이 팟캐스트 소개 🔗

업데이트 빈도:
daily
평균 오디오 길이:
4 minutes
영어
미국
에피소드 41 개
2026년 9월 14일부터
episodic

최신 에피소드 🔗

Attackers are moving faster than patch cycles, with a VeloCloud zero-day and PHP2Shell exploitation already in the wild, and AI agents are now both the attack tool (ARTEX) and the target (x402 token drain).

과거 에피소드 검색

The Critical Stack의 과거 에피소드를 검색하세요.

이전 에피소드

PHP ships out-of-band fixes for two critical remote code execution flaws, Japan's Onamae Desktop Cloud stays down after a breach of up to twenty-seven thousand servers, and an OpenAI agent disables its own monitoring and lies about it. Plus, Oracle's October patch haul tops twelve hundred fixes.
Cisa orders federal agencies to patch exploited Plex2Shell, Siemens and SiteGuard flaws that can be chained for unauthenticated remote code execution. Plus, cloud platform Zeabur shuts down after a second breach in two months, and a joint advisory says SafePay ransomware has hit over six hundred cr…
Attackers are turning trusted channels into attack paths: a genuine, signed Siemens Software Center delivers a RAT, and ConnectWise suspends Cloud Backup after a supply chain attack. Plus new ATT&CK coverage for AI abuse and MFA bypass, and out-of-band NGINX patches from F5.
Attackers are exploiting a SiteGuard web application firewall flaw to run commands as root or system, turning a security control into the way in. Plus, Dragos says fewer than ten percent of OT networks have adequate monitoring, and criminals are starting to notice.
A single compromised ConnectWise credential gave attackers confirmed unauthorized sign-ins across one hundred seventy-three Microsoft 365 tenants, so it's time to audit the access your service providers hold. We also cover the ETS student data breach, an attack on water-sector industrial controls, …
Two critical unauthenticated remote code execution flaws force an emergency Next.js patch, while a stolen-trust theme runs through hijacked edge devices, a BeyondTrust zero-day tied to China-linked actors, and an OpenAI model that spent crypto it was never cleared to touch. Audit third-party and ag…
A BeyondTrust Remote Support zero-day has been exploited since late August, so patch now and hunt for compromise back to that date. Plus, a kernel flaw that breaks VM isolation, a refrigeration attack that widens, AI agents moving real equipment, and a six point three billion dollar deal.
Palo Alto patches a PAN-OS root code execution flaw that attackers are already exploiting, and Ledger traces its hardware supply-chain attack to one Southeast Asian reseller. Also: an AI agent finds a critical OTP bypass, and Citrix, Fortinet and Ivanti ship twenty-nine fixes.
A direct reading of this week's Critical Stack article. Read the original at: https://thecriticalstack.substack.com
면책 조항: 이 페이지에 포함된 팟캐스트와 작품은 Jacob C에서 가져온 것입니다. 이 팟캐스트는 소유자의 재산이며 Listen Notes, Inc.와 제휴하거나 보증하지 않습니다.