In this episode, Greg Otto talks with Sonu Shankar, President at Phosphorus, to discuss the unique security challenges facing today’s rapidly expanding Internet of Things landscape, where traditional endpoint protections are ineffective. The episode explores how everyday devices with default passwords and outdated firmware open organizations up to significant risk. Shankar highlights the tactics of groups like Salt Typhoon, who exploit these weak spots to infiltrate and persist within networks. The conversation underscores the pressing need for deeper asset inventory and active discovery in critical environments.

In our reporter chat, Greg talks with Matt Kapko about a supply-chain attack on npm that turned out to be pretty close to a false alarm. 

Phosphorus’ Sonu Shankar on IoT Vulnerabilities and Salt Typhoon Tactics

In today’s cybersecurity briefing: a critical Apple CarPlay flaw leaves vehicles exposed, Microsoft battles a major Exchange outage, and a new phishing-as-a-service platform emerges. Oracle unveils AI-powered patient tools, researchers warn of the VMScape CPU attack, and Apple alerts users to state-sponsored spyware threats. Plus, ransomware surges across the Middle East, putting banking and oil sectors under siege.

Global Cybersecurity Briefing: Apple Flaws, Microsoft Outage, and Rising Ransomware Risks

In this episode, Mark and Diana discuss the latest wave of cybersecurity developments, from the emergence of HybridPetya ransomware that bypasses Secure Boot to Akira’s exploitation of a SonicWall flaw. They cover the critical Cursor editor vulnerability, CISA’s warning about active attacks on Dassault’s manufacturing software, and new patches from Cisco and Samsung. The conversation also explores Microsoft’s fresh security challenges—including political scrutiny and new Teams protections—alongside a major UK train operator breach, the appearance of a mysterious Chinese AI pentesting tool, and the growing cyber risks facing the pharmaceutical industry.

Ransomware Evolves, Zero-Days Exploited, and Microsoft Under Fire

On this episode of Safe Mode, we’re joined by a renowned cybersecurity expert and CyberScoop 50 winner, Veracode co-founder and CTO Chris Wysopal, to discuss the fast-evolving landscape of AI-assisted software development. Chris shares insights from a recent study examining over 100 large language models and their tendency to introduce security vulnerabilities in generated code. The conversation delves into why a staggering 45% of AI-generated code samples contained vulnerabilities and why improvements in AI reasoning haven’t translated to more secure outputs. Chris emphasizes the critical need for enhanced security testing and better quality training data, discussing both the challenges and opportunities ahead as AI adoption accelerates. Tune in for a thoughtful exploration of the intersection between AI, secure coding, and what the future holds for developers and enterprises alike.


In our reporter chat, Greg talks with Derek Johnson about work that OpenAI and Anthropic have done with the U.S. and U.K. government to secure their models. 


Veracode’s Chris Wysopal on the security issues with AI code development

Big thanks to Proton VPN for sponsoring this video.  To get 64% discount to your Proton VPN Plus subscription, please use the following link:  https://protonvpn.com/davidbombal 

Want a “hacker” laptop without wasting cash? In this candid breakdown with OTW, we cut through the hype and show you what actually matters for learning pentesting in 2025: prioritising RAM over flashy GPUs, picking VMware (free for personal use) for reliable labs, using refurbs/minis/Raspberry Pi, and planning for where wireless
hacking is going (Bluetooth/BLE/Zigbee) — not just Wi-Fi. We also cover AMD vs Intel vs Apple M-chips/ARM for Linux VMs, when cloud cracking makes sense, and why daily practice beats buying gadgets.
Highlights:
• Best beginner specs (RAM first, SSD nice, storage ≠ speed)
• VMware vs VirtualBox for home labs
• AMD/Intel vs Apple M-chips/ARM for Kali/Parrot VMs
• Alpha adapters & aircrack-ng compatibility; Nordic nRF52 for BLE
• Budget path: used/refurb, mini-PCs, Pi, phone/cloud labs (HTB/THM)
• The 80/20 rule of hacking: skills are greater than gear

If you’re delaying until you can afford a $2 – 3k laptop, don’t. Start now, learn daily, and upgrade later.

// Occupy The Web SOCIAL //
X:   / three_cube    
Website:  https://hackers-arise.net/ 

// Occupy The Web Books //  
Linux Basics for Hackers 2nd Ed 
US:  https://amzn.to/3TscpxY 
UK:  https://amzn.to/45XaF7j 

Linux Basics for Hackers: 
US:   https://amzn.to/3wqukgC 
UK:   https://amzn.to/43PHFev  

Getting Started Becoming a Master Hacker 
US: https://amzn.to/4bmGqX2 
UK:   https://amzn.to/43JG2iA   

Network Basics for hackers: 
US:  https://amzn.to/3yeYVyb 
UK:   https://amzn.to/4aInbGK  

// OTW Discount //  
Use the code BOMBAL to get a 20% discount off anything from OTW's website: https://hackers-arise.net/ 

// Playlists REFERENCE // 
Linux Basics for Hackers:      • Linux for Hackers Tutorial (And Free Courses)   
Mr Robot:     • Hack like Mr Robot // WiFi, Bluetooth and ...   
Hackers Arise / Occupy the Web Hacks:     • Hacking Tools (with demos) that you need t...   

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF // 
https://www.amazon.com/shop/davidbombal  

// SPONSORS //  
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com 

// MENU // 
0:00 - Coming up 
01:21 - Proton VPN sponsored segment 
03:16 - Get started and start learning 
08:39 - Computer specs: CPU, GPU, RAM & Hard drives 
16:46 - Time vs Money 
17:58 - Virtual machines 
19:15 - Computer specs overview 
22:17 - Wi-Fi adaptors for Wi-Fi hacking 
24:17 - Bluetooth dongles for Bluetooth hacking 
26:57 - "80% Person & 20% Machine" 
29:17 - Do you need hacking gadgets? 
31:57 - Apple vs Intel vs AMD 
35:53 - Learn hacking with a smartphone 
37:01 - Learn hacking with a Raspberry Pi 
39:32 - Kali Linux vs ParrotOS (Which OS to use?)
40:58 - The problem with Chromebooks 
42:02 - Using Hack The Box/TryHackMe // Conclusion 

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!  

Disclaimer: This video is for educational purposes only. 
#hacking #laptop #vm

#514: Why People Buy the WRONG Laptops for Hacking

More than four out of ten (41%) Chief Information Officers (CIOs) report cybersecurity as their top concern, yet these same leaders are simultaneously increasing security budgets (77%), expanding cloud infrastructure (68%), and accelerating artificial intelligence (AI) capabilities (67%). According to the new Future Forward: CIO 2025 Outlook report released by Experis, a global leader in IT workforce solutions and part of the ManpowerGroup (NYSE: MAN) family of brands, modern technology leaders are walking a tightrope between protecting their organizations and driving innovation in an era of relentless cyber threats and rapid digital transformation. Amanda Jack, CTO at Manpower Group, joins Business Security Weekly to share the finding, including:  77% of organizations plan to increase cybersecurity budgets in 2025, followed by cloud infrastructure (68%) and AI (67%) 76% of IT employers worldwide report difficulty finding skilled tech talent 52% of tech leaders are embedding AI skills into existing roles rather than creating new positions Relationship with the Chief Operating Officer (COO) is identified as the most important C-suite partnership outside IT 56% of IT leaders say senior leadership lacks sufficient knowledge about the CIO role and its responsibilities  Segment Resources:  In the leadership and communications segment, Is Your Board Too Collegial?, Cybersecurity, AI, and Economic Uncertainty: How Internal Audit Teams Are Managing 2025's Top Risks, Burnout in the corporate middle: when leadership becomes an issue, and more! Visit  for all the latest episodes! Show Notes:

Future Forward: CIO 2025 Outlook - Cybersecurity, AI, and Economic Uncertainty? - Amanda Jack - BSW #415

In this week's episode of Safe Mode, Greg Otto talks with Brian Carbaugh, CEO of Andesite, who reveals how lessons learned in the CIA are transforming Andesite’s unique, human-first approach to AI-driven cybersecurity. Carbaugh shares behind-the-scenes stories about building a “bionic SOC,” where cutting-edge artificial intelligence works seamlessly with analysts, amplifying their skills, streamlining investigations, and making security operations not just more efficient but genuinely exciting.

In our reporter chat, Greg and Matt Kapko dive into a week's worth of critical vulnerabilities and government emergency directives,  and how enterprises have responded in kind. 

Andesite's Brian Carbaugh on how lessons from the CIA can power an AI-powered SOC

In this episode, Edd Hall discusses the recent wave of cybersecurity events, starting with the Red Hat breach that exposed internal project data, the surge in CVEs and how insurers are reacting, and the Kodex outage caused by social engineering. He also covers the emergence of the Klopatra Android trojan, new CISA advisories and additions to the KEV catalog, along with major data breaches impacting Allianz Life and WestJet customers.

From the Red Hat Breach to the WestJet Data Leak

Imaginá que un día encendés tu computadora… y todos tus archivos están bloqueados. Tus documentos, tus bases de datos, tus proyectos: todo cifrado. Y en la pantalla, un mensaje que dice que para recuperarlos, tenés que pagar. Así actúa Crypto24, un grupo de hackers que apareció a fines de 2023 y que, desde entonces, viene sembrando el caos digital en empresas de todo el mundo.

Su estrategia es tan perversa como efectiva: primero roban la información y después la encriptan, exigiendo un rescate bajo amenaza de publicar los datos robados. Usan herramientas legítimas del sistema, combinadas con su propio malware, para evadir defensas y permanecer ocultos por semanas o incluso meses.

Las víctimas se cuentan por decenas en sectores como tecnología, finanzas y entretenimiento. Pero los expertos coinciden en algo: no hay que pagar el rescate. Crypto24 no devuelve los datos, y la información robada suele venderse de todos modos.

La mejor defensa sigue siendo la prevención: copias de seguridad, capacitación y reportar cada ataque a las autoridades. Porque en el mundo digital, la ciberseguridad no es solo técnica… es una cuestión de supervivencia.

Crypto24: Grupo hacker que atacó el Banco Hipotecario del Uruguay (BHU) en octubre 2025

hacking_the_mainframe

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

Information security news, hacking, interviews, podcasts, live Internet TV, cocktails, and more!

Hack naked.

Want to learn about IT? Want to get ahead in your career?  Well, this is the right place! 

On this channel, I discuss Python, Ethical Hacking, Networking, Network Automation, CCNA, Virtualization and other IT related topics.
   
This YouTube channel has new videos every week! Subscribe for technical, detailed, no fluff content.

David’s details:
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
Website: http://www.davidbombal.com  
YouTube: https://www.youtube.com/davidbombal 

All the best!
David

New tracks tagged #hacking