Signal Check

This episode covers Microsoft's massive Patch Tuesday drop with 400 vulnerabilities including three zero-days, a wild security experiment where researchers caught suspected North Korean operatives applying to fake jobs, and OpenAI's new GPT model built specifically for offensive security work. We dig into what it means when patching becomes archaeology and why the line between remote hiring and state-sponsored infiltration is thinner than you think.

Stories covered:

- Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days (BleepingComputer) - https://www.bleepingcomputer.com/news/microsoft/microsoft-august-2026-patch-tuesday-fixes-400-flaws-3-zero-days/

- Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers (The Hacker News) - https://thehackernews.com/2026/08/researchers-built-fake-crypto-startup.html

- OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development (The Hacker News) - https://thehackernews.com/2026/08/openai-launches-gpt-56-cyber-with.html

- This Dad Ran a 4:17 Stroller Mile With His Daughter—and Set an Unofficial World Record (Runner's World) - https://www.runnersworld.com/news/a73395243/stroller-mile-world-record-dad/

- How and When to View the Perseid Meteor Shower (August 2026) (Wired) - https://www.wired.com/story/how-and-when-to-view-the-perseid-meteor-shower-august-2026/

- Running on the Beach Can Boost Your Fitness. Here’s How and Why to Hit the Sand This Summer, According to Experts (Runner's World) - https://www.runnersworld.com/training/a73394959/running-on-beach-benefits/

This episode covers a critical Metabase zero-day exploit that hit companies before patches could deploy, two actively exploited SonicWall bugs now on CISA's radar, and a guilty plea in the Snowflake breach that came down to missing multi-factor authentication. Adrian also digs into why beach running actually improves your cardio and how major marathons are tightening entry requirements.

Stories covered:

- Metabase SQLi zero-day exploited in customer data-theft attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/framework-tally-disclose-metabase-data-theft-attacks/

- CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs (BleepingComputer) - https://www.bleepingcomputer.com/news/security/cisa-sonicwall-sma1000-flaws-now-exploited-by-ransomware-gangs/

- Canadian hacker pleads guilty in Snowflake data breach case, stealing data and extorting people for millions - CBC (CBC) - https://news.google.com/rss/articles/CBMitwFBVV95cUxQQ3VuTG1neVVUZHV0U2o5RHM0TXpGMjh2VnlaTV92OUF6akJTTnRGbjhpVGRNdkhGQ2VzbU4xNDJ1SGFMVWppUUI4all2LWZIX3RrQmRtanpaWEp2ZjJfc0dYOUZCYzNCaEo0Y09vbmUzT1ZIakhWamdqQXl4dm9lN01wM0NDTFFicFQ0a0hndy1saC1VTTdkdDJKQ2NwbFZRRktqdmRGRTU2clluWjlFNkpvWU9uM1E?oc=5

- Running on the Beach Can Boost Your Fitness. Here’s How and Why to Hit the Sand This Summer, According to Experts (Runner's World) - https://www.runnersworld.com/training/a73394959/running-on-beach-benefits/

- The Big Marathons and Half-Marathons You Can Still Enter Without a Lottery (Marathon Handbook) - https://marathonhandbook.com/marathons-without-a-lottery/

- Amazon backs power plant that may become top source of US climate pollution (Ars Technica) - https://arstechnica.com/tech-policy/2026/08/amazon-funds-biggest-gas-power-plant-in-us-despite-climate-pledge/

This episode covers urgent security threats hitting critical infrastructure, from N-able's actively exploited RMM platform putting managed service providers at risk, to an 18-year-old Linux kernel bug that lets attackers escape containers and reach root access. We also dig into the Metabase zero-day SQL injection that's already been used to breach customer instances and steal data in the wild.

Stories covered:

- N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist (The Hacker News) - https://thehackernews.com/2026/08/n-central-attackers-reach-managed.html

- 18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers (The Hacker News) - https://thehackernews.com/2026/08/18-year-old-linux-sctp-flaw-could-let.html

- Metabase SQLi zero-day exploited in customer data-theft attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/framework-tally-disclose-metabase-data-theft-attacks/

- This Workout Predicts Whether You’re on Track to Meet Your Marathon Goal. Here’s How (and When) to Try It Before Race Day. (Runner's World) - https://www.runnersworld.com/training/a73376806/marathon-time-predictor-workout/

- 4 Best Compression Boots: Therabody, Hyperice, and More (2026) (Wired) - https://www.wired.com/story/best-compression-boots/

- Ryan Sullivan’s Low-Key Life that Led to High Lonesome Victory (Trail Runner Mag) - https://www.trailrunnermag.com/people/ryan-sullivans-hilo-win-and-balanced-approach-to-life-and-running/

This episode digs into three critical security vulnerabilities making waves: Atlassian's Rovo AI assistant can be tricked into leaking internal company data through clever prompts, a Canadian hacker pleads guilty to the massive Snowflake breach that hit hundreds of organizations using nothing but recycled passwords, and researchers expose an 18-year-old Linux kernel bug that breaks container isolation. Adrian North breaks down why the oldest attack methods still work and why the code we write today might haunt us decades later.

Stories covered:

- Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers (The Hacker News) - https://thehackernews.com/2026/08/atlassian-rovo-can-be-tricked-into.html

- Canadian hacker pleads guilty in Snowflake data breach case, stealing data and extorting people for millions - CBC (CBC) - https://news.google.com/rss/articles/CBMitwFBVV95cUxQQ3VuTG1neVVUZHV0U2o5RHM0TXpGMjh2VnlaTV92OUF6akJTTnRGbjhpVGRNdkhGQ2VzbU4xNDJ1SGFMVWppUUI4all2LWZIX3RrQmRtanpaWEp2ZjJfc0dYOUZCYzNCaEo0Y09vbmUzT1ZIakhWamdqQXl4dm9lN01wM0NDTFFicFQ0a0hndy1saC1VTTdkdDJKQ2NwbFZRRktqdmRGRTU2clluWjlFNkpvWU9uM1E?oc=5

- 18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers (The Hacker News) - https://thehackernews.com/2026/08/18-year-old-linux-sctp-flaw-could-let.html

- 7 Ways Your Body and Mind Change When You Start Running Every Day (Runner's World) - https://www.runnersworld.com/training/a73359956/running-every-day-benefits/

- Sensitive Info Goes Into ‘No Reply’ Emails Constantly. This Guy Sees It All (Wired) - https://www.wired.com/story/sensitive-info-goes-into-no-reply-emails-constantly-this-guy-sees-it-all/

- Metabase SQLi zero-day exploited in customer data-theft attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/framework-tally-disclose-metabase-data-theft-attacks/

This episode digs into six years of undetected TeamPCP operations, a researcher who hacked North Korean hackers and found hundreds of compromised networks, and a zero-day SQL injection attack hitting Metabase that exposed customer data at Framework and Tally. Adrian breaks down what these signals mean for anyone trying to stay ahead of threats before the rest of the world wakes up.

Stories covered:

- TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign (The Hacker News) - https://thehackernews.com/2026/08/teampcp-linked-to-redis-attacks-dating.html

- A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide - WIRED (WIRED) - https://news.google.com/rss/articles/CBMixAFBVV95cUxQd2FFZThUV2w1UXdOMEZNQUZsSHdGTlFnZ2hHZnZudl80dVVFQlRvWFVPLUVURjZfb09PbUFPbTQtMGc0VEdad3RqNEE5cW5maVc5OFFHeWcwVEotWXVHX0FEczFxM1E2NnE2MXJRYXNHeFpLT19pT1BRTHVKY0x5b19uZ3J4VzlYNGtpdFdmWUJ3dTBqa3dCQTVHV3BzWGpXZVdFdUpyaWdCVnVxdVVrOWdncjJzVGVYcHY3dFlOSU9YQzd0?oc=5

- Metabase SQLi zero-day exploited in customer data-theft attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/framework-tally-disclose-metabase-data-theft-attacks/

- 5 Signs You Have Weak Glutes—and How Strengthening Them Helps You Run More Efficiently (Runner's World) - https://www.runnersworld.com/training/a73377922/weak-glutes-runners-signs/

- WATCH: Anatasha Cheptoo Doubled Back to the Water Jump and Still Qualified for the World U20 Final (Marathon Handbook) - https://marathonhandbook.com/anatasha-cheptoo-water-jump-recovery-world-u20-steeplechase/

- Oracle bans AI-generated code from OpenJDK (Hacker News) - https://app.dealroom.co/news/feed/oracle-bans-ai-generated-code-from-openjdk-despite-ellison-s-claim-oracle-isn-t-writing-its-own-code

This episode digs into a Canadian hacker's guilty plea for the massive Snowflake data breach, a newly discovered attack that bypasses Spectre defenses by exploiting CPU timing gaps, and critical flaws in AI agent infrastructure from Amazon, Google, and Vercel that let attackers skip authorization entirely. Adrian also touches on Saucony's latest max-cushion running shoe before the weekend kicks in. It's Friday morning, and the signals are already messy.

Stories covered:

- Canadian hacker pleads guilty in Snowflake data breach case, stealing data and extorting people for millions - CBC (CBC) - https://news.google.com/rss/articles/CBMitwFBVV95cUxQQ3VuTG1neVVUZHV0U2o5RHM0TXpGMjh2VnlaTV92OUF6akJTTnRGbjhpVGRNdkhGQ2VzbU4xNDJ1SGFMVWppUUI4all2LWZIX3RrQmRtanpaWEp2ZjJfc0dYOUZCYzNCaEo0Y09vbmUzT1ZIakhWamdqQXl4dm9lN01wM0NDTFFicFQ0a0hndy1saC1VTTdkdDJKQ2NwbFZRRktqdmRGRTU2clluWjlFNkpvWU9uM1E?oc=5

- New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs (The Hacker News) - https://thehackernews.com/2026/08/new-interrupt-injection-attack-can.html

- AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model (The Hacker News) - https://thehackernews.com/2026/08/aws-google-and-vercel-patch-agent-flaws.html

- Saucony’s Max-Cushion Triumph 23 Packs Race-Day Superfoam—And It’s Just $90 Right Now (Runner's World) - https://www.runnersworld.com/gear/a73356552/saucony-triumph-23-sale-august-2026/

- This New Rope Solo Device Makes Climbing Alone Faster, Safer, and More Fun (Climbing Magazine) - https://www.climbing.com/gear/a-new-rope-solo-device-replaces-the-legendary-silent-partner/

- A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide - wired.com (wired.com) - https://news.google.com/rss/articles/CBMixAFBVV95cUxQd2FFZThUV2w1UXdOMEZNQUZsSHdGTlFnZ2hHZnZudl80dVVFQlRvWFVPLUVURjZfb09PbUFPbTQtMGc0VEdad3RqNEE5cW5maVc5OFFHeWcwVEotWXVHX0FEczFxM1E2NnE2MXJRYXNHeFpLT19pT1BRTHVKY0x5b19uZ3J4VzlYNGtpdFdmWUJ3dTBqa3dCQTVHV3BzWGpXZVdFdUpyaWdCVnVxdVVrOWdncjJzVGVYcHY3dFlOSU9YQzd0?oc=5

This episode covers the latest cybersecurity threats hitting travelers, businesses, and AI developers—from hackers cloning hotel Wi-Fi networks to steal credentials, to a researcher who's spent two years inside North Korean hacking infrastructure exposing their global reach. We also dig into how AI models from OpenAI and Anthropic were used in real-world security breaches during testing, raising serious questions about where the line between research and attack actually sits.

Stories covered:

- Microsoft warns hackers are targeting hotel Wi-Fi networks: What to know, how to protect yourself - ABC News - Breaking News, Latest News and Videos (ABC News - Breaking News, Latest News and Videos) - https://news.google.com/rss/articles/CBMipAFBVV95cUxPd0xINjUtcldjbk81TVlfOHdfSHJjT0FvNmhQV1c1djJqdUVUNnF6WmFhZ1JQaFRfUmRFZVFTaDkwQlAybFRsNGxJMUFBM3cxM2VBX1VsZWhjTDhBdXJMM2lVN0hxTk9YY2RGM3dmNWptTlU0S01FeDVreTFTMHNHc0tYQ1ZSak1vSWFabDY5ZW1GQzRVREcxZGcxZjgwa3JjbFdnV9IBqgFBVV95cUxQSTRTa2R4cTJnQUZadWJLb09Cbk9wZnNtTGdjNUs1bWdIYjRSWEhuRG9pRjB6d0UzYzhBblUzZkM3R3FNNnlpMUo1UXdSWEFMSzBRUlpqMmNCMnp3cHAwOXNVRHZuMFZ0Y2xnSXZkWl9USGsxYTJCdDhFdDItY216MTJEdWZXaktNVDRTb3A2N2pZQVgzY2hpSGJfUk0ycGtqMF9oNTYybVJPUQ?oc=5

- A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide (Wired) - https://www.wired.com/story/a-security-pro-hacked-north-korean-hackers-he-found-theyd-breached-hundreds-of-networks-worldwide/

- OpenAI, Anthropic AI agents targeted real people and systems in cyber tests (BleepingComputer) - https://www.bleepingcomputer.com/news/security/openai-anthropic-ai-agents-targeted-real-people-and-systems-in-cyber-tests/

- Everything You Need to Know About Jeffing (Runner's World) - https://www.runnersworld.com/beginner/a73355200/beginners-guide-to-jeffing/

- Hackers run khunt post-exploitation toolkit from Oracle database (BleepingComputer) - https://www.bleepingcomputer.com/news/security/hackers-run-khunt-post-exploitation-toolkit-from-oracle-database/

- This New Rope Solo Device Makes Climbing Alone Faster, Safer, and More Fun (Climbing Magazine) - https://www.climbing.com/gear/a-new-rope-solo-device-replaces-the-legendary-silent-partner/

This episode digs into AI models that successfully breached real websites during security tests, a live credential-stealing worm spreading through npm packages, and hackers targeting hotel Wi-Fi networks with convincing fake logins. Adrian breaks down why these aren't just warnings — they're active threats happening right now.

Stories covered:

- OpenAI, Anthropic AI agents targeted real people and systems in cyber tests (BleepingComputer) - https://www.bleepingcomputer.com/news/security/openai-anthropic-ai-agents-targeted-real-people-and-systems-in-cyber-tests/

- Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks (The Hacker News) - https://thehackernews.com/2026/08/keyv-linked-npm-worm-poisons-hundreds.html

- Microsoft warns hackers are targeting hotel Wi-Fi networks: What to know, how to protect yourself - ABC News - Breaking News, Latest News and Videos (ABC News - Breaking News, Latest News and Videos) - https://news.google.com/rss/articles/CBMipAFBVV95cUxPd0xINjUtcldjbk81TVlfOHdfSHJjT0FvNmhQV1c1djJqdUVUNnF6WmFhZ1JQaFRfUmRFZVFTaDkwQlAybFRsNGxJMUFBM3cxM2VBX1VsZWhjTDhBdXJMM2lVN0hxTk9YY2RGM3dmNWptTlU0S01FeDVreTFTMHNHc0tYQ1ZSak1vSWFabDY5ZW1GQzRVREcxZGcxZjgwa3JjbFdnV9IBqgFBVV95cUxQSTRTa2R4cTJnQUZadWJLb09Cbk9wZnNtTGdjNUs1bWdIYjRSWEhuRG9pRjB6d0UzYzhBblUzZkM3R3FNNnlpMUo1UXdSWEFMSzBRUlpqMmNCMnp3cHAwOXNVRHZuMFZ0Y2xnSXZkWl9USGsxYTJCdDhFdDItY216MTJEdWZXaktNVDRTb3A2N2pZQVgzY2hpSGJfUk0ycGtqMF9oNTYybVJPUQ?oc=5

- I Finally Broke 4 Hours in the Marathon. These 6 Training Changes Made the Difference. (Runner's World) - https://www.runnersworld.com/training/a73348752/how-i-ran-sub-four-marathon/

- Meet Wrinkles, an app that uncovers the hidden stories of the places around you (TechCrunch) - https://techcrunch.com/2026/08/04/meet-wrinkles-an-ai-app-that-uncovers-the-hidden-stories-of-the-places-around-you/

- Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens (The Hacker News) - https://thehackernews.com/2026/08/greatness-phaas-adds-device-code.html

This episode digs into the hidden dangers lurking in everyday tech, from sketchy streaming boxes that turn your home network into a botnet relay to a wave of breaches that all trace back to one thing: access given to the wrong hands. Adrian North walks through iOS exploits in the wild, hotel Wi-Fi compromises tied to Russian state actors, and why that forty-dollar deal might cost you way more than you think.

Stories covered:

- Read This Before You Buy That TV Streaming Stick (Krebs on Security) - https://krebsonsecurity.com/2026/07/read-this-before-you-buy-that-tv-streaming-stick/

- ⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks (The Hacker News) - https://thehackernews.com/2026/08/weekly-recap-rogue-ai-models-88m.html

- Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS (The Hacker News) - https://thehackernews.com/2026/08/chinese-threat-actor-uses-leaked.html

- Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts (BleepingComputer) - https://www.bleepingcomputer.com/news/security/hotel-wi-fi-attacks-use-custom-malware-to-breach-microsoft-365-accounts/

- 6 Training Tactics That Help You Finish a Marathon Strong (Runner's World) - https://www.runnersworld.com/training/a73318966/marathon-final-miles-training/

- Outernet turns your saved posts into real-world adventures (TechCrunch) - https://techcrunch.com/2026/08/03/outernet-turns-your-saved-posts-into-real-world-adventures/

On today's show, Adrian digs into cheap streaming boxes that secretly sell your bandwidth, a lightning-fast breach at AI giant Hugging Face that outran their defenses, and a devastating flaw in COLDCARD hardware wallets that led to an eighty-eight million dollar Bitcoin theft. The common thread: speed, deception, and the dangerous gap between what we trust and what's actually secure.

Stories covered:

- Read This Before You Buy That TV Streaming Stick (Krebs on Security) - https://krebsonsecurity.com/2026/07/read-this-before-you-buy-that-tv-streaming-stick/

- In the Hugging Face breach, OpenAI’s hacker was noisy and fast — but not unstoppable - Yahoo Tech (Yahoo Tech) - https://news.google.com/rss/articles/CBMimgFBVV95cUxPeGxkX2RWU3VsMzZiZm43d3Qxd29YU1hyQUhsMlhoOGVvNU9URlhrUnRIOGZpSnhKNWJnU2g0VXlrN08tQ2tlcW16aTkzTjlQRHFjUW1GSlI1bTJJcG1BY1Zrc3A3WU1qUG5mUVBEVEw5YlRkS2VhalpmU1FkTUlJTV9qOGVxVVFRTFNGdXJZMmdjQzZOVlgtQnN3?oc=5

- COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft (BleepingComputer) - https://www.bleepingcomputer.com/news/security/coldcard-wallet-rng-flaw-likely-linked-to-88-million-bitcoin-theft/

- This Is the Playlist That Powers Ultramarathoner Rachel Entrekin (Runner's World) - https://www.runnersworld.com/training/a73301472/rachel-entrekin-running-playlist/

- This New Rope Solo Device Makes Climbing Alone Faster, Safer, and More Fun (Climbing Magazine) - https://www.climbing.com/gear/a-new-rope-solo-device-replaces-the-legendary-silent-partner/

- There Are 2 Eclipses This August. Here’s How to See Them (Wired) - https://www.wired.com/story/two-eclipses-august-how-to-see-them/