Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

EXPLORE

Society & Culture

© 2024 PodJoint

00:00 / 00:00

Sign in

or

Don't have an account?

Sign up

Forgot password

https://is1-ssl.mzstatic.com/image/thumb/Podcasts125/v4/cf/b0/d8/cfb0d8af-15b4-c510-7bfe-5e3c405e11ca/mza_5350933233141271249.png/600x600bb.jpg

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Jerry Bell and Andrew Kalat

200 episodes

4 days ago

Defensive Security is a weekly information security podcast which reviews recent high profile security breaches, data breaches, malware infections and intrusions to identify lessons that we can learn and apply to the organizations we protect.

Show more...

All content for Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec is the property of Jerry Bell and Andrew Kalat and is served directly from their servers with no modification, redirects, or rehosting. The podcast is not affiliated with or endorsed by Podjoint in any way.

Defensive Security is a weekly information security podcast which reviews recent high profile security breaches, data breaches, malware infections and intrusions to identify lessons that we can learn and apply to the organizations we protect.

Show more...

Episodes (20/200)

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 329

https://www.youtube.com/watch?v=3BaNujBx62Y

Want to be the first to hear our episodes each week? Become a Patreon donor here.
Links to this week’s stories:
https://www.theregister.com/2025/11/03/mit_sloan_updates_ai_ransomware_paper/
https://www.theregister.com/2025/10/29/ey_exposes_4tb_sql_database/
https://www.darkreading.com/cyber-risk/zombie-projects-rise-again-undermine-security
https://www.darkreading.com/cloud-security/cloud-outages-highlight-need-resilient-secure-infrastructure-recovery

4 days ago

59 minutes 50 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 328

Want to be the first to hear our episodes each week? Become a Patreon donor here.

Links we discuss this week:
https://thehackernews.com/2025/10/self-spreading-glassworm-infects-vs.html?m=1
https://www.cybersecuritydive.com/news/artificial-intelligence-security-risks-ey-report/803490/
https://www.cybersecuritydive.com/news/ai-augment-security-identity-soc/803608/
https://www.darkreading.com/cyber-risk/best-end-user-security-awareness-programs-arent-about-awareness-anymore
https://www.bleepingcomputer.com/news/security/hackers-now-exploiting-critical-windows-server-wsus-flaw-in-attacks/

2 weeks ago

54 minutes 10 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 327

Want to be the first to hear our episodes each week? Become a Patreon donor here.
Links to this week’s stories:
https://www.cybersecurity-insiders.com/how-ai-will-shape-the-future-of-cyber-defense-a-one-three-and-five-year-outlook/
https://www.helpnetsecurity.com/2025/10/15/f5-big-ip-data-breach/
https://www.bleepingcomputer.com/news/security/fake-lastpass-bitwarden-breach-alerts-lead-to-pc-hijacks/
https://blogs.microsoft.com/on-the-issues/2025/10/16/mddr-2025/
https://www.theguardian.com/technology/2025/oct/19/global-cyber-attack-russian-hack-solarwinds-stress-health

3 weeks ago

1 hour 23 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 326

Want to be the first to hear our episodes each week? Become a Patreon donor here.
Here are the stories we discuss this week:
https://cybersecuritynews.com/hackers-actively-compromising-databases/
https://www.bleepingcomputer.com/news/security/hackers-target-university-hr-employees-in-payroll-pirate-attacks/
https://securityaffairs.com/183154/security/threat-actors-steal-firewall-configs-impacting-all-sonicwall-cloud-backup-users.html
https://www.theregister.com/2025/10/07/gen_ai_shadow_it_secrets/
https://thehackernews.com/2025/10/from-phishing-to-malware-ai-becomes.html?m=1
https://databreaches.net/2025/10/12/from-sizzle-to-drizzle-to-fizzle-the-massive-data-leak-that-wasnt/

4 weeks ago

1 hour 6 minutes 30 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 325

Want to be the first to hear our episodes each week? Become a Patreon donor here.
Here are links to the stories we discuss this week:
https://www.theregister.com/2025/09/29/postmark_mcp_server_code_hijacked/
https://www.bleepingcomputer.com/news/security/oracle-patches-ebs-zero-day-exploited-in-clop-data-theft-attacks/
https://www.bleepingcomputer.com/news/security/westjet-data-breach-exposes-travel-details-of-12-million-customers/
https://www.cybersecuritydive.com/news/material-cybersecurity-breaches-unreported/760892/
https://www.securityweek.com/red-hat-confirms-gitlab-instance-hack-data-theft/
https://www.securityweek.com/hackers-extorting-salesforce-after-stealing-data-from-dozens-of-customers/
https://databreaches.net/2025/10/04/just-days-before-its-data-might-be-leaked-qantas-airways-obtained-a-permanent-injunction/

1 month ago

1 hour 3 minutes 7 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 324

Here are links to the stories we discuss this week:

* https://cloud.google.com/blog/topics/threat-intelligence/brickstorm-espionage-campaign
* https://thehackernews.com/2025/09/github-mandates-2fa-and-short-lived.html
* https://www.theregister.com/2025/09/23/gartner_ai_attack/
* https://www.bleepingcomputer.com/news/security/sonicwall-releases-sma100-firmware-update-to-wipe-rootkit-malware/
* https://www.zdnet.com/article/battered-by-cyberattacks-salesforce-faces-a-trust-problem-and-a-potential-class-action-lawsuit/

1 month ago

1 hour 19 minutes 57 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 323

Please follow us on YouTube!
Want episodes a week early? Consider becoming a Patreon sponsor of the DefSec podcast here.

Here are links to the stories we talked about this week:
https://krebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/
https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/
https://blog.lastpass.com/posts/attack-targeting-macs-via-github-pages
https://cybersecuritynews.com/finwise-insider-breach/
https://arstechnica.com/security/2025/09/how-weak-passwords-and-other-failings-led-to-catastrophic-breach-of-ascension/

1 month ago

50 minutes 47 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 322

Here are the stories we discuss this week:

https://natlawreview.com/article/qantas-airways-cuts-executive-pay-after-cyber-incident-governance-signal-industry

https://www.securityweek.com/ransomware-losses-climb-as-ai-pushes-phishing-to-new-heights

https://www.bleepingcomputer.com/news/security/hackers-left-empty-handed-after-massive-npm-supply-chain-attack

https://www.theregister.com/2025/09/12/huntress_attacker_surveillance

LunaLock Ransomware threatens victims by feeding stolen data to AI models

FBI warns of Salesforce attacks by UNC6040 and UNC6395 groups

1 month ago

52 minutes 44 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 321

Listen and Watch Defensive Security Episodes a week early by becoming a Patreon donor: https://www.patreon.com/defensivesec

Please subscribe to our YouTube channel: Defensive Podcasts – Cyber Security & Infosec. – YouTube

Links:

* https://blog.gitguardian.com/ghostaction-campaign-3-325-secrets-stolen/
* https://www.bleepingcomputer.com/news/security/ai-powered-malware-hit-2-180-github-accounts-in-s1ngularity-attack/
* https://www.cbc.ca/news/canada/hamilton/cybersecurity-breach-1.7597713
* https://www.bleepingcomputer.com/news/security/6-browser-based-attacks-all-security-teams-should-be-ready-for-in-2025/
* https://www.bleepingcomputer.com/news/security/hackers-use-new-hexstrike-ai-tool-to-rapidly-exploit-n-day-flaws/

2 months ago

58 minutes 27 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 320

Links to stories:

*
https://securityaffairs.com/181430/security/after-sharepoint-attacks-microsoft-stops-sharing-poc-exploit-code-with-china.html

*
https://www.cybersecuritydive.com/news/software-vulnerabilities-breaches-checkmarx-report/757793/

*
https://www.securityinfowatch.com/cybersecurity/article/55309774/even-security-leaders-are-breaking-ai-rules-calypsoai-report

*
https://www.darkreading.com/cyber-risk/cyber-insurers-may-limit-payments-breaches-unpatched-cve

*
https://www.darkreading.com/cyberattacks-data-breaches/fake-employees-pose-real-security-risks

2 months ago

47 minutes 18 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 318

I have no idea why Riverside.fm (the service we use to record the podcast) has such an audio/video sync problem for the first minute or so of the recording. We’re working on it…

On to the show. Here are the links for this week’s episode:

https://www.bleepingcomputer.com/news/security/new-downgrade-attack-can-bypass-fido-auth-in-microsoft-entra-id

https://www.bleepingcomputer.com/news/security/docker-hub-still-hosts-dozens-of-linux-images-with-the-xz-backdoor

https://www.darkreading.com/threat-intelligence/charon-ransomware-apt-tactics

https://www.securityweek.com/vibe-coding-when-everyones-a-developer-who-secures-the-code

https://www.securityweek.com/inside-the-dark-webs-access-economy-how-hackers-sell-the-keys-to-enterprise-networks

2 months ago

1 hour 15 minutes 32 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 317

Want to support our show? Want to get access to episodes a week before everyone else? Become a patreon sponsor here: https://www.patreon.com/defensivesec
If you’re in Atlanta on August 20, you can join us for a LIVE episode at Mission 25. Register here: MCS Mission: Security’25
Our new merch store is live: DefSec Store
We’ve added a lot of new items and will continue to do so over time.
On to the show.

Here are the links for this week’s episode:

* https://www.bleepingcomputer.com/news/security/spikes-in-malicious-activity-precede-new-cves-in-80-percent-of-cases/
* https://www.bleepingcomputer.com/news/security/hackers-plant-4g-raspberry-pi-on-bank-network-in-failed-atm-heist/
* https://nerds.xyz/2025/07/ai-security-flaws-veracode-2025/
* https://www.bleepingcomputer.com/news/security/tea-app-leak-worsens-with-second-database-exposing-user-chats/
* https://www.cybersecuritydive.com/news/research-llms-attacks-without-humans/754203/

3 months ago

1 hour 17 minutes 5 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 316

Want to support our show? Want to get access to episodes a week before everyone else? Become a patreon sponsor here: https://www.patreon.com/defensivesec

If you’re in Atlanta on August 20, you can join us for a LIVE episode at Mission 25. Register here: MCS Mission: Security’25

Our new merch store is live: DefSec Store

We’ve added a lot of new items and will continue to do so over time.

On to the show. Here are the links for this week’s episode:

* https://www.theregister.com/2025/07/26/microsoft_sharepoint_attacks_leak/
* https://mashable.com/article/google-gemini-deletes-users-code
* https://arstechnica.com/security/2025/07/open-source-repositories-are-seeing-a-rash-of-supply-chain-attacks/
* https://www.theregister.com/2025/07/23/lawsuit_clorox_vs_cognizant/
* https://www.bleepingcomputer.com/news/security/allianz-life-confirms-data-breach-impacts-majority-of-14-million-customers/

3 months ago

1 hour 7 minutes 45 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 315

If you’re in Atlanta on August 20, you can join us for a LIVE episode at Mission 25. Register here: MCS Mission: Security’25
Our new merch store is live(ish): DefSec Store – We’ll be adding more items as time goes on. This is managed through Printify, which has a quite expansive range of products to logo up.
Also, some of you may know that Jerry is into photography and contemplating creating a calendar with images he’s taken. Let us know if that sounds interesting. Possible themes are: beach sunsets, flowers, or jet fighters, because that’s about all he’s good at taking pictures of.

On to the show. Here are the links for this week’s episode:

*
https://www.bleepingcomputer.com/news/security/lamehug-malware-uses-ai-llm-to-craft-windows-data-theft-commands-in-real-time/

*
https://arstechnica.com/security/2025/07/hackers-exploit-a-blind-spot-by-hiding-malware-inside-dns-records/

*
https://www.darkreading.com/remote-workforce/fully-patched-sonicwall-gear-zero-day-attack

*
https://www.bleepingcomputer.com/news/security/new-crushftp-zero-day-exploited-in-attacks-to-hijack-servers/ (for patreon listeners only)

*
https://thehackernews.com/2025/07/malware-injected-into-6-npm-packages.html?m=1(for patreon listeners only)

3 months ago

42 minutes 35 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 314.5

Episode 315 is available for our patreon donors and will be posted for everyone else on Monday, July 28. Going forward, episodes will be released to our patreon donors shortly after recording and will be released to everyone else a week later. If you want to become a patreon donor, you can do so here: https://www.patreon.com/defensivesec
Also, our new merch store is live and available here: https://store.defensivesecurity.org
It’s a work in progress and please let me know if you have any issued with it. Thank you all and we’ll talk on Monday!

3 months ago

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 314

Want to support us? Want even MORE DefSec? Starting this week, we are providing more DefSec for our Patreon donors. Sign up to be a Patreon donor today: https://www.patreon.com/defensivesec

Links:

* https://www.theregister.com/2025/07/10/cisa_citrixbleed_kev/

* https://www.axios.com/2025/07/08/scattered-spider-cybercrime-hackers

* https://www.bleepingcomputer.com/news/security/employee-gets-920-for-credentials-used-in-140-million-bank-heist/

*

Additional links for Patreon donors:

* https://www.theregister.com/2025/07/13/fake_it_worker_problem/

* https://www.theregister.com/2025/07/09/chatgpt_jailbreak_windows_keys/

4 months ago

37 minutes 11 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 313

Want to support us? Want even MORE DefSec? Starting this week, we are providing more DefSec for our Patreon donors. Sign up to be a Patreon donor today: https://www.patreon.com/defensivesec

https://www.youtube.com/watch?v=BRzMJbBZ490

Links:

* https://www.csoonline.com/article/4012801/the-top-red-teamer-in-the-us-is-an-ai-bot.html

* https://www.darkreading.com/endpoint-security/attackers-top-brands-callback-phishing

* https://www.darkreading.com/cyber-risk/initial-access-broker-self-patches-zero-days

* https://www.darkreading.com/cybersecurity-operations/ransomware-reshaped-how-cyber-insurers-perform-security-assessments

* https://www.darkreading.com/endpoint-security/phishing-training-doesnt-work

4 months ago

44 minutes 16 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 312

Want to support us? Want even MORE DefSec? Starting this week, we are providing more DefSec for our Patreon donors. Sign up to be a Patreon donor today: https://www.patreon.com/defensivesec

Links:

* https://arstechnica.com/security/2025/06/active-exploitation-of-ami-management-tool-imperils-thousands-of-servers/
* https://www.bleepingcomputer.com/news/security/man-pleads-guilty-to-hacking-networks-to-pitch-security-services/
* https://www.helpnetsecurity.com/2025/06/23/new-hire-phishing-risk/

Patreon exclusive discussions:

* https://www.helpnetsecurity.com/2025/06/27/cybersecurity-risk-reduction-breach-transparency/
* https://www.theregister.com/2025/06/24/vulnerability_management_gap_noone_talks/

4 months ago

41 minutes 52 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 311

Like what we’re doing with the DefSec Podcast and want to help support us? Donate here: https://www.patreon.com/defensivesec

Links:

* https://www.bleepingcomputer.com/news/security/no-the-16-billion-credentials-leak-is-not-a-new-data-breach/
* https://www.bleepingcomputer.com/news/security/russian-hackers-bypass-gmail-mfa-using-stolen-app-passwords/
* https://www.bleepingcomputer.com/news/security/north-korean-hackers-deepfake-execs-in-zoom-call-to-spread-mac-malware/
* https://socket.dev/blog/libxml2-maintainer-ends-embargoed-vulnerability-reports

4 months ago

54 minutes 58 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security Podcast Episode 310

Like what we’re doing with the DefSec Podcast and want to help support us? Donate here: https://www.patreon.com/defensivesec
Links:

https://www.bleepingcomputer.com/news/security/sentinelone-shares-new-details-on-china-linked-breach-attempt/https://thehackernews.com/2025/06/new-supply-chain-malware-operation-hits.html?m=1https://www.csoonline.com/article/4002103/cisos-beware-genai-use-is-outpacing-security-controls.htmlhttps://thehackernews.com/2025/06/fin6-uses-aws-hosted-fake-resumes-on.html?m=1

5 months ago

53 minutes 44 seconds

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Defensive Security is a weekly information security podcast which reviews recent high profile security breaches, data breaches, malware infections and intrusions to identify lessons that we can learn and apply to the organizations we protect.