Leaky Weekly Podcast Por Flare arte de portada

Leaky Weekly

Leaky Weekly

De: Flare
Escúchala gratis

There’s so much happening in the world of cybercrime, it’s hard to keep up for anyone, including security practitioners. Dive in with security researcher Nick Ascoli as he covers the most pressing stories on data leaks, cybercrime, and the dark web from the last week or so.

Tune in with short and sweet episodes in about 15 minutes.

Política y Gobierno
Episodios
  • React2Shell (CVE-2025-55182), 41% of Infostealer Victims Infected by Video Game Files
    Dec 11 2025

    On this episode of Leaky Weekly, host and security researcher Nick Ascoli discusses findings from Flare Research including:

    • React2Shell (CVE-2025-55182) vulnerability and threat actor chatter
    • Findings from analysis of 50,000 stealer log infections

    He also mentions instructions for a giveaway for CTF players who would like another shot at unlocking a shirt from a past challenge…

    Here are the resources on the stories:

    • React2Shell Detailed Report (Lachlan Davis) http://react2shell.com
    • React2Shell (CVE-2025-55182): A Critical RCE in React Server Components (Flare): https://flare.io/learn/resources/blog/react2shell-cve-2025-55182/?utm_source=Social&utm_medium=Flare+Podcast&utm_campaign=Leaky+Weekly&utm_content=E18
    • How Gamers Became Cybercrime’s Favorite Target: Analysis of 50,000 Infostealer Infections (Flare): https://flare.io/learn/resources/cybercrime-favorite-target-gamers/?utm_source=Social&utm_medium=Flare+Podcast&utm_campaign=Leaky+Weekly&utm_content=E18

    Brought to you by Flare, Threat Exposure Management solution and industry-leading dataset on cybercrime that integrates into your security program in 30 minutes. Check out what’s on the dark web (and more) about your organization: https://try.flare.io/free-trial/?utm_source=Social&utm_medium=Flare+Podcast&utm_campaign=Leaky+Weekly&utm_content=E18

    Check out Flare Academy: https://flare.io/flare-academy/?utm_source=Social&utm_medium=Flare+Podcast&utm_campaign=Leaky+Weekly&utm_content=E18

    • Our free training series led by experts on critical topics such as threat intelligence, operational security, and advanced investigation techniques (earn CPE credits towards cybersecurity certifications)
    • Our Discord community is a space to learn from and with cybersecurity professionals (including Nick!) and students, check out previous training resources, and keep up with upcoming training
    Más Menos
    9 m
  • Attack on Identity: Dissecting Microsoft’s 2025 Digital Defense Report
    Nov 6 2025

    On this episode of Leaky Weekly, host and security researcher Nick Ascoli and Flare’s Identity Security Expert Mike Iaconianni dig into their responses and questions to the Microsoft 2025 Digital Defense Report.

    Here are the resources on the stories:

    • Microsoft Digital Defense Report 2025 https://www.microsoft.com/en-us/corporate-responsibility/cybersecurity/microsoft-digital-defense-report-2025/
    • Screenshot.jpg (When They Got Hacked) by John Hammond https://www.youtube.com/watch?v=4h-bCHVFOs4

    Brought to you by Flare, Threat Exposure Management solution and industry-leading dataset on cybercrime that integrates into your security program in 30 minutes. Check out what’s on the dark web (and more) about your organization.

    Check out Flare Academy:

    • Our free training series led by experts on critical topics such as threat intelligence, operational security, and advanced investigation techniques (earn CPE credits towards cybersecurity certifications)
    • Our Discord community is a space to learn from and with cybersecurity professionals (including Nick!) and students, check out previous training resources, and keep up with upcoming training
    Más Menos
    25 m
  • NPM Supply Chain Attack, Fake Europol Bounty, and Operation Secure
    Oct 8 2025

    On this episode of Leaky Weekly, host and security researcher Nick Ascoli covers the NPM supply chain attack, fake Europol bounty, and Operation Secure.

    Here are the resources on the stories:

    • Largest NPM attack in crypto history stole less than $50: SEAL (Cointelgraph)
    • Breakdown: Widespread npm Supply Chain Attack Puts Billions of Weekly Downloads at Risk (Palo Alto Networks)
    • The largest supply-chain attack ever… (Fireship, The Code Report)
    • 2 Billion npm Downloads at Risk From Crypto Malware: A Wake-Up Call for Open-Source Supply Chain Security (OPSWAT)
    • Self-Replicating Worm Hits 180+ npm Packages to Steal Credentials in Latest Supply Chain Attack (The Hacker News)
    • Europol confirms $50,000 Qilin ransomware reward is fake (BleepingComputer)
    • 20,000 malicious IPs and domains taken down in INTERPOL infostealer crackdown (INTERPOL)
    • Operation Secure: Trend Micro's Threat Intelligence Fuels INTERPOL's Infostealer Infrastructure Takedown  (Trend Micro)

    Brought to you by Flare, Threat Exposure Management solution and industry-leading dataset on cybercrime that integrates into your security program in 30 minutes. Check out what’s on the dark web (and more) about your organization.

    Check out Flare Academy:

    • Our free training series led by experts on critical topics such as threat intelligence, operational security, and advanced investigation techniques (earn CPE credits towards cybersecurity certifications)
    • Our Discord community is a space to learn from and with cybersecurity professionals (including Nick!) and students, check out previous training resources, and keep up with upcoming training
    Más Menos
    8 m
Todavía no hay opiniones