Castuner

The Critical Stack

Jacob C

Cybersecurity news moves fast. Most of it is noise. This is the signal. The Critical Stack Daily Briefing cuts a day's worth of security news down to what actually matters: real CVEs, real breaches, real regulatory deadlines, no vendor spin. If it's not worth your attention, it's not in the episode.

Web del podcast

Escolta'l a la teva aplicació

Episodis

55 episodis

  1. Nov 4: CISA confirms active exploitation of WordPress core flaw during software upgrades 4:49
  2. Nov 3: Maximum-severity Siemens SIMATIC IoT2050 flaw under active exploitation 5:21
  3. We're Thinking Too Small About AI-Driven Containment 8:57
  4. Nov 2: Follow-up: Ivanti patches two more zero-days exploited in the Connect Secure attack chain 4:37
  5. Nov 1: CVSS 10.0 flaw in LXD and MicroCloud lets attackers impersonate trusted clients 4:18
  6. Oct 31: Attackers chain three Ivanti Connect Secure flaws for unauthenticated root access 5:16
  7. Oct 30: Official Claude Code VS Code extension compromised to install persistent SSH backdoor 5:20
  8. Oct 29: Cisco SD-WAN flaw exploited to plant KeyDrift malware that steals traffic encryption keys 5:17
  9. Oct 28: ShinyHunters' Oracle PeopleSoft zero-day is actually three chained flaws 5:17
  10. Oct 27: CISA confirms PHP2Shell flaws are now exploited in attacks 5:07
  11. Oct 26: AI coding agents hijacked via a malicious AGENTS.md in the Downloads folder 5:45
  12. The Threats Don't Decide What Matters 10:38
  13. Oct 25: CISA flags actively exploited critical flaws in Collabora Online and Arista VeloCloud 5:51
  14. Oct 24: Brotli decoder flaw behind Node.js RCE also hits Bun, Python and other software 5:19
  15. Oct 23: Arista patches second VeloCloud Orchestrator zero-day exploited in attacks 6:02
  16. PHP Emergency Patches, a Japanese Cloud Breach, and Agents That Switch Off the Watchers 2:59
  17. Federal Patch Order: Plex2Shell, Siemens and SiteGuard Chain Into Unauthenticated RCE 3:07
  18. Signed, Trusted, and Compromised: Siemens ClickFix and the ConnectWise Backup Shutdown 3:11
  19. Your Firewall Is the Foothold: SiteGuard WAF Under Active Attack 2:51
  20. One Stolen Credential, One Hundred Seventy-Three Tenants: The ConnectWise Breach 3:11
  21. Trusted Access, Turned Against You: Next.js RCE, a China-Linked BeyondTrust Zero-Day, and an AI Agent Gone Rogue 3:14
  22. BeyondTrust Zero-Day Lands as AI Agents Learn to Move Industrial Equipment 2:54
  23. PAN-OS Root Exploit, a Ledger Reseller Implant, and an AI Agent's OTP Bypass 3:06
  24. Ship AI Like a Medical Device 10:00
  25. Ivanti Zero-Day Hits Connect Secure as Microsoft Ships a Record Patch Batch 3:06
  26. SonicWall Under Fire: One Hundred Thirty-Five Attacks Land After the Patch 3:14
  27. CyberXero Turns Claude Code on Ukraine as Bricksforge and Palo Alto Flaws Stay Open 3:05
  28. Agents at the Bank Door: ARTEX AI and Claude Agents Hit South Korea 3:11
  29. SonicWall Exploited in Three Days, and an AI Agent Hands Over the Keys 3:13
  30. Citrix NetScaler Burns Again: Patch the Edge First 2:58
  31. Hours, Not Days: PoeLLM Hits 3,400 AI Servers as SonicWall Patches a Perfect 10 3:11
  32. FortiBleed Keeps Bleeding Credentials While WordPress Backdoors and Rogue Agents Pile On 4:08
  33. Bounded Autonomy 12:13
  34. Missed Patch, Open Doors: FBI Blames a Contractor as Denmark's Registry Leaks 2:39
  35. NetScaler Zero-Day CVE-2026-88779 Is Under Attack: Patching May Not Be Enough 3:15
  36. OpenAI's Runaway Agents Draw a Subpoena as GitLab Patches a Nine Point Nine a-i Gateway Flaw 3:51
  37. Cisco's s-d-wan Zero-Day, and the Agents Nobody Is Watching 3:52
  38. Cisco SD-WAN Manager Hits k-e-v: The Management Plane Is the Target 4:06
  39. Trusted Tools, Untrusted Code: Bitget's $388M Third-Party Flaw and the MCP Server Stealing OAuth Tokens 4:05
  40. The Trouble with Context 6:20
  41. JadePuffer Deletes the Cloud: Stolen Service Principals and the Ninety Percent Problem 4:02
  42. Carbonato's AI Agents, Astrana's Spoofed Phone Call, and Who Goes to Jail When the Model Hacks 4:03
  43. Power Down: Kiteworks Pulls the Plug, and North Korea Takes Three Hundred Fifty-One Million 4:19
  44. Perimeter On Fire: SonicWall's Chained Ten, AnMed Goes Dark, and Ransomware Without a Human 4:14
  45. Same-Day Exploitation: WordPress, Revolut's Fake Warrant, and Cisco's Perfect Ten 4:07
  46. A Perfect Ten: Arista VeloCloud Under Attack, ShinyHunters Robs Cl0p 4:27
  47. Nine Hundred Seventy-Four Bugs — And the One That Actually Matters 4:25
  48. Perfect Ten: GitLab Under Fire and Ransomware That Runs Itself 4:01
  49. Cisco's Perfect Ten: Root on the Identity Plane, and a Twelve-Minute a-i Attack 4:06
  50. Cisco's Root-by-Email Zero-Day, and a Dark-Web Market for 153 Million Driver's Licenses 4:08