InfoSec.Watch

Send us Fan Mail

In this episode of the InfoSec.Watch Podcast, we unpack one of the most consequential weeks of cybersecurity developments in 2025. This episode covers a rare convergence of AI-augmented state-backed espionage, logistics and retail supply-chain ransomware, and Europe’s accelerating drive toward digital sovereignty—and this episode takes you step-by-step through every story, every insight, and every actionable takeaway.

Whether you're a CISO, a threat intelligence analyst, a red teamer, SOC lead, architect, or anyone responsible for defending modern infrastructure, this episode will help you make sense of a rapidly shifting threat landscape.

We’ll explore how adversaries are leveraging cutting-edge technologies, why certain industries are becoming high-value systemic targets, and what new policies and vulnerabilities demand your immediate attention. From the rise of agentic AI in offensive operations, to the expanding blast radius of supply-chain–centric ransomware, to the geopolitical drivers behind Germany’s NIS2 implementation act, this episode equips you with the context you need to stay ahead.

Support the show

Send us Fan Mail

Here’s what we cover in Episode 112:

• Actively Exploited Windows Kernel 0-Day:
  A privilege-escalation flaw in the Windows kernel is now being abused in real attacks. We cover what’s known, how attackers are chaining it, and the immediate mitigations security teams should prioritize.
• FortiWeb Critical Vulnerability Added to CISA’s KEV Catalog:
  A newly disclosed remote code execution vulnerability in Fortinet FortiWeb has officially landed in the Known Exploited Vulnerabilities list. We explain exploitation paths, affected versions, and patch timelines.
• Akira Ransomware Expands to Nutanix Virtualized Environments:
  Akira operators have widened their targeting to include Nutanix AHV systems, giving them deeper access into enterprise virtualization layers. We break down how they’re gaining initial entry and what defenders can harden right now.

Clear explanations. No fluff. Practical takeaways you can use today.

Actionable Cybersecurity Insights — Every Week.
Visit InfoSec.Watch for the full newsletter and links to all sources mentioned in this episode.

Support the show