* Russian Hackers Leverage Wi-Fi to Bypass Security and Breach Networks

* Australia Passes Landmark Cyber Security Legislation

* Malicious Python Packages Exploit AI Enthusiasm

* Ransomware Attack on Supply Chain Software Disrupts Major Retailers During Holidays

* New CWE Methodology Shake up has Cross Site Scripting as 2024's Most Dangerous Software Weakness

* Special Thanks to Justin Butterfield for contributing some of the interesting stories for this week’s cyber bites.

* Australia Faces Escalating Cyber Threats Amid Complex Strategic Environment

* Sextortion Scams Abuse Microsoft 365 Admin Portal to Bypass Email Filters

* Cybercriminals Exploit Black Friday Shopping Season with Phishing Attacks

* The Dark World of Online Scams: A Deep Dive

* Google Prepares to Launch Shielded Email for Enhanced Privacy

This is a rebroadcast of Season 1, Episode 10 of AppSec Unlocked.

In this episode of AppSec Unlocked, we dive into the fascinating topic of using a FAIR approach to Vulnerability Patch prioritization, where we explore how organizations can better prioritize vulnerabilities in their open-source software using the FAIR model and EPSS. And we have Denny Wan, an expert on FAIR analysis sharing his insights on this innovative approach.

* Google Pixel AI-powered Features To Combat Scam Calls

* Apple's New Security Feature: Automatic Reboots to Protect Data

* Massive Data Leak Exposes Employee Information from Over 25 Companies

* Bitdefender Releases Free Decryptor for ShrinkLocker Ransomware

* New Phishing Campaign Uses Fake Copyright Claims to Spread Malware

* Cloud Security Concerns Surge in APAC as Data Breaches Remain High

* AI-Powered Scams: A Growing Threat

* Western Sydney University Suffers Major Data Breach

* New FakeCall Malware Targets Android Users for Financial Fraud

* UK Regulator Warns Financial Firms After CrowdStrike Outage

* OWASP Releases GenAI Security Guidelines

This episode is a replay from our sister podcast AppSec Unlocked

In today's rapidly evolving cybersecurity landscape, managing vulnerabilities in open-source components has become increasingly complex. While traditional approaches relying solely on CVSS scores have their merits, they may not be sufficient to address the exponential growth in discovered vulnerabilities. A more nuanced and scalable approach is needed, one that considers not only severity but also exploitability and potential impact.

An out of band update on my real life encounter with a supply chain attack

* AI Transcription Tool "Whisper" Creates Fabricated Text, Raising Concerns in Healthcare and Beyond

* Massive UN Data Leak Exposes Personal Information of Violence Against Women Victims

* Mandiant Report: Exploited Vulnerabilities Reach Record Lows in Time to Patch, But Zero-Days on the Rise

* Fake Browser Update Malware Targets WordPress Sites via Malicious Plugins

* Large-Scale Operation Steals Cloud Credentials from Exposed Git Repositories

* Anthropic's New AI Can Interact with Computers, Raising Safety Concerns

* Internet Archive Hit Again: Exposed Tokens Lead to Zendesk Email Breach

* Malicious npm Packages Target Developers' Ethereum Wallets with SSH Backdoor

* Half of Businesses Underestimate SaaS Security Risks, Culture Blamed

* Cyber Skills Gap Widens, Nearly 90% of Businesses Link Breaches to Lack of Expertise