Join us as we dive into the ever-changing world of digital security, bringing you the latest updates, trends, and expert insights to help you stay one step ahead of cyber threats. So, relax and let our knowledgeable host guide you through the fascinating realm of cybersecurity and technology in a calm, informative, and entertaining way.

Recent Episodes

To watch all of our episodes please checkout our YouTube channel!

Episode #130

In this episode, Cody and Katie discuss Apple's hidden iPhone "gray list," active Plex2Shell malware attacks hitting QNAP NAS devices, and a third-party breach exposing nearly 2.2 million Sega newsletter emails. We start by examining Apple's unpublished catalog of over 100,000 terms that blocks certain politics and substance-related words from predictive text and swipe typing. We then look into how attackers are exploiting the Plex2Shell vulnerability chain on internet-exposed QNAP storage devices to install proxy networks and cryptocurrency miners. Next, we investigate the compromise at marketing vendor Arara that leaked customer email addresses while leaving Sega users' passwords and financial records untouched. Finally, we wrap up by highlighting why critics want greater transparency from Apple and why QNAP owners should patch their systems immediately.

Episode #129

In this episode, Cody and Katie discuss the FBI identifying North Korean hackers behind a record cryptocurrency heist, a cyberattack targeting French blood bank freezers, a dark web leak exposing files from dozens of Bristol schools, and British intelligence agency GCHQ losing track of thousands of storage devices. We start by examining how North Korea's TraderTraitor group laundered stolen funds following a $6.7 billion breach against Binance. We then look into how attackers compromised third-party maintenance software to tamper with temperature controls for vital French blood plasma reserves. Next, we investigate the online release of over 320,000 stolen school records, prompting local council warnings about incoming phishing scams. Finally, we close by exploring a watchdog report revealing that GCHQ has failed to locate thousands of misplaced portable storage drives.

Episode #128

In this episode, Cody and Katie discuss a massive Department of Homeland Security data leak, a critical security vulnerability in Bluetooth barcode scanners, a global ad-bidding spy campaign targeting Starlink users, and cybercriminals impersonating IT support on Microsoft Teams. We start by examining how the 'Icepick' data dump exposed private records for over 41,000 DHS employees and unmasked covert ICE agents. We then look into how unauthenticated Bluetooth barcode scanners allow attackers to inject malicious keystrokes directly into warehouse and retail networks. Next, we investigate how an alleged Israeli firm exploited digital advertising networks to geolocate and surveil Starlink satellite users across more than 100 countries. Finally, we close by exploring how hackers flood corporate inboxes with spam before using Microsoft Teams chats and remote assistance tools to compromise employee devices.

Episode #127

In this episode, Cody and Katie discuss the federal ban on DeepSeek software, a Chinese hacker deploying autonomous AI agents against over 100 corporate websites, Trump administration officials asking CISA to secretly hack a voting machine, and social media platforms accumulating $26 billion in privacy penalties. We start by examining how the U.S. Department of Homeland Security ordered civilian federal agencies to purge DeepSeek AI tools over data exposure concerns. We then look into how a single attacker used problem-solving AI agents to breach major corporate platforms including Deere and SharkNinja. Next, we investigate why political appointees instructed CISA to secretly compromise a voting machine and conceal any discovered vulnerabilities. Finally, we close by exploring how regulators worldwide hit social media networks with over $26 billion in privacy fines, led by Meta's $23.7 billion total.

Page updated

Google Sites

Report abuse