Free Daily Podcast Summary
Cybersecurity Today: Daily Summaries Delivered
by David Shipley
Updates on the latest cybersecurity threats to businesses, data breach disclosures, and how you can secure your firm in an increasingly risky time.
Latest Episodes
The most recent episodes — sign up to get AI-powered summaries of each one.
- Yesterday13 min
North Korean fake job interview leads to $6.3B Binance heist
Binance's $6.34B Crypto Heist, Europe's Supermarket Fridge Hacks, and the Rise of LLM Jacking Cybersecurity Today host David Shipley reports Binance's $6.34B October 29 crypto theft, which Binance says began with a June supply-chain compromise and escalated via a fake hiring process that delivered poisoned developer tools, leading to access to the internal wallet signing service and abuse of Ethereum EIP-7702 The episode also covers refrigerator system attacks spreading across European retailers and suppliers via vulnerable controllers, with the Pentagon treating similar August U.S. commissary outages as suspected cyberattacks. Barracuda urges patching two flaws that can be chained for root control if admin interfaces are exposed. Researchers link Chinese state-linked attackers to chaining PHP-to-shell bugs and a kernel exploit to gain root on Palo Alto firewalls. Finally, Mandiant details "LLM jacking," where criminals steal API keys or cloud tokens to run up AI bills rapidly. 00:00 Today's Cyber Headlines 00:34 Binance Heist via Fake Hiring 03:52 Fridge Hacks Spread in Europe 05:46 Pentagon Probes US Spoilage 07:03 Barracuda Root-Takeover Flaws 08:44 PHP to Shell Hits PAN-OS 09:51 Disclosure Drama and Exploits 11:15 LLM Jacking Drains AI Budgets 12:58 Wrap Up and Sign Off
- 3 days ago13 min
FBI ties North Korea to $6.3B Binance heist, Cybercriminals breach four top Canadian law firms, Chinese spies use AI agent to hit 140 targets
Vishing Breaches Top Canadian Law Firms, FBI Pins Record Binance Heist on North Korea, and GM Pays $220M Privacy Settlement David Shipley covers major cybersecurity headlines for Nov. 2, 2026: four large Canadian law firms (McCarthy Tétrault, Davies, Bennett Jones, and BLG) were breached via vishing impersonating IT on Teams and spoofed phone numbers, leading to compromised accounts and alleged large-scale file theft, while firms share intel and bring in CrowdStrike and Mandiant. The FBI attributes the $6.36B Binance crypto theft to North Korea's TraderTraitor/Lazarus, details laundering tactics and wallet addresses, and Binance says it has covered 95% of losses. Chainalysis discloses a breach exposing limited customer directory data. CrowdStrike reports China-linked Vapor Panda using Artex AI at scale. A fake Claude code extension briefly appeared in Cursor's marketplace. GM agrees to a $220M settlement over Smart Driver data sales. 00:00 Top Stories Rundown 00:35 Vishing Law Firm Breaches 02:52 North Korea Binance Heist 05:18 Chainalysis Gets Hacked 07:07 Agentic AI Attack Surge 09:33 Fake Claude Extension Scam 11:15 GM Driver Data Settlement 13:25 Wrap Up and Sign Off
- 5 days ago58 min
Defend At AI Speed: With Special Guest Adam Ely, Check Point Software
AI agents are changing both sides of cybersecurity. Attackers can move faster, while defenders face another challenge: securing the agents inside their own organizations. On this Cybersecurity Today Weekend Interview, I'm joined by Adam Ely, General Manager of AI Agent Security at Check Point Software. We talk about what AI is changing for security teams—and what still comes down to getting the basics right. Adam brings the perspective of a former CISO at Fidelity Investments and deputy CISO at Walmart. We discuss the pressure on security leaders, the promise of AI for defenders, and how organizations can adopt agents while controlling what they can access and do. In this conversation: • Why AI changes the speed and scale of cyberattacks. • CISO burnout, accountability, and the value of sharing experiences. • How AI agents can influence one another's behaviour. • Why security teams need to rehearse and test AI-assisted incident response. • The identity and access challenges of agents that can create other agents. • What it means when companies put agents on the organizational chart. • Why segmentation, access controls, monitoring, and other security basics matter more than ever. • Using AI as a sounding board that challenges your thinking. Where could AI help your security team—and where would you draw the line on its access? Share your thoughts in the comments. Hosted by Jim Love. Cybersecurity Today — Weekend Interview October 31, 2026 Subscribe to Cybersecurity Today for cybersecurity news and interviews. More episodes and contact: https://technewsday.com https://technewsday.ca To support the show, visit the Donate tab. Guest biography, Check Point Software: https://www.checkpoint.com/about-us/leadership/ Check Point Software research discussed in the interview: https://blog.checkpoint.com/security/peer-pressure-ai-agents Adam's article on the changing CISO role: https://blog.checkpoint.com/ai-security/redefining-the-ciso-contract-from-securing-the-business-to-securely-doing-business/
- 1 weeks ago27 min
Black October: A Cybersecurity Today Special Edition
Black October in Cybersecurity: PHP RCE Panic, Brotli Surprise, and Why Basics Still Matter In this special episode of Cyber Security Today, Jim and David discuss why the industry is calling the month "Black October," beginning with chaotic disclosure and leaked details of multiple PHP remote code execution vulnerabilities that triggered widespread anxiety and even service shutdowns by governments and other organizations. They cover additional tensions from weak certificates issued by an intermediate CA in India, a breach disclosure by LiteLLM, and a major RCE initially thought to affect React/Node.js but later tied to Google's Brotli, which is widely deployed. They note that while attacks began before patches and at least one European government was compromised, exploitation proved difficult and defenses often held, with limited confirmed victims so far. They argue AI is accelerating vulnerability discovery and democratizing capabilities, but emphasize "don't panic," focus on cyber hygiene basics, prioritize crown jewels, train staff, and address growing human fatigue as incident response capacity strains 00:00 Black October Begins 00:44 PHP Zero Day Chaos 03:51 More Hits Keep Coming 04:53 AI Hype And Reality 07:01 Exploitation In The Wild 09:15 Japan Breach Wave 13:23 Dont Panic Do Basics 15:38 Turn Crisis Into Budget 18:07 Training Beats Tools 21:21 Burnout On The Frontline 23:45 Know Your Crown Jewels 24:16 Final Thoughts And Outreach
- 1 weeks ago12 min
Microsoft Rushes out Fixes for .NET
Brotli Emergency Patches, PHP-to-Shell Exploited, and Australia Disrupts 180K Amadey Infections | Cybersecurity Today On Cybersecurity Today (Oct. 28, 2026), Microsoft issues out-of-band .NET updates for a critical flaw in Google's Brotli library (CVE-2026-111497) that can enable remote privilege escalation and potentially remote code execution, with proof-of-concept exploits public and widespread exposure across ecosystems. The episode also covers CISA confirming active exploitation of two "PHP to Shell" vulnerabilities (CVE-2026-109618/109619), with federal agencies facing an urgent patch deadline and broad impact across millions of PHP services and many vendors. In legal news, U.S. prosecutors allege Canadian ransomware negotiator Eduard Dubrovsky secretly worked for threat actors. South Korean police say a former penetration tester used the Artex AI framework to breach 90+ organizations and steal 8.2 million records. Finally, Australia's Signals Directorate disrupts an Amadey botnet, cutting off 180,000 infected computers and destroying stolen data offered for sale. 00:00 Top Stories Rundown 00:32 Brotli Bug Emergency Patches 02:36 AI Noise in Vulnerability Hype 03:41 PHP to Shell Exploited Now 06:10 Ransomware Negotiator Accused 07:41 Artex AI Hacking Spree 10:04 Australia Disrupts Amadey Botnet 11:32 Wrap Up and Sign Off
- 1 weeks ago10 min
AI-assisted attackers breach European government via PHP2Shell
PHP2Shell Hits European Government, New PHP RCE (No Patch Yet), Brotli "Node to Shell," and Capcom Breach Attackers exploited the PHP2Shell remote code execution flaws to compromise a European government entity within two hours, stealing password hashes and MFA secrets, pivoting via NTLM relay toward Active Directory, and showing command output patterns Unit 42 says suggest an agentic AI attacker. Widespread scanning continues, with Cloudflare logging millions of attempts, Cyfirma reporting low-and-slow probing from nodes linked with moderate confidence to the Lazarus ecosystem, and defenders urged to watch for telltale crash sequences. PHP also disclosed a third RCE (CVE-2026-115560) with no patch yet but high exploitation requirements and a mitigation to disable session upload progress. Separately, a Brotli decoder memory corruption bug (CVE-2026-111497) affects Node.js and other software, with fixes delayed into October releases. Finally, Capcom says criminals breached Capcom ID, exposing data tied to 11.7 million accounts and resetting impacted passwords. 00:00 Headlines Overview 00:35 Government Breach Details 01:13 Global Scanning Surge 03:11 Third PHP RCE 05:00 Wildfire Or Smoke 06:08 Patch Race Warning 06:53 Brotli Node To Shell 08:47 Capcom Account Breach 10:21 Wrap Up And Outro
- 2 weeks ago13 min
AI agents behind ConnectWise breach, PHP2Shell exploited days before patches, Japanese cloud hack
PHP Exploited Before Patch, Unpatched Linux SMB Bugs, GitLab Max-Severity Fix, and AI Agents in ConnectWise & Japan Breaches Cybersecurity Today (Oct. 23, 2026) covers active exploitation of two critical PHP RCE flaws beginning at least four days before patches shipped, with multiple firms seeing failed pre-disclosure attempts and the UK NCSC urging immediate patching or taking servers offline. It also details two publicly disclosed, unpatched Linux kernel ksmbd SMB RCE bugs (one unauthenticated on port 445), exposed after ZDI credited Trend Micro's AI scanner and copied public mailing lists without patches. GitLab issued fixes for a maximum-severity unauthenticated RCE (CVE-2026-11-0264) in its regex compiler, following recent high-severity GitLab issues. Microsoft attributed the ConnectWise cloud backup compromise to China-aligned Storm-0940 using the Artex agentic AI framework, and Artex-related activity was also found in attacks on Japanese companies amid a broader breach wave, including a malware incident affecting up to 26,739 Haname Desktopcloud customer servers. 00:00 Headlines And Intro 00:33 PHP To Shell Exploitation 02:07 Patch Now Impact Scope 02:47 Linux KSMBD Bugs Exposed 04:10 AI Disclosure Process Drama 05:25 GitLab Max Severity Patch 07:30 ConnectWise Breach AI Agents 09:24 Artex Spreads In Japan 11:18 GMO Haname VPS Malware 12:24 Closing And Sign Off
- 2 weeks ago12 min
Special Report: PHP2Shell puts 70% of web at risk
PHP2Shell: Emergency PHP RCE Patches, Leaks, and Early Exploitation (CVE-2026-109618/109619) In a special edition of Cybersecurity Today, host David Shipley covers emergency PHP patches for two critical unauthenticated remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, affecting PHP 5.4+ and essentially all PHP deployments serving web requests across major stacks. He explains the shared root cause involving corrupted memory after abnormal request termination, outlines the fixed releases (PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35), and notes no official updates for PHP 8.1 and older beyond limited source backports. Mitigations and Cloudflare WAF rules are described as partial, with patching urged by the UK NCSC. The episode details AI-assisted discovery and coordination via OpenAI's Patch the Planet and tools from Wiz, how leaks on Hacker News accelerated disclosure, and reports of early in-the-wild exploitation attempts, outages, and expectations of rapid exploit development, web shells, and a long tail of downstream patching challenges. 00:00 PHP2Shell Emergency Alert 01:32 What The CVEs Do 02:05 Patches And Mitigations 03:40 AI Discovery And Leak 05:32 Exploit Chatter Spreads 06:46 Early Impact And Outages 08:22 Exposure By The Numbers 09:53 What Happens Next 11:50 Wrap Up And Thanks
Get Cybersecurity Today summaries in your inbox
Free AI-powered daily recaps. Key takeaways, quotes, and mentions — in a 5-minute read.
Get Free Summaries →Free forever for up to 3 podcasts. No credit card required.
You Might Also Like
Listeners also like.
Risky Bulletin
Cybersecurity news updates from the Risky Business team.
Cyberside Chats: Cybersecurity Insights from the Experts
Cybersecurity experts discuss emerging threats, AI-driven attacks, and defense strategies for professionals and executives.
The Low Down
A podcast about hacking.
Ahead of the Threat: The FBI Cyber Podcast
FBI officials and experts discuss emerging cyber threats and cybersecurity fundamentals with government and industry guests.
Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure
Expert discussions on cybersecurity, national security, and threats to critical infrastructure like energy and water systems.
Security Now (Audio)
A weekly deep dive into cybersecurity news, hacking trends, and digital defense strategies for professionals and individuals.
Hacked
Stories of hacking, tech scams, and digital mysteries explored by two hosts diving into how systems are built and broken.
Cyber Hack
A true-crime podcast examining notorious cybercriminal groups and their global hacking sprees, from bank heists to ransomware attacks.
The Watchtower
Cybersecurity, data, and AI leaders share candid insights on real-world challenges and innovations beyond the headlines.
Plaintext with Rich
Explains cybersecurity topics in simple terms to help listeners stay safer online.
Daily Tech News Show
Daily tech news coverage with analysis from Tom Merritt and team.
Last Week in AI
Summarizes significant AI news on a weekly basis.
About Cybersecurity Today
Updates on the latest cybersecurity threats to businesses, data breach disclosures, and how you can secure your firm in an increasingly risky time.
Customized Recaps
AI-powered recaps with compact key takeaways, quotes, and insights.
Straight to Your Inbox
Get key takeaways from Cybersecurity Today in a 5-minute read.
Save Hours Every Week
Stay current on your favorite podcasts without falling behind.
Frequently Asked Questions
What is Podzilla's Cybersecurity Today daily summary?
It's a free AI-powered email that summarizes new episodes of Cybersecurity Today as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
How does the Cybersecurity Today podcast summary work?
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
Is this an official Cybersecurity Today product?
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by David Shipley.
Can I get summaries of other podcasts too?
Absolutely! The free plan covers up to 3 podcasts, any in the catalog. Basic raises that to 15, Pro to 40 and Max to 100. Browse our full catalog at /podcasts.
How often does Cybersecurity Today release new episodes?
Cybersecurity Today publishes every few days. Our AI generates a summary within hours of each new episode.
What topics does Cybersecurity Today cover?
Cybersecurity Today covers topics including News, Technology. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Start getting Cybersecurity Today summaries tomorrow morning.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.