In this interview Cosive’s Managing Director Kayne Naughton shares what he’s learned about threat intelligence programs throughout his career in vulnerability development, SysAdmin and working on threat intel in the financial sector.

Kayne is one of the co-founders of Cosive. Founded in 2015, Cosive specialises in trying to solve the difficult problems in security for Australian and New Zealand organisations.

Episode #001: What Goes Wrong in Threat Intel Programs with Kayne Naughton

In this episode of Breaking Badness, host Kali Fencl welcomes Wes Young of CSIRT Gadgets and Daniel Schwalbe, CISO and head of investigations at DomainTools, dive into a recent DomainTools Investigations (DTI) analysis involving ValleyRAT and Silver Fox, and how new tools are enabling faster, more accessible analysis for junior and seasoned analysts alike. Whether you're a threat intel veteran or an aspiring analyst, this episode is packed with hard-earned lessons, technical insights, and future-forward thinking.

They also unpack the evolution of threat intelligence from early higher-ed days of wiki-scraped snort rules to today’s graph-powered AI analysis. Wes shares the origin story behind his platform AlphaHunt, how it's being used to automate and enhance threat detection, and why community sharing remains essential even in an era of advanced tooling.

From ValleyRAT to Silver Fox: How Graph-Based Threat Intel is Changing the Game

The HEAL Security Dispatch Daily Digest is a leading podcast delivering the latest insights and trends in cybersecurity with a sharp focus on the healthcare sector. Hosted by Richard Simmons from London, each episode dives into major cyber threats, data breaches, and evolving attack techniques affecting the digital health landscape and beyond. In this edition, the podcast unpacks high-stakes stories such as Russian hackers deploying new malware through the MSC EvilTwin technique, the use of Morphing Meerkat phishing kits targeting global brands, and Oracle facing scrutiny over alleged data breaches. It also covers the exploitation of WordPress MU-Plugins, emerging threats in Ivanti products, the resurgence of the Qakbot malware, and a significant data breach impacting 170,000 individuals linked to Chord Specialty Dental Partners. With expert analysis and timely reporting, the HEAL Security Dispatch Daily Digest is an essential resource for staying informed on the frontlines of cybersecurity. 
https://healsecurity.com/

Russian Hackers, Oracle Breaches, and Qakbot Resurgence: Cybersecurity Warnings from HEAL Security

HEAL Security Dispatch Daily Digest is a cybersecurity-focused podcast hosted by Richard Simmons and produced by HEAL Security, delivering daily insights into the dynamic intersection of cybersecurity and healthcare. Broadcasting from London, the podcast provides timely and expert-driven analysis of major cyber threats and developments impacting global security landscapes. With coverage of high-profile breaches like the Fortinet symlink backdoor incident, state-sponsored cyberattacks such as China’s “Brickstorm” malware campaign in Europe, and the risks posed by AI companies like DeepSeek, the show offers a comprehensive look at pressing digital security issues. The podcast also highlights critical infrastructure threats, including concerns over budget cuts to the CVE program and sophisticated campaigns targeting nations and industry sectors. Through expert commentary and real-time updates, HEAL Security Dispatch Daily Digest equips listeners with the knowledge needed to stay informed and prepared in an increasingly complex cyber environment. 
https://healsecurity.com/

Fortinet Breach, DeepSeek Threats, and Microsoft Malware Alerts Dominate Cybersecurity Headlines

The HEAL Security Dispatch Daily Digest, hosted by Richard Simmons from London, delivers sharp, up-to-the-minute insights at the intersection of healthcare and cybersecurity. In this May 8, 2025 episode, the podcast explores a wide range of pressing threats and vulnerabilities shaping the digital security landscape. Topics include a malicious Python package targeting Discord developers via a remote access trojan, a major breach of the LockBit ransomware group’s dark web infrastructure, and social engineering attacks on major UK retailers like Marks & Spencer and Co-op. Listeners also get critical updates on security patches for SonicWall devices, risks from Microsoft's OneDrive syncing features, privilege escalation flaws in IXON's VPN Client, and the discovery of advanced malware linked to Russian state-sponsored actors. With expert analysis and real-world implications, the podcast equips cybersecurity professionals and healthcare stakeholders with essential knowledge to navigate today’s evolving threat environment. 
https://healsecurity.com/

Cybersecurity News Roundup: PyPi Malware, and Updates from Google, Microsoft, SonicWall, and IXON

In today’s episode of the Cybersecurity Roundup for Friday, June 13, 2025, we explore a turbulent week in the tech world marked by major disruptions and critical vulnerabilities. Cloud service outages hit industry giants including Cloudflare, Google, and Microsoft, revealing the fragility of even the most robust digital infrastructures and highlighting the need for stronger service-level contingency planning. We examine a zero-click exploit in Apple iMessage used to infect journalists’ devices with Paragon spyware, a stark reminder of escalating privacy threats. The episode also covers the Fog ransomware group’s novel tactics, the misuse of expired Discord invites for malware distribution, and a widespread JavaScript injection campaign dubbed JSFireTruck that infected over 269,000 websites. Additional threats include malware posing as trusted software, a smartwatch-based data exfiltration technique named SmartAttack, and critical vulnerabilities in Mitel and Trend Micro products. For professionals and individuals alike, these stories emphasize the evolving sophistication of cyber threats and the urgent need for proactive security measures. 
https://healsecurity.com/

Cloudflare, Google, Microsoft Hit by Outages; and Trend Micro Vulnerabilities Raise Security Alarms

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

Where timely and relevant security meets puns and witty banter. Our goal is to keep defenders apprised of pertinent news and trends in under forty-five minutes.

New tracks tagged #ThreatIntel