Free Daily Podcast Summary
Cybersecurity Today: Daily Summaries Delivered
by David Shipley
Updates on the latest cybersecurity threats to businesses, data breach disclosures, and how you can secure your firm in an increasingly risky time.
Latest Episodes
The most recent episodes — sign up to get AI-powered summaries of each one.
- 2 days ago12 min
Microsoft Rushes out Fixes for .NET
Brotli Emergency Patches, PHP-to-Shell Exploited, and Australia Disrupts 180K Amadey Infections | Cybersecurity Today On Cybersecurity Today (Oct. 28, 2026), Microsoft issues out-of-band .NET updates for a critical flaw in Google's Brotli library (CVE-2026-111497) that can enable remote privilege escalation and potentially remote code execution, with proof-of-concept exploits public and widespread exposure across ecosystems. The episode also covers CISA confirming active exploitation of two "PHP to Shell" vulnerabilities (CVE-2026-109618/109619), with federal agencies facing an urgent patch deadline and broad impact across millions of PHP services and many vendors. In legal news, U.S. prosecutors allege Canadian ransomware negotiator Eduard Dubrovsky secretly worked for threat actors. South Korean police say a former penetration tester used the Artex AI framework to breach 90+ organizations and steal 8.2 million records. Finally, Australia's Signals Directorate disrupts an Amadey botnet, cutting off 180,000 infected computers and destroying stolen data offered for sale. 00:00 Top Stories Rundown 00:32 Brotli Bug Emergency Patches 02:36 AI Noise in Vulnerability Hype 03:41 PHP to Shell Exploited Now 06:10 Ransomware Negotiator Accused 07:41 Artex AI Hacking Spree 10:04 Australia Disrupts Amadey Botnet 11:32 Wrap Up and Sign Off
- 4 days ago10 min
AI-assisted attackers breach European government via PHP2Shell
PHP2Shell Hits European Government, New PHP RCE (No Patch Yet), Brotli "Node to Shell," and Capcom Breach Attackers exploited the PHP2Shell remote code execution flaws to compromise a European government entity within two hours, stealing password hashes and MFA secrets, pivoting via NTLM relay toward Active Directory, and showing command output patterns Unit 42 says suggest an agentic AI attacker. Widespread scanning continues, with Cloudflare logging millions of attempts, Cyfirma reporting low-and-slow probing from nodes linked with moderate confidence to the Lazarus ecosystem, and defenders urged to watch for telltale crash sequences. PHP also disclosed a third RCE (CVE-2026-115560) with no patch yet but high exploitation requirements and a mitigation to disable session upload progress. Separately, a Brotli decoder memory corruption bug (CVE-2026-111497) affects Node.js and other software, with fixes delayed into October releases. Finally, Capcom says criminals breached Capcom ID, exposing data tied to 11.7 million accounts and resetting impacted passwords. 00:00 Headlines Overview 00:35 Government Breach Details 01:13 Global Scanning Surge 03:11 Third PHP RCE 05:00 Wildfire Or Smoke 06:08 Patch Race Warning 06:53 Brotli Node To Shell 08:47 Capcom Account Breach 10:21 Wrap Up And Outro
- 1 weeks ago13 min
AI agents behind ConnectWise breach, PHP2Shell exploited days before patches, Japanese cloud hack
PHP Exploited Before Patch, Unpatched Linux SMB Bugs, GitLab Max-Severity Fix, and AI Agents in ConnectWise & Japan Breaches Cybersecurity Today (Oct. 23, 2026) covers active exploitation of two critical PHP RCE flaws beginning at least four days before patches shipped, with multiple firms seeing failed pre-disclosure attempts and the UK NCSC urging immediate patching or taking servers offline. It also details two publicly disclosed, unpatched Linux kernel ksmbd SMB RCE bugs (one unauthenticated on port 445), exposed after ZDI credited Trend Micro's AI scanner and copied public mailing lists without patches. GitLab issued fixes for a maximum-severity unauthenticated RCE (CVE-2026-11-0264) in its regex compiler, following recent high-severity GitLab issues. Microsoft attributed the ConnectWise cloud backup compromise to China-aligned Storm-0940 using the Artex agentic AI framework, and Artex-related activity was also found in attacks on Japanese companies amid a broader breach wave, including a malware incident affecting up to 26,739 Haname Desktopcloud customer servers. 00:00 Headlines And Intro 00:33 PHP To Shell Exploitation 02:07 Patch Now Impact Scope 02:47 Linux KSMBD Bugs Exposed 04:10 AI Disclosure Process Drama 05:25 GitLab Max Severity Patch 07:30 ConnectWise Breach AI Agents 09:24 Artex Spreads In Japan 11:18 GMO Haname VPS Malware 12:24 Closing And Sign Off
- 1 weeks ago12 min
Special Report: PHP2Shell puts 70% of web at risk
PHP2Shell: Emergency PHP RCE Patches, Leaks, and Early Exploitation (CVE-2026-109618/109619) In a special edition of Cybersecurity Today, host David Shipley covers emergency PHP patches for two critical unauthenticated remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, affecting PHP 5.4+ and essentially all PHP deployments serving web requests across major stacks. He explains the shared root cause involving corrupted memory after abnormal request termination, outlines the fixed releases (PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35), and notes no official updates for PHP 8.1 and older beyond limited source backports. Mitigations and Cloudflare WAF rules are described as partial, with patching urged by the UK NCSC. The episode details AI-assisted discovery and coordination via OpenAI's Patch the Planet and tools from Wiz, how leaks on Hacker News accelerated disclosure, and reports of early in-the-wild exploitation attempts, outages, and expectations of rapid exploit development, web shells, and a long tail of downstream patching challenges. 00:00 PHP2Shell Emergency Alert 01:32 What The CVEs Do 02:05 Patches And Mitigations 03:40 AI Discovery And Leak 05:32 Exploit Chatter Spreads 06:46 Early Impact And Outages 08:22 Exposure By The Numbers 09:53 What Happens Next 11:50 Wrap Up And Thanks
- 1 weeks ago9 min
Cybercriminals hack Staples to steal millions in gift cards
Staples Gift Card Hack, Nikkei's Third Breach, Burger King Japan Leak, Broadcom Wi‑Fi "Foreverday," and Ledger Spy Implants Host David Shipley covers a Chinese crime ring that breached Staples by abusing heap dump requests to hijack customer service sessions, issuing over 15,000 gift cards worth more than $5 million and redeeming thousands at retailers before merchandise was shipped to China; three Chinese nationals were sentenced and DOJ says the wider ring obtained over $100 million in gift cards. The episode also details Nikkei's third breach in a month, where stolen credentials exposed 1.83 million cloud records, plus prior incidents involving compromised Google Workspace and Microsoft 365 accounts. Burger King Japan reports attackers accessed its app server and stole 11 million customer records. The show highlights an unpatched Broadcom WPS flaw enabling nearby root code execution on vulnerable routers, and Ledger-confirmed hardware wallet implants from a reseller designed to steal seed phrases over LTE. 00:00 Today's Cyber Rundown 00:30 Staples Gift Card Heist 02:20 Nikkei Breach Trio 03:42 Burger King Japan Leak 05:23 Broadcom WiFi Foreverday 07:27 Ledger Wallet Spy Implant 09:16 Wrap Up And Sign Off
- 1 weeks ago13 min
ConnectWise backup app breaches 173 Microsoft tenants, Chinese spies exploit BeyondTrust zero-day, Japan declares first cyber state of emergency
Microsoft 365 Supply-Chain Break-Ins via ConnectWise, US Bankruptcy Notices Down, Phishing Market Takedown, BeyondTrust Zero-Day, Japan Cyber Emergency Cybersecurity Today Host David Shipley covers multiple incidents: ConnectWise shut down its cloud backup service after an attacker stole the app credential and used its broad Microsoft 365 permissions to access at least 173 customer tenants in a supply-chain attack, with guidance to disable affected apps and review service principal sign-ins. A cyberattack on BAE Systems knocked out the U.S. federal Bankruptcy Noticing Center, halting all bankruptcy notices with no restoration timeline. Microsoft and Health ISAC seized domains of three Chinese-language phishing marketplaces tied to over a billion malicious messages and disabled thousands of related accounts. Forescout detailed Romulus, a ClickFix-based malware delivery platform serving LegionLoader and other payloads. Google/Mandiant reported Armory Castle exploiting a BeyondTrust Remote Support zero-day (CVE-2026-102764). Japan declared its first-ever cybersecurity state of emergency after a breach and cascading ransomware impacts. 00:00 Top Stories Preview 00:34 ConnectWise Backup Breach 02:54 Bankruptcy Courts Outage 04:37 Phishing Markets Takedown 06:28 Romulus Malware Platform 08:54 BeyondTrust Zero Day 11:28 Japan Cyber Emergency 13:06 Wrap Up and Sign Off
- 1 weeks ago49 min
Cybersecurity Today on the Weekend October Panel
ShinyHunters Arrests, Ransomware Negotiator Ethics, Refrigerators Turned Into Ovens and UnPatch Wednesday, Part Two? A Cybersecurity Today panel with Michael Joyce, Laura Payne, and David Shipley discusses major recent stories: the ShinyHunters gang's alleged hack of FBI personnel data and a string of arrests including a Canadian cybersecurity executive, raising ethical and legal concerns around the ransomware negotiation industry and calls for vetting or licensing. They also cover allegations that MonsterCloud charged customers for "proprietary" decryption while actually paying ransoms and skimming large margins. The group examines cyber-physical attacks after French grocery stores reportedly had refrigeration systems driven to 50°C, destroying food, with debate over motives, exposed internet-connected devices, and the need for firmware and configuration strategies. The conversation touches on AI doomerism and the Hugging Face/OpenAI incident as misdirection versus basic security failures, then ends on Microsoft's record-breaking Patch Tuesday and the emerging reality of "Unpatch Wednesday," questioning the sustainability of monthly bulk patching. 00:00 Welcome and Panel Intro 00:45 ShinyHunters FBI Hack Fallout 03:53 Ransom Negotiation Ethics 10:15 MonsterCloud Decryption Scam 14:05 Fridge Hacks Destroy Food 17:15 Why Smart Fridges Exist 21:38 Firmware Risk and Strategy 22:57 Grocery Cybersecurity Reality 25:05 Practical Mitigations for Chains 26:28 Food Chain Cyber Lessons 27:23 Grocery Ransomware Fallout 29:01 Lockout Switch Fix 29:56 AI Botnet Doom Debate 32:48 Hugging Face Missed Alarms 36:19 Centralized vs Local AI 40:29 Patch Tuesday Chaos 42:09 Unpatch Wednesday Reality 46:41 Simpler OS Future 47:44 Wrap Up and Thanks
- 2 weeks ago10 min
Spyware infects journalists through unclicked ads, Palo Alto firewall zero-day exploited, OpenAI engineer charged with bugging exec room
Zero-Click Spyware Ads, Palo Alto Firewall Zero-Day, Critical Drupal Flaw, and OpenAI Bugging Charge Cybersecurity Today Host David Shipley reports on Citizen Lab findings that Israeli spyware maker Candiru, now reportedly rebranded as Integrity Labs, used targeted online ads bought through DiscoverTech's Controlium platform to profile and, in some cases, zero-click infect Al Jazeera journalists' devices, with ad-bid records showing broad reach across nearly 200,000 sites and apps and extensive profiling of sensitive networks; Google and IAB Europe have cut off DiscoverTech. The episode also covers active exploitation of Palo Alto Networks PAN-OS management interface zero-day CVE-2026-0322, the company's patches and mitigation guidance, and CISA adding it to the KEV catalog. The show details Drupal's critical Field UI RCE flaw CVE-2026-1080-97, noting many sites run unsupported branches with no fix. Finally, we cover charges that an OpenAI engineer planted encrypted recording devices in an executive conference room. 00:00 Top Stories Preview 00:27 Zero Click Spyware Ads 02:08 Ad Industry Fallout 03:09 Palo Alto Firewall Zero Day 04:17 How to Patch and Mitigate 05:13 Drupal Critical RCE Risk 06:35 No Fix for Many Sites 07:26 OpenAI Meeting Room Bugging 09:46 Wrap Up and Listener Notes
Get Cybersecurity Today summaries in your inbox
Free AI-powered daily recaps. Key takeaways, quotes, and mentions — in a 5-minute read.
Get Free Summaries →Free forever for up to 3 podcasts. No credit card required.
You Might Also Like
Listeners also like.
Risky Bulletin
Cybersecurity news updates from the Risky Business team.
Cyberside Chats: Cybersecurity Insights from the Experts
Cybersecurity experts discuss emerging threats, AI-driven attacks, and defense strategies for professionals and executives.
Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure
Expert discussions on cybersecurity, national security, and threats to critical infrastructure like energy and water systems.
Ahead of the Threat: The FBI Cyber Podcast
FBI officials and experts discuss emerging cyber threats and cybersecurity fundamentals with government and industry guests.
Daily Tech News Show
Daily tech news coverage with analysis from Tom Merritt and team.
Mac OS Ken
Daily Apple and tech news with a focus on Apple-related developments and announcements.
Apple News Today
A daily news podcast that highlights and analyzes major current events through the lens of top journalism.
BTC Sessions
Weekly Bitcoin news and panel discussions with global contributors exploring why they remain bullish on the cryptocurrency.
This Week in AI
Four AI experts analyze the latest news and trends in artificial intelligence each week.
NatSec Matters
Former national security officials interview top leaders on critical security challenges and U.S. policy responses.
The AI Power Podcast
Explores AI policy, regulation, and global power dynamics shaping artificial intelligence’s impact on security, economy, and geopolitics.
Top Five Tech
A weekly roundup of five tech-related recommendations spanning media and ideas, curated and delivered each Friday.
About Cybersecurity Today
Updates on the latest cybersecurity threats to businesses, data breach disclosures, and how you can secure your firm in an increasingly risky time.
Customized Recaps
AI-powered recaps with compact key takeaways, quotes, and insights.
Straight to Your Inbox
Get key takeaways from Cybersecurity Today in a 5-minute read.
Save Hours Every Week
Stay current on your favorite podcasts without falling behind.
Frequently Asked Questions
What is Podzilla's Cybersecurity Today daily summary?
It's a free AI-powered email that summarizes new episodes of Cybersecurity Today as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
How does the Cybersecurity Today podcast summary work?
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
Is this an official Cybersecurity Today product?
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by David Shipley.
Can I get summaries of other podcasts too?
Absolutely! The free plan covers up to 3 podcasts, any in the catalog. Basic raises that to 15, Pro to 40 and Max to 100. Browse our full catalog at /podcasts.
How often does Cybersecurity Today release new episodes?
Cybersecurity Today publishes every few days. Our AI generates a summary within hours of each new episode.
What topics does Cybersecurity Today cover?
Cybersecurity Today covers topics including News, Technology. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Start getting Cybersecurity Today summaries tomorrow morning.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.