Vulnerable U

Nov 20 2023 3
Vulnerable U Podcast artwork

Welcome to Vulnerable U, a podcast where we explore the intersection of vulnerability and cyber security.

Each episode, we explore how vulnerability can drive growth and foster community resilience within our industry. Get ready for thought-provoking conversations, real-life stories, and curated news that inspire you to embrace discomfort on the road to a more vulnerable you.

RSS feed Share
Copy RSS


Subscribe on Podcast Addict


Hackers Turn Whistleblowers: Ransomware Gang Files SEC Complaint

Nov 20 2023 11 mins  
Howdy friends. This week I discuss how ALPHV/Blackcat filed a SEC complaint against one of their ransomware victims, ALPHV/Blackcat’s use of Google Ads to target victims, LockBit’s leak of Boeing’s files, Google’s confirmation that they will disable uBlock in Chrome in 2024, the release of new CVSS 4.0 vulnerability severity rating standard, YouTube’s requirement on creat

Biden’s 8 Rules for AI Usage & What it Means For You

Nov 10 2023 16 mins  
Howdy friends. This week I cover Biden’s AI executive order, the pledge that 40 countries took to not pay ransom to cybercriminals, Prolific Puma, Lazarus hacking group’s focus on infecting blockchain experts with malware, the pwning of the JFK taxi system by Russian hackers, and Boeing’s recent ‘cyber incident’.We’re sticking with just the news on this episode, but you

Okta hacked! 1Password and Cloudflare caught in the splash damage

Nov 02 2023 11 mins  
Howdy friends. This week I go over the Okta security breach, SolarWinds and their Chief Information Security Officer charged by the SEC with Fraud, Cisco’s second recent 0-day, Browser-based attacks on Apple devices, Telegram’s continued leaks, and the 34 Spanish cyber criminals arrested for stealing 4 million people's data.We’re sticking with just the news on this video

Is Your Co-Worker a North Korean Spy?

Oct 24 2023 8 mins  
Howdy friends. This week I discuss the North Korean IT workers found to have been sending wages from their remote jobs back to North Korea to fund weapons programs, the massive Cisco device 0-day, the fall of the ACG hacking group, a complex malvertising campaign that was recently uncovered, and the discovery of government-backed hackers exploiting WinRAR vulnerability. We’re sti

October 10: 23andMe data breach hate crime, attack against iPhone encryption by dark-money network, the massive increase in police use of Google’s data, hacking scams on the elderly community, Cisco Emergency Responder vulnerability, the iOS 17 0-day, Qu

Oct 10 2023 9 mins  
Howdy friends. This week I explain the 23andMe data breach, the new group responsible for attacking iPhone encryption backed by a political dark-money network, the uptick in police use of Google’s data, the increase in hacking scam on the elderly community, Cisco Emergency Responder static credential vulnerability, the iOS 17 0-day, Qualcomm's three 0-day patches reported by

October 2: WebP 0day, a youth hacking ring at the center of recent cybercrime sprees, the UNC3944 threat actor’s shift to ransomware attacks, University of Minnesota’s data breach, the $200 million crypto hack on Mixin, and the discovery of China-linked t

Oct 02 2023 9 mins  
Howdy friends. This week I dive into the WebP 0day, the Youth hacking ring at the center of recent cybercrime spree, the financially motivated UNC3944 threat actor that has shifted its focus to ransomware attacks, University of Minnesota’s data breach, the $200 million crypto hack on Mixin, and the discovery of China-linked threat actors who have modified Cisco router firmware to

September 22: The MGM and Caesars hacks, Github launches passkeys, the scam on Mark Cuban's crypto wallet, Microsoft AI researchers data leak, the Microsoft teams' phishing problem, Cisco’s Splunk acquisition, and the T-mobile data breach

Sep 26 2023 10 mins  
Howdy friends. This week I will discuss the MGM Resorts and Caesars Entertainment hacks, Github’s launch of passkeys, Mark Cuban’s crypto wallet hack, the Microsoft AI researchers accidental data leak, the Microsoft teams phishing problem, Cisco’s acquisition of Splunk, and the latest T-mobile data breachWe’re sticking with just the news on this video, but you can find more

September 5: Flax Tycoon hacks, Brazilian phone spyware hack, MOVEit hack stats, the dismantling of QakBot infrastructure, a fake Signal app, and Saudi’s death penalty over a man’s tweets

Sep 05 2023 10 mins  
Howdy friends. This week I am covering the China-backed Flax Tycoon hack on Taiwan, a Brazilian phone spyware that was hacked, the MOVEit hack statistics, the FBI and partners dismantling of Qakbot infrastructure in a massive international cyber takedown, a fake Signal app planted on the Google Play store, and the tragic death of a Saudi man by death penalty over his tweets.We’re

August 28: UK surveillance changes, CloudNordic’s ransomware incident, a SIM-Swap Crypto Hack, Citrix Sharefile flaw exploit, Tesla’s data breach, and updates on the Lapsus$ and Discord stories from last week

Aug 28 2023 10 mins  
Howdy friends. In this video I go over UK Surveillance requirement revisions, CloudNordic’s ransomware incident, a SIM-Swap Crypto Hack perpetrated on a crypto investor, the Citrix Sharefile flaw exploit, Tesla’s massive data breach of employee’s personal information, and updates on the Discord and Lapsus$ stories from last weekWe’re sticking with just the news on this vide

August 21: GitHub’s move to Two-Factor, Discord.io’s data breach, Kubernetes misconfiguration that exposes data from Fortune 500 companies, PSNI and UK voter breaches, and the $70 device that spoofs Apple products

Aug 21 2023 11 mins  
Howdy friends. In this video, I cover GitHub’s plans to require two-factor authentication, Discord.io’s recent data breach and shutdown, the Kubernetes misconfiguration that exposes data of several Fortune 500 companies and possibly hundreds more, the PSNI and UK voter breaches and why they should be taken more seriously, and finally the $70 device that can spoof Apple products