Shows / The Digital Warfare Podcast
The Digital Warfare Podcast
The Digital Warfare Podcast dives into the untold stories of digital defense. Join the anonymous hacker and his clients for raw, revealing conversations on the front lines of cybersecurity.
Episodes
- The Digital Warfare Podcast
EP. 192: CVE-2026-46300: Actively Exploited Fragnesia Linux Root Escalation
Summary CVE-2026-46300, known as Fragnesia, is an actively exploited Linux kernel privilege escalation vulnerability involving shared packet-fragment handling…
- The Digital Warfare Podcast
EP. 191: CVE-2026-48356: Adobe Commerce File Upload Flaw Is Now Being Exploited
Summary CVE-2026-48356 is a critical unrestricted file upload vulnerability affecting Adobe Commerce and Magento Open Source. Adobe rates it CVSS 9.6…
- The Digital Warfare Podcast
EP. 190: CVE-2026-109618: Critical PHP Memory Corruption Enables Remote Code Execution
Summary CVE-2026-109618 is a critical PHP memory corruption vulnerability that can allow unauthenticated remote code execution through unsafe out-of-memory…
- The Digital Warfare Podcast
EP. 189: CVE-2026-111497: Brotli Buffer Overflow Forces Emergency Patches Across Node.js and .NET
Summary CVE-2026-111497 is an out-of-bounds write vulnerability in the Brotli decoder that can corrupt process memory when vulnerable software decompresses…
- The Digital Warfare Podcast
EP. 188: Node2Shell Turns Compressed Data Into Remote Code Execution
Summary CVE-2026-111497, also referred to as Node2Shell, is an out-of-bounds write vulnerability in the Brotli decoder bundled with Node.js. Specially crafted…
- The Digital Warfare Podcast
EP. 187: PHP2Shell Gives Attackers a Direct Shot at Internet-Facing Web Servers
Summary PHP has released emergency fixes for CVE-2026-109618 and CVE-2026-109619, two critical PHP2Shell vulnerabilities that can allow unauthenticated remote…
- The Digital Warfare Podcast
EP. 186: SiteGuard Flaw Can Hand Attackers Root-Level Control
Summary CVE-2026-106931 is an actively exploited OS command injection vulnerability affecting EG Secure Solutions SiteGuard Server Edition when the statistics…
- The Digital Warfare Podcast
EP. 185: Rank Math SEO PRO Supply-Chain Compromise Turned Trusted WordPress Updates Into Backdoors
Summary CVE-2026-111862 tracks a critical supply-chain compromise affecting a subset of Rank Math SEO PRO 3.0.123 packages distributed between October 15 and…
- The Digital Warfare Podcast
EP. 184: Plex2Shell Was Weaponized Almost Immediately Unpatched Servers Are Now Being Hijacked
Summary Attackers are now exploiting Plex2Shell, a chain of four Plex Media Server vulnerabilities that can be combined to achieve unauthenticated remote code…
The Digital Warfare PodcastDigital Warfare Weekly Threat Intelligence Review
Summary This week’s Digital Warfare podcasts exposed five different routes through enterprise trust boundaries. GitLab disclosed a CVSS 10…
- The Digital Warfare Podcast
EP. 183: BeyondTrust Zero-Day Turned Remote Support Appliances Into Root-Level Attack Platforms
Summary BeyondTrust disclosed CVE-2026-102764, a critical CVSS 9.3 vulnerability affecting Remote Support appliances. The flaw stems from improper origin…
The Digital Warfare PodcastEP. 182: One Malicious Email Can Hand Attackers Root Control of Cisco Secure Email Gateway
Summary Cisco has disclosed CVE-2026-76519, a critical CVSS 9.8 vulnerability affecting the Advanced Malware Protection feature in Cisco Secure Email Gateway…
The Digital Warfare PodcastEP. 181: Microsoft’s October Patch Tuesday Fixes an Actively Exploited Windows Zero-Day
Summary Microsoft’s October 2026 Patch Tuesday fixes CVE-2026-96951, an actively exploited Windows Shell zero-day that can bypass Mark of the Web protections…
The Digital Warfare PodcastEP. 180: SAP CVSS 10 OAuth2 Flaw Could Hand Attackers Your Cloud Credentials
Summary SAP has patched CVE-2026-89111, a maximum-severity CVSS 10.0 OAuth2 SSRF vulnerability in the SAP Cloud SDK for Python. The flaw affects multi-tenant…
The Digital Warfare PodcastEP. 179: GitLab CVSS 10 Flaw Could Turn a Development Server Into an Attack Launchpad
Summary GitLab has disclosed CVE-2026-97229, a maximum-severity CVSS 10.0 vulnerability affecting self-managed GitLab Community and Enterprise Edition…
- The Digital Warfare Podcast
EP. 178: AhsayCBS Vulnerabilities Exploited to Deploy Webshells and Crypto Miners
Summary Attackers are actively exploiting CVE-2026-105133 and CVE-2026-105134 in the AhsayCBS backup management platform. The vulnerabilities can be chained to…
The Digital Warfare PodcastEP. 177: Atlassian CVE-2026-21589 Exploited Within Hours of Public PoC Release
Summary Attackers are actively targeting CVE-2026-21589, a critical arbitrary file-access vulnerability affecting multiple Atlassian Data Center products. The…
The Digital Warfare PodcastEP. 176: SonicWall SMA1000 CVE-2026-102255 Exposes Enterprise Gateways to Unauthenticated SSRF
Summary SonicWall has disclosed CVE-2026-102255, a maximum-severity server-side request forgery vulnerability affecting the SMA1000 6210, 7210, and 8200v…
The Digital Warfare PodcastEP. 175: MALFEX npm Campaign Delivers RATs and Credential Stealers Through Developer Packages
Summary Fresh research details MALFEX, a long-running malicious npm campaign linked to eight malicious packages that accumulated 40,767 downloads. The campaign…
The Digital Warfare PodcastEP. 174: Rejetto HFS CVE-2026-61500 Exploited for Admin Access and Remote Code
Summary Threat actors are now exploiting CVE-2026-61500, a critical vulnerability affecting Rejetto HTTP File Server versions 3.0.0 through 3.2.0. The…
The Digital Warfare PodcastEP. 173: Critical Ahsay CVE-2026-105134 Enables Unauthenticated Remote Command Execution
Summary A newly disclosed critical vulnerability tracked as CVE-2026-105134 affects the AhsayCBS Replication Receiver component. The vulnerability carries a…
The Digital Warfare PodcastEP. 172: FortiMail Zero-Day CVE-2026-104286 Exploited Before Patches Are Available
Summary A critical Fortinet FortiMail vulnerability tracked as CVE-2026-104286 is being actively exploited in zero-day attacks. The flaw carries a CVSS score…
- The Digital Warfare Podcast
EP. 171: Cisco SD-WAN Zero-Day CVE-2026-76504 Exploited for Admin Access
Summary A critical vulnerability tracked as CVE-2026-76504 affects Cisco Catalyst SD-WAN Manager and is being actively exploited. The vulnerability has a CVSS…
The Digital Warfare PodcastEP. 170: Ransomware-Linked Malware Hits South Africa’s Air Traffic OT Network
Summary South Africa's Air Traffic and Navigation Services is investigating a malware incident affecting operational technology environments supporting…
The Digital Warfare PodcastEP. 169: JadePuffer Uses AI Agents to Destroy Microsoft Azure Resources
Summary Fresh reporting details destructive Microsoft Azure activity associated with JadePuffer, which Microsoft tracks as Storm-3168. Attackers used two…
- The Digital Warfare Podcast
EP. 168: Cloudflare Container Flaw Exposed Data Across Customer Environments
Summary Fresh reporting published September 27 details a vulnerability affecting Cloudflare Containers and Sandboxes that could allow a customer with a Workers…
- The Digital Warfare Podcast
EP. 167: F5 BIG-IP Zero-Day CVE-2026-94127 Exploited for Remote Code Execution
Summary A critical vulnerability in F5 BIG-IP Access Policy Manager, tracked as CVE-2026-94127, is being exploited in the wild. The flaw is a heap based buffer…
The Digital Warfare PodcastEP. 166: Three Linux Kernel Vulnerabilities Added to CISA’s Exploited List
Summary Fresh reporting on September 21 warns organizations about three Linux kernel vulnerabilities associated with active exploitation: CVE-2025-39682…
The Digital Warfare PodcastEP. 165: North Korean Fake Job Interviews Compromise 30,000 Devices Worldwide
Summary A newly publicized multinational government advisory details the scale of the North Korean WaterPlum, or Contagious Interview, operation. Authorities…
The Digital Warfare PodcastEP. 164: Brevo Supply Chain Attack Turns Trusted Websites Into Malware Delivery Points.
Summary A Brevo supply chain security incident demonstrated how a single compromised privileged credential can create risk across multiple trusted websites…
The Digital Warfare PodcastEP. 163: Cisco ISE Zero-Day CVE-2026-76460 Exploited in Active Attacks
Summary Cisco has disclosed CVE-2026-76460, a maximum severity authentication bypass affecting Cisco Identity Services Engine and ISE Passive Identity…
The Digital Warfare PodcastEP. 162: Google Warns Pixel CVE-2026-58704 Is Under Targeted Exploitation
Summary Google has warned that CVE-2026-58704 may be under limited, targeted exploitation. The high-severity vulnerability affects the modem component of…
- The Digital Warfare Podcast
EP. 161: Critical GitLab CVE-2026-85706 Exploited for Arbitrary File Access
Summary CVE-2026-85706 is a maximum-severity GitLab vulnerability caused by improper path confinement and missing authentication enforcement in the repository…
- The Digital Warfare Podcast
EP. 160: Critical Cisco Firewall CVE-2026-20079 Exploited for Root Access
Summary Cisco has confirmed active exploitation of CVE-2026-20079, a maximum-severity authentication-bypass vulnerability affecting Cisco Secure Firewall…
- The Digital Warfare Podcast
EP. 159: Google Chrome Zero-Day CVE-2026-87491 Exploited in Active Attacks
Summary Google has released Chrome 153 with fixes for 230 security vulnerabilities, including CVE-2026-87491, which Google confirms has an exploit in the wild…
- The Digital Warfare Podcast
EP. 158: Hackers Exploit MikroTik RouterOS Flaws to Take Over Routers
Summary Attackers are actively exploiting a chain of vulnerabilities in MikroTik RouterOS known as MikroTrick. CERT Polska says it has observed attacks against…
- The Digital Warfare Podcast
EP. 157: Hackers Use Invisible Unicode to Bypass Email Security
Summary Attackers have adopted ASCII smuggling techniques in large-scale phishing campaigns, inserting invisible characters from the Unicode Tags block…
- The Digital Warfare Podcast
EP. 156: Critical Elementor Pro Flaw Exploited to Hack WordPress Sites
Summary Attackers are actively exploiting CVE-2026-32475, a critical vulnerability affecting Elementor Pro 4.2.1 and earlier under specific Form widget…
- The Digital Warfare Podcast
EP. 155: Hackers Breach 5,000 Dropbox Accounts Without Passwords
Summary Approximately 5,000 Dropbox accounts were compromised after attackers exploited an issue involving Dropbox's legacy authentication integration with…
- The Digital Warfare Podcast
EP. 154: Hackers Exploit Critical JFrog Artifactory CVE-2026-82329
Summary JFrog disclosed CVE-2026-82329 on August 28 as a Critical authentication weakness in Artifactory. Under default configuration, an unauthenticated…
- The Digital Warfare Podcast
EP. 153: Gitea CVE-2026-60004 Exploited in Active RCE Attacks
Summary CVE-2026-60004 is a critical Gitea code-injection vulnerability that CISA added to its Known Exploited Vulnerabilities catalog on August 25. The…
- The Digital Warfare Podcast
EP. 152: PaperCut NG/MF Zero-Day Exploited in Active Attacks
Summary PaperCut confirmed on August 27 that attackers are actively exploiting an undisclosed vulnerability affecting PaperCut NG and PaperCut MF, with…
- The Digital Warfare Podcast
EP. 151: How One Cyberattack Disrupted Norway’s Government Services
Summary A large DDoS attack beginning at approximately 03:38 CEST on August 24 disrupted infrastructure supporting Norway’s shared government digital services…
- The Digital Warfare Podcast
EP. 150: This Router Flaw Can Expose Everything Behind Your Firewall
CVE-2026-75501 affects the Calix GS7 XGS GS5239XG residential gateway running affected EXOS 6.6.47 firmware. The router exposes its UPnP WANIPConnection SOAP…
- The Digital Warfare Podcast
EP. 149: Hackers Can Turn a Zimbra Email Into Remote Code Execution
Summary CVE-2026-73570 is an actively exploited OS command injection vulnerability affecting Zimbra Collaboration Suite versions before 10.1.20 when the…
- The Digital Warfare Podcast
EP. 148: AI-Generated Attack Code Is Now Targeting the Systems That Control Critical Infrastructure
Summary U.S. cybersecurity and national-security agencies have warned of an active threat targeting Siemens S7 Series PLCs in critical infrastructure. The…
- The Digital Warfare Podcast
EP. 147: CVE-2026-64849 Turns MLflow Into a Cloud Credential Theft Path
Summary CVE-2026-64849 is a critical unauthenticated SSRF vulnerability in MLflow’s webhook delivery functionality. A remote attacker can bypass URL validation…
- The Digital Warfare Podcast
EP. 146: How a Private APN Became a Backdoor Into a Polish Power Plant
Summary A destructive cyberattack against a Polish combined heat and power facility demonstrated a previously undocumented attack path through a private…
- The Digital Warfare Podcast
EP. 146: CRPx0 Is Rewriting the Ransomware Business Model
Summary CRPx0 has emerged as a rapidly expanding ransomware operation, increasing from fewer than 10 claimed victims in June to 46 claimed victims in July…
- The Digital Warfare Podcast
EP. 145: VMware vCenter Under Attack: CVE-2026-59310 Enables Persistent Access
Summary CVE-2026-59310 is a critical directory traversal vulnerability in VMware vCenter Server’s Syslog component that can allow a remote attacker with…
- The Digital Warfare Podcast
EP. 144: The Metabase Zero-Day That Turns Analytics Into a Database Attack Path
Summary An actively exploited Metabase vulnerability tracked as GHSA-vwf4-m7j8-wcjf allows unauthenticated remote attackers to inject arbitrary SQL into the…
- The Digital Warfare Podcast
EP. 143: CVE-2026-8037 Turns LoadMaster Into a Pre-Authentication Attack Path
Summary CVE-2026-8037 is a critical command injection vulnerability affecting Progress Kemp LoadMaster and related ADC products. It allows an unauthenticated…
- The Digital Warfare Podcast
EP. 142: How CVE-2026-12569 Turned Windchill Into a Ransomware Gateway
Summary CVE-2026-12569 is a critical unauthenticated remote code execution vulnerability affecting PTC Windchill PDMLink and FlexPLM. The flaw involves…
- The Digital Warfare Podcast
Digital Warfare Podcast Daily Brief #141 August 04, 2026
Summary Researchers disclosed three attack techniques collectively known as Pass-ta-key, targeting Google Password Manager’s synced passkeys in Chrome on…
- The Digital Warfare Podcast
Digital Warfare Podcast Daily Brief #140 August 03, 2026
Summary N-able has released build 2026.3.1.7 to address CVE-2026-18577, an authentication bypass vulnerability actively exploited against N-central remote…
- The Digital Warfare Podcast
Digital Warfare Podcast Daily Brief #139 July 30, 2026
Summary A Russian state-sponsored threat actor is exploiting CVE-2026-42897, a cross-site scripting vulnerability in Microsoft Exchange Outlook Web Access, to…
- The Digital Warfare Podcast
Digital Warfare Podcast Daily Brief #138 July 29, 2026
Summary A critical vulnerability chain known as WP2Shell allows attackers to combine two flaws in WordPress Core to achieve unauthenticated remote code…
- The Digital Warfare Podcast
Digital Warfare Podcast Daily Brief #137 July 28, 2026
Summary Arista has patched CVE-2026-16812, a maximum-severity OS command-injection vulnerability affecting on-premises VeloCloud Orchestrator deployments. The…
- The Digital Warfare Podcast
Digital Warfare Podcast Daily Brief #136 July 27, 2026
Summary Threat actors are compromising public Wi-Fi gateways at hotels, conference centres, and other shared venues to redirect Microsoft 365 authentication…
- The Digital Warfare Podcast
Digital Warfare Podcast Daily Brief #135 July 23, 2026
Summary Shadow AI has become a widespread enterprise security challenge as employees adopt AI assistants, browser extensions, meeting tools, coding platforms…