This episode of the podcast covers a series of significant cybersecurity incidents that highlight vulnerabilities across industries and platforms. It begins with a privacy lapse in a Verizon app that exposed millions of users' call records, drawing attention to the need for stronger data protection protocols. The episode then shifts to a ransomware attack that disrupted essential services within the Red Lake Nation, followed by an analysis of malicious Python packages targeting bitcoinlib users through a software supply chain attack. Listeners also learn about a ransomware breach at the Port of Seattle affecting around 90,000 individuals, and a sophisticated supply chain compromise involving GitHub Actions and Coinbase. Additional coverage includes emerging risks from AI systems like DeepSeek-R1, which could be exploited for malware creation, as well as a mysterious Oracle credentials breach under investigation by cybersecurity firms and the FBI. The episode concludes with news of an evasive Android Trojan hidden in counterfeit devices linked to major financial theft through social engineering and cryptocurrency manipulation.
https://healsecurity.com/