crippled 911 services right when world leaders gathered for the U.N. General Assembly.  

Today, we break down the latest cyber chaos, from a massive ransomware attack crippling major European airports into a manual check-in nightmare, to the systemic risks of relying on outsourced trust in the Stellantis data breach. Plus, Host Mike Housch dives into the silent epidemic of ‘digital ghosts’—the rogue AI agents and non-human identities taking over your company’s attack surface

This week on Cyber Scoops & Digital Shenanigans , we expose the "One Token to Rule Them All" Microsoft flaw that could have unlocked nearly every tenant worldwide. Plus, we dive into how AI is solving CAPTCHAs and leaking secrets from your Gmail via hidden, white-on-white text instructions.

This episode of Cyber Scoops & Digital Shenanigans covers significant cybersecurity incidents, including Google Chrome patching its sixth zero-day vulnerability of 2025, a ransomware attack impacting over 12,000 individuals at venture capital firm Insight Partners, and data breaches at Tiffany & Company and Medical Associates of Brevard affecting thousands of customers and nearly 250,000 i...

Today I discuss the persistent threat of the decade-old Pixie Dust Wi-Fi hack, the widespread impact of the self-replicating Shai-Hulud supply chain worm on NPM packages, and the successful disruption of the RaccoonO365 phishing-as-a-service operation. The episode also touches on Apple's recent security patches, a novel Rowhammer attack on DDR5 memory, and new vulnerabilities in ChatGPT'...

Today’s episode covers Apple's extensive backports and new OS releases to patch over 50 vulnerabilities, including a critical ImageIO flaw (CVE-2025-43300) exploited in targeted spyware attacks against WhatsApp users. Another significant concern is the "FileFix" social engineering campaign, which leverages deceptive Facebook security alerts to trick victims worldwide into executing...

his episode of Cyber Scoops & Digital Shenanigans highlights the escalating threat of browser-based attacks, encompassing advanced phishing, malicious copy-paste techniques like "ClickFix", dangerous OAuth integrations, and pervasive browser extensions targeting business apps and data. We also examine the critical need for proper data destruction of old hardware to avoid multi-millio...

Today's podcast we discuss current cybersecurity landscape threats, ranging from large-scale data breaches, such as the one impacting over 100,000 individuals at Cornwell Quality Tools, to critical vulnerabilities in payment systems that take over a year to patch and silent code execution risks in AI-powered code editors. These challenges are compounded by a booming US investment in surveilla...

This episode includes: • LNER, the British rail operator , suffering a data breach through a third-party supplier, compromising customer contact and journey details. Jaguar Land Rover's admission of a data breach following a cyberattack that caused global factory shutdowns, with the Scattered Spider group claiming responsibility. A critical weakness in the Cursor AI editor , which disables VS...

This morning, we've got an awesome lineup of stories that prove the internet is less like a friendly neighborhood and more like a lawless frontier. We're talking about Apple fighting off state-sponsored snoops, China-backed hackers playing dirty tricks, a Ukrainian ransomware kingpin with an $11 million bounty on his head, and the terrifying rise of 2FA-bypassing phishing kits.

Today we're diving into the chilling reality that your digital life is under siege from every direction imaginable; from the geopolitical chessboard to the very tools designed to keep you safe. Buckle up, because what you don't know can and will hurt you.

The so-called “AI ransomware” turns out the story is not what it seems and last weeks recap, which reads like the apocalypse bingo card for security teams.

Today’s lineup includes school data breaches, misconfigured CMS keys, an AI tool that’s actually useful, malware boosting gambling sites on Google, Microsoft charging rent for Windows 10, and even a $10 million bounty on some very busy Russian hackers.