The Cybersecurity Podcast with Fexingo: Hacks, Breaches, and Digital Defense Conversations

In this episode of The Cybersecurity Podcast, Lucas and Luna dive into the mechanics of supply chain attacks targeting software update mechanisms. Using real-world examples like the SolarWinds breach and a recent attack on a major Linux distribution, they explain how hackers compromise trusted update pipelines to deliver malware to thousands of systems. The hosts discuss why traditional signature-...

In this episode of The Cybersecurity Podcast with Fexingo, Lucas and Luna explore a growing but overlooked attack vector: network-connected printers. With recent market volatility in cybersecurity stocks like CrowdStrike and Palo Alto Networks down, the conversation pivots to a specific case where a Fortune 500 company was breached via an unpatched printer. They discuss how attackers use printer f...

Episode 102 of The Cybersecurity Podcast digs into a growing threat: supply chain attacks targeting the software update mechanism itself. Lucas and Luna break down the recent breach at a popular package manager, where attackers injected malicious code into a widely used library, affecting thousands of downstream applications. They discuss why traditional defenses like code signing and integrity ch...

Episode 101 of The Cybersecurity Podcast explores a rapidly growing attack vector: cloud API key theft. Lucas and Luna break down how attackers are stealing valid API keys from exposed GitHub repos, compromised CI/CD pipelines, and third-party integrations to access cloud environments directly — bypassing firewalls and VPNs entirely. They discuss the recent surge in credential theft incidents, the...

Episode 100 of The Cybersecurity Podcast takes a fresh angle on side-channel attacks: how smartphone accelerometer data, combined with simple machine learning, can reveal your home's floor plan, your daily routines, and even what you're typing. Lucas and Luna break down a 2025 academic paper from MIT CSAIL that achieved 94% accuracy in inferring room layouts from walking vibrations. They connect t...

Lucas and Luna dive into a fast-growing threat: API-based distributed denial-of-service attacks. They explain how attackers weaponize cloud APIs to amplify traffic, using real cases like a 2025 attack hitting 2.5 Tbps, and why companies like Cloudflare and Amazon are scrambling to respond. The hosts link this to market moves: SentinelOne up 1.3% this week, Cloudflare surging 11% over five days, an...

Lucas and Luna investigate a growing threat in 2026: deepfake voice and video cloning used to impersonate trusted contacts—colleagues, family members, even CEOs. Lucas explains how attackers scrape voicemail, social media clips, and conference recordings to generate convincing impersonations in real time, then uses them to bypass verbal verification and authorization. He cites a recent incident wh...

Lucas and Luna dig into the session cookie hijacking that's making multi-factor authentication almost useless. With Palo Alto Networks down 1.2% while Zscaler jumps 5.9% and Cloudflare 9.6% this week, the market is betting hard on zero-trust architecture — but most companies still rely on cookie-based sessions that a single phishing link can steal. Lucas walks through how an August 2025 breach at...

Episode 96 of The Cybersecurity Podcast with Fexingo. Lucas and Luna dive into the rising threat of session cookie theft — a technique that lets attackers bypass multi-factor authentication entirely. They break down how a recent attack on a major tech firm used infostealer malware to grab active browser cookies, then replay them to hijack cloud accounts. Lucas explains why this is different from t...

Lucas and Luna dive into a fast-growing attack vector that most professionals overlook: calendar-based phishing. They break down how attackers are exploiting calendar invites from services like Google Calendar, Outlook, and Calendly to bypass email security filters and trick victims into clicking malicious links. Lucas shares a recent case from a mid-sized law firm that lost $340,000 after a partn...

Episode 94 of The Cybersecurity Podcast examines the growing threat of subdomain takeover attacks, where hackers register expired domains linked to legitimate companies and use them to deploy malware, phishing pages, and credential theft. Lucas and Luna break down how this works, why it's surging in 2026, and why recent security stock gains in CrowdStrike, Palo Alto Networks, and Zscaler reflect i...

QR codes are everywhere – restaurant menus, parking meters, event tickets. But in 2026, they've become a primary vector for a new wave of phishing attacks. Cybersecurity researchers at Zimperium report a 340% increase in 'quishing' attacks since January, with over 45,000 unique malicious QR code campaigns detected globally in Q2 alone. Lucas and Luna break down how a single scan can compromise you...

Episode 92 of The Cybersecurity Podcast examines a growing threat: hackers exploiting smart TVs as entry points into home networks. Lucas and Luna break down how attackers leverage vulnerabilities in apps, firmware, and outdated protocols to pivot from your TV to your laptop or phone. With recent market surges for cybersecurity stocks like CrowdStrike (up 10.7% in five days) and Palo Alto Networks...

Episode 91 of The Cybersecurity Podcast digs into a rising trend: residential proxy hijacking. Lucas and Luna break down how attackers are using compromised home routers and IoT devices to route illicit traffic through unsuspecting homeowners' IP addresses. The episode anchors on the 14.4% weekly surge in Palo Alto Networks stock, tying the market move to growing enterprise demand for botnet detec...

Episode 90 of The Cybersecurity Podcast dives into the rapidly growing threat of medical device hacking. Lucas and Luna explore how attackers are targeting connected hospital equipment—from infusion pumps to MRI machines—to gain entry into healthcare networks. They discuss the 2025 ransomware attack on a major US hospital chain that started with a compromised blood gas analyzer, and the unique cha...

In this episode of The Cybersecurity Podcast, Lucas and Luna explore a growing threat: malicious browser extensions that steal credentials, session cookies, and even two-factor authentication tokens. With the recent revelation that a popular productivity extension was compromised to exfiltrate data from thousands of users, they break down how these attacks work, why they're so hard to detect, and...

This episode of The Cybersecurity Podcast unpacks the latest Pegasus spyware attack — a politician who investigated spyware abuses had their own phone hacked. Lucas and Luna walk through how the NSO Group's spyware continues to infect iPhones and Android devices years after Apple and Meta tried to shut it down. They discuss the zero-click exploit method, why the attack chain still works despite Ap...

In this episode of The Cybersecurity Podcast, Lucas and Luna dive into the growing threat of data theft via smartwatches and wearable devices. They discuss how attackers are exploiting Bluetooth vulnerabilities and app permissions to siphon sensitive information, with real examples from recent research and incidents. The hosts also touch on the broader market impact, noting a 14.4% jump in Palo Al...

Episode 86 of The Cybersecurity Podcast dives into the hidden risks of self-hosted email. As more small businesses and tech-savvy individuals move their email off big providers like Gmail and Outlook for privacy reasons, a wave of IP blacklisting, SPF/DKIM misconfigurations, and targeted attacks is hitting the self-hosted community. Lucas and Luna walk through the story of a boutique marketing age...

In this episode of The Cybersecurity Podcast, Lucas and Luna dive into the new wave of AI-powered phishing attacks that use large language models to craft highly personalized, grammatically perfect emails at scale. They break down how these attacks work, why traditional email filters are struggling, and what recent stock surges in companies like CrowdStrike and Palo Alto Networks tell us about the...

In Episode 84 of The Cybersecurity Podcast, Lucas and Luna dive into the emerging threat of smart building attacks. They explore how attackers are compromising building management systems—HVAC, elevators, access controls—to infiltrate corporate networks and cause physical chaos. Lucas breaks down the attack surface: tens of thousands of internet-exposed building controllers, many running legacy pr...

In this episode of The Cybersecurity Podcast, Lucas and Luna explore a major shift in the cyber threat landscape: ransomware gangs are moving away from encrypting on-premises servers and are now targeting cloud infrastructure directly. Lucas explains how attackers are exploiting misconfigured cloud storage buckets, compromised API keys, and weak identity and access management to hold cloud data ho...

Episode 82 of The Cybersecurity Podcast with Fexingo digs into the decades-old SS7 protocol vulnerability that remains a gaping hole in telecom security. Lucas and Luna discuss how hackers are still exploiting SS7 to intercept two-factor authentication codes, drain bank accounts, and track location in real time—despite years of warnings. They anchor the conversation with a recent incident involvin...

In June 2026, a midwest telecom outage triggered by a routine network reset exposed a deeper vulnerability: SS7 protocol exploits that let hackers reroute calls and intercept two-factor authentication codes. Lucas and Luna break down the specific exploit chain — how a 40-year-old signaling protocol still underpins modern phone networks, why carriers are slow to patch, and what the recent stock sur...

In Episode 80 of The Cybersecurity Podcast, Lucas and Luna dive into a newly disclosed vulnerability affecting the baseband processor in billions of smartphones—not just old models, but recent flagship devices sold through mid-2026. The exploit, dubbed 'BaseFail,' allows a remote attacker to silently intercept calls, read messages, and track location without any user interaction. Lucas walks throu...