Signal Check

On today's Signal Check, Adrian North digs into over six hundred malicious npm packages flooding the registry, a CISA contractor's exposed AWS credentials left on GitHub, and a newly public Linux kernel exploit called DirtyDecrypt. The episode wraps with a quick detour into reframing personal narratives and how the stories we tell ourselves shape what we think is possible. Stories covered: - New S...

This episode covers a critical NGINX vulnerability already being exploited in the wild, a Windows zero-day giving attackers full system control, and a jaw-dropping security lapse where CISA's own contractor leaked AWS GovCloud credentials on GitHub. We also dig into a massive NYC Health + Hospitals breach exposing biometric data from nearly two million people—the kind of information you can never...

On today's Signal Check, Adrian covers a dangerous new Windows zero-day giving attackers full system access, an actively exploited NGINX vulnerability hitting millions of sites, and why your summer running pace feels impossibly hard. Plus, Olympic marathoner Molly Seidel's shift from the road to ultrarunning reminds us that even elite athletes need to find what's fun again. Stories covered: - New...

This episode covers a critical Microsoft Exchange vulnerability being actively exploited in the wild, the story of Fisker EV owners who reverse-engineered their abandoned cars into an open-source movement, and a deep dive into the "sweet spot" training zone that could unlock faster running without the burnout. We also touch on prize money still owed to marathon runners six months after crossing th...

This episode covers active exploitation of critical vulnerabilities in Microsoft Exchange and Cisco SD-WAN, a supply chain breach that hit OpenAI developers, and why patching timelines matter when attackers are already inside the door. Adrian pulls weekend signals on threats that don't take days off—from zero-days to compromised signing certificates. It's a sobering look at how fast the window clo...

This episode covers the fallout from Pwn2Own Berlin, where researchers exposed 24 zero-day exploits in one day, plus urgent warnings about a Cisco SD-WAN authentication bypass being actively exploited in the wild. We also dig into a new Linux privilege escalation flaw called Fragnesia and what it means when similar bugs start clustering together. Stories covered: - Windows 11 and Microsoft Edge ha...

This episode covers two unpatched Windows zero-days that bypass BitLocker and escalate privileges, a self-replicating worm spreading through npm packages in the TanStack ecosystem, and a critical remote code execution flaw in the Exim mail server. Adrian breaks down how disclosure tensions, supply chain infections, and legacy infrastructure vulnerabilities are colliding all at once. It's a packed...

This episode covers Microsoft's rare zero-day-free Patch Tuesday, Google's discovery of the first AI-developed exploit bypassing two-factor authentication, and a self-propagating worm infecting hundreds of npm packages in the open source ecosystem. Adrian also touches on the rising cost of high-performance running shoes and what it says about premium pricing creep. Stories covered: - It's Patch Tu...

This episode digs into Google's confirmation of the first AI-generated zero-day exploits now being used in the wild, marking a major shift in the threat landscape. We also cover a supply-chain compromise in the TanStack Router project and what it means for every developer pulling dependencies. Stories covered: - Google: Hackers used AI to develop zero-day exploit for web admin tool (BleepingComput...

This episode covers a dangerous new Linux zero-day called Dirty Frag that grants root access across major distros, a mass ShinyHunters attack defacing Canvas portals at hundreds of universities, and CISA's urgent four-day patching deadline for a critical Ivanti flaw already being exploited in the wild. Adrian also touches on volcanic trail running victories and a lightning-fast Clojure implementat...

This episode covers critical zero-day exploits hitting Palo Alto firewalls before disclosure, an unpatched Linux privilege escalation flaw called Dirty Frag, and ShinyHunters breaching Canvas for the second time. Adrian breaks down how the window between vulnerability discovery and exploitation is collapsing fast. If you're running enterprise infrastructure or Linux systems, this Signal Check is e...

This episode covers a critical zero-day exploit in Palo Alto firewalls that went unpatched for nearly a month, malware hiding in PyPI packages using workplace chat tools for cover, and a major breach at Canvas that exposed student data across universities. We also dig into why trust systems in open-source repos keep getting weaponized and close with an ultramarathon story that redefines what the h...

This episode digs into North Korean hackers weaponizing job interviews to infect developers, the concerning reality that CISA was shut out from testing Anthropic's security AI tool, and Meta's new policy of tracking every keystroke and mouse click to train its AI models. It's a Signal Check packed with uncomfortable truths about who gets access, who gets targeted, and what counts as consent in the...

This episode digs into the surprisingly organized underground economy of stolen credit cards, where fraudsters use customer service metrics and escrow systems to avoid getting scammed themselves. We also explore the EU's rushed age-verification app that researchers dismantled in minutes, and why your push notifications might be leaking more metadata than you think.

This episode covers a massive North Korean laptop-farm scheme that fooled U.S. companies for years, Bluesky's battle with a brutal DDoS attack that's testing its credibility, and a teen hacker's rare public confession just before heading to prison. Adrian North breaks down how each story reveals something bigger about the vulnerabilities baked into our digital systems.

This episode digs into the growing gap between cyber threats and our defenses — from the FBI's report on a record $21 billion lost to scams, to AI models now finding zero-day vulnerabilities in hours instead of months. We also look at how modern GPUs can crack complex passwords in under a day, and why credential theft remains the fastest path to a breach.

This episode digs into NASA's Artemis II Moon mission — historic but more infrastructure test than breakthrough — then pivots to a brutal week in cybersecurity. From Anthropic's code leak and the FBI getting breached to North Korean crypto heists and supply chain attacks collapsing response times, Adrian unpacks how AI tools have turned developer machines into open credential vaults for attackers.

This episode digs into LinkedIn's hidden surveillance of over 6,000 Chrome extensions, the failure of app store privacy labels to actually protect users, and Microsoft's hilarious legal disclaimer that Copilot is "for entertainment purposes only" despite selling it as a serious business tool. We're looking at the gap between what tech companies say they're doing and what's really happening behind...

This episode digs into a lightning-fast npm supply chain attack that shows how AI is collapsing human response time, explores a skull-vibration authentication system built into XR headsets that could verify you're still you without lifting a finger, and covers the North Carolina IT admin who methodically locked thousands of company devices with a password straight out of a cybercrime playbook. Fro...

This episode digs into a man who lost everything to an AI chatbot he believed was becoming sentient, a shocking leak of Claude's source code through a simple packaging error, and one of the most sophisticated supply chain attacks ever—targeting Axios with tradecraft that points straight to North Korea. Adrian North breaks down how our digital infrastructure is more fragile than we think, and how b...

This episode covers Google's 2029 deadline for quantum-safe encryption, the military weaponization of hacked security cameras by state actors, and the compromising of FBI Director Kash Patel's personal email by a suspected Iranian cyber unit. Adrian North walks through why these aren't isolated incidents—they're signals of a rapidly shifting threat landscape where legacy systems, unpatched IoT dev...

This episode digs into a landmark legal case where a jury held Meta and Google accountable for harm caused to a teen's mental health, plus a sophisticated malware campaign targeting healthcare and government orgs with fake copyright notices. We also cover the FCC's new ban on foreign-made routers and what it really means for cybersecurity.

This episode digs into a supply-chain attack that compromised Trivy, the vulnerability scanner millions trust, turning a security tool into the very threat it's meant to detect. We also explore a chemistry student's quest to create conductive nail polish that actually works with long nails, and the wild discovery of all five DNA building blocks on an asteroid floating through space for billions of...

This episode covers a massive international takedown of four major botnets that had hijacked IoT devices to launch hundreds of thousands of crippling cyberattacks. We also dig into how a French Navy officer accidentally revealed his aircraft carrier's location by posting his jog on Strava, proving that fitness apps and military ops don't mix. Plus, a look at the messy intersection of breathalyzer...

On today's Signal Check — we cover Musician admits to $10M streaming royalty fraud using AI bots, WordPress.com now lets AI agents write and publish posts, and more, This Guy Ran a 4:47 Mile—While Juggling (and Only Had 1 Drop) and Chuck Norris Once Hosted a 5K Where All the Runners Dressed Up As Chuck Norris. Tune in for the full breakdown.