Welcome to TSB, episode 265.

The Trivia Question this time is:

Let’s get this Monday moving, Jared. You know how sometimes a name change can make everything feel new? Like when The Artist Formerly Known as Prince became a symbol, or when Dunkin’ ditched “Donuts” and got all minimalist on us.

Well, Mark Zuckerberg had a major rebrand moment, too, swapping out “Facebook” for “Meta” to match his metaverse vision. But in doing so, he triggered an awkward translation situation. Meta, in Hebrew, means what? A) Chaos, B) Nightmare, C) Dead or D) Broken. The answer is chilling at the end.

Please feel free to call and leave your guess at (888) 405-7524 and give us your name or name you want to go by as well as your guess.

Since we've been gone, we're trying to catch up the blog with podcast announcements with full length show notes of past programs including Sans and TSB.

Also, as we announced, we're going to change this show to every two weeks. We're doing this because this will give us more time to find something to talk about, but yet we won't feel burned out.

Here are things we might talk about during this open edition of the program.

• Here we go … another click fix attack
• Update on Crypto Currency thefts and an old breach
• Covenant Health is covered in recent breaches of the week
• The Stupid fucks of the year
• Diatribes of 2025
• Disney to pay a pretty penny for Coppa violations
• Health breaches and denmark goes digital?
• 6 ransomware strains decrypted, hundreds detained

Hello folks, welcome to another Sans episode with Jared Rimer.

Today, we have Ouch, the newsletter for January 2026. In it, it talks about technical support scams. I've even heard some discussion on other podcasts including Scam Squad, so this means that they're back with a vengeance.

The problem is, they don't use the same tactics, techniques and procedures they used to. While the example herein is a popup from a website, it may arrive in an unsolicited text message, or even on social media. I don't think it has hit social media yet, but it could go there, so just be on the lookout.

We have headings that are within the newsletter. They include:

• How a “Helpful” Call Turned Costly
• What Are Tech Support Scams?
• What Are They After?
• How These Scams Work
• How to Protect Yourself
• Final Thoughts

Each section listed above has something for you, and of course the newsletter is now part of San's podcast series.

Here are other links you'll need.

• Here is a link to the Ouch Podcast on Sans Institute's web site
• Fake Tech Support: The Only Thing They’re Fixing Is Your Bank Account written by Jennifer Cox

Thanks so much for listening, and make it a great day!

Hello folks, welcome to Sans, episode 34.

On this episode, we will learn about a ten year anniversary of something that a certain nation state did, Russia. Looks like we've got a couple of more breaches to talk about, and much more.

While I will put in the info from the newsletter, the newsletter will have more info including links which I will not include.

This will be the last version of the newsletter for now. In the table of contents, under Internet Storm Center which are articles to various things, they mention this. Once recorded, that will be the last podcast until January 2026. Happy new year!

Would you like to read the newsletter? Here is the link for December 23, 2025 for your convenience.

• Ransomware Attack on Romanian Water Management Authority Affected More than 1,000 Systems
• Widespread Microsoft 365 OAuth Attacks
• Patch WatchGuard Fireware OS for Exploited Critical Flaw

• Nigerian Authorities Arrest RaccoonO365 Suspects
• Indictments Charge 54 People in Connection with ATM Jackpotting Scheme Using Ploutus Malware
• UK Foreign Office Says it is Investigating Breach
• University of Phoenix Sends Notifications After Oracle Breach
• Malicious npm Package Steals WhatsApp Data
• University of Sydney Discloses Data Breach, Reviews Data Practices
• NIST Internet Time Services May Be Inaccurate After Pre-emptive Power Outage in Colorado

Contact me through my my">http://www.jaredrimer.net">my web site or listen to the program to learn how you can contact me. All of the methods are available for you.

Thanks so much for listening, and make it a great day!

Hello folks, welcome to sans, episode 33. This is going to cover the newsletter for December 19th, which means we're pretty much caught up. Yeah!

would you like to view the newsletter to see what might be of interest to you? Here's the newsletter for December 19, 2025.

Here is what is in the top of the news and we've got to start with yet another maximum severity flaw.

• Cisco AsyncOS Unpatched Maximum-Severity Flaw Exploited
• SonicWall Addresses Actively Exploited Vulnerability in SMA 100 Series Appliances; CISA Adds Flaw to KEV with a One-Week Mitigation Deadline
• Known Critical Flaws in Fortinet Products are Being Actively Exploited

Are you surprised about the fortinet stuff? Seems like they're in Sans practicly every newsletter it seems, even though we missed time due to illness.

Here is what is in the rest of the week's news and we start again with a maximum severity bug but this time with an RCE.

• Patch HPE OneView to Fix Maximum-Severity RCE Flaw
• ASUS Live Update Vulnerability Added to KEV
• RAT Allegedly Discovered on Mediterranean Ferry
• NHS Technology Supplier Discloses Cybersecurity Incident
• Virginia Mental Health Authority Breach
• Follow-Up: French Ministry of the Interior Cyberattack
• Law Enforcement Dismantles Infrastructure for Alleged Ransomware Money Laundering Service

I can't wait to see what the update on the French Ministry is. It sounded like the beginning of a particular investigation which was just getting started last podcast and newsletter for December 16.

Please contact me through my web site or listen to the podcast to learn how to contact me. Thanks so much for listening, and make it a happy holiday season!

Welcome to the Sans program with Jared Rimer. I hope that everyone will enjoy the program this time.

This episode will be talking about the newsletter from December 16, 2025.

Would you like a link to the newsletter? Why not check out the newsletter for December 16, 2025 and we'll see what it covers.

At the top of the newsletter, they paid a tribute to Dan Kaminsky who was a security researcher and worked tirelessly to make things accessible and found a very serious bug within DNS. He was born in 1979 and died in 2001. The link is to his entry on Wikipedia.

Here is what's going on with the top of the news for this newsletter.

• Apple WebKit and Google Chrome Zero-Days Exploited and Patched
• More React Vulnerabilities
• CISA Adds GeoServer and Sierra Vulnerabilities to KEV

If you've not patched apple, do so. I believe this only applies to 26.x as when I asked the phone, it gave me 26.2 and nothing in the 18 series.

Here's what is in the rest of the week's news for this newsletter.

• MITRE 25 Most Dangerous Vulnerabilities of 2025
• Microsoft is Deprecating RC4 Cipher
• JLR Follow-up: Payroll Data Breached
• Prosper and 700Credit Disclose Breaches
• Coupang Follow-up
• French Ministry of the Interior’s Email System Suffers Cyberattack

Want to contact me? Send an email to tech at menvi.org (put the symbol where it belongs) or give me a call at 888-405-7524. Do find other contact information within the podcast, or go to my web site and learn more about me and find info that way.

We thank you for listening, and do make it a great day. Thanks for listening, learning and participating with us! Learning is such a beautiful thing isn't it?

Hello gang, welcome to the Sans News Bites podcast covering the newsletter for December 12, 2025.

I know, we should've been continuing to release, but I also have been involved in other things too and taking some time off, but we plan on catching up as there are no meetings we need to attend until next year.

I've also been learning about how the RSS features work on getting things linked, and its not as simple as putting the links in place in HTML so we'll continue to improve our show notes and make them better.

Do you want to read what is in the newsletter? here is the link to December 12, 2025 if you want to read it.

Here's what is in the top of the news.

1. Microsoft Patch Tuesday for December 2025 Includes Exploited Zero-Day
2. Patch Fortinet, Ivanti, and SAP Products for Critical Flaws
3. Patch Fortinet, Ivanti, and SAP Products for Critical Flaws
4. Adobe Security Bulletins

Here's the rest of the news

1. Google Patches (Another) Chrome Zero-day
2. Unpatched Gogs Vulnerability is Being Actively Exploited
3. IBM Security Bulletins
4. CISA and Partners Warn of Attacks Against Critical Infrastructure
5. Gartner Warns CISOs to Block AI Browsers
6. Former Accenture Senior Manager Allegedly Lied About Security Control Compliance
7. Pierce County Library System Will Notify 340,000 Individuals Affected by April 2025 Data Breach

I hope that you all enjoy the program as much as I am bringing it together for you. Remember, this program reads the news items, and comments on them. We will bring in the editors if they say something I'm thinking as I'm reading the thing. Its quoted in the braille too.

Let me know if these show notes are better than past ones. Thanks for listening, make it a great day!

If you haven't gotten the picture yet, this will be the last TSB program of the year.

Feel free to visit the blog to learn more about what's going on and I may even post too.

Sans will not be going anywhere, and we'll continue to work on catching that up.

Some ADA stuff, end of year predictions and chatter about Sans stuff too.

Hope you enjoy!

Welcome to sans, episode 30. This will cover the newsletter that was released on December 9, 2025. I hope that people will enjoy the program.

This is the link to read the newsletter online.

Thanks for reading!

Welcome to program 29 of Sans. The link to the December 5, 2025 newsletter is https://view.email.sans.org/?qs=98500f4c8692dbb312c3051d77038920ed898ed6caa33e4500f4a980442386f2cf208d4038bc473ffe25a888f0f4e9ceafc60e447d83334645b34da0a9bbabbb26d0970656f95232cab5006f8703ffd75d056e09e13503c0">here for you to peruse if you'd like to take a look at it.

The top of the news deals with patching including a CVSS of 10 which is the maximumn on this score scale.

We've got a couple of breaches, India is rolling back their requirement for security software on phones, and more.

Thanks so much for listening to the show, and thanks for learning with us on what is going on in this landscape. It's a lot, but don't take it in all at once.

Welcome to Sans, episode 28 across the Jared Rimer Network. You'll notice a change in the podcast, its Jared's Technology Podcast Network. Same content as the tech blog and podcast, but now reflects what we're trying to do.

The Sans issue we're going to cover will be for the newsletter that was for December 2, 2025 as we work to try and catch up.

Its link is https://view.email.sans.org/?qs=62bd1cdfd2fc6a82768fc7e448b6600e769e048c38c79f4a6762d3a3d16721db97a1760ab11b741a2d8c43e81023b91a1e3e3812b3acaa8defb82ce5336053f54a245fed6321c85337657b9d082be466 if you want to view it.

Thanks so much for listening, reading the blog, and participating in podcasts!