Castuner
Добавить подкаст

Initial Access

Bishop Fox

Bishop Fox offensive security researchers, experts, and hackers take a real look at the latest cybersecurity news headlines and have a straight take on them. The goal is simple: do you actually need to care about this, or is it just another variation of the same fundamental security problems we've been dealing with for years?

Сайт подкаста

Слушайте в своём приложении

Эпизоды

41 эпизод

  1. PHP2Shell Exploitation, Node2Shell Brotli RCE, And Mimori Ransomware Claims 58:54
  2. PHP2Shell: A Leaked Demo, A Broken Disclosure, and AI at Exploit Speed 52:40
  3. OpenAI Insider, Meta Muse’s Escape Hatch, AI Agents Gone Rogue 43:23
  4. A Third NetScaler Zero-Day, 8 Million Danish ID Records, and Google Pauses Its Bug Bounty 1:13:40
  5. ShinyHunters PeopleSoft WAF Bypass, Arrests, And OpenAI Astra News 36:56
  6. Zero-Click Exchange RCE, $25 AI Intrusions, and the ShinyHunters FBI Claim 1:07:12
  7. Ten-Hour Breaches, MikroTik Backdoors, Router Takeovers & the NetScaler Root Cause 53:50
  8. Patch Tuesday Overload, Broken Threat Feeds & the Scoping Problem 43:42
  9. IDScan Leak, Vished Hospitals, Berlin's Ransom Refusal & a Grid Under Fire 42:12
  10. Audio Fingerprinting, AI-Assisted ICS Attacks & the Zombie Card Bypass 35:57
  11. Spliced Instructions, Recycled Bugs, Leaked Addresses & Sold Directories 36:58
  12. Live from DEF CON at RedTail: Red Teaming After AI 46:37
  13. AI Sandbox Escape, Autonomous Ransomware Agent, Self-Spreading npm Worm 51:20
  14. Rogue Agents, Bounty Cuts & the AI Brake Pedal 59:10
  15. Rogue Agents, Invisible Screens, and a Vulnerability Clearinghouse 1:03:45
  16. Attribution and OpSec at Scale 43:44
  17. Old Backdoors, Ghost Phishing, and Borrowed AI 38:26
  18. Cisco Root Access, FortiBleed Credentials, Sparkplug Fuzzing, AI Arms Race 48:09
  19. FIFA Takeover, FFMpeg RCE, Klue Breach, Hardware Hacking 51:07
  20. Pokémon GO, ServiceNow Auth Flaw, and the Anthropic Model Pulldown 55:07
  21. Linux NFTables Root Exploit, Gemini Prompt Injection, and Cisco SD-WAN Zero-Day 35:31
  22. Forged VPN Sessions, Autonomous AI Worm, and Hotel Reservation Hijacking 48:41
  23. Custom Payload Evasion, Chained Network-to-Physical Breach, and Satellite Hacking 46:44
  24. VS Code Supply Chain Attack, Microsoft Exchange Zero-Day, and AI-Accelerated Vulnerability Discovery 26:42
  25. AI Zero-Day Exploit, CI/CD Supply Chain Poisoning, and Vibe-Coded Data Exposure 45:36
  26. Linux Kernel Exploit, GitHub RCE, and Canvas Cyberattack 48:21
  27. cPanel Auth Bypass, Claude AI Code Risks, and Trigona Ransomware 33:56
  28. Anthropic Tool Access, EU App Bypasses, and Active Zero-Days 31:48
  29. Trusted Tools, Hijacked Sessions & Cheap Paths to Big Access 31:55
  30. Project Glasswing: AI Vulnerability Discovery & Exploit 22:37
  31. GitHub Malware, DNS Hijacking, Ransomware Speed & AI Exploits 41:02
  32. Inherited Access, AI Permissions, Supply Chain Attacks & Edge Exposure 27:36
  33. Malvertising, Trusted Tools, Real-Time Attacks & Shrinking Windows 30:01
  34. Speed, Trust, and the Compromised Workbench 36:04
  35. Social Engineering, Phishing, Edge Device Exploits & AI-Assisted Attacks 37:20
  36. AI Coding Agents, FortiGate Attacks, Surveillance & Identity Hacks 27:54
  37. Autonomous AI, Broken Guardrails, and Geopolitics 19:53
  38. SSO Phishing, Patching Failures, Exposed APIs 21:59
  39. Deepfakes, Spyware Skits & LLMs for Hire 15:49
  40. Software Policy Rollbacks, Insider Access Abuse, and AI Automation Risk 15:29
  41. Prompt Injection, Session Hijacking & Why AI Isn't Writing the Attack Plans Yet 19:59