Show Notes
Matt Radolec and David Gibson discuss how an unknown attacker recently exploited a vulnerability in Proofpoint’s email routing system, allowing them to bypass security measures and send millions of spoofed emails on behalf of major companies.
The co-hosts also cover:
+ The North Korean threat actor hired using AI
+ The biggest ransomware payment ever made
+ How X is training its Grok AI LLM with your posts
+ The EU’s groundbreaking AI act
+ How anyone can access deleted and private repositories on GitHub
+ Updates on AMD's silicon-level "SinkClose" processor flaw
More from State of Cybercrime
ShinyHunters claims it stole 2-3 TB of FBI data and shared a sample with researchers containing information on employees, applicants, and even family members.
If your company runs PTC Windchill, Cl0p may already have your blueprints.
A complete attack chain run by an AI agent – with zero human hands on the keyboard.
The supply chain remains the weakest link. A new automated malware campaign dubbed “Megalodon” poisoned more than 5,500 GitHub repos in just six hours, quietly harvesting cloud credentials, tokens, and sensitive code from environments that implicitly trust what they pull.