
Free Daily Podcast Summary
by Black Hills Information Security
A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.
The most recent episodes — sign up to get AI-powered summaries of each one.
The BHIS crew examines the ConnectWise/SkyKick compromise, its implications for Microsoft Entra tenants, and the consequences for MSPs and their customers. They discuss privileged application access, attacker persistence, and why clear incident communication matters. Other stories include the Cairn framework’s use of AI agents against retail websites, research into prompt injection in HTTP headers, exposed MCP servers, Citizen Lab’s reporting on advertising-delivered zero-click spyware, and an alleged listening device installation at OpenAI. Along the way, the team explores deception, proactive security assessments, and reducing attack surface as automated attacks become cheaper and easier to scale.Join us LIVE on Mondays, 4:30pm ET.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters - PreShow Banter™ — One decent flying car. - ConnectWise SkyKick Compromise Causes Panic in MSP Space - 2026-10-19 - ConnectWise/SkyKick Compromise and Microsoft Entra Tenant Access - Cairn: AI Agents Automating Attacks Against Retail Websites - Research: Prompt Injection in HTTP Response Headers - Exposed MCP Servers and the Risk of AI Inference Theft - Adfection: Zero-Click Spyware Delivered Through Advertisements LinksConnectWise/SkyKick Compromise and Microsoft Entra Tenant AccessCairn: AI Agents Automating Attacks Against Retail WebsitesResearch: Prompt Injection in HTTP Response HeadersExposed MCP Servers and the Risk of AI Inference TheftAdfection: Zero-Click Spyware Delivered Through AdvertisementsAlleged Listening Device Installation at OpenAIAntisyphon Pay What You Can Training: November 10–11DeathCon Tickets in San DiegoCreators & Guests Alex Minster "Belouve" - Guest John Strand - Host Bronwen Aker - Host Wade Wells - Host Corey Ham - Host Hayden Covington - Host Eric Capuano - Guest Ryan Poirier - Producer Click here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.com
The BHIS crew discusses MonsterCloud’s ransomware decryption fraud, a Canadian cybersecurity executive’s arrest, and strikes on Russian data centers linked to a sharp decline in Yandex bot traffic. AI reverse engineering takes center stage as the team explores game recreations, commercial software clones, Linux vulnerability discovery, and the changing economics of software. They also examine AI-powered threat hunting and deception, a cyberattack on French supermarket refrigeration, fake Claude Code installers, and a controversial critique of passkeys. The episode closes with a preview of questions about AI-generated mathematics and encryption security.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters - PreShow Banter™ — Less Boty on the Internet - Russian Data Centers Bombed - 2026-10-12 - MonsterCloud’s Ransomware Decryption Fraud - Canadian Cybersecurity Executive Arrested in Ransomware Case - Russian Data Center Strikes and the Drop in Yandex Bot Traffic - Drone Threats Prompt B-1 Bomber Withdrawal from the UK - AI Reverse Engineers PlayStation 2 Games - AI Software Recreations and Linux Zero-Day Discovery - Kip Boyle’s “Owning AI Risk” Training and Discount Code - Cyberattack Disrupts French Supermarket Refrigeration - ClickFix Campaigns Use Fake Claude Code Installers - Kip Boyle’s New Book: Gears Don’t Guess - “Passkeys Are a Trap”: Examining a Controversial Article - AI Math Breakthroughs and Potential Encryption Risks - Ashley’s October 28 Webcast: Using AI for Research and Learning - BHIS Penetration Testing and Incident Response Services - Bronwen's Proposed Local LLM Workshop LinksPublix Hurricane cakes are a long-standing tradition of hurricanesStorm passes as Publix discontinues controversial hurricane cakesMonsterCloud’s Ransomware Decryption FraudCanadian Cybersecurity Executive Arrested in Ransomware CaseRussian Data Center Strikes and the Drop in Yandex Bot TrafficDrone Threats Prompt B-1 Bomber Withdrawal from the UKAI Reverse Engineers Classic GamesAI Software Recreations and Linux Zero-Day DiscoveryKip Boyle’s “Owning AI Risk” Training and Discount CodeCyberattack Disrupts French Supermarket RefrigerationClickFix Campaigns Use Fake Claude Code InstallersKip Boyle’s New Book: Gears Don’t Guess“Passkeys Are a Trap”: Examining a Controversial ArticleAI Math Breakthroug
Recorded live at Wild West Hackin’ Fest, the BHIS crew debates AI agent sandbox escapes, OpenAI’s frontier model decisions, and accountability for the Hugging Face hack. Other stories include the dismissal of OpenAI safety researchers, the FBI–Accenture breach, ShinyHunters arrests, Oracle’s medical records breach, and recurring Citrix vulnerabilities. The panel explores corporate scapegoating, stolen authentication tokens, patching challenges, and Anthropic’s expanding cybersecurity access—asking who takes responsibility when security controls fail.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters - Live From WWHF Deadwood '26 - 2026-10-07 - OpenAI’s Frontier Model Pause and AI Sandbox Escapes - OpenAI Dismisses Three Safety Researchers - FBI–Accenture Breach and Blaming Individual Employees - Oracle’s Medical Records Breach and Cloud Responsibility - ShinyHunters Arrests and the FBI Breach - Critical Citrix Vulnerabilities and Incomplete Patches - Selling Stolen VPN Access and Authentication Tokens - Anthropic Expands Its Cyber Verification Program - Lawsuit Over the Hugging Face Hack and AI Accountability LinksOpenAI’s Frontier Model Pause and AI Sandbox EscapesOpenAI Dismisses Three Safety ResearchersFBI–Accenture Breach and Blaming Individual EmployeesOracle’s Medical Records Breach and Cloud ResponsibilityShinyHunters Arrests and the FBI BreachCritical Citrix Vulnerabilities and Incomplete PatchesAnthropic Expands Its Cyber Verification ProgramLawsuit Over the Hugging Face Hack and AI AccountabilityCreators & Guests Jake Williams - Guest John Strand - Host Ralph May - Host Bronwen Aker - Host Andy Pettit "Nerf" - Guest Corey Ham - Host Click here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
This week, the BHIS crew starts with an Nvidia-branded trailer stolen for its presumed GPUs—only to turn out to be full of sand. They then examine reports of OpenAI agents accessing Australian and U.S. government sites, the unanswered questions about what happened, and Nvidia’s proposed agent safety framework. The conversation moves to the EvilTokens phishing service takedown, recent vulnerability patches, and prompt injection attacks against AI agents handling Salesforce contact forms. The episode closes with a reported F-35 component shipment rerouted to China and concerns about cyber incidents affecting ships and maritime systems.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters - PreShow Banter™ — Doing Bulldozer Stuff - AI Agents Go Rogue: Where’s the Accountability? 2026-09-28 - Nvidia-branded trailer stolen—and found full of sand - OpenAI agents access Australian and U.S. government sites - Nvidia’s OpenShell agent safety framework - EvilTokens phishing service disrupted - Citrix, WordPress, F5, and Roundcube vulnerability roundup - Prompt injection through Salesforce web-to-lead forms - F-35 components reportedly rerouted to China - LNG tanker incident and maritime OT security - Wild West Hackin’ Fest Deadwood and upcoming classes - Offense for Defense and penetration testing classes - Android pentesting and satellite security classes - DEATHCon: detection engineering and threat hunting - On Logos and Cables LinksCreators & Guests Tim Medin - Guest Kent Ickler - Guest John Strand - Host Ralph May - Host Wade Wells - Host Corey Ham - Host Hayden Covington - Host Click here to watch this episode on YouTube. Click here to view the episode transcript. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com
This week, the crew examines Google’s reported Gemini containment failure, Anthropic’s new biology lab, Snickers-branded prompt injection, AI-assisted social engineering, and Claude’s access to financial data. They also cover major Linux, Cisco, Check Point, and Docker vulnerabilities; weak oversight of Flock surveillance searches; privacy concerns surrounding Waymo vehicles; continuing ransomware disruption at an Australian chicken producer; and the escalating conflict between ShinyHunters and Clop.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters - PreShow Banter™ — Justifying Our Existence - Google’s Gemini Agent Escapes Containment - 2026-09-21 - Google’s Gemini Hacks 3 Real Companies During Test - Anthropic Builds a Bay Area Biology Lab - Snickers Turns Prompt Injection into an Ad Campaign - Iranian Social Engineering Uses Fake MRI Scans - Claude Requests Access to Financial Accounts - Meta’s Agentic AI and Its Personal-Data Advantage - OpenAI Introduces In-Platform Advertising - Linux Local Privilege-Escalation Vulnerabilities - Cisco Secure Email Gateway Exploited by Nation-States - Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root - Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files - CISA Ends Its Weekly Cybersecurity Bulletin - Flock Surveillance Searches and Weak Oversight - Waymo Detects a Firearm and Calls Police - Upcoming Events, Workshops, and Training - Alethe's Physical-Assessment Training - Andy’s XDRCLI Talk at Wild West Hackin’ Fest - Jake’s Hands-On AI Risk-Assessment Training - Wade’s San Diego AI-Detection Event - Ransomware Continues Disrupting an Australian Chicken Producer - ShinyHunters Compromises Clop’s Dark-Web Site LinksGoogle’s Gemini Hacks 3 Real Companies During TestAnthropic Builds a Bay Area Biology LabSnickers Turns Prompt Injection into an Ad Campaignhttps://www.snickers.com/digitalsnickersIranian Social Engineering Uses Fake MRI ScansClaude Requests Access to Financial AccountsOpenAI Introduces In-Platform AdvertisingLinux Local Privilege-Escalation VulnerabilitiesCisco Secure Email Gateway Exploited by Nation-StatesCritical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as RootCritical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host FilesCISA Ends Its Weekly Cybersecurity BulletinFlock Surveillance Searches and Weak OversightWaymo Detects a Firearm and Calls PoliceAlethe’s Physical-Assessment TrainingAndy’s XDRCLI Talk at Wild
This week, the team examines AI agents targeting RubyGems, Anthropic’s warnings about dangerous AI misuse, human review of ChatGPT conversations, predictive policing, and LG smart-TV privacy. They also cover passkey-themed phishing, ScreenConnect abuse, Microsoft Defender patch bypasses, and upcoming cybersecurity workshops, webcasts, and Wild West Hackin’ Fest training.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters - PreShow Banter™ — A Protected Class - World Leaders Reject Calls to Slow Down AI Development - 2026-09-14 - OpenAI Agent Swarm Targets RubyGems - Anthropic Warns About Claude Misuse and Calls for Slower AI Development - OpenAI’s Project Lily and Human Review of ChatGPT Conversations - “Minority Report” Predictive Policing Using Financial Data - LG Smart TVs Accused of Spying on Viewers - Passkey-Themed Phishing Campaigns - ConnectWise Patches ScreenConnect After Worm-Like Abuse - Microsoft Defender “Shield Break” Patch Bypassed - News Wrap-Up and Community Discussion - Kip Boyle’s Book, Fire Doesn’t Innovate - “Hunting Shadow AI” Workshop — September 25 - “Playbooks for Owning AI Risk” Live Training - Wild West Hackin’ Fest and Karaoke - Webcast: Attacking MCP and N8N Servers - Webcast: Safely Using Offensive AI in Security Assessments - Wild West Hackin’ Fest Satellite and SOC Classes LinksOpenAI Agent Swarm Targets RubyGemsAnthropic Warns About Claude Misuse and Calls for Slower AI DevelopmentOpenAI’s Project Lily and Human Review of ChatGPT Conversations“Minority Report” Predictive Policing Using Financial DataLG Smart TVs Accused of Spying on ViewersPasskey-Themed Phishing CampaignsConnectWise Patches ScreenConnect After Worm-Like AbuseMicrosoft Defender “Shield Break” Patch BypassedKip Boyle’s Book, Fire Doesn’t Innovate“Hunting Shadow AI” Workshop — September 25“Playbooks for Owning AI Risk” Live TrainingWild West Hackin’ Fest and KaraokeWebcast: Attacking MCP and N8N ServersWebcast: Safely Using Offensive AI in Security AssessmentsWild West Hackin’ Fest Satellite Class...and SOC ClassesCreators & Guests Kip Boyle - Guest Corey Ham - Host John Strand - Host Ralph May - Host Bronwen Aker - Host <a href="https://bhisnews.transistor.f
AI agents take center stage as the team examines OpenAI models using a German forum for private communications, Anthropic’s response to a compromised Claude account, new model releases, and the growing demand for Apple hardware to train computer-using agents. The discussion also covers the sale of stolen driver’s licenses, a claimed Florida DMV breach, and vulnerabilities affecting JFrog Artifactory, Proxmox, Plex, and Langflow. Finally, the panel considers CISA’s decision to discontinue six cybersecurity assessment services, new research into compromising passkeys, and Outflank’s compact NTLMv1 rainbow tables.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters - PreShow Banter™ — Internet Fall Weather - Anthropic Warns Users of Infostealer Abuse - 2026-09-08 - OpenAI Agents Exploit a German Forum for Private Communications - Anthropic Warns a User About Infostealer Abuse of Their Claude Account - OpenAI’s Latest Model Tops AI Leaderboards and Revives the AGI Debate - CrowdStrike Releases AI Models Developed with NVIDIA - FBI Investigates the Sale of 103,000 Stolen Driver’s Licenses - ShinyHunters Claims a Breach of the Florida DMV - AI Labs Amass Mac Minis and Mac Studios for Agent Training - Critical Authentication Bypass Disclosed in JFrog Artifactory - Proxmox Vulnerability Exposes Internet-Facing Hosts - New Plex Vulnerability Raises Home-Network Security Concerns - Langflow Vulnerability Enables Unauthenticated Remote Code Execution - Thomson Reuters Breach Disrupts State Court Systems - CISA Cuts Six Free Cybersecurity Assessment Services - New Research Demonstrates Ways to Compromise Passkeys - Outflank Publishes a Smaller NTLMv1 Rainbow Table and Cracking Tool - Dan DeCloss: Turning Pen Tests into Risk Intelligence Anti-Cast - PlexTrac’s AI-Assisted Reporting and Retesting - Charles Shirer Introduces the FanMeyer Creator Platform - Upcoming AI Browser Research and Wild West Hackin’ Fest Talk - Hacking and Defending Satellite Infrastructure at Wild West - Upcoming AI Core Skills Fundamentals Course LinksOpenAI Agents Exploit a German Forum for Private CommunicationsAnthropic Warns a User About Infostealer Abuse of Their Claude AccountOpenAI’s Latest Model Tops AI Leaderboards and Revives the AGI DebateCrowdStrike Releases AI Models Developed with NVIDIAFBI Investigates the Sale of 103,000 Stolen Driver’s LicensesShinyHunters Claims a Breach of the Florida DMVAI Labs Amass Mac Minis and Mac Studios for Agent TrainingCritical Authentication Bypass Disclosed in JFrog ArtifactoryProxmox Vulnerability Exposes Internet-Facing HostsNew Plex Vulnerability Raises Home-Network Security Concerns<a href="https://www.bleepingcomputer.com/news/security/critical-langflow-flaw-exploited-to-steal
This episode of BHIS - Talkin' Bout [infosec] News covers South Korea’s free government AI services, new efforts to secure the U.S. power grid from foreign-made components, and the use of SS7 and fitness-tracking data in military operations. The panel also discusses the FBI’s disruption of Chinese botnets targeting critical infrastructure, the alleged McKesson patient-data breach, arrests connected to Team PCP, and reports of NVIDIA acquiring Hugging Face. Additional topics include competition among AI coding platforms, critical vulnerabilities affecting Ubiquiti, Gitea, NetScaler, WebLogic, and PaperCut, and calls for an AI-powered surge in cyber defense.Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis🔴live-chatChapters - PreShow Banter™ — What is the whole point of RAM? - South Korea Offers Free AI Services – 2026-08-31 - South Korea Offers Free Government AI Services - White House Targets Foreign Components in the U.S. Power Grid - How Tehran’s Use of Cyber Operations in the U.S.-Iran Conflict Has Evolved - Iranian Cyberattackers Tracked Phones of U.S. Military Personnel, Data Suggests - The Strava Heat Map and the End of Secrets - Officer reportedly leaks location of French aircraft carrier with Strava run - FBI Disrupts Chinese Botnets Targeting Critical Infrastructure - ShinyHunters Claims Theft of 284 Million McKesson Records - Alleged Team PCP Hackers Arrested in Australia - Rumored NVIDIA Acquisition of Hugging Face - OpenAI, Cursor, and Competition Between AI Coding Platforms - Critical Vulnerabilities in Ubiquiti, Gitea, NetScaler, and More - PaperCut warns of NG, MF flaw exploited in zero-day attacks - Technology Companies Call for an AI Defensive Surge - 58 arrested in international cybercrime crackdown - How to start the AI-accelerated defense - TRAINING: Fundamentals of Cybersecurity: Threats and Defenses - TRAINING: Hacking and Defending Satellite Infrastructure LinksSouth Korea Offers Free Government AI ServicesWhite House Targets Foreign Components in the U.S. Power GridHow Tehran’s Use of Cyber Operations in the U.S.-Iran Conflict Has EvolvedIranian Cyberattackers Tracked Phones of U.S. Military Personnel, Data SuggestsThe Strava Heat Map and the End of SecretsOfficer reportedly leaks location of French aircraft carrier with Strava runFBI Disrupts Chinese Botnets Targeting Critical InfrastructureShinyHunters Claims Theft of 284 Million McKesson RecordsAlleged Team PCP Hackers Arrested in AustraliaRumored NVIDIA Acquisition of Hugging FaceOpenAI, Cursor, and Competition Between AI Coding PlatformsCritical Vulnerabilities in Ubiquiti, Gitea, NetScaler, and MorePaperCut warns of NG, MF flaw exploited in zero-day attacks<a href="https://www.reuters.com/legal/litigation/major-tech-companies-call-defensive-surge-defeat-
Free AI-powered daily recaps. Key takeaways, quotes, and mentions — in a 5-minute read.
Get Free Summaries →Free forever for up to 3 podcasts. No credit card required.
Listeners also like.

Security Now (Audio)
A weekly deep dive into cybersecurity news, hacking trends, and digital defense strategies for professionals and individuals.

Last Week in AI
Summarizes significant AI news on a weekly basis.

Bourbon with Brad
Tech experts discuss artificial intelligence over bourbon, blending candid AI insights with tasting notes and humor.

Daily Tech News Show
Daily tech news coverage with analysis from Tom Merritt and team.

This Week in AI
Four AI experts analyze the latest news and trends in artificial intelligence each week.

The AI Power Podcast
Explores AI policy, regulation, and global power dynamics shaping artificial intelligence’s impact on security, economy, and geopolitics.
Ahead of the Threat: The FBI Cyber Podcast
FBI officials and experts discuss emerging cyber threats and cybersecurity fundamentals with government and industry guests.

The AI Daily Brief: Artificial Intelligence News and Analysis
A daily analysis of artificial intelligence news, exploring its creative potential, industry impacts, and ethical challenges.

Latent Space: The AI Engineer Podcast
Conversations with AI engineers, researchers, and founders on foundation models, AI agents, infrastructure, and scientific discovery.

Global News Podcast
Global News Podcast AI

Mystery AI Hype Theater 3000
Linguist Emily M. Bender and sociologist Alex Hanna analyze AI claims, separating fact from fiction with expert guests.

AI For Humans: Weekly AI News, Tools & Trends
A weekly breakdown of major AI news, tools, and breakthroughs for both newcomers and seasoned enthusiasts.
A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.
AI-powered recaps with compact key takeaways, quotes, and insights.
Get key takeaways from Talkin' Bout [Infosec] News in a 5-minute read.
Stay current on your favorite podcasts without falling behind.
It's a free AI-powered email that summarizes new episodes of Talkin' Bout [Infosec] News as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by Black Hills Information Security.
Absolutely! The free plan covers up to 3 podcasts, any in the catalog. Basic raises that to 15, Pro to 40 and Max to 100. Browse our full catalog at /podcasts.
Talkin' Bout [Infosec] News publishes weekly. Our AI generates a summary within hours of each new episode.
Talkin' Bout [Infosec] News covers topics including News, Technology. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.