Leaky Weekly

On this episode of Leaky Weekly, host and security researcher Nick Ascoli discusses findings from Flare Research including: React2Shell (CVE-2025-55182) vulnerability and threat actor chatter Findings from analysis of 50,000 stealer log infections He also mentions instructions for a giveaway for CTF players who would like another shot at unlocking a shirt from a past challenge… Here are the resour...

On this episode of Leaky Weekly, host and security researcher Nick Ascoli and Flare’s Identity Security Expert Mike Iaconianni dig into their responses and questions to the Microsoft 2025 Digital Defense Report. Here are the resources on the stories: Microsoft Digital Defense Report 2025 https://www.microsoft.com/en-us/corporate-responsibility/cybersecurity/microsoft-digital-defense-report-2025/ S...

On this episode of Leaky Weekly, host and security researcher Nick Ascoli covers the NPM supply chain attack, fake Europol bounty, and Operation Secure. Here are the resources on the stories: Largest NPM attack in crypto history stole less than $50: SEAL (Cointelgraph) Breakdown: Widespread npm Supply Chain Attack Puts Billions of Weekly Downloads at Risk (Palo Alto Networks) The largest supply-ch...

On this episode of Leaky Weekly, host and security researcher Nick Ascoli spills the tea on data leaks from Tea and TeaOnHer, as well as attacks on Salesforce tenants. Here are the resources on the stories: The Cost of a Call: From Voice Phishing to Data Extortion (Google Threat Intelligence Group) ShinyHunters behind Salesforce data theft attacks at Qantas, Allianz Life, and LVMH (BleepingCompute...

On this episode of Leaky Weekly, host and security researcher Nick Ascoli gets into stealer logs and arrests in the last few weeks of the threat actors who targeted PowerSchool and Snowflake tenants. This is part 2 of a 2 part series, Use a Stealer Log, Go to Prison. Missed part 1? Check it out here on Apple Podcasts or Spotify . Here are the resources on the stories: Cybersecurity Incident Notice...

On this episode of Leaky Weekly, host and security researcher Nick Ascoli gets into stealer logs and arrests in the last few weeks of threat actor IntelBroker and threat actors who targeted retail companies in the U.K. using the DragonForce encryptor. This is part 1 of a 2 part series, Use a Stealer Log, Go to Prison. Here's part 2: on Apple Podcasts or Spotify . Here are the resources on the stor...

On this episode of Leaky Weekly, Tammy Harper, Senior Threat Intelligence Researcher at Flare joins host and security researcher Nick Ascoli. Tammy explains: LockBit’s fall, the affiliate exodus, and rise of RansomHub “Ransomware without the ware” – cross-posting as the norm now Noise in the ransomware underground More episodes from Tammy and Nick’s conversation on ransomware will be coming in the...

On this episode of Leaky Weekly, Tammy Harper, Senior Threat Intelligence Researcher at Flare joins host and security researcher Nick Ascoli. They talk about shifts in the ransomware ecosystem in 2025. Tammy explains: Ransomware group adaptations based on 2024 events Why data-only extortion isn’t catching on How access to leaked data is shaping both victim decision-making and long-term exposure Mo...

On this episode of Leaky Weekly, Tammy Harper, Senior Threat Intelligence Researcher at Flare joins host and security researcher Nick Ascoli. They discuss ransomware in 2024, and how that affects the ransomware ecosystem of 2025. Tammy goes over: 2024 ransomware ecosystem summary 2025 disruptions in the wake of 2024 takedowns Compromised credentials’ growing role in cybercrime More episodes from T...

On this first episode of Leaky Weekly after our winter break, host and security researcher Nick Ascoli covers recent events in the cybercrime space the PowerSchool hack, Cracked & Nulled takedown & arrests, Otelier data leak, DeepSeek data leak, and Identity Theft Resource Center (ITRC) breach report findings. Here are the resources Nick mentions: Children’s data hacked after school softwa...

On this latest episode of Leaky Weekly, host and security researcher Nick Ascoli covers recent news in the cybercrime space such as the USDoD arrest, Judische/Waifu (Connor Moucka) arrest, RedLine infrastructure takedown and arrest(s), and MOVEit leaks. Here are the resources Nick mentions: The unmasking of threat actor USDoD (Cybernews) USDoD, the hacker allegedly behind attacks on FBI and Airbus...

On this latest episode of Leaky Weekly, host and security researcher Nick Ascoli covers recent news in the cybercrime space such as the LockBit arrests, an update to the Columbus ransomware attack, Bohemia arrests, and MC2 data leak. Here are the resources Nick mentions: LockBit power cut: four new arrests and financial sanctions against affiliates (Europol) Evil Corp: Behind the Screens (National...

In Leaky Weekly’s third episode, host and security researcher Nick Ascoli covers recent news in the cybercrime space including the AWS takeover campaign, ransomware attack on Columbus, Ohio, and the city of Columbus suing a ransomware researcher whistleblower. Here are the resources Nick mentions: Leaked Environment Variables Allow Large Scale Extortion Operation in Cloud Environments Ransomware G...

In Leaky Weekly’s second episode, host and security researcher Nick Ascoli covers recent news in the cybercrime space such as the National Public Data breach, Dispossesser ransomware operation repossession, feuding forums, and the arrest of two “J.P. Morgans.” Here are the resources Nick mentions: National Public Data confirms breach, scope unknown (TechTarget) National Public Data com Hack Expose...

In Leaky Weekly’s first episode, host and security researcher Nick Ascoli covers recent news in the cybercrime space, such as the AT&T breach, Snowflake tenant breaches, the hacktivist group SiegedSec, and Disney hack. Here are the resources Nick mentions: The Sweeping Danger of the AT&T Phone Records Breach (Wired) Massive Ticketmaster, Santander data breaches linked to Snowflake cloud st...