November 26, 2025

Shai-Hulud malware leaks secrets on GitHub – 2025-11-24

1 hour 5 minutes

Chapters

(00:00) - PreShow Banter™ — Stressed about lithium batteries

(04:59) - Shai-Hulud malware leaks secrets on GitHub – BHIS - Talkin' Bout [infosec] News 2025-11-24

(05:57) - Story # 1: Shai-Hulud malware infects 500 npm packages, leaks secrets on GitHub

(11:18) - Story # 2: CrowdStrike catches insider feeding information to hackers

(15:50) - Story # 3: Fidelity sues Broadcom over access to key software to avoid outages

(22:17) - Story # 4: NetApp sues former CTO for alleged data breach

(26:48) - Story # 5: CrowdStrike Research: Security Flaws in DeepSeek-Generated Code Linked to Political Triggers

(36:05) - Story # 6: A major Cloudflare outage took down large parts of the internet - X, ChatGPT and more were affected, but all recovered now

(37:11) - Story # 6b: Cloudflare outage on November 18, 2025

(41:43) - Story # 7: Iran-Linked Hackers Mapped Ship AIS Data Days Before Real-World Missile Strike Attempt

(46:34) - Story # 8: This Hacker Conference Installed a Literal Antivirus Monitoring System

(51:10) - Story # 9: Microsoft to integrate Sysmon directly into Windows 11, Server 2025

(56:40) - Story # 10: Crypto and Carcasses: Undercover Sting Recovers $700K in Bitcoin Miners, Foils $75K Frozen Turkey Heist

News Links
Story # 1: Shai-Hulud malware infects 500 npm packages, leaks secrets on GitHub
Story # 2: CrowdStrike catches insider feeding information to hackers
Story # 3: Fidelity sues Broadcom over access to key software to avoid outages
Story # 4: NetApp sues former CTO for alleged data breach
Story # 5: CrowdStrike Research: Security Flaws in DeepSeek-Generated Code Linked to Political Triggers
Story # 6: A major Cloudflare outage took down large parts of the internet - X, ChatGPT and more were affected, but all recovered now
Story # 6b: Cloudflare outage on November 18, 2025
Story # 7: Iran-Linked Hackers Mapped Ship AIS Data Days Before Real-World Missile Strike Attempt
Story # 8: This Hacker Conference Installed a Literal Antivirus Monitoring System
Story # 9: Microsoft to integrate Sysmon directly into Windows 11, Server 2025
Story # 10: Crypto and Carcasses: Undercover Sting Recovers $700K in Bitcoin Miners, Foils $75K Frozen Turkey Heist

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training
https://www.antisyphontraining.com/

...more