Shows / Daily DefSec Brief
Daily DefSec Brief
A daily podcast covering the important cyber security news that IT and security teams need to know.
Episodes
- Daily DefSec Brief
PHP2Shell hits Palo Alto firewalls, Cisco ASA VPN zero-day | Cyber Security News Oct 29
Attackers are using PHP2Shell against Palo Alto firewall management pages, an exploited flaw crashes Cisco ASA and FTD VPNs, and Talos found an SD-WAN implant…
- Daily DefSec Brief
HTTP2Shell flaw exploited, stolen GitHub tokens, Magento PolyShell | Cyber Security News Oct 28
Attackers are exploiting the Brotli flaw behind HTTP2Shell and Magento's PolyShell, and stolen GitHub tokens are dumping private repo secrets. Every version…
- Daily DefSec Brief
Guessed FortiGate passwords, coding agent hijack, Brotli beyond Node | Cyber Security News Oct 26
An access broker guessed its way into FortiGate firewalls and decrypted their configs for the domain accounts inside, a planted AGENTS.md file in a Downloads…
- Daily DefSec Brief
VeloCloud zero-day exploited, Railway secrets breach, M365 token replay | Cyber Security News Oct 23
Attackers are exploiting a third VeloCloud Orchestrator zero-day, stolen Microsoft 365 tokens were replayed against 79 organizations from one hosting range…
- Daily DefSec Brief
PHP2Shell exploited, LiteLLM poisoned, Fortinet fixes with no CVEs | Cyber Security News Oct 22
Attackers are now exploiting PHP2Shell, a poisoned LiteLLM release carried a stealer for AI and cloud keys, and Fortinet shipped critical fixes while holding…
- Daily DefSec Brief
PHP critical fixes after a leak, eMudhra CA keys, SafePay ransomware | Cyber Security News Oct 21
PHP ships fixes today for two critical flaws whose details leaked ahead of disclosure, and a certificate authority's signing keys turned out to be guessable…
- Daily DefSec Brief
NetScaler root takeover, Siemens app in ClickFix, Plex hijacks | Cyber Security News Oct 20
The NetScaler flaw that crashed appliances is a step in a root takeover whose implant tries to copy itself to the HA partner. ClickFix crews bring a signed…
- Daily DefSec Brief
ConnectWise app breach hits M365 tenants, FortiGate memory implant | Cyber Security News Oct 19
Attackers used ConnectWise's app credentials to enter Microsoft 365 tenants. Also: a FortiGate implant, stolen UpdraftCentral keys, NTLMv1 blocks, AOMEI's…
- Daily DefSec Brief
BeyondTrust zero-day exploited, Atlassian flaw under attack | Cyber Security News Oct 16
Attackers are using a BeyondTrust Remote Support zero-day and the Atlassian Data Center file-read flaw. Also: Office Preview Pane flaws, AI coding tokens…
- Daily DefSec Brief
Cisco email gateway exploited, PAN-OS zero-day, Zimbra send-as flaw | Cyber Security News Oct 15
Attackers are getting root on Cisco Secure Email Gateways with a crafted attachment, and the fix is a month old. Also: a PAN-OS zero-day, Ahsay's failed patch…
- Daily DefSec Brief
Ivanti VPN zero-days, exploited Windows flaw, Docker Hub token mix-up | Cyber Security News Oct 14
Attackers chained Ivanti Connect Secure zero-days to take over VPNs without a login, one of them fully patched, and Microsoft's record October updates fix a…
- Daily DefSec Brief
Cyber Security News for October 13 2026 - Daily DefSec Brief
1. GitLab fixes a 10.0 pre-login code execution flaw — CVE-2026-97229 — Fixed: 19.4.2, 19.3.5 or 19.2.8 — Do: Upgrade self-managed GitLab —…
- Daily DefSec Brief
Cyber Security News for October 12 2026 - Daily DefSec Brief
1. GlobalProtect bypass still feeds ransomware — CVE-2026-0257 — Fixed: 12.1.7, 11.2.12, 11.1.15, 10.2.18-h6, or the matching hotfix — Do: Patch GlobalProtect…
- Daily DefSec Brief
Cyber Security News for October 9 2026 - Daily DefSec Brief
1. AhsayCBS backup consoles exploited, no patch — CVE-2026-105134, CVE-2026-105133 — Do: Take the AhsayCBS console off the internet —…
- Daily DefSec Brief
Cyber Security News for October 8 2026 - Daily DefSec Brief
1. Japan's data thefts came through internal APIs — CVE-2026-72898 — Do: Find the internal APIs your apps expose —…
- Daily DefSec Brief
Cyber Security News for October 7 2026 - Daily DefSec Brief
1. FortiBleed is active and locking admins out — Do: Reset Fortinet admin and VPN passwords — https://www.ic3.gov/CSA/2026/261006.pdf 2. Ninja Forms flaw is…
- Daily DefSec Brief
Cyber Security News for October 6 2026 - Daily DefSec Brief
1. ClickFix stages its payload in the browser cache — Do: Disable Windows Script Host where it isn't needed —…
- Daily DefSec Brief
Cyber Security News for October 5 2026 - Daily DefSec Brief
1. NetScaler SAML flaw exploited after last fix — CVE-2026-88779 — Fixed: 14.1-73.41 or 13.1-64.28 — federal due 2026-10-07 — Do: Update NetScaler again if it…
- Daily DefSec Brief
Cyber Security News for October 2 2026 - Daily DefSec Brief
1. FortiMail zero-day exploited, no patch yet — CVE-2026-104286 — federal due 2026-10-04 — Do: Take FortiMail's admin interface off the internet —…
- Daily DefSec Brief
Cyber Security News for October 1 2026 - Daily DefSec Brief
1. Cisco SD-WAN Manager zero-day gives admin — CVE-2026-76504 — Fixed: 20.9.10.1, 20.12.8.2, 20.15.6.1, 20.18.4.1, 26.1.2.1, 26.2.1 — federal due 2026-10-03 —…
- Daily DefSec Brief
Cyber Security News for September 30 2026 - Daily DefSec Brief
1. A password reset led to Kubernetes credentials — Do: Alert on sign-in methods added after resets —…
- Daily DefSec Brief
Cyber Security News for September 29 2026 - Daily DefSec Brief
1. Exploited Apple flaw fixed for older releases — CVE-2026-86950 — Fixed: 26.7.1 · 15.8.1 — Do: Update iPhones and Macs still on older releases —…
- Daily DefSec Brief
Cyber Security News for September 28 2026 - Daily DefSec Brief
1. NetScaler zero-days exploited before the patch — CVE-2026-88771, CVE-2026-88772 — Fixed: 14.1-73.37, 13.1-64.23, 13.1-37.279 (FIPS and NDcPP) — federal due…
- Daily DefSec Brief
Cyber Security News for September 25 2026 - Daily DefSec Brief
1. One affiliate, four ransomware brands, one toolkit — Do: Hunt for remote access tools you didn't deploy —…
- Daily DefSec Brief
Cyber Security News for September 24 2026 - Daily DefSec Brief
1. Roundcube pre-login SQL injection now exploited — CVE-2026-48842 — Fixed: 1.6.16 or 1.7.1 — Do: Upgrade Roundcube webmail —…
- Daily DefSec Brief
Cyber Security News for September 23 2026 - Daily DefSec Brief
1. F5 BIG-IP APM zero-day exploited for code execution https://my.f5.com/manage/s/article/K000162605 2. Check Point management servers exploited since July…
- Daily DefSec Brief
Cyber Security News for September 22 2026 - Daily DefSec Brief
1. A thousand switches gave up the network map — CVE-2026-7273 — Fixed: 2.90(ABTQ.2)C0 on the 48HPv2 — each model has its own 2.90 build ending .2)C0 — federal…
- Daily DefSec Brief
Cyber Security News for September 21 2026 - Daily DefSec Brief
1. Orkes Conductor RCE exploited for a month — CVE-2026-58138 (fixed in 3.30.2) — Do: Patch Conductor, put its API behind login —…
- Daily DefSec Brief
Cyber Security News for September 18 2026 - Daily DefSec Brief
1. Cisco ISE zero-day exploited for full control — CVE-2026-76460 — Do: Upgrade ISE, grep access.log on every node —…
- Daily DefSec Brief
Cyber Security News for September 16 2026 - Daily DefSec Brief
1. WSO2 API gateway takes a forged admin token — CVE-2026-5430 — Do: Apply the WSO2 update level, rotate gateway secrets —…
- Daily DefSec Brief
Cyber Security News for September 15 2026 - Daily DefSec Brief
1. Cisco email gateway zero-day exploited for root — CVE-2026-76461, CVSS 9.8 — Do: Upgrade AsyncOS 16.5.0-780, grep mail_logs —…
- Daily DefSec Brief
Cyber Security News for September 14 2026 - Daily DefSec Brief
1. GitLab path traversal at CVSS 10, now exploited — CVE-2026-85706 — Do: Upgrade GitLab, then grep for file.path —…
- Daily DefSec Brief
Cyber Security News for September 11 2026 - Daily DefSec Brief
1. Two MikroTik flaws exploited, deadline Sunday — CVE-2026-86060, CVE-2026-67277 — Do: Patch RouterOS, close SSH and btest —…
- Daily DefSec Brief
Cyber Security News for September 10 2026 - Daily DefSec Brief
1. Cisco firewall manager exploited to root — CVE-2026-20079 (CVSS 10.0), CVE-2026-20316 — Do: Apply the Cisco Secure FMC hotfixes now — Cisco Talos —…
- Daily DefSec Brief
Cyber Security News for September 9 2026 - Daily DefSec Brief
1. Record 974-CVE Patch Tuesday, two zero-days live — CVE-2026-81963, CVE-2026-85880 (CVSS 7.8) — Do: Install September Windows updates now — SecurityWeek —…
- Daily DefSec Brief
Cyber Security News for September 8 2026 - Daily DefSec Brief
1. A maximum-severity Magento zero-day was exploited for three days before Adobe shipped a fix — CVE-2026-75650 — Do: Apply the APSB26-146 composer patch, then…
- Daily DefSec Brief
Cyber Security News for September 4 2026 - Daily DefSec Brief
1. Chrome patches a V8 zero-day that attackers are already using — CVE-2026-85046 — The Hacker News —…
- Daily DefSec Brief
Cyber Security News for September 3 2026 - Daily DefSec Brief
1. Kestra workflow engine lets anyone run commands with no credentials at all — CVE-2026-49869 — CISA KEV —…
- Daily DefSec Brief
Cyber Security News for September 2 2026 - Daily DefSec Brief
1. SonicWall SMA1000 zero-days chained for pre-auth remote code execution — CVE-2026-83548, CVE-2026-83549 — SecurityWeek —…
- Daily DefSec Brief
Cyber Security News for September 1 2026 - Daily DefSec Brief
1. OpenSearch SQL plugin deserialization flaw gives a read-only user code execution — CVE-2026-83497 — AWS Security Bulletin —…
- Daily DefSec Brief
Cyber Security News for August 31 2026 - Daily DefSec Brief
1. PaperCut ships a second emergency patch after attackers chain two zero-days — CVE-2026-82078, CVE-2026-81578 — SecurityWeek —…
- Daily DefSec Brief
Cyber Security News for August 28 2026 - Daily DefSec Brief
1. ownCloud unauthenticated file access flaw added to CISA KEV — CVE-2023-49105 — CISA KEV — https://www.cisa.gov/known-exploited-vulnerabilities-catalog 2…
- Daily DefSec Brief
Cyber Security News for August 27 2026 - Daily DefSec Brief
1. PaperCut NG/MF under active exploitation, no patch yet — Help Net Security — https://www.helpnetsecurity.com/2026/08/27/papercut-ng-mf-vulnerability-attack/…
- Daily DefSec Brief
Cyber Security News for August 26 2026 - Daily DefSec Brief
1. CISA adds actively exploited Gitea code-injection flaw to KEV — CVE-2026-60004 — CISA KEV — https://www.cisa.gov/known-exploited-vulnerabilities-catalog 2…
- Daily DefSec Brief
Cyber Security News for August 25 2026 - Daily DefSec Brief
1. CISA adds actively exploited Oracle HTTP Server / WebLogic proxy plug-in flaw to KEV — CVE-2026-21962 — CISA KEV —…
- Daily DefSec Brief
Cyber Security News for August 24 2026 - Daily DefSec Brief
1. Passkey phishing kit keeps mailbox access after a password reset — SecurityWeek —…
- Daily DefSec Brief
Cyber Security News for August 21 2026 - Daily DefSec Brief
1. Max-severity Entra ID flaw exploited before patch — CVE-2026-69836 — BleepingComputer —…
- Daily DefSec Brief
Cyber Security News for August 20 2026 - Daily DefSec Brief
1. Feds warn of active AI-scripted attacks on internet-exposed Siemens S7 PLCs — CISA — https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-231a 2…
- Daily DefSec Brief
Cyber Security News for August 19 2026 - Daily DefSec Brief
1. Windows IKE Extension RCE added to CISA KEV, now exploited — CVE-2026-33824 — CISA KEV — https://www.cisa.gov/known-exploited-vulnerabilities-catalog 2…
- Daily DefSec Brief
Cyber Security News for August 18 2026 - Daily DefSec Brief
1. Windows Task Host privesc actively exploited by ransomware gangs — CVE-2025-60710 — BleepingComputer —…
- Daily DefSec Brief
Cyber Security News for August 17 2026 - Daily DefSec Brief
1. macOS Screen Sharing auth-bypass exploited to root Macs and drop Monero miners — CVE-2026-65400 — SecurityWeek —…
- Daily DefSec Brief
Cyber Security News for August 14 2026 - Daily DefSec Brief
1. GeoServer zero-day exploited within hours, no patch yet — SecurityWeek https://www.securityweek.com/hackers-exploiting-unpatched-geoserver-zero-day/ · Cyber…
- Daily DefSec Brief
Cyber Security News for August 13 2026 - Daily DefSec Brief
1. VMware vCenter path-traversal RCE now APT-exploited — CVE-2026-59310 — SecurityWeek —…
- Daily DefSec Brief
Cyber Security News for August 12 2026 - Daily DefSec Brief
1. Windows WinSock use-after-free zero-day exploited by Lazarus — CVE-2026-68820 — SecurityWeek —…
- Daily DefSec Brief
Cyber Security News for August 11 2026 - Daily DefSec Brief
1. Gunra ransomware exploits Fortinet and Schneider Electric flaws — joint FBI/CISA/South Korea advisory — CVE-2024-55591, CVE-2025-24472, CVE-2024-5559…
- Daily DefSec Brief
Cyber Security News for August 10 2026 - Daily DefSec Brief
1. WordPress supply-chain attack poisons BdThemes plugins via remote API feed — Cyber Security News —…
- Daily DefSec Brief
Cyber Security News for August 7 2026 - Daily DefSec Brief
1. SOGo webmail XSS exploited in the wild via malicious calendar invites — CVE-2026-8496 — CERT/CC — https://kb.cert.org/vuls/id/487613 2. INTERRUPT INJECTION…
- Daily DefSec Brief
Cyber Security News for August 6 2026 - Daily DefSec Brief
1. JetBrains TeamCity deserialization RCE added to CISA KEV — CVE-2026-63077 — CISA KEV — https://www.cisa.gov/known-exploited-vulnerabilities-catalog 2…
- Daily DefSec Brief
Cyber Security News for August 5 2026 - Daily DefSec Brief
1. Langflow unauthenticated RCE now on CISA KEV — CVE-2026-9198 — SecurityWeek —…
- Daily DefSec Brief
Cyber Security News for August 4 2026 - Daily DefSec Brief
1. Critical unauthenticated RCEs in Adobe Campaign Classic — CVE-2026-48317, -48323, -48326, -48330, -48331, -48333, -48399 — Cyber Security News —…