Cybersecurity Today

Cybersecurity Today: DeepSeek AI Disruptions, Nvidia Breach, and TalkTalk Hack Revisited

In this weekend edition of Cybersecurity Today, our panel reviews the most significant cybersecurity stories of the past month. This episode features Laura Payne from White Tuque, David Shipley from Beauceron Security, and Dana Proctor from IBM. Key topics include the sudden emergence of DeepSeek AI, Nvidia’s vulnerabilities and their effect on stock prices, and TalkTalk’s latest data breach. Additionally, the discussion covers the soaring API security vulnerabilities reported by Wallarm and the UK’s potential legislative action on ransomware payments. Stay tuned for expert insights and analysis on these pressing issues in the world of cybersecurity.

00:00 Introduction and Panel Welcome 00:41 DeepSeek AI Disruption 02:09 Security Concerns and Reactions 04:06 NVIDIA's Vulnerabilities and AI Security 07:15 Economic and Geopolitical Implications 12:13 AI in Business and Security Practices 20:57 Open Source AI and Cybersecurity Risks 25:37 Responsibility in Data Management 26:25 AI's Unstoppable Progress 26:53 API Security Concerns 28:41 Non-Human Identities and API Challenges 30:36 The State of Cybersecurity Awareness 35:05 Legislative Hopes and Cybersecurity 37:25 TalkTalk Breach Revisited 44:10 Ransomware Legislation Proposals 45:34 Shoutout to Cyber Police 47:04 Closing Remarks and Audience Engagement

Cybersecurity Today: DeepSeek AI's Data Breach, New API Threats, & Operation Talent

In this episode of 'Cybersecurity Today,' host Jim Love delves into the recent security lapse by DeepSeek AI, highlighting the exposure of sensitive data through an open ClickHouse database. Learn about the growing threat posed by APIs as the primary attack vector in cybersecurity, with findings from Wallarm's 2025 API Threat Stat Report. Additionally, discover the impact of international law enforcement's Operation Talent on dismantling major cybercrime forums, and be informed about a new browser attack technique, 'browser sync jacking,' which poses risks to millions of users. Stay tuned for a comprehensive overview of the latest in cybersecurity.

00:00 Major Security Concerns with DeepSeek AI Databases 03:13 The Rise of API Cyber Attacks 05:23 Global Crackdown on Cybercrime Forums 07:04 New Browser Attack Technique Discovered 08:54 Conclusion and Upcoming Discussions

Navigating AI Cyber Threats and Critical Infrastructure Vulnerabilities

In this episode of Cybersecurity Today, host Jim Love discusses the recent cyber attack on AI platform DeepSeek that exploited open source vulnerabilities. He highlights significant challenges in U.S. cybersecurity oversight following disruptions in key bodies like the Cyber Safety Review Board. The episode also covers a backdoor vulnerability in Juniper routers being actively exploited, and the FBI warning about misuse of local admin accounts. Organizations are urged to bolster their defenses by reviewing admin logs and enforcing stronger access controls amidst evolving cyber threats.

00:00 Introduction to Cybersecurity Challenges 00:23 DeepSeek Cyber Attack Incident 01:10 Leadership Crisis in Cybersecurity Oversight 02:28 Juniper Router Backdoor Vulnerability 03:49 FBI Warning on Local Admin Account Exploits 04:55 Conclusion and Contact Information

Cybersecurity Recap: Major Data Breaches, Transparency Issues, and a Twist on Script Kiddies

In this episode of Cybersecurity Today, host Jim Love covers various major cybersecurity incidents and developments. Mozilla criticizes the auto industry's data privacy practices following a Volkswagen data breach affecting 800,000 electric cars. The Upper Canada School Board faces a data breach exposing sensitive information. MasterCard is scrutinized for its lack of transparency over a DNS misconfiguration. In a surprising turn, a fake malware builder hacks 18,000 script kiddies attempting cyber attacks. Tune in for detailed insights and important cybersecurity updates.

00:00 Volkswagen Data Breach Exposes 800,000 Electric Cars 02:14 Upper Canada School Board Data Breach 03:40 MasterCard's Transparency Issues 05:56 Hackers Get Hacked: Fake Malware Builder 07:33 Conclusion and Contact Information

Exploring Cyber Vulnerabilities in Civic Infrastructure with Ethical Hacker Nick Aleks

In this episode, we dive into the vulnerabilities present in our civic infrastructure with ethical hacker Nick Aleks. We discuss the risks associated with outdated and poorly secured systems that run our cities' utilities, smart buildings, and transit networks. Nick provides insights into how nation-state hackers could exploit these vulnerabilities and the serious consequences of such attacks. The video highlights the importance of collaboration, regular security updates, and the role of ethical hackers in identifying and mitigating these threats.

00:00 Introduction to Civic Infrastructure Issues 01:28 A Hacker's Perspective on City Infrastructure 03:36 Exploring Vulnerabilities in Smart Infrastructure 12:01 The Threat to Municipal Systems 19:00 Defensive Measures and Solutions 23:42 Conclusion and Final Thoughts

Cybersecurity Today: Stolen Credentials, Firewall Leaks, and Energy Sector Risks

In this episode of Cybersecurity Today, host Jim Love discusses the alarming sale of thousands of credentials from leading cybersecurity vendors on the dark web, a massive leak of FortiGate firewall configuration files impacting nearly 5,000 organizations, and a major breach at education technology provider PowerSchool exposing sensitive data for millions. The episode also examines the increasing threats facing the U.S. energy sector, urging immediate action to modernize aging infrastructure and enhance cybersecurity measures. Tune in to learn more about these critical issues and how to safeguard against them.

00:00 Introduction to Cybersecurity Threats 00:16 Dark Web Credentials for Sale 01:56 FortiGate Firewall Configuration Leak 03:16 PowerSchool Data Breach 04:33 Rising Threats in the Energy Sector 06:42 Conclusion and Final Thoughts

Critical Cybersecurity Updates: Avery Data Breach, Hamilton Ransomware Attack, and Microsoft Outlook Patch

In this episode of Cybersecurity Today, host Jim Love covers significant cybersecurity incidents and updates. Avery experiences a massive data breach affecting 61,000 customers due to a credit card skimmer. The city of Hamilton commits $52 million to rebuild its IT infrastructure following a ransomware attack. A new study unveils serious vulnerabilities in Internet tunneling protocols, potentially exposing over 4.2 million systems globally. Lastly, Microsoft issues a critical patch for an actively exploited vulnerability in Outlook, urging users to update immediately. Stay informed on these pressing cybersecurity issues!

00:00 Introduction and Headlines 00:23 Vulnerabilities in Internet Tunneling Protocols 01:49 Avery Data Breach Details 03:05 Hamilton's Ransomware Attack and Recovery Plan 04:27 Microsoft Outlook Critical Patch 05:49 Conclusion and Contact Information

Cybersecurity Today: Sneaky 2FA Phishing Attack & AI-Powered Scams

In this episode of Cybersecurity Today, host Jim Love explores the emergence of Sneaky 2FA, a new phishing-as-a-service attack that compromises two-factor authentication for Microsoft 365 users. The episode also covers a legal case where a scam led a Western Australian company to lose $190,000, underscoring the importance of robust payment verification processes. The discussion extends to AI-powered romance scams, featuring deep fake technology that has defrauded victims worldwide, highlighting the growing need for advanced fraud detection and awareness.

00:00 Introduction to Cybersecurity Threats 00:23 Sneaky 2FA: A New Phishing Threat 01:54 Legal Consequences of Email Scams 03:34 AI-Powered Romance Scams 05:34 Conclusion and Contact Information

Addressing Social Media Fraud: Insights from Netcraft's Robert Duncan

In this weekend edition of Cybersecurity Today, host Jim Love discusses the growing issue of fraud in the cybersecurity landscape. Jim interviews Robert Duncan, VP of Product Strategy at Netcraft, who sheds light on their research into fraudulent activities on social media platforms, particularly focusing on Truth Social. The conversation delves into the mechanics of conversational scams, the role of crypto in fraud, and the challenges faced by social media platforms in combating these threats. They also discuss the need for better protective measures and the varying approaches to content moderation across different jurisdictions. Tune in for an in-depth look into the pervasive issue of online fraud and the ongoing efforts to fight it.

00:00 Introduction to Cybersecurity Today 00:21 Interview with Robert Duncan from Netcraft 01:12 Understanding Social Media Scams 06:09 The Role of Crypto in Scams 14:25 Challenges and Responsibilities of Social Media Platforms 23:31 Future Research and Conclusion

Cybersecurity Today: High-Speed Go Library Exploits & Major Data Breaches

In today's episode, host Jim Love covers recent cybersecurity threats including the exploitation of a high-speed Go library to target Microsoft 365 accounts, North Korea's Lazarus Group's new tactics to lure developers with AI-enhanced job scams, and the leak of sensitive data from over 15,000 FortiGate devices by the Belson Group. Learn more about these threats and how to protect your systems.

00:00 Hackers Exploit High-Speed Go Library to Target Microsoft 365 02:07 North Korea's Lazarus Group Targets Developers with Job Scams 04:09 Belson Group Leaks Sensitive Data from FortiGate Devices 05:58 Conclusion and Contact Information