Want to be the first to hear our episodes each week? Become a Patreon donor here.

Links to this week’s stories:

https://www.darkreading.com/cyberattacks-data-breaches/advanced-security-phishing-tactics

https://www.theregister.com/2025/11/28/posthog_shaihulud/?td=keepreading / https://posthog.com/blog/nov-24-shai-hulud-attack-post-mortem

https://www.theregister.com/2025/11/27/scattered_lapsus_hunters_zendesk/

https://www.theregister.com/2025/11/25/akira_ransomware_acquisitions

Browser extensions pushed malware to 4.3M Chrome, Edge users • The Register

Want to be the first to hear our episodes each week? Become a Patreon donor here.

Links to this week’s stories:

• https://cloud.google.com/blog/topics/threat-intelligence/unc6040-proactive-hardening-recommendations
• https://www.theregister.com/2025/11/13/chinese_spies_claude_attacks/ / https://www.bleepingcomputer.com/news/security/anthropic-claims-of-claude-ai-automated-cyberattacks-met-with-doubt/
• https://www.theregister.com/2025/11/14/selfreplicating_supplychain_attack_poisons_150k/
• https://cyberscoop.com/fortinet-delayed-disclosure-exploited-vulnerability/
• https://www.bleepingcomputer.com/news/security/piecing-together-the-puzzle-a-qilin-ransomware-investigation/

Repo

Want to be the first to hear our episodes each week? Become a Patreon donor here.

Links to this week’s stories:

• https://cloud.google.com/blog/topics/threat-intelligence/unc6040-proactive-hardening-recommendations
• https://www.theregister.com/2025/11/13/chinese_spies_claude_attacks/ / https://www.bleepingcomputer.com/news/security/anthropic-claims-of-claude-ai-automated-cyberattacks-met-with-doubt/
• https://www.theregister.com/2025/11/14/selfreplicating_supplychain_attack_poisons_150k/
• https://cyberscoop.com/fortinet-delayed-disclosure-exploited-vulnerability/
• https://www.bleepingcomputer.com/news/security/piecing-together-the-puzzle-a-qilin-ransomware-investigation/

Want to be the first to hear our episodes each week? Become a Patreon donor here.

Links to this week’s stories:

• https://www.cybersecuritydive.com/news/nevada-ransomware-attack-traced-back-to-malware-download-by-employee/805011/
• https://cloud.google.com/blog/topics/threat-intelligence/threat-actor-usage-of-ai-tools
• https://www.darkreading.com/application-security/owasp-highlights-supply-chain-risks-new-top-10
• https://www.computerweekly.com/news/366634363/Google-Dont-get-distracted-by-AI-focus-on-real-cyber-threats