ABOUT THIS EPISODE
Microsoft just dropped an emergency patch for an Office zero-day being exploited in the wild. A WordPress plugin has a CVSS 10.0 vulnerability — that's the golden goose of hacking. 900,000 Chrome users had their ChatGPT conversations stolen by malicious extensions with Google's Featured badge. And two cybersecurity professionals pleaded guilty to moonlighting as ransomware affiliates.
Welcome to 2026. It's gonna be a fun year.
In this episode:
- CVE-2026-21509: Microsoft Office zero-day (security feature bypass)
- CVE-2026-23550: WordPress Modular DS critical vulnerability
- Prompt Poaching: Chrome extensions stealing AI conversations
- Brightspeed breach: Crimson Collective claims 1M+ records
- Insider threat: Security pros turned BlackCat/ALPHV affiliates
Key takeaway: Update your stuff. A patch does you no good if it isn't installed.
Subscribe for weekly cybersecurity news, vulnerability breakdowns, and threat intelligence.
https://forgeboundresearch.com/podcasts/
English
United States
TRANSCRIPT 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
SEARCH PAST EPISODES
Search past episodes of Exploit Brokers By Forgebound Research - Tech and Hacking News Commentary.
OTHER EPISODES IN THIS PODCAST
In this episode of Exploit Brokers, we dive into the dark world of cybercrime, exploring two alarming topics: a malicious Android loan app masquerading as a financial tool and Xerox printer vulnerabilities that could be leaking your credentials. Learn how loan sharks have moved from traditional met…
Welcome back to Exploit Brokers! In today's video, we dive deep into a critical 7‑Zip vulnerability that's being exploited by Russian cybercriminals to bypass Windows' security protections. If you've used 7‑Zip at all, you need to know how this flaw can let hackers sneak past the Mark-of-the-Web (M…
Lazarus Group's Secret Admin Layer EXPOSED – Major Cybersecurity Discovery! 🔥💻 Security researchers have uncovered a hidden admin layer used by North Korea's Lazarus Group to manage their Command and Control (C2) servers. This sophisticated network of VPNs and proxies allows them to execute cyberat…
Welcome to Exploit Brokers with your host Cipherceval! In this deep dive, we uncover a sophisticated cyber assault where hackers exploited Microsoft SharePoint to launch the Havoc C2 via a stealthy click fix attack. Learn how a single click can trigger malicious PowerShell commands, turning everyda…
In today's episode of Exploit Brokers, we dive deep into two major security threats making waves across the digital world. A critical Remote Code Execution (RCE) vulnerability in Microsoft Outlook is putting millions of users at risk, with hackers exploiting it through spear phishing emails and mal…
Disclaimer: The podcast and artwork embedded on this page are from Cipherceval, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
EDIT
Thank you for helping to keep the podcast database up to date.
