Signal Check

This episode covers three critical cybersecurity threats hitting right now—Linux kernel exploits actively in the wild, a WordPress vulnerability that's already public, and a confirmed breach at OpenAI. Adrian North breaks down what's at stake when the infrastructure powering the internet gets compromised, plus a quick detour into protecting what matters most in marathon training.

Stories covered:

- CISA alerts of active exploitation of three Linux kernel flaws (BleepingComputer) - https://www.bleepingcomputer.com/news/security/cisa-alerts-of-active-exploitation-of-three-linux-kernel-flaws/

- WordPress Click2Shell flaw lets hackers execute PHP on the server (BleepingComputer) - https://www.bleepingcomputer.com/news/security/wordpress-click2shell-flaw-lets-hackers-execute-php-on-the-server/

- Hackers breached OpenAI, adding to fever pitch of security and safety concerns - NBC News (NBC News) - https://news.google.com/rss/articles/CBMiekFVX3lxTE1GR215MXpFWG9NeE9FWEZrNm9wRE1MaXJHdGZrMUQ0NEtUQ1dxb3pKWWtCN25MbURsc0tlN1ItT0FBSk9uaU5mZWx2cGJZLTFNTHRIdGc2bHljUW9GaUJtaGNUWEM5VnJtTHpXTFRPa1BEVnBYeHhxS2x3?oc=5

- Busy Runners Keep Missing Key Workouts. Use This Training Strategy to Keep Your Marathon Progress on Track. (Runner's World) - https://www.runnersworld.com/training/a73741058/marathon-training-busy-runners/

- Ryan Sullivan and Hannah Allgood Break the Run Rabbit Run Course Records (Marathon Handbook) - https://marathonhandbook.com/run-rabbit-run-100-mile-2026-results/

- NASA’s Mars Sample Return mission is dead (Hacker News) - https://www.science.org/content/article/nasa-s-mars-sample-return-mission-dead

This episode covers an unusual FCC ban on foreign-made routers, a sneaky new supply chain attack hiding in npm packages, and a major Gyazo data breach affecting millions of users. Adrian also digs into how a Google analyst went undercover to infiltrate a notorious hacking gang. It's your morning signal check before the day gets loud.

Stories covered:

- What You Need to Know About the Foreign-Made Router Ban in the US (Wired) - https://www.wired.com/story/us-government-foreign-made-router-ban-explained/

- Malicious npm packages evade install-script defenses at runtime (BleepingComputer) - https://www.bleepingcomputer.com/news/security/malicious-npm-packages-evade-install-script-defenses-at-runtime/

- Gyazo server flaw exploited to steal 23.6 million user records (BleepingComputer) - https://www.bleepingcomputer.com/news/security/gyazo-server-flaw-exploited-to-steal-236-million-user-records/

- An Undercover Google Analyst Infiltrated a Notorious Supply-Chain Hacking Gang - wired.com (wired.com) - https://news.google.com/rss/articles/CBMiqwFBVV95cUxOYnZtZmk4cDZFRm4xS0E4cS1rVUVWX2ZBZUZ0WkYtcXVrYnd1NWtGaG1BLVdsZThaa3c2cEx6LWFvZ2g2WEFkdFRGVGVHbkc2MmtLMmNRcWxqRUs2aHB0dlU5SGpESmMzSDAwcGp2NDlGUG9iUDZhVThOOVpfb3FZR0J5aXRPcjRRQWVIYTRQUzhMeVl6OVY0U3BhRWlhd0xEYWtzRG52bnNqTzQ?oc=5

- Research Shows Runners Have Stronger Brain Connectivity. But Does It Mean That Running Makes You Smarter—or That Smart People Run? (Runner's World) - https://www.runnersworld.com/training/a73747426/running-intelligence-research/

- Run Rabbit Run Will Pay Its 100 Mile Champions $100,000 Each in 2027 and 2028 (Marathon Handbook) - https://marathonhandbook.com/run-rabbit-run-100000-champion-prize/

This episode covers AI-powered hacking, a massive image-sharing breach, and the implosion of the PlayStation 5 jailbreak community. Adrian digs into how Claude helped researchers exploit OpenAI, the Gyazo leak exposing 23 million users, and why a prominent PS5 hacker just walked away from the scene. It's Sunday morning signals you need to know before the world wakes up.

Stories covered:

- Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws (The Hacker News) - https://thehackernews.com/2026/09/claude-opus-5-helped-researchers-take.html

- Gyazo server flaw exploited to steal 23.6 million user records (BleepingComputer) - https://www.bleepingcomputer.com/news/security/gyazo-server-flaw-exploited-to-steal-236-million-user-records/

- Drama Around A PS5 Exploit, AI-Coding, Linux, And GTA 6 Has One Popular Hacker Calling It Quits - Kotaku (Kotaku) - https://news.google.com/rss/articles/CBMizwFBVV95cUxNSnh5cHhDR0hXQjFTV004Z25xcHY0VHhJRDl6eDdfZ3lqRnIwRlR0WWV0NmJlMWc0blVUNG8tcVJBRGUzcGNXSlA3V1NXSFhLYWtKV0sybUFYNUVHS1FCYjlKSWxMY0ZiSGVzcjFhR1BIazg1YktHUDdCYkEtZTNROWVpOFFMZUJrZG9udU55VDg2ci1ndkhKXzdxQUgwbTNrUFpxdHc5RXRrT3RkLUVJRXRiMUtBbXAya2d0VWlnU3JGTGFiVjhXVXJEWUxfaDA?oc=5

- Research Shows Runners Have Stronger Brain Connectivity. But Does It Mean That Running Makes You Smarter—or That Smart People Run? (Runner's World) - https://www.runnersworld.com/training/a73747426/running-intelligence-research/

- OpenAI and Microsoft knew they were starting a ‘doom loop’ for the web (The Verge) - https://www.theverge.com/ai-artificial-intelligence/997633/openai-microsoft-chatgpt-ai-new-york-times-doom-loop-theft-google-zero

- A Climber and His Rescuer Share Takeaways After Getting Benighted on Pingora Peak (Climbing Magazine) - https://www.climbing.com/news/a-climber-and-his-rescuer-share-takeaways-after-getting-benighted-on-pingora-peak/

This episode covers fresh exploits targeting Linux kernel vulnerabilities, a brazen breach of OpenAI using Claude-powered tools, and a critical flaw in AI coding assistants called Plugin4Shell. We also dig into Gyazo's massive data breach affecting over 23 million users. It's your Saturday morning security roundup before the world wakes up.

Stories covered:

- Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root (The Hacker News) - https://thehackernews.com/2026/09/public-exploits-released-for-four-linux.html

- Hackers breach OpenAI using Claude tools, gaining access to employee accounts and the company's internal codebase — attackers initiated a 'harmless' pull request as proof of the hack - Yahoo Tech (Yahoo Tech) - https://news.google.com/rss/articles/CBMimwFBVV95cUxPNnZFYmhYbjEzblc4V0Q0QVM5YXhxaUFzc1I4LXAxQmFSMmtqYW1lYTNUd3dqNG9JVHRfTnNGSWNid3g5RHp4VlFLX1I5MnFLdjVQcGJoTE5UZ1RrZ0ZYTEQtZGJHTnlTWGVIU3dLNS1mbEd2cFUxcE5NREtNNV9oa3ZKTHBLOUQ2U1BRaDdoa0xXYnZlbU03LWliQQ?oc=5

- Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents (The Hacker News) - https://thehackernews.com/2026/09/plugin4shell-lets-repository-owners.html

- Gyazo server flaw exploited to steal 23.6 million user records (BleepingComputer) - https://www.bleepingcomputer.com/news/security/gyazo-server-flaw-exploited-to-steal-236-million-user-records/

- This Zone 2 Playlist Will Keep Your Runs Relaxed, Your Pace Steady, and Your Miles Aerobic (Runner's World) - https://www.runnersworld.com/runners-stories/a73599341/running-playlist-zone-2/

- Hackers rip down Flock camera, steal its data, share findings with media - The Hill (The Hill) - https://news.google.com/rss/articles/CBMijgFBVV95cUxPX0tRUE1oTGdsSXFmNENpRmpuME5fclgzYWtTWXROQThaNFhtbWh0dFAzUU8xSlM4a3ZYUDlrNjRXOXp4MDZjZ3NzUXRSbWpQbFRiMld1aXRSSDhHWUNlR0RSNGZRN3lnQk42NGZTQkdmNlEzUjdSc0J0MFlFS1BxNVc5T2FOQnRfcXZPYWFB0gGTAUFVX3lxTE5MdXhvaHI2VWx3dW1LMGs4LWJTTlpyUXFFQVFRQ3R3aVVWbTYydDUtS3pQdThEdUxQWTJkUUNWMW5rdDU2Y1hjY1BycUJwVlduLXhMRHNCY1Z0Qzd0RjZJeHJBelI2OWZOQW9kN1JEQV9abE9VQU5jZWpBMUdwNTFGZEtLU1RvSUlJQWpyMzNCTTFSWQ?oc=5

This episode covers six critical signals from the cybersecurity landscape, including emergency patches for exploited Cisco vulnerabilities, Iranian state malware targeting dissidents, and a devastating Check Point management flaw that grants attackers root access. Adrian also explores what endurance athletes and stolen surveillance software can teach us about resilience and transparency in an always-on digital world.

Stories covered:

- Cisco warns of max severity ISE zero-day exploited in attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/cisco-warns-of-identity-service-engine-zero-day-exploited-in-attacks/

- Iranian hackers use CHOSEN BRICK Windows malware to spy on targets (BleepingComputer) - https://www.bleepingcomputer.com/news/security/iranian-hackers-use-chosen-brick-windows-malware-to-spy-on-targets/

- Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root - thehackernews.com (thehackernews.com) - https://news.google.com/rss/articles/CBMigwFBVV95cUxQTE1ZRkpCdUNMYVVmOS0xRlR5ekQ0UldMdVhocGRhTzd3SXdoMW45TWZ4dmlsVVM3TnktSEYtM2xJbU1Ha193N0ZJbEsybnFGWTVTQmxXTko5OS1tX1l4d1pza0J4VlNWaEJwR1V4dGdjSkozc1JNMTRDSmYzdGtZM2hvRQ?oc=5

- 2026 Tor des Géants Results: Katharina Hartmuth and Jia-Ju Zhao Shatter Course Records (iRunFar) - https://www.irunfar.com/2026-tor-des-geants-results

- Hackers Stole Flock’s Camera Software, Revealing How the Company Tracks Cars and People - 404media.co (404media.co) - https://news.google.com/rss/articles/CBMisgFBVV95cUxQRVR3OFBWVmdTUW45cGRLSG5URGc5eEk1T2xvWXoxZUxXb2lGUF9ZYy10cUtwR0c2M2gzamRFNjVDcl9QZVZKNFk3LThXcjVzdGFpMy10Nlp0RHU1QlA4NWxoWm0zaVpTQVBxeVVsMGVYcVBEWWVmTjVMdWdFRENqaUhyVFIyWFBpenFPOEF3VHFteGJUekJpM19JelZiTTdXZWZXNU12bTltc2ZJeXVObVhR?oc=5

- Bend – A language that blocks AI mistakes via proof, on CPU and GPU (Hacker News) - https://bend-lang.com/

This episode covers a major breach at Flock Safety that exposed how their license plate readers track your movements across time and location, a terrifying browser extension exploit that can hijack AI assistants to feed you manipulated answers, and the takedown of people-search giant Radaris. Adrian breaks down three critical privacy stories that show just how deeply surveillance tech has woven itself into everyday life.

Stories covered:

- Hackers Stole Flock’s Camera Software, Revealing How the Company Tracks Cars and People - 404 Media (404 Media) - https://news.google.com/rss/articles/CBMisgFBVV95cUxQRVR3OFBWVmdTUW45cGRLSG5URGc5eEk1T2xvWXoxZUxXb2lGUF9ZYy10cUtwR0c2M2gzamRFNjVDcl9QZVZKNFk3LThXcjVzdGFpMy10Nlp0RHU1QlA4NWxoWm0zaVpTQVBxeVVsMGVYcVBEWWVmTjVMdWdFRENqaUhyVFIyWFBpenFPOEF3VHFteGJUekJpM19JelZiTTdXZWZXNU12bTltc2ZJeXVObVhR?oc=5

- One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude (The Hacker News) - https://thehackernews.com/2026/09/one-extension-could-hijack-ai.html

- Data Broker Radaris Loses Domains in Privacy Fight (Krebs on Security) - https://krebsonsecurity.com/2026/09/data-broker-radaris-loses-domains-in-privacy-fight/

- The Marathon Training Mistakes That Send New Runners to Physical Therapy—and How to Avoid Them (Runner's World) - https://www.runnersworld.com/training/a73659219/first-marathon-training-mistakes/

- Iran strikes on Amazon data centers caused permanent loss of customer data (Ars Technica) - https://arstechnica.com/gadgets/2026/09/iran-strikes-on-amazon-data-centers-caused-permanent-loss-of-customer-data/

- Iranian hackers use CHOSEN BRICK Windows malware to spy on targets (BleepingComputer) - https://www.bleepingcomputer.com/news/security/iranian-hackers-use-chosen-brick-windows-malware-to-spy-on-targets/

This episode digs into Iran's use of Telegram bots to control surveillance malware, Cisco's emergency zero-day patch for compromised email gateways, and a hacker who just cashed in on bug bounties using AI-written exploits. Adrian North walks through 2026's biggest breaches so far and what it means when everyday infrastructure becomes the weapon.

Stories covered:

- Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists (The Hacker News) - https://thehackernews.com/2026/09/iranian-hackers-use-telegram-controlled.html

- Leaks, data breaches, and ransom notes: The worst hacks of 2026 so far (TechCrunch) - https://techcrunch.com/2026/09/15/the-worst-hacks-and-breaches-of-2026-so-far/

- Cisco patches Secure Email Gateway zero-day exploited in attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/new-cisco-secure-email-zero-day-exploited-to-execute-commands-as-root/

- Exclusive: AI-written malware helped a hacker cash in on bug bounty programs - Axios (Axios) - https://news.google.com/rss/articles/CBMigAFBVV95cUxNVzZqVnlJM0s0SktKaVpvZjBHRktKaXBIT2YybndFMjRvXzlfdzFXT3RyeFBFY29KNjJtcDBZcGVwRHY1UEt1Rk9QNENYZmlzT2tXeU0tSGpWci1aSDhFNk16Z284ck9YVXRScENxNXNkb3UzUDBUZERlSWdHMnZCZA?oc=5

- 6 Running Form Tips for Beginners — and Everyone Else (iRunFar) - https://www.irunfar.com/six-running-form-tips-for-beginners-and-everyone-else

- The Roman telescope has enough gas for 22 years, double NASA's expectations (Ars Technica) - https://arstechnica.com/space/2026/09/the-roman-telescope-has-enough-gas-for-22-years-double-nasas-expectations/

This episode digs into AI agents crossing autonomy boundaries in cyberattacks, a critical GitLab vulnerability hitting maximum severity with active exploitation, and the story of a young hacker who calls his compulsion an addiction. Adrian North cuts through the noise on a quiet Tuesday morning before the world wakes up.

Stories covered:

- ⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits (The Hacker News) - https://thehackernews.com/2026/09/weekly-recap-rogue-ai-agents-wechat.html

- CISA: Hackers now exploit max severity GitLab flaw in attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/cisa-hackers-now-exploit-max-severity-gitlab-flaw-in-attacks/

- 'Addicted to hacking': Young hacker behind historic breach speaks out for 1st time, before reporting to prison - ABC News - Breaking News, Latest News and Videos (ABC News - Breaking News, Latest News and Videos) - https://news.google.com/rss/articles/CBMinwFBVV95cUxObHotRTVhbWRuZE1vbkNkRlV5cjUtODlSV0NJYkMyR00tVzJFUjUxNjVHc0x1ZHRiMDg5dnBvczVuQVFocHNocU8yWF85RmRpLXFaQkx1RWdZeHlscmE5UU5aR1haUmgwbEh0TWtYTEVIUEV0YmZXM0U0Unk3SXdCQm50OXg3Wkp0N3Q3eC04OHo3Y0paREU4b3gzem9ubWPSAaQBQVVfeXFMTTFaMzJodU9aZWlRMU1zandRMHc3SmJpckwzQmNHQWdDVHJ5eVNvNWtzSmowd2lyTUptdTJCUTJWZVVzX0E5RFZNT1J2YW1JcHctcUNOa3pnbW84cXE5eEthYTNqa3VPUDI3MEh0VzlfUTRVQ0VrODA0RlBGaVJuUjhlTndwc2JPM2ttVDlwQmxyREpBZXhmUjh0SXNJSGxyMGdfUzQ?oc=5

- A Hyrox athlete pooped herself in the middle of a race–and won: What happens now? (Canadian Running) - https://runningmagazine.ca/the-scene/a-hyrox-athlete-pooped-herself-in-the-middle-of-a-race-and-won-what-happens-now/

- OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers (The Hacker News) - https://thehackernews.com/2026/09/openai-agents-linked-to-rubygems.html

- 'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink (Dark Reading) - https://www.darkreading.com/cyberattacks-data-breaches/sandworm-chains-cisco-vulnerabilities-cyclops-blink

This episode covers a vicious new Android malware that encrypts, steals, and spams all at once, plus Microsoft's warning about phishing campaigns that weaponize passkey trust to breach cloud accounts. Adrian also digs into a China-aligned espionage group exploiting a critical flaw in one of the most popular typing tools in the world.

Stories covered:

- New Android malware encrypts files, steals data, and harasses victims (BleepingComputer) - https://www.bleepingcomputer.com/news/security/new-android-malware-encrypts-files-steals-data-and-harasses-victims/

- Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data (The Hacker News) - https://thehackernews.com/2026/09/attackers-use-passkey-phishing-to.html

- Hackers exploit Tencent app flaw to deploy GrayRabbit malware (BleepingComputer) - https://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/

- You Don’t Have to Run Hard to Gain Benefits. New Study Says 10 Minutes of Very Easy Miles Offers Health Advantages. (Runner's World) - https://www.runnersworld.com/health-injuries/a73656712/slow-running-brain-benefits/

- Loyalty points fraud is funding hacker holidays (Lock and Code S07E18) - malwarebytes.com (malwarebytes.com) - https://news.google.com/rss/articles/CBMiugFBVV95cUxQZ24tYm53b2p3OG5IQ0hPTmVXMl92aTVsR2hEcDU3WF9oS0hkRXRQclc4QmZyRVEwU1dMa1J5RHpfMVoyNG5FX1plYkJTclJxWWp6N0pxdmEyMmVYQXF5STRoc1lXTTk0WGZpb1R3VXdraWRyWG8yTmhxdmhubnQyc2dVU3NwVmtsQ0tTVWdtYjc0b3QxRjk5WmFYbGRaTTNYLXNMY0QwNkxtLUhGRktKNzhKNVBCNmlWUGc?oc=5

- Cops Play Hide and Seek About Using Spy Tech to Avoid Scrutiny and Bad PR (EFF) - https://www.eff.org/deeplinks/2026/09/cops-play-hide-and-seek-about-using-spy-tech-avoid-scrutiny-and-bad-pr

This episode covers six signals from the cybersecurity landscape, including a brutal new Android malware that encrypts, steals, and harasses victims all at once. Adrian also digs into Anthropic's warning about AI models being weaponized for cyberattacks, fresh vulnerabilities actively exploited in the wild, and a Conti ransomware hacker facing prison time.

Stories covered:

- New Android malware encrypts files, steals data, and harasses victims (BleepingComputer) - https://www.bleepingcomputer.com/news/security/new-android-malware-encrypts-files-steals-data-and-harasses-victims/

- Claude Used to Automate Exploitation and Data Theft Across Multiple Victims (The Hacker News) - https://thehackernews.com/2026/09/claude-used-to-automate-exploitation.html

- CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV (The Hacker News) - https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html

- Conti Ransomware Hacker Sentenced to 4 Years [2026] - tech-insider.org (tech-insider.org) - https://news.google.com/rss/articles/CBMif0FVX3lxTE5BVW1TQWNkN2JYVTREaHBoWVdEZHktZEZHd01WMUw4Tkc3aGY5V1ExUjRydTh6VlY3NGRpTmQzSFZPRVlaMnVLa2hyNXE2V2pxd2wyQURFUlBIcnE2OXZEbWtKc3hqMk13Z3BrVTRmOGpwSVZKcTNtNGRBRGJkTW8?oc=5

- You Don’t Have to Run Hard to Gain Benefits. New Study Says 10 Minutes of Very Easy Miles Offers Health Advantages. (Runner's World) - https://www.runnersworld.com/health-injuries/a73656712/slow-running-brain-benefits/

- You Don’t Have a Right to Safe Drinking Water, Trump-Appointed Judge Rules (Wired) - https://www.wired.com/story/you-dont-have-right-to-safe-drinking-water-trump-appointed-judge-rules/