Hello gang, welcome to another Sans Podcast.

I know we're quite behind, and my goal was to do these podcasts between TSB episodes, but the week of the 17th had two meetings, one of which went to a second meeting I decided to stay for. For those who are not clear by this, the two meetings I were to attent happened on two different days, but then one meeting I stayed for happened on the first day and it isn't a regular meeting I stay for.

This podcast is going to cover the newsletter that was released way back on January 9th, 2026. My goal is to get us caught up, and I'm going to do my best.

Would you like to read the newsletter? Here is the link to read January 9, 2026 and its newsletter if you wish.

I believe one of the biggest stories may be this web page California residents can go to so they can opt out of stuff.

Let's see what is in the top of the news.

• California's New Privacy Law Lets Consumers Submit One Demand for All Registered Data Brokers to Stop Collecting Their Information
• Threat Actor’s Breach was a Resecurity Honeypot
• Hospitality Staff, Beware ClickFix Attacks that Mimic BSOD

Here is what they covered for the rest of the week's news for this newsletter.

• Cisco Releases Updates for ISE and Snort 3 Distributed Computing Environment/Remote Procedure Call Vulnerabilities
• n8n Releases Patches for Two Critical Vulnerabilities in One Week
• Veeam Update Addresses Four Vulnerabilities
• CISA KEV Adds Code Injection Vulnerabilities in HPE OneView and Microsoft Office PowerPoint
• Critical Missing Authentication Vulnerability in WHILL Electric Wheelchairs
• European Space Agency Acknowledges Infosec Breach

I hope you all enjoy the program as much as I am bringing it to you, and make it a great day!

Hello folks, welcome to the next TSB, pprogram 266.

This week, we are going to talk about a 2025 story dealing with hundreds being detained and several ransomware strains being decrypted through tools available to the public.

The blog post leads to the article. The blog is titled 6 ransomware strains decrypted, hundreds detained which sparked some comment last podcast.

As part of discussion: Here we go again with more domains being registered, sits there with possible plans should be read from our November diatribes list.

We do have videos from Nick Espinosa which include items like the world cup being invaded by AI, breaches of the week, mobile phones being not very secure soon, and a question: Why does your supermarket need your biometrics? Preston Gaylor is along with comments as well.

When we were looking at blogs and articles, we saw something about a CSAM article that talked about a suspect who was involved in CSAM and actually getting some substantial jail time.

CSAM suspect jailed for close to 10 years is the blog post where I take this article apart.

Now to our question from last podcast. Did you get it correct?

The question last week was: Let’s get this Monday moving, Jared. You know how sometimes a name change can make everything feel new? Like when The Artist Formerly Known as Prince became a symbol, or when Dunkin’ ditched “Donuts” and got all minimalist on us.

Well, Mark Zuckerberg had a major rebrand moment, too, swapping out “Facebook” for “Meta” to match his metaverse vision. But in doing so, he triggered an awkward translation situation. Meta, in Hebrew, means what? A) Chaos, B) Nightmare, C) Dead or D) Broken. The answer is chilling at the end.

The answer: C) “Dead.” When Zuckerberg swapped “Facebook” for “Meta,” he might’ve been thinking “next-gen digital frontier,” but Hebrew speakers heard something closer to a funeral announcement. “Meta” sounds like the feminine form of the Hebrew word for “dead” (“מתה”), sparking a wave of memes and mock headstones.

Congrats to those who got this right! See you on another podcast coming soon and make it a great day!

Hello gang, welcome to program 36 of the Sans series here at the Jared Rimer Network. I'm Jared Rimer. Here's the thing. We're not taking anything away from any other podcast, we just want to put out the news and things from this great educational institution and put our thoughts in to it. With that said, we'll see what happens, as the News Bites series continues.

Sans 35 covered ouch! for January Fake Tech Support: The Only Thing They’re Fixing Is Your Bank Account, so 36 will be the first News Bites of the year.

Here is the link to read the Newsletter online and we'd love to hear your thoughts! Again, this is the newsletter for January 6, 2026.

Call (888) 405-7524 and drop your messages there, or find contact information throughout the podcast.

Here is what is in the top of the news for this newsletter.

• Patch MongoDB Now to Fix Exploited Memory Leak
• Guilty Plea from Former Cybersecurity Pros Turned Extortionists
• Fortinet CVE-2020-12812 is Being Actively Exploited Again
<

Guilty pleas within the top of the news makes my heart very happy. Let's see what else we can find good within this industry this year, shall we?

Here is what else is happening in the rest of the week's news section of the newsletter.

• South Korean Government Report Says KT Mishandled Femtocell Security, Leading to Snooping and Micropayment Fraud
• Check Local Network for Kimwolf Residential Proxy Botnet Infection
• Sedgwick Government Solutions Acknowledges Cybersecurity Incident Affecting File Transfer System
• KEV Additions: Digiever DS-2105 Pro Network Video Recorders and MongoDB Server
• New Zealand Healthcare Portal Acknowledges Cybersecurity Incident
• Covenant Health Breach Follow-up: Nearly 480,000 Individuals Affected
• HIPAA Journal Lists Largest Healthcare Data Breaches of 2025; Aflac Updates Individuals Affected by June Incident to 22.65 Million

We thank you for listening to the tech series, and please let us know what your thoughts are. I do want to know!

Welcome to TSB, episode 265.

The Trivia Question this time is:

Let’s get this Monday moving, Jared. You know how sometimes a name change can make everything feel new? Like when The Artist Formerly Known as Prince became a symbol, or when Dunkin’ ditched “Donuts” and got all minimalist on us.

Well, Mark Zuckerberg had a major rebrand moment, too, swapping out “Facebook” for “Meta” to match his metaverse vision. But in doing so, he triggered an awkward translation situation. Meta, in Hebrew, means what? A) Chaos, B) Nightmare, C) Dead or D) Broken. The answer is chilling at the end.

Please feel free to call and leave your guess at (888) 405-7524 and give us your name or name you want to go by as well as your guess.

Since we've been gone, we're trying to catch up the blog with podcast announcements with full length show notes of past programs including Sans and TSB.

Also, as we announced, we're going to change this show to every two weeks. We're doing this because this will give us more time to find something to talk about, but yet we won't feel burned out.

Here are things we might talk about during this open edition of the program.

• Here we go … another click fix attack
• Update on Crypto Currency thefts and an old breach
• Covenant Health is covered in recent breaches of the week
• The Stupid fucks of the year
• Diatribes of 2025
• Disney to pay a pretty penny for Coppa violations
• Health breaches and denmark goes digital?
• 6 ransomware strains decrypted, hundreds detained

Hello folks, welcome to another Sans episode with Jared Rimer.

Today, we have Ouch, the newsletter for January 2026. In it, it talks about technical support scams. I've even heard some discussion on other podcasts including Scam Squad, so this means that they're back with a vengeance.

The problem is, they don't use the same tactics, techniques and procedures they used to. While the example herein is a popup from a website, it may arrive in an unsolicited text message, or even on social media. I don't think it has hit social media yet, but it could go there, so just be on the lookout.

We have headings that are within the newsletter. They include:

• How a “Helpful” Call Turned Costly
• What Are Tech Support Scams?
• What Are They After?
• How These Scams Work
• How to Protect Yourself
• Final Thoughts

Each section listed above has something for you, and of course the newsletter is now part of San's podcast series.

Here are other links you'll need.

• Here is a link to the Ouch Podcast on Sans Institute's web site
• Fake Tech Support: The Only Thing They’re Fixing Is Your Bank Account written by Jennifer Cox

Thanks so much for listening, and make it a great day!

Hello folks, welcome to Sans, episode 34.

On this episode, we will learn about a ten year anniversary of something that a certain nation state did, Russia. Looks like we've got a couple of more breaches to talk about, and much more.

While I will put in the info from the newsletter, the newsletter will have more info including links which I will not include.

This will be the last version of the newsletter for now. In the table of contents, under Internet Storm Center which are articles to various things, they mention this. Once recorded, that will be the last podcast until January 2026. Happy new year!

Would you like to read the newsletter? Here is the link for December 23, 2025 for your convenience.

• Ransomware Attack on Romanian Water Management Authority Affected More than 1,000 Systems
• Widespread Microsoft 365 OAuth Attacks
• Patch WatchGuard Fireware OS for Exploited Critical Flaw

• Nigerian Authorities Arrest RaccoonO365 Suspects
• Indictments Charge 54 People in Connection with ATM Jackpotting Scheme Using Ploutus Malware
• UK Foreign Office Says it is Investigating Breach
• University of Phoenix Sends Notifications After Oracle Breach
• Malicious npm Package Steals WhatsApp Data
• University of Sydney Discloses Data Breach, Reviews Data Practices
• NIST Internet Time Services May Be Inaccurate After Pre-emptive Power Outage in Colorado

Contact me through my my">http://www.jaredrimer.net">my web site or listen to the program to learn how you can contact me. All of the methods are available for you.

Thanks so much for listening, and make it a great day!

Hello folks, welcome to sans, episode 33. This is going to cover the newsletter for December 19th, which means we're pretty much caught up. Yeah!

would you like to view the newsletter to see what might be of interest to you? Here's the newsletter for December 19, 2025.

Here is what is in the top of the news and we've got to start with yet another maximum severity flaw.

• Cisco AsyncOS Unpatched Maximum-Severity Flaw Exploited
• SonicWall Addresses Actively Exploited Vulnerability in SMA 100 Series Appliances; CISA Adds Flaw to KEV with a One-Week Mitigation Deadline
• Known Critical Flaws in Fortinet Products are Being Actively Exploited

Are you surprised about the fortinet stuff? Seems like they're in Sans practicly every newsletter it seems, even though we missed time due to illness.

Here is what is in the rest of the week's news and we start again with a maximum severity bug but this time with an RCE.

• Patch HPE OneView to Fix Maximum-Severity RCE Flaw
• ASUS Live Update Vulnerability Added to KEV
• RAT Allegedly Discovered on Mediterranean Ferry
• NHS Technology Supplier Discloses Cybersecurity Incident
• Virginia Mental Health Authority Breach
• Follow-Up: French Ministry of the Interior Cyberattack
• Law Enforcement Dismantles Infrastructure for Alleged Ransomware Money Laundering Service

I can't wait to see what the update on the French Ministry is. It sounded like the beginning of a particular investigation which was just getting started last podcast and newsletter for December 16.

Please contact me through my web site or listen to the podcast to learn how to contact me. Thanks so much for listening, and make it a happy holiday season!

Welcome to the Sans program with Jared Rimer. I hope that everyone will enjoy the program this time.

This episode will be talking about the newsletter from December 16, 2025.

Would you like a link to the newsletter? Why not check out the newsletter for December 16, 2025 and we'll see what it covers.

At the top of the newsletter, they paid a tribute to Dan Kaminsky who was a security researcher and worked tirelessly to make things accessible and found a very serious bug within DNS. He was born in 1979 and died in 2001. The link is to his entry on Wikipedia.

Here is what's going on with the top of the news for this newsletter.

• Apple WebKit and Google Chrome Zero-Days Exploited and Patched
• More React Vulnerabilities
• CISA Adds GeoServer and Sierra Vulnerabilities to KEV

If you've not patched apple, do so. I believe this only applies to 26.x as when I asked the phone, it gave me 26.2 and nothing in the 18 series.

Here's what is in the rest of the week's news for this newsletter.

• MITRE 25 Most Dangerous Vulnerabilities of 2025
• Microsoft is Deprecating RC4 Cipher
• JLR Follow-up: Payroll Data Breached
• Prosper and 700Credit Disclose Breaches
• Coupang Follow-up
• French Ministry of the Interior’s Email System Suffers Cyberattack

Want to contact me? Send an email to tech at menvi.org (put the symbol where it belongs) or give me a call at 888-405-7524. Do find other contact information within the podcast, or go to my web site and learn more about me and find info that way.

We thank you for listening, and do make it a great day. Thanks for listening, learning and participating with us! Learning is such a beautiful thing isn't it?

Hello gang, welcome to the Sans News Bites podcast covering the newsletter for December 12, 2025.

I know, we should've been continuing to release, but I also have been involved in other things too and taking some time off, but we plan on catching up as there are no meetings we need to attend until next year.

I've also been learning about how the RSS features work on getting things linked, and its not as simple as putting the links in place in HTML so we'll continue to improve our show notes and make them better.

Do you want to read what is in the newsletter? here is the link to December 12, 2025 if you want to read it.

Here's what is in the top of the news.

1. Microsoft Patch Tuesday for December 2025 Includes Exploited Zero-Day
2. Patch Fortinet, Ivanti, and SAP Products for Critical Flaws
3. Patch Fortinet, Ivanti, and SAP Products for Critical Flaws
4. Adobe Security Bulletins

Here's the rest of the news

1. Google Patches (Another) Chrome Zero-day
2. Unpatched Gogs Vulnerability is Being Actively Exploited
3. IBM Security Bulletins
4. CISA and Partners Warn of Attacks Against Critical Infrastructure
5. Gartner Warns CISOs to Block AI Browsers
6. Former Accenture Senior Manager Allegedly Lied About Security Control Compliance
7. Pierce County Library System Will Notify 340,000 Individuals Affected by April 2025 Data Breach

I hope that you all enjoy the program as much as I am bringing it together for you. Remember, this program reads the news items, and comments on them. We will bring in the editors if they say something I'm thinking as I'm reading the thing. Its quoted in the braille too.

Let me know if these show notes are better than past ones. Thanks for listening, make it a great day!

If you haven't gotten the picture yet, this will be the last TSB program of the year.

Feel free to visit the blog to learn more about what's going on and I may even post too.

Sans will not be going anywhere, and we'll continue to work on catching that up.

Some ADA stuff, end of year predictions and chatter about Sans stuff too.

Hope you enjoy!