RadioCSIRT - English Edition

Welcome to your daily cybersecurity podcast. 🛡️ Bulletproof hosting: new national guidance – The Australian Cyber Security Centre releases updated recommendations to mitigate risks posed by “bulletproof hosting” providers frequently used by cybercriminals to evade law-enforcement and defensive actions. 🧪 Wireshark vulnerabilities patched – CERT-FR publishes an advisory detailing several flaws in...

Episode Description: In this episode of RadioCSIRT, we examine how rising digital taxes are reshaping the cyber threat landscape. While taxation and cybersecurity may seem unrelated, the financial pressure created by digital taxes can significantly weaken organizational defenses — expanding the attack surface and creating opportunities for cybercriminals. This episode covers: • Budget impacts and...

Welcome to your daily cybersecurity podcast. 🚨 Active exploitation – Oracle Identity Manager: CISA warns that a remote code execution vulnerability in Oracle Identity Manager is being actively exploited, putting IAM infrastructures at immediate risk. 🛠️ SolarWinds Serv-U under fire: Two critical vulnerabilities impact Serv-U, potentially allowing attackers to fully compromise targeted servers. 📨...

Welcome to your daily podcast dedicated to cybersecurity. 🚨 Critical SharePoint Alert: Microsoft issues CVE-2025-59245, a severe privilege escalation flaw that demands immediate attention from administrators. 🎧 Espionage & Malware: Google exposes "BadAudio," the new tool from the APT24 group, while the ShadowPad backdoor resurfaces in fresh targeted campaigns. ☁️ Salesforce Clamps Down: The...

Welcome to your daily podcast dedicated to cybersecurity. ✈️ Industrial espionage by UNC1549: Iranian hackers deploy DEEPROOT and TWOSTROKE backdoors against aerospace and defense sectors, exploiting VDI access and the supply chain. 🤖 Gmail trains its AI with your data: Google enables email and attachment analysis for its Gemini model by default, requiring a complex manual opt-out to preserve pri...

Welcome to your daily cybersecurity podcast. 🛰️ Europol dismantles multiple digital piracy services after investigators traced more than EUR 47 million in crypto assets linked to illegal IPTV, streaming, and content-distribution platforms; 🛡️ CISA adds a newly identified and actively exploited vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, requiring federal agencies to apply p...

 Welcome to your daily cybersecurity podcast. 🛰️ Australia’s Cyber Arrow Exercise: a large-scale national drill uniting government, industry and critical-infrastructure operators in the energy, communications and finance sectors, focusing on detection capabilities, digital forensics and major incident response readiness. 🛡️ Multiple Vulnerabilities in NetApp Products: several flaws impacting Broca...

Welcome to your daily cybersecurity podcast. 🛰️ RoningLoader analysis: new research unveils the stealthy capabilities of RoningLoader, a modular malware loader designed for evasion, payload staging, and long-term persistence across compromised environments. 🛑 Gh0st RAT impersonation campaigns: recent investigations reveal large-scale social-engineering operations delivering Gh0st RAT through impe...

Welcome to your daily cybersecurity podcast. 🛰️ DNS4EU: the European Union continues to advance its sovereign DNS resolver project, designed to reduce dependency on non-EU services. The initiative aims to deliver a secure, privacy-respecting, and resilient DNS infrastructure operated entirely within Europe, with integrated filtering and threat-detection capabilities. 🛑 Ransomware – Q3 2025 Overvi...

Bonjour and Welcome to your daily cybersecurity podcast. 🧩 AMD Zen 5: AMD confirms a critical flaw in the rdseed instruction causing severe entropy reduction, weakening cryptographic material generated on Zen 5 processors prior to microcode updates. 🛡️ Akira Ransomware: CISA, the FBI, and international partners release major updates on newly observed TTPs and IOCs, highlighting widespread targeti...

Welcome to your daily cybersecurity podcast. 🤖 Anthropic faces controversy over claims that Claude enabled fully automated cyberattacks end-to-end . Several experts question the technical validity and highlight the lack of concrete evidence. 🛡️ Fortinet confirms it silently patched a critical FortiWeb zero-day already exploited in active attacks. The discreet fix was intended to avoid tipping off...

⚡ ️Welcome to your daily cybersecurity podcast. 🌐 Google TAG: Q3 2025 bulletin — over 18,000 YouTube channels, 120 domains, and multiple coordinated networks taken down. Massive activity originating from China, Russia, Azerbaijan, Iran, and Turkey, along with seven distinct operations targeting Moldova. 🛡️ CISA reports ongoing cyber threats against Cisco ASA and Firepower devices. Active exploit...

🧩 Welcome Everyone –Today  8 essential stories you can’t miss! 🐧 Curly COMrade: a Russian group abuses Hyper-V to hide Linux malware inside an Alpine VM, effectively bypassing EDR detection. 🇦🇺 ASIO Warning: Australia’s spy chief warns of high-impact cyber sabotage as authoritarian states prepare attacks on power, telecom, and water systems. 💻 OWASP Top 10 (2025): Broken Access Control remains...

Welcome to your special edition Patch Tuesday briefing 🕵️ ‍ ♂️ 🔥 📌 Microsoft – November 2025 Patch Tuesday: 63 flaws fixed including 1 zero-day Microsoft has released patches for 63 vulnerabilities this month, including one zero-day actively exploited (CVE-2025-62215) affecting the Windows Kernel. Critical issues include RCE in GDI+ (CVE-2025-60724), Office (CVE-2025-62199), and Visual Studio (C...

🔐 KeePassXC: full transparency on AI use in development — no AI functions integrated, and every contribution is subject to full human review. 🏢 NCSC (UK): launch of the Cyber Action Toolkit, a free and interactive tool designed to help small businesses strengthen their cybersecurity with simple, practical steps. 💥 Triofox (CVE-2025-12480): active exploitation of a critical flaw (CVSS 9.1) allow...

Welcome to your daily cybersecurity update 🕵️ ‍ ♂️ 🔥 📱 Samsung – New Critical Flaw Added to CISA’s KEV Catalog (CVE-2025-21042) CISA has added an Out-of-Bounds Write vulnerability affecting certain Samsung mobile devices to its Known Exploited Vulnerabilities Catalog. This flaw allows data to be written outside intended memory regions, posing risks to system confidentiality and integrity. Under...

Welcome to your weekend cybersecurity briefing 🕵️ ‍ ♂️ 🔥 🐧 Samba — Remote Command Execution (CVE-2025-10230) A critical vulnerability affects Samba in the WINS module. An unauthenticated attacker can inject commands through unfiltered NetBIOS names and execute arbitrary code on the server. CVSS score: 10.0 (Critical). This flaw allows full system compromise. Immediate patching is strongly recomm...

Welcome to your weekend cybersecurity bulletin 🕵️ ‍ ♂️ 🔥 💰 Microsoft warns of payroll phishing campaign Microsoft is alerting organizations to a sophisticated phishing operation dubbed Payroll Pirates. Attackers impersonate HR departments to steal Microsoft 365 credentials and divert employee payroll deposits. The campaign uses spoofed domains and genuine Microsoft forms to bypass security filte...

Welcome to your daily cybersecurity update 🕵️ ‍ ♂️ 🔥 🧩 Suricata — Multiple Vulnerabilities in the Open Source IDS/IPS Engine Several flaws have been discovered in Suricata affecting versions 8.0.x before 8.0.2 and 7.0.x before 7.0.13. These issues could allow attackers to trigger undefined behaviors or memory corruption. Updated releases include enhanced flow management and decoding security. 💬...

Welcome to your daily cybersecurity briefing 🕵️ ‍ ♂️ 🔥 💬 Microsoft Teams — Impersonation and Spoofing Vulnerabilities Check Point Research disclosed four critical flaws in Microsoft Teams allowing attackers to impersonate users, manipulate messages, and spoof notifications. The issues, now patched, could be exploited by both external guests and malicious insiders. 🌐 Google Chrome — Storing ID D...

Welcome to your daily cybersecurity update 🕵️ ‍ ♂️ 🔥 🌐 ICC — openDesk replaces Microsoft Office The International Criminal Court announces its migration to the open-source suite openDesk, developed under Germany’s ZenDiS initiative. The goal is to strengthen digital sovereignty and reduce dependence on Microsoft solutions. 🐧 Linux — The most critical kernel vulnerabilities of 2025 The Linux ker...

Welcome to your daily cybersecurity briefing 🕵️ ‍ ♂️ 🔥 🌐 Tor Browser 15.0 — New Release Based on Firefox ESR 140 The Tor Project has released version 15.0, integrating a full year of upstream security fixes and introducing vertical tab management. WebAssembly is now handled by NoScript and remains disabled at the Safer and Safest security levels. This is the last version compatible with Android...

Welcome to your daily cybersecurity briefing 🕵️ ‍ ♂️ 🔥 🐚 Rhysida — Malvertising Campaign and Code-Signing Abuse The Rhysida ransomware gang continues its campaign using OysterLoader — also known as Broomstick or CleanUpLoader — as an initial access tool. Expel reports more than 40 abused code-signing certificates since June 2025, including several issued through Microsoft Trusted Signing. These...

🎧 🛡️ Welcome to your daily cybersecurity update 🕵️ ‍ ♂️ 🔥 🎓 University of Pennsylvania — Investigation into a massive fraudulent email An offensive email threatening a data leak was sent to thousands of students and alumni using an address spoofed from the Graduate School of Education. The university confirmed it was a fake. The incident response team is actively handling the case. 🕸️ Vampire W...

Welcome to your daily cybersecurity Podcast 💀 🎃 🐉 Lanscope — Zero-Day Exploited by Chinese Threat Actors Hackers linked to China have exploited a zero-day vulnerability in Lanscope, a Japanese network management software. The flaw allowed unauthorized access to internal systems. According to research from BleepingComputer, the campaign primarily targeted governmental and industrial organization...