Shows / Daily DefSec Brief

Daily DefSec Brief
A daily podcast covering the important cyber security news that IT and security teams need to know.
Episodes
Daily DefSec BriefCyber Security News for August 3 2026 - Daily DefSec Brief
1. N-able N-central auth bypass under active exploitation (incomplete first fix) — CVE-2026-18556, CVE-2026-18577 — The Hacker News —…
Daily DefSec BriefCyber Security News for July 31 2026 - Daily DefSec Brief
1. CISA warns of active attacks locking operators out of water-sector PLCs — CISA —…
Daily DefSec BriefCyber Security News for July 30 2026 - Daily DefSec Brief
1. Cisco Secure Firewall Management Center hardcoded password added to CISA KEV — CVE-2026-20316 — CISA KEV —…
Daily DefSec BriefCyber Security News for July 29 2026 - Daily DefSec Brief
1. Coordinated OT attack disrupts 30+ Minnesota water utilities — SecurityWeek https://www.securityweek.com/dozens-of-minnesota-water-utilities-targeted-in-coor…
Daily DefSec BriefDaily DefSec Brief - Cyber Security News for July 28 2026
1. Arista VeloCloud Orchestrator zero-day exploited, added to CISA KEV — CVE-2026-16812 — SecurityWeek —…
Daily DefSec BriefDaily DefSec Brief - Cyber Security News for July 27 2026
1. Fastjson RCE under active exploitation in the Java ecosystem — Risky Business News —…
Daily DefSec BriefDaily DefSec Brief - Cyber Security News for July 24 2026
1. Russian espionage group reads Western mailboxes through zero-click Zimbra flaw — CVE-2025-66376 — CISA —…
Daily DefSec BriefDaily DefSec Brief - Cyber Security News for July 23 2026
1. Check Point SmartConsole authentication bypass zero-day (active exploitation) — CVE-2026-16232, CVE-2026-50751 — CISA KEV…
Daily DefSec BriefDaily DefSec Brief - Cyber Security News for July 22 2026
1. CISA adds DD-WRT UPnP buffer overflow to KEV — CVE-2021-27137 — CISA KEV — https://www.cisa.gov/known-exploited-vulnerabilities-catalog 2. Kratos AiTM…
Daily DefSec BriefDaily DefSec Brief - Cyber Security News for July 21 2026
1. Palo Alto GlobalProtect auth-bypass now used in Qilin ransomware attacks — CVE-2026-0257 — BleepingComputer —…
Daily DefSec BriefDaily DefSec Brief - Cyber Security News for July 20 2026
1. ServiceNow AI Platform RCE now under active exploitation — CVE-2026-6875 — BleepingComputer —…
Daily DefSec BriefDaily DefSec Brief - Cyber Security News for July 17 2026
1. FortiSandbox OS command injection added to CISA KEV, actively exploited — CVE-2026-25089 — CISA KEV —…
Daily DefSec BriefDaily DefSec Brief - Cyber Security News for July 16 2026
1. CISA adds actively exploited Oracle E-Business Suite flaw to KEV, feds have until Saturday — CVE-2026-46817 — CISA KEV…
Daily DefSec BriefDaily DefSec Brief - Cyber Security News for July 15 2026
1. CISA adds SharePoint and AD FS zero-days to KEV, deadline Friday — CVE-2026-56164, CVE-2026-56155 (also CVE-2026-32201, CVE-2026-45659, CVE-2026-58644…
Daily DefSec BriefDaily DefSec Brief - Cyber Security News for July 14 2026
1. CISA adds 18-year-old Cisco IOS flaw to KEV catalog — CVE-2008-4128 — CISA KEV — https://www.cisa.gov/known-exploited-vulnerabilities-catalog 2. Microsoft…
Daily DefSec BriefDaily DefSec Brief - Cyber Security News for July 13 2026
1. Progress tells ShareFile customers to shut down Storage Zone Controller servers — CVE-2026-2699, CVE-2026-2701 — SecurityWeek —…
Daily DefSec BriefDefSec Brief week in review, July 11 2026
1. Langflow authorization bypass on KEV, plus the first fully autonomous LLM-driven ransomware campaign — CVE-2026-55255, CVE-2025-3248 — CISA KEV…
Daily DefSec BriefDaily DefSec Brief - Cyber Security News for July 10 2026
1. Initial access broker weaponizing CitrixBleed 2 to deploy Dragonforce ransomware — CVE-2025-5777 (referencing CVE-2023-4966, CVE-2026-4368) — Huntress —…
Daily DefSec BriefDaily Defsec Brief - Cyber Security News for July 9 2026
Apologies for the dog barking. She was mad that she had not yet received her morning allotment of cheese. 1. Microsoft patches the RoguePlanet Defender…
Daily DefSec BriefDaily DefSec Brief - Cyber Security News for July 8 2026
1. CISA adds ColdFusion, Langflow, and two Joomla plugins to KEV — patch by Friday — CVE-2026-48282, CVE-2026-55255, CVE-2026-48908, CVE-2026-56290 — CISA KEV…
Daily DefSec BriefDaily DefSec Brief - Cyber Security News for July 7 2026
1. BeyondTrust patches critical auth-bypass flaws in Remote Support and Privileged Remote Access — CVE-2026-40138, CVE-2026-40139 — BleepingComputer —…
Daily DefSec BriefThe Microsoft login page that phishing training can't save you from
1. Attackers phishing Microsoft's device-code login flow — no CVE (flow abuse) — Securelist (Kaspersky) —…