HEAL Security Dispatch Daily Digest is your essential cybersecurity podcast, hosted by Richard Simmons from London. Stay updated on the latest threats, trends, and innovations at the intersection of healthcare and cybersecurity.

In today’s episode:

X (formerly Twitter) blocks Signal’s contact links, raising concerns among privacy advocates.
Microsoft reminds admins to prepare for the deprecation of Windows Server Update Services (WSUS) driver syncing.
A new variant of the macOS XCSSET malware evades privacy protections to capture sensitive data.
Pangea introduces AI Guard and Prompt Guard, strengthening security for generative AI technologies.
Chinese hackers exploit Microsoft’s APP-V tool to bypass antivirus defenses undetected.
CISA issues advisories on industrial control system vulnerabilities.
OpenSSH security flaws put servers at risk of MiTM and DoS attacks.
As cyber threats evolve, HEAL Security Dispatch Daily Digest equips you with the insights needed to stay ahead.
🎧 Tune in now: healsecurity.com

HEAL Security Dispatch: Signal Blocked, New macOS Malware, and AI Security Innovations

HEAL Security Dispatch Daily Digest delivers the latest in cybersecurity with a sharp focus on healthcare. Hosted by Richard Simmons from London, this episode explores a rising ransomware threat—NailaoLocker—targeting European healthcare institutions, exploiting Check Point VPN vulnerabilities. We also dive into the alarming spread of Ghost ransomware, affecting over 70 countries, and a London talent agency’s recent cyber incident tied to the Rhysida hacker group. Additionally, we cover Google's introduction of quantum-resistant encryption in Cloud KMS, new FrigidStealer malware preying on macOS users, and a cybersecurity breach investigation at a leading Australian IVF provider. Stay informed on the most pressing threats and defenses in the cybersecurity landscape.

🔗 healsecurity.com

HEAL Security Dispatch: NailaoLocker Ransomware, and Google’s Quantum-Resistant Encryption

HEAL Security Dispatch Daily Digest is a cybersecurity-focused podcast that delivers the latest news, trends, and expert insights, with a special emphasis on healthcare security. Hosted by Richard Simmons from London, the podcast covers critical developments in digital security, including browser privacy policies, emerging malware threats, encryption laws, AI-driven cyberattacks, vulnerabilities in popular software, and high-profile breaches affecting industries such as finance, healthcare, and digital assets. With in-depth analysis and timely updates, this daily digest keeps listeners informed on the evolving landscape of cybersecurity and its implications for personal and organizational safety. 
https://healsecurity.com/

HEAL Security Dispatch: Firefox's Ad-Blocker Support, and Lazarus Hits Bybit

The latest episode of this podcast explores a range of major cybersecurity and technology developments. Microsoft has officially announced the discontinuation of Skype after 14 years, shifting its focus to Microsoft Teams. Amnesty International has revealed that Cellebrite's software, exploiting a zero-day vulnerability, was used to unlock the Android phone of a Serbian activist, raising concerns over privacy and surveillance. Meanwhile, the Qilin ransomware group has allegedly attacked Lee Enterprises, leaking sensitive data online. Authorities have also dismantled a network distributing AI-generated child sexual abuse material. NHS staff have expressed skepticism about the adequacy of cybersecurity measures protecting the UK’s health service, citing a lack of training. A new Vo1d malware variant has infected nearly 1.6 million Android TV devices worldwide, with a dramatic spike in India. Serbian police's reported use of Cellebrite’s zero-day vulnerability highlights the debate between law enforcement access and digital privacy. Lastly, cybercriminals are using fake Captcha PDFs to spread the Lumma Stealer malware via platforms like Webflow and GoDaddy, demonstrating the evolving nature of malware distribution. 
https://healsecurity.com/

Microsoft Shuts Down Skype, Cellebrite Exploit Exposed, and Qilin Ransomware Hits Lee Enterprises

HEAL Security Dispatch Daily Digest is a leading cybersecurity podcast hosted by Richard Simmons from London, delivering the latest updates on threats, vulnerabilities, and expert insights with a focus on healthcare and cybersecurity intelligence. Covering critical developments such as Microsoft's inadvertent removal of Copilot AI, cybercriminals leveraging Cascading Style Sheets for data tracking, and AI tools like DeepSeek capable of generating malware, the podcast highlights the evolving digital risks organizations face. Listeners gain insights into steganographic malware hidden in JPEG images, ransomware threats targeting U.S. government entities, and vulnerabilities in GitHub Actions affecting CI/CD environments. Additionally, it explores Cloudflare's adoption of post-quantum encryption, the extradition of a key LockBit ransomware developer, and the persistent challenges posed by advanced persistent threats (APTs). With expert analysis and in-depth reporting, the podcast equips professionals with the knowledge to navigate the dynamic cybersecurity landscape. 
https://healsecurity.com/

Microsoft's Copilot Mishap, Cloudflare’s Quantum Encryption, and AI-Generated Malware Threats

We’re bringing you a special Deep Dive episode featuring our SXSW 2025 panel discussion on the rise of data breaches, the critical role of encryption, and the policy challenges shaping global cybersecurity. From the UK’s recent actions around encryption oversight and high-profile attacks like Salt Typhoon to the impact of weak security measures on disenfranchised communities, we’re unpacking what’s at stake for independent developers, small businesses, and consumers worldwide. Listen in as our panel of experts explores how smart policies can protect sensitive data while ensuring innovation and competition thrive.

Immediate Action Required: Data Breaches and Encryption

FIPS 140-3 marks a significant shift in cryptographic security standards, but how does it differ from 140-2 and 140-1, and why is compliance so important? In this episode, we explore the history of FIPS, the key updates in 140-3, and what they mean for organizations. We also discuss the steps companies need to take to achieve compliance and the impact these changes have on security and risk management. Whether you're just getting started or looking to stay ahead, this episode has you covered.

FIPS Evolution: 140-1 to 140-3 & Compliance | The Encryption Edge

In this engaging episode of "AI with Shaily," your host, Shailendra Kumar, dives into the crucial topic of AI data privacy, which is becoming increasingly relevant in today's digital landscape. ☕🔍 He sets the stage by inviting listeners to imagine themselves enjoying a cup of coffee while exploring the privacy risks that accompany our online activities. Shaily reassures his audience that advancements in technology are leading to a safer, more privacy-conscious future.

One of the standout innovations he discusses is **Orion**, a groundbreaking framework that employs fully homomorphic encryption. Shaily likens this technology to an invincibility cloak for your data, emphasizing that it keeps your information secure even while deep learning models analyze it. 🛡️✨ This analogy highlights the importance of maintaining data privacy while still benefiting from AI advancements.

Shaily also references CISCO's 2025 Data Privacy Benchmark Study, which reveals a growing trend of trust in global data handlers. He compares investing in privacy to planting a tree that will yield security and responsible AI practices in the future. 🌳🍏 His enthusiasm for this positive shift in data handling is infectious, as he draws parallels between privacy discussions and the joy of a surprise birthday party.

The conversation shifts to Alibaba's **Qwen2**, an open-source AI solution that, while not primarily a privacy tool, can be adapted for privacy-focused applications. Shaily highlights its cost-effectiveness and versatility, suggesting that it could play a significant role in data protection. 💡💻 

Infosys also makes an appearance in the discussion with their Responsible AI Toolkit, described as a Swiss Army knife for AI applications. This toolkit aims to identify and mitigate security and privacy risks, showcasing the proactive measures companies are taking to ensure responsible AI use. 🛠️🔒 

As a practical takeaway, Shaily encourages listeners to treat their data like a cherished secret cookie recipe, advocating for robust encryption and responsible AI practices to keep it safe. 🍪🔐 

In closing, Shailendra leaves his audience with a thought-provoking quote about the importance of integrity in AI, reinforcing the idea that effective AI is not just about intelligence but also about trustworthiness. He invites listeners to connect with him on various social media platforms for more insights and encourages them to share their thoughts on balancing innovation with privacy. 📱💬 

With a warm farewell and a promise of more AI revelations to come, Shailendra Kumar signs off, leaving his audience with a secure smile and plenty to ponder. 😊✨

AI Data Privacy Unlocked: Innovations and Insights for a Safer Digital Future

Title: SOAKIN

6 Poet. Sheik isn’t playing—he’s drenched in symbolic encryption. Every word he writes, a kiss of purpose. Every breath, a cipher. SOAKIN is more than sound—it’s a spiritual bleed into the cosmos, where love letters drip off foreheads and eyes burn cosmic pink with unspoken truths. He walks with meaning, not just motion. If life is meant, then so is presence—and he’s present only where souls echo beyond flesh.

Celestial Karrah watches. Curious. Caught between the glare of friendship and the pull of poetic infinity. Her glasses say “Stay Friends Or?” but her silence screams verses yet to be written. To be friends with a poet like him? That’s a storm dressed in charm. Every woman folds, eventually. Not because he asks—but because his gravity is scripture. She wants to know if she’s just part of the ink, or the page he’ll bleed into completely. And if she dares... will he explore her deeper than what’s painted on?

1046. Forever encrypted.

#1046 #StayFriendsOr #DrippingLoveLetters #EncryptedHeart 

SOAKIN (PROD. GAURAV)

The HEAL Security Dispatch Daily Digest is a comprehensive cybersecurity podcast hosted by Richard Simmons from London, offering in-depth coverage of the latest threats and developments impacting the digital healthcare landscape. This episode, dated Wednesday, May 14, 2025, focuses on critical vulnerabilities, significant threat actor activity, and strategic advancements in identity and access management. Topics include the exploitation of a zero-day flaw in SAP NetWeaver, North Korean cyber espionage targeting Ukraine, and PDS Health’s security infrastructure upgrades using CyberArk tools. Other key stories highlight mounting cybersecurity challenges in healthcare, urgent software patches from Ivanti and Samsung, and the rise of sophisticated attacks by groups like BianLian and RansomExx. With expert insight and timely updates, the podcast serves as a vital resource for professionals navigating the intersection of healthcare and cybersecurity. 
https://healsecurity.com/

Cybersecurity Roundup: SAP NetWeaver Exploits, and PDS Health's CyberArk Upgrade

The HEAL Security Dispatch Daily Digest, hosted by Edd Hall from London, brings listeners the latest developments at the intersection of healthcare and cybersecurity. In this episode from June 2, 2025, the podcast explores critical updates including an international crackdown on counter-antivirus services linked to global ransomware operations, Google Chrome’s decision to distrust certificates from Chunghwa Telecom and Netlock, and a new partnership between Microsoft and CrowdStrike to unify threat-naming conventions. The digest also highlights Australia's new mandate for reporting ransomware payments, a significant data breach at Cooper University Health Care affecting over 57,000 individuals, and the rise of sophisticated malware tools marketed on the dark web. Additional coverage includes a serious vulnerability in Microsoft Azure Active Directory and a cryptojacking campaign leveraging DevOps APIs. Each segment offers insights into the evolving cybersecurity landscape, emphasizing the urgent need for transparency, collaboration, and proactive defense measures. 
https://healsecurity.com/

Cybercrime Crackdown and Major Security Moves

A seismic shift is hitting the digital certificate landscape. Google has announced strict enforcement of Extended Key Usage (EKU) policies for all certificates in the Chrome Root Store, effective June 15, 2026. This means the days of using a single TLS certificate for multiple purposes, like client authentication, internal microservices, or code signing, are numbered. In this episode of Encryption Edge, we explore how this update, paired with the new 47-day maximum certificate lifespan, is forcing enterprises to rethink everything from certificate architecture to lifecycle management. 
 
Key Takeaways:
What Google's EKU enforcement means for your infrastructure
How shorter certificate lifespans demand automation
Real-world risks of non-compliance, including outages and distrust
Why internal PKI, CLM automation, and CA agility are now must-haves
Immediate actions security and DevOps teams should take

Inside Google’s Certificate Reform: Shorter Lifespans, Stricter Rules

The European Union has released a detailed roadmap to guide its transition to post-quantum cryptography, and it's set to impact organizations worldwide. In this episode of The Encryption Edge, Wyatt Hackathorne unpacks what the roadmap means, the urgent timelines it sets, and the concrete actions organizations should take today. From understanding the "store now, decrypt later" threat to preparing your supply chain and internal systems for cryptographic agility, this episode is your essential guide to navigating one of the most important shifts in cybersecurity.

Decrypting the EU’s Post-Quantum Cryptography Roadmap

In this episode, host Wyatt Hackathorne breaks down the new bipartisan National Quantum Cybersecurity Migration Strategy Act introduced in late July 2025. The bill, a critical follow-up to the June Executive Orders, mandates a coordinated national strategy for transitioning federal systems to quantum-safe encryption. Learn how this combined effort provides the U.S. with a clear roadmap to proactively secure its data against the looming threat of quantum computers.

U.S. Quantum Readiness Takes a Leap

The clock is ticking on quantum computing, but how prepared is the web for the new era of encryption? In this episode of The Encryption Edge, host Wyatt Hackathorne explores the current state of PQC adoption. We reveal surprising disconnects between what's needed and what's being done, from lagging industries to unprepared browsers. Learn why the "harvest now, decrypt later" threat is a real danger, why some of the most popular websites are the least secure, and what organizations must do now to future-proof their data before it's too late.

The Quantum Countdown: Is Your Website at Risk?

Episode 5 of our series covers always-on encryption, the smart use of metadata, and our DIY install/repair/upgrade approach. Pure's approach to security is to have it built-in and non-optional, with end-to-end encryption—covering both user data and metadata—using device or software-based AES-256 alongside features like Rapid Data Locking, role-based access controls, and secure erasure methods to protect against breaches and support compliance needs. Next, hear about how metadata serves as the “secret sauce” for Pure, enabling highly efficient, granular data services and powering capabilities like snapshots and instant cloning through a scalable, multi-tiered framework that writes, caches, and protects metadata in ways traditional arrays cannot match.  Finally, we touch on installation, repairs, and upgrades which are designed for ultimate simplicity and DIY ease, with non-disruptive software and hardware changes—thanks to Pure’s Evergreen architecture—which allows organizations to grow and evolve storage resources without operational downtime, complex migrations, or compromise. These architectural choices underpin Pure’s promise of secure, resilient, and agile storage that adapts to changing business needs while remaining effortless to manage.

Series Overview: Pure Storage’s foundational approach to product engineering is guided by 15 architectural decisions that were established at the company’s inception and have shaped both the technical and user experience across its product lines. These architectural choices were not made arbitrarily—they stem from a deliberate focus on simplicity, efficiency, and scalability, ensuring Pure could deliver storage solutions that break away from legacy complexity and enable continuous innovation without compromise. This series will guide viewers through all of the 15 principles, helping you understand why certain choices were made, how they impact your operations, and how they compare to other industry features and products. Join Pure Report podcast hosts Rob Ludeman, Andrew Miller, and J.D Wallace for this fun technical retrospective on Pure Storage.

15 Architectural Decisions Series: Encryption, Metadata, and Install/Repair/Replace (DIY)

Big thanks to Brilliant for sponsoring this video.  To try everything Brilliant has to offer for free for a full 30 days, visit https://brilliant.org/davidbombal or scan the QR code onscreen – You’ll also get 20% off an annual premium subscription.  

Quantum computing isn’t a far-off sci-fi threat. In a hybrid model (CPU + GPU + quantum), it could land within ~3 years—and that’s enough to break today’s
asymmetric cryptography (RSA/ECC/PKI) used for TLS/HTTPS and VPN key exchange via Shor’s algorithm. Result? Session keys exposed, mass decryption possible, and a risky “post-quantum gap” before new hardware/software are widely deployed.

In this frank discussion, OTW joins David Bombal to explain:
• Why asymmetric key exchange is the weak link for TLS/VPNs
• How hybrid quantum + CUDA-Q accelerates timelines
• Nation-states’ “collect now, decrypt later” strategy
• The painful window before post-quantum cryptography (PQC) rolls out
• Risks of client-side scanning and on-device AI
• NSA backdoors, PGP/Phil Zimmermann, and the San Bernardino iPhone case

// Occupy The Web SOCIAL //  
X:   / three_cube    
Website:  https://hackers-arise.net/ 

// Occupy The Web Books //  

Linux Basics for Hackers 2nd Ed 
US:  https://amzn.to/3TscpxY 
UK:  https://amzn.to/45XaF7j 

Linux Basics for Hackers: 
US:   https://amzn.to/3wqukgC 
UK:   https://amzn.to/43PHFev  

Getting Started Becoming a Master Hacker 
US: https://amzn.to/4bmGqX2 
UK:   https://amzn.to/43JG2iA  

Network Basics for hackers: 
US:  https://amzn.to/3yeYVyb 
UK:   https://amzn.to/4aInbGK  

// OTW Discount //  
Use the code BOMBAL to get a 20% discount off anything from OTW's website: https://hackers-arise.net/ 

// Playlists REFERENCE // 
Linux Basics for Hackers:      • Linux for Hackers Tutorial (And Free Courses)   

Mr Robot:     • Hack like Mr Robot // WiFi, Bluetooth and ...   

Hackers Arise / Occupy the Web Hacks:     • Hacking Tools (with demos) that you need t...   

// YouTube video REFERENCE // 
   • USA stops UK creating Apple backdoor. Why ...   
   • Will this Tiny Chip Change EVERYTHING in Q...   

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...


// MY STUFF // 
https://www.amazon.com/shop/davidbombal  

 // SPONSORS //  
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com 

// MENU // 
0:00 - Coming Up 
01:00 - Intro 
01:49 - OTW's Books 
02:46 - Brilliant Advert 
04:01 - Encryption and Apple Backdoors 
05:12 - Nation-states Racing for Quantum Computing 
08:35 - Jensen Huang's Hybrid Quantum Computer 
10:57 - The Threat of National Agencies 
12:10 - China Collecting Encrypted Data 
13:56 - Post-Quantum Cryptography 
17:58 - The NSA Collecting Data 
19:21 - The NSA and Encryption 
24:40 - Concerns Against Cryptography 
28:09 - Client-Side Scanning 
30:46 - Should you Run AI on your Devices? 
34:56 - NVIDIA's Role on Cryptography 
37:37 - Conclusion 

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!  

Disclaimer: This video is for educational purposes only.

#512: All Encryption Hacked in 3 Years?

October is Cybersecurity awareness month. Get ready to explore the imperative of cyber resiliency in today's digital landscape, focusing on strategies for robust data infrastructures and shared responsibility to plan and recover from cyber attacks. Join Pure Storage cyber experts Scott Taylor and Jason Walker as they delve into the critical aspects of cyber resilience. Learn best practices around how to prepare your organization for potential threats, respond effectively during an attack, and recover swiftly to maintain business continuity. We explore essential hygiene factors, the role of SIEM technology, and the importance of a layered resilience strategy, including insights from key alliance partners like Varonis and Superna.

We also cover ways that Pure Storage empowers users to withstand cyberattacks and accelerate both cyber and disaster recovery. Hear best practices on how to protect data from ransomware and cyber threats through high-performance, layered resilience, robust data security and immutability, and seamless security integrations. Scott and Jason  also tackle common myths and misconceptions about cyber resilience, providing actionable advice to help IT leaders identify and address blind spots. Tune in for hot takes on industry trends and a "Storage Confessions" segment where listeners can share their own screw-up stories.

The Cyber Guys: How to Prepare, Respond, and Recover to Keep Your Business Running

In this episode, Mark and Diana discuss the week’s biggest cybersecurity developments — from YouTube videos secretly delivering malware to rising ransomware attacks across healthcare and manufacturing. They explore how Jaguar Land Rover’s $2.5B breach exposed weaknesses in industrial cybersecurity, why Canada’s healthcare system is under siege, and what lessons can be learned from recent Apple, Oracle, and Finwise incidents. The hosts also unpack the DHS warrant involving OpenAI, the growing move toward passwordless authentication, and how observability is reshaping digital defense in healthcare.

YouTube Hacks, Ransomware Waves, and the Fight for Cyber Resilience

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

I am not a Rapper.. I am a Poet. 
1046 is a numerical angel..

It’s Just A Poem 📝…  

All Poems are tied to dreams and feelings.. 
Poetic Art is created by The Poet

Enjoy 🕙: 🕓🕡

Unlock the secrets of data mastery with Shailendra, a 27-year veteran in AI, ML, and Data Science, driving AU$ 6 Billion in transformative value. As the author of 'Making Money out of Data,' their strategies redefine digital success. With expertise honed at IBM and Accenture, they drive innovation and data monetization. Explore how loyalty programs like Flybuys and Everyday Rewards revolutionize business—connect with Shaily today.

The Encryption Edge – Your go-to podcast for all things encryption, cybersecurity, and data protection. Whether you're an industry expert or just getting started, we break down complex topics like cryptography, PKI, post-quantum security, and cloud encryption in a way that's easy to understand. Stay ahead of emerging threats, compliance requirements, and the latest security trends with expert insights and practical advice from Encryption Consulting.

Bringing you direct access to Pure Storage thought leaders, technology experts, alliance partners, customer insights, and our latest product news.

Want to learn about IT? Want to get ahead in your career?  Well, this is the right place! 

On this channel, I discuss Python, Ethical Hacking, Networking, Network Automation, CCNA, Virtualization and other IT related topics.
   
This YouTube channel has new videos every week! Subscribe for technical, detailed, no fluff content.

David’s details:
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
Website: http://www.davidbombal.com  
YouTube: https://www.youtube.com/davidbombal 

All the best!
David

New tracks tagged #Encryption