Wordpress RCE, New Windows 0-day and Coca-Cola's Fairline ransomed

Wordpress RCE, New Windows 0-day and Coca-Cola's Fairline ransomed

New Windows zero-day, Coca-Cola's Fairlife hit by ransomware, and a core WordPress RCE

David Shipley covers a new Windows zero-day disclosure from "Nightmare Eclipse" called LegacyHive, a local privilege escalation flaw in the Windows User Profile Service that could be weaponized despite a stripped-back public release, as Microsoft investigates and sets a Patch Tuesday record with 570 fixes including two exploited zero-days.

Coca-Cola suspended U.S. production at its Fairlife dairy unit after a ransomware attack, with scope still being assessed and the Food and Ag ISAC warning the sector has seen about 205 attacks this year.

Abbott faces two separate breach claims: ShinyHunters alleges vishing-led SSO compromise and massive data theft from legacy systems, while Shadowbytes claims access via LabCentral credentials, which Abbott disputes as non-sensitive.

The episode also highlights Conti leak revelations about healthcare targeting and details a core WordPress bug chain (WP_2Shell) enabling unauthenticated RCE, now patched in 6.9.5 and 7.0.2.

00:00 Sponsor NordLayer
00:36 Headlines Preview
01:05 Windows Zero Day LegacyHive
03:35 Record Patch Tuesday
04:22 Fairlife Ransomware Shutdown
05:49 Abbott Dual Breach Probes
08:09 Conti Leaks Healthcare Cruelty
09:33 WordPress Core RCE WP 2Shell
11:29 Wrap Up And Listener Notes
12:06 Sponsor Message NordLayer

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(100)

Largest-ever food destruction cyber-attack, Microsoft patches 1,411 flaws, Drones knock out Russia's Yandex

Largest-ever food destruction cyber-attack, Microsoft patches 1,411 flaws, Drones knock out Russia's Yandex

French Supermarket Freezers Turned to Ovens, Ahold Delhaize Outage, Microsoft's 1,411-Fix Patch Tuesday, AI Worm Debate, and Drones Hit Yandex Cloud Cybersecurity Today host David Shipley reports on a...

14 Okt 15min

FBI Arrests Canadian Ransomware Negotiator; MonsterCloud CEO Charged; Qilin Leader Extradited

FBI Arrests Canadian Ransomware Negotiator; MonsterCloud CEO Charged; Qilin Leader Extradited

FBI Arrests Canadian Ransomware Negotiator; MonsterCloud CEO Charged; Qilin Leader Extradited David Shipley covers major cybercrime and safety headlines: the FBI arrests Canadian ransomware negotiato...

11 Okt 12min

AI Agents, Security Debt, and Governance: Dave Lewis on the Real Risks of AI

AI Agents, Security Debt, and Governance: Dave Lewis on the Real Risks of AI

AI Agents, Security Debt, and Governance: Dave Lewis on the Real Risks of AI in Cybersecurity Host David Shipley interviews Dave Lewis of 1Password about why AI's biggest cybersecurity risk is less ab...

9 Okt 40min

Open AI Fires Safety Researchers

Open AI Fires Safety Researchers

OpenAI Fires Safety Researchers, FTC Probes AI Labs, ChatGPT Linked to Violence, and Connected Cars Share Your Data Host David Shipley covers multiple cybersecurity and AI accountability stories: Open...

7 Okt 14min

Another ShinyHunters Leader Busted

Another ShinyHunters Leader Busted

ShinyHunters Leader Detained in Jordan, KillSec Takedown, Vicksburg Ransomware, and OpenAI Agent Lawsuit Host David Shipley reports that Jordan detained an alleged ShinyHunters member known as Rey (Sa...

5 Okt 11min

Keep Calm and Secure AI: A Chat with Field Effect's CEO Matt Holland

Keep Calm and Secure AI: A Chat with Field Effect's CEO Matt Holland

Host David Shipley interviews Field Effect CEO Matt Holland about how AI coding agents can behave like malware and why visibility into their actions is essential. Holland recounts his 27-year career f...

2 Okt 38min

ShinyHunters Leader Busted

ShinyHunters Leader Busted

FBI Warns Staff Assume ShinyHunters Stole Everyone's Data; Clop Dismisses Rival Hack; Kiteworks Restores Service Cybersecurity Today host David Shipley reports the FBI has told employees to assume Shi...

30 Sep 14min

Two new NetScaler zero-days exploited, ShinyHunters steals FBI medical files, OpenAI Australia hack disputed

Two new NetScaler zero-days exploited, ShinyHunters steals FBI medical files, OpenAI Australia hack disputed

Citrix NetScaler Zero-Days Exploited, Kiteworks Shutdown Warning, ShinyHunters WAF Bypass, FBI Medical Files Leak, OpenAI Medicare "Hack" Reframed Citrix confirms two actively exploited NetScaler zero...

28 Sep 16min

Populært innen Politikk og nyheter

giver-og-gjengen-vg
aftenpodden
forklart
stopp-verden
aftenpodden-usa
popradet
det-store-bildet
fotballpodden-2
rss-gukild-johaug
hanna-de-heldige
rss-ness
rss-espen-lee-usensurert
dine-penger-pengeradet
bt-dokumentar-2
aftenbla-bla
rss-penger-polser-og-politikk
nokon-ma-ga
ta-dokumentar
e24-podden
frokostshowet-pa-p5