Darnley's Cyber Café

Amazon just announced it has deployed enough satellites to launch its Leo broadband service later this year, stepping straight into Starlink's territory and kicking off the next phase of the satellite internet race. 

In this episode of Darnley's Cyber Café, we break down what the milestone really means, how the competition stacks up, and the honest pros and cons of getting your internet from space. Then things take a turn: a $25 hardware hack, a joint government advisory nobody's talking about, and why the box sitting in your yard might be the weakest link in the whole system.

Listen now

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

Merck spent six and a half years fighting over a $1.4 billion insurance claim after the NotPetya cyberattack, and walked away with a settlement, not an answer. The question that mattered most never got resolved.

This episode, Darnley breaks down why cyber insurance feels like the obvious safety net, why the Merck case proves it isn't one you can fully rely on, and what actually determines whether your business survives a serious incident...with or without a payout. This isn't an anti-insurance episode. It's an honesty episode.

Pull up a chair, pour your preferred cup, and let's talk about what your policy will and won't do for you.

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

A job offer lands in your inbox on LinkedIn. The company checks out. The money is fine... All they need is a short report on geopolitics or defence policy.

You just got flagged by the People's Liberation Army.

In this episode we talk about in June 2026, the FBI, MI5, and the intelligence agencies of Canada, Australia, and New Zealand issued what they called an unprecedented joint warning: China's military intelligence services are running systematic recruitment operations on professional networking platforms... targeting anyone with access to government, military, or foreign-policy information.

We break down the cycle, who is being targeted, the payment mechanics, and practical actionable steps to protect yourself, your clearance and professional network. 

Listen here or on your podcast platform. 

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

iPhone users across iOS 16 are having their WhatsApp accounts hijacked...without clicking anything, without approving a login, and without any new device appearing in their Linked Devices list. 

In this episode, we break down how the attack chain works, why iOS 16 is the specific target surface, what the broader shift of zero-click exploits into financially motivated crime actually means, and what you can and cannot do to protect yourself. If you or someone you know is on an unpatched iPhone, take a listen. 

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

Your AI chatbot just recommended a software download. You clicked it...along with a GPU cryptominer running silently in the background.

Darnley breaks down Microsoft Defender Experts' latest findings on a sophisticated cryptojacking campaign that evolved beyond traditional SEO poisoning into AI search result poisoning, a new delivery technique that turns your trusted AI tools into malware recommendation engines.

 In this episode, we cover how the attack works from ZIP download to process hollowed miner, why high end GPU owners are deliberately targeted, and the six concrete steps every listener can take today to stop trusting links blindly; whether they come from Google, ChatGPT, or anything in between.

The tools are getting smarter. So should we... Listen now. 

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

In May 2026, NYC Health + Hospitals, the largest public health system in the USA, disclosed months long data breach affecting 1.8 million people. Stealing data such as medical records, Social security numbers, passport details, geo-location data, and biometric information. 

In this episode, Darnley breaks down exactly how third party vendor breaches work, what each category of stolen data means, and why biometric theft is forever. We deliver a 10-step protection playbook to stay protected now and into the future. 

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

Five Eyes intelligence agencies: CISA, NCSC, CCC, ASD, and NCSC just published their first ever coordinated security guidance on agentic AI, and the message is clear: autonomous AI systems are already operating inside critical infrastructure with excessive access and insufficient governance, and the consequences of getting this wrong are a national security threat. 

In this episode of Darnley's Cyber Café, we break down the five risk categories the Five Eyes flagged, walk through the exact attack scenario outlined in the guidance document, and connect the dots. Whether you're an IT professional navigating governance gaps, a business owner weighing agentic AI adoption, or a privacy-conscious individual wondering what autonomous AI in the organizations you trust means for your data ... this episode delivers the threat picture and the actionable controls you need. 

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

Your organization spent money on cybersecurity training. Someone still clicked the link. 

In this episode of Darnley's Cyber Café, we break down why most security awareness programs fail to change behaviour, and why the gap between knowing about a threat and actually being ready for it is exactly where attackers operate. 

Drawing on research from ETH Zurich, real-world breach data, and the 2025 Marks & Spencer cyberattack, this episode unpacks the compliance checkbox model, the rise of AI powered phishing, and the vishing surge that most organizations are completely ignoring. What you can do about it today, whether you're running a security team or a five-person business.

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

On April 22, 2026, the Bitwarden CLI, used in CI/CD pipelines at tens of thousands of organizations, was weaponized for exactly 93 minutes. 

In this episode, Darnley walks through the anatomy of the supply chain attack that compromised bitwarden cli version 2026.4.0: how the threat group exploited a compromised Checkmarx GitHub Action to inject credential-stealing malware into Bitwarden's npm publishing pipeline, what the worm actually stole, how it self-propagated by republishing victims own npm packages, and why the fact that "no vault data was compromised" misses the point...

Packed with practical technical guidance on pipeline hardening, package pinning, least-privilege, and the one npm setting that could have blocked this attack entirely...this episode is essential listening for developers, IT security teams, and anyone responsible for a software supply chain who need to hear it. 

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

The company you hired to protect you just got hacked. That is not a hypothetical, it is the defining threat pattern of the past 18 months. 

In this episode Darnley breaks down why cybersecurity vendors, including some of the most recognized names in the space, have become the highest-value targets for threat actors, how a single vendor compromise translates directly into a supply chain breach affecting hundreds or thousands of downstream clients, and what every business needs to do before signing another security contract. 

Featuring real-world case vendors including SolarWinds, Okta, CrowdStrike, Sisense, and the 2026 eScan compromise, plus a practical vendor vetting playbook and a hard look at why infrastructure-level privacy matters more.

Listen here

Click here to send future episode recommendation

Support the show

Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.