Cyber Security News Byte Podcast

This week we talk about [0:36] how PowerSchool’s deleted data came back to haunt North Carolina schools, then [6:09] a massive IoT botnet that turned everyday devices into cybercriminal accomplices, then [11:13] a sneaky backdoor hidden in Magento extensions for over six years, and finally [15:50] how a government-endorsed Signal clone led to a national security headache.

Links https://www.wral.com/news/education/threat-actor-claims-to-have-nc-student-data-may-2025 https://www.wral.com/story/a-hacker-s-ransom-inside-the-cyberattack-that-compromised-nc-student-and-teacher-records/21989281 https://thehackernews.com/2025/05/breaking-7000-device-proxy-botnet-using.html https://www.bleepingcomputer.com/news/security/magento-supply-chain-attack-compromises-hundreds-of-e-stores https://www.washingtonpost.com/technology/2025/05/06/signal-archive-cybersecurity-waltz-wyden https://www.washingtonpost.com/politics/2025/05/01/waltz-signal-app-photo-cabinet https://en.wikipedia.org/wiki/United_States_government_group_chat_leaks PowerSchool Breach: When ‘Delete’ Doesn’t Mean Gone When Your Toaster Joins a Cybercrime Ring The Phantom Backdoor: Six Years of Silent Sabotage The TeleMessage Debacle in Government Communications Develop an incident response plan to address security breaches swiftly. This includes identifying the breach, containing it, notifying affected...

Links https://ismailtasdelen.medium.com/commvaults-azure-breach-a-zero-day-tale-of-webshells-and-nation-state-hackers-%EF%B8%8F-%EF%B8%8F-4d23a46467d6 https://gbhackers.com/commvault-confirms-zero-day-attack https://thehackernews.com/2025/05/commvault-confirms-hackers-exploited.html https://nvd.nist.gov/vuln/detail/cve-2025-3928 https://www.commvault.com/blogs/security-advisory-march-7-2025 https://cybersecuritynews.com/harrods-store-hit-by-cyber-attack https://www.thetimes.co.uk/article/harrods-cyberattack-marks-and-spencer-coop-mj7vjkdkv https://cybersecuritynews.com/nebulous-mantis-hackers-actively-deploying-romcom-rat https://thehackernews.com/2025/04/nebulous-mantis-targets-nato-linked.html https://www.bleepingcomputer.com/news/security/hackers-abuse-ipv6-networking-feature-to-hijack-software-updates https://cybersecuritynews.com/hackers-abuse-ipv6-stateless-address-for-aitm-attack https://thehackernews.com/2025/04/chinese-hackers-abuse-ipv6-slaac-for.html Commvault’s Zero-Day Drama Harrods Joins the Cyber Hit List The Malware Love Story You Didn’t Swipe Right On When Your Router Turns Against You Employee Training: Educate staff about the risks associated with IPv6 and the importance of network security hygiene.

Contents Commvault’s Zero-Day Drama. 2 Harrods Joins the Cyber Hit List 3 The Malware Love Story You Didn’t Swipe Right On. 4 When Your Router Turns Against You. 5 Links Commvault’s Zero-Day Drama Harrods Joins the Cyber Hit List The Malware Love Story You Didn’t Swipe Right On When Your Router Turns Against You Phish,...

Contents Cookie-Bite Attacks: Emerging Threat to Cloud and MFA Security. 2 Lazarus Strikes Before You Update. 3 Hackers Exploit Cloudflare Tunnels to Infiltrate Systems. 4 R00TK1T’s TikTok Takedown. 5 Links Cookie-Bite Attacks: Emerging Threat to Cloud and MFA Security Lazarus Strikes Before You Update Hackers Exploit Cloudflare Tunnels to Infiltrate Systems R00TK1T’s TikTok Takedown

Links https://cybersecuritynews.com/cookie-bite-attack https://cybersecuritynews.com/lazarus-apt-attacking-organizations https://cybersecuritynews.com/hackers-abuse-cloudflare-tunnel-infrastructure https://cybersecuritynews.com/hackers-allegedly-breach-tiktok Cookie-Bite Attacks: Emerging Threat to Cloud and MFA Security Lazarus Strikes Before You Update Hackers Exploit Cloudflare Tunnels to Infiltrate Systems R00TK1T’s TikTok Takedown

From fake Chrome download pages spreading SpyNote malware to stealthy attacks on Fortinet devices and dangling DNS exploits, cyber criminals are getting creative. Meanwhile, Volt Typhoon shows China’s long game in infiltrating U.S. infrastructure. This episode dives into the hidden threats lurking behind legitimate facades.

From fake toll smishing attacks and job scam malware to tax-themed phishing and compromised npm packages, cybercriminals are pulling out all the psychological stops. This episode exposes how attackers prey on urgency, trust, and tax season chaos to deploy malware like BeaverTail, Tropidoor, and Remcos. Tune in to learn how to spot the tricks before they drain your data—or your crypto wallet.

This week we talk about [00:36] a new banking/crypto trojan stealing credentials and taking over phones, then [11:21] a new dropper malware that uses a bunch of techniques to avoid detection, then [18:18] how hackers stealing malchimp sessions and using it for phishing and finally [23:12] FireFox and Chrome have a serious vulnerability currently being exploited.

This week we talk about [00:36] We talk about a new Remote Access Trojan (RAT) that uses Telegram as it's command and control server, then [07:56] we talk about how DigiCert made a mistake and needed to revoke certificates and the chaos that causes, but why it's needed, then [16:21] we talk about how criminals once again are utilizing CloudFlare's free tunnel service to once again get around security controls and compromise systems and finally [22:44] how the rise of fake profiles on LinkedIN are being used to gain information that could be used again you.