Castuner

Initial Access

Bishop Fox

Bishop Fox offensive security researchers, experts, and hackers take a real look at the latest cybersecurity news headlines and have a straight take on them. The goal is simple: do you actually need to care about this, or is it just another variation of the same fundamental security problems we've been dealing with for years?

Сайт подкаста

Слушайте в своём приложении

Эпизоды

42 эпизода

  1. Direct Access with Farzan Karimi 26:56
  2. PHP2Shell Exploitation, Node2Shell Brotli RCE, And Mimori Ransomware Claims 58:54
  3. PHP2Shell: A Leaked Demo, A Broken Disclosure, and AI at Exploit Speed 52:40
  4. OpenAI Insider, Meta Muse’s Escape Hatch, AI Agents Gone Rogue 43:23
  5. A Third NetScaler Zero-Day, 8 Million Danish ID Records, and Google Pauses Its Bug Bounty 1:13:40
  6. ShinyHunters PeopleSoft WAF Bypass, Arrests, And OpenAI Astra News 36:56
  7. Zero-Click Exchange RCE, $25 AI Intrusions, and the ShinyHunters FBI Claim 1:07:12
  8. Ten-Hour Breaches, MikroTik Backdoors, Router Takeovers & the NetScaler Root Cause 53:50
  9. Patch Tuesday Overload, Broken Threat Feeds & the Scoping Problem 43:42
  10. IDScan Leak, Vished Hospitals, Berlin's Ransom Refusal & a Grid Under Fire 42:12
  11. Audio Fingerprinting, AI-Assisted ICS Attacks & the Zombie Card Bypass 35:57
  12. Spliced Instructions, Recycled Bugs, Leaked Addresses & Sold Directories 36:58
  13. Live from DEF CON at RedTail: Red Teaming After AI 46:37
  14. AI Sandbox Escape, Autonomous Ransomware Agent, Self-Spreading npm Worm 51:20
  15. Rogue Agents, Bounty Cuts & the AI Brake Pedal 59:10
  16. Rogue Agents, Invisible Screens, and a Vulnerability Clearinghouse 1:03:45
  17. Attribution and OpSec at Scale 43:44
  18. Old Backdoors, Ghost Phishing, and Borrowed AI 38:26
  19. Cisco Root Access, FortiBleed Credentials, Sparkplug Fuzzing, AI Arms Race 48:09
  20. FIFA Takeover, FFMpeg RCE, Klue Breach, Hardware Hacking 51:07
  21. Pokémon GO, ServiceNow Auth Flaw, and the Anthropic Model Pulldown 55:07
  22. Linux NFTables Root Exploit, Gemini Prompt Injection, and Cisco SD-WAN Zero-Day 35:31
  23. Forged VPN Sessions, Autonomous AI Worm, and Hotel Reservation Hijacking 48:41
  24. Custom Payload Evasion, Chained Network-to-Physical Breach, and Satellite Hacking 46:44
  25. VS Code Supply Chain Attack, Microsoft Exchange Zero-Day, and AI-Accelerated Vulnerability Discovery 26:42
  26. AI Zero-Day Exploit, CI/CD Supply Chain Poisoning, and Vibe-Coded Data Exposure 45:36
  27. Linux Kernel Exploit, GitHub RCE, and Canvas Cyberattack 48:21
  28. cPanel Auth Bypass, Claude AI Code Risks, and Trigona Ransomware 33:56
  29. Anthropic Tool Access, EU App Bypasses, and Active Zero-Days 31:48
  30. Trusted Tools, Hijacked Sessions & Cheap Paths to Big Access 31:55
  31. Project Glasswing: AI Vulnerability Discovery & Exploit 22:37
  32. GitHub Malware, DNS Hijacking, Ransomware Speed & AI Exploits 41:02
  33. Inherited Access, AI Permissions, Supply Chain Attacks & Edge Exposure 27:36
  34. Malvertising, Trusted Tools, Real-Time Attacks & Shrinking Windows 30:01
  35. Speed, Trust, and the Compromised Workbench 36:04
  36. Social Engineering, Phishing, Edge Device Exploits & AI-Assisted Attacks 37:20
  37. AI Coding Agents, FortiGate Attacks, Surveillance & Identity Hacks 27:54
  38. Autonomous AI, Broken Guardrails, and Geopolitics 19:53
  39. SSO Phishing, Patching Failures, Exposed APIs 21:59
  40. Deepfakes, Spyware Skits & LLMs for Hire 15:49
  41. Software Policy Rollbacks, Insider Access Abuse, and AI Automation Risk 15:29
  42. Prompt Injection, Session Hijacking & Why AI Isn't Writing the Attack Plans Yet 19:59