Compromise of the NX build system infects 1000 developers' popular enterprise web content management systems let attackers remotely execute code. Amazon disrupts a sophisticated multi-factor authentication device code campaign. Salesforce data theft attacks gets worse.

This episode covers the critical cyber events of the last 24 hours. We analyze the cascading impact of the supply chain attack on a Swedish IT provider and discuss the massive data breach at TransUnion. We also dive into a new joint intelligence advisory on the China-linked APT group "Salt Typhoon" and its targeting of critical infrastructure.

Today’s podcast will cover critical vulnerabilities like the Git arbitrary file write (CVE-2025-48384) and an exploited Citrix NetScaler zero-day (CVE-2025-7775), which can lead to remote code execution. These are compounded by widespread data breaches affecting entities such as Farmers Insurance and Salesforce customers, supply chain attacks like the Nx NPM package poisoning, and the emergence of AI-powered ransomware.

Recent security reports reveal several critical vulnerabilities, including a Docker Desktop flaw (CVE-2025-9074), a Git arbitrary file write (CVE-2025-48384), and an exploited zero-day in Citrix NetScaler (CVE-2025-7775), all requiring urgent patching. Furthermore, AI systems are susceptible to prompt injection via image scaling attacks, and real-world incidents encompass a Salesforce data theft campaign (UNC6395), AI-powered ransomware (PromptLock), and disruptive ransomware attacks against public services in Maryland and state offices in Nevada.

This episode includes a major data breach at Farmers Insurance affecting 1.1 million customers due to a Salesforce-targeted hack, a global phishing campaign spreading UpCrypter malware, and a Pakistan-linked group targeting Indian government agencies with malware. It also covers a critical Docker Desktop vulnerability, espionage involving hijacked Wi-Fi logins, and the emergence of AI injection attacks using steganography, alongside a significant Interpol cybercrime operation in Africa.