
Beware of BADBOX.
The DOJ files to seize over $7 million linked to illegal North Korean IT workers. The FBI warns of BADBOX 2.0 malware targeting IoT devices. Researchers uncover a major security flaw in Chrome extensi...
6 Juni 202527min

China’s largest data leak exposes billions.
Researchers discover what may be China’s largest ever data leak. CrowdStrike cooperates with federal authorities following last year’s major software bug. A researcher discovers over half a million se...
5 Juni 202527min

Appetite for tracking: A feast on private data.
Researchers uncover a major privacy violation involving tracking scripts from Meta and Yandex. A compliance automation firm discloses a data breach. PumaBot stalks vulnerable IoT devices. The Ramnit b...
4 Juni 202531min

Zero-day déjà vu.
Google issues an emergency patch for a Chrome zero-day. A new malware campaign uses fake DocuSign CAPTCHA pages to trick users into installing a RAT. A high-severity Splunk vulnerability allows non-ad...
3 Juni 202536min

AVCheck goes dark in Operation Endgame.
An international law enforcement operation dismantles AVCheck. Trump’s 2026 budget looks to cut over one thousand positions from CISA. Cyber Command’s defensive wing gains sub-unified command status. ...
2 Juni 202523min
![Brandon Karpf: A sailor of the 21st century. [Transitioning service member] [Career Notes]](https://cdn.podme.com/podcast-images/4167F8687CF502B28ECD9F1E12F343C2_small.jpg)
Brandon Karpf: A sailor of the 21st century. [Transitioning service member] [Career Notes]
Please enjoy this encore of Career Notes. Lieutenant in the US Navy and Skillbridge Fellow at the CyberWire, Brandon Karpf, knew he wanted to join the military at a young age. He achieved that throu...
1 Juni 202511min
![Triofox and the key to disaster. [Research Saturday]](https://cdn.podme.com/podcast-images/DB8EE6964AE8708674555BE3DE3127EE_small.jpg)
Triofox and the key to disaster. [Research Saturday]
This week, we are joined by John Hammond, Principal Security Researcher at Huntress, who is sharing his PoC and research on "CVE-2025-30406 - Critical Gladinet CentreStack & Triofox Vulnerability Expl...
31 Maj 202519min

All systems not go.
SentinelOne suffers a global service outage. A major DDoS attack hits a Russian internet provider. U.S. banking groups urge the SEC to scrap cybersecurity disclosure rules. Australia mandates reportin...
30 Maj 202531min




















