SOC Minute Weekly

About SOC Minute Weekly

SOC Minute Weekly is a concise cybersecurity podcast covering the week’s most important threats, vulnerabilities, campaigns, and defensive lessons. Join Alex and Jordan for an AI-assisted conversation that turns complex security news into practical context for SOC analysts, defenders, and technology professionals. New episodes every week, with clear analysis, responsible reporting, and actionable takeaways. Learn more at socminute.com. Support SOC Minute 💙 https://www.patreon.com/SOCMinute

Publisher

SOC Minute

Category

news

Language

en

Explicit

No

First episode

21 Jul 2026

Latest episode

24 Oct 2026

Latest episodes

15 episodes in the feed.

1. 

   24 Oct 2026

   SOC Minute Weekly: Compromised Control Planes, Poisoned Pipelines, and AI at Scale

   This week connects compromised administrative access, exposed perimeter systems, poisoned software pipelines, ransomware and espionage operations, and the controls organizations need as AI gains access to sensitive systems. This episode covers 23 cybersecurity stories. Chapters: 00:00 Opening 00:31 Hackers Abuse Compromised ConnectWise Credential to Access 173 M365 Tenants 01:46 Nation-State Leveraging AI for Large-Scale Supply Chain Attack 02:55 Hackers Breach Enterprise Firewalls and VPNs Exposing 70,000+ Credentials 04:04 Qilin and INC Ransomware Groups Exploit Palo Alto Networks MFA Bypass Flaw 05:02 Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited 06:06 Critical FortiSIEM Flaw with Public Exploit Enables Remote Code Execution 06:55 Rank Math PRO WordPress Plugin Compromised in Supply-Chain Attack 07:39 LiteLLM release pipeline hacked to distribute info-stealer malware 08:26 OpenCode Console Breach May Have Exposed AI Provider API Keys 09:26 Zeabur Shuts Down After Second Security Breach in Two Months 10:14 Critical GitLab Flaw (CVSS 10.0) Allows Unauthenticated RCE Since 2014 11:36 Critical PHP Vulnerabilities Demand Immediate Patching 12:27 Critical BlockStrap Flaw Allows Code Execution on Magento Servers 13:22 Hackers Exploit Plex2Shell Flaws to Deploy Crypto Miners and Proxy Backdoor 14:11 StopRansomware Advisory: SafePay Ransomware Targets Global Infrastructure 15:27 China-Aligned Bronze Sandcastle Uses Sandboxie DLL Sideloading for Backdoors 16:14 Russia-Linked Hackers Deploy New Mesh Network Backdoor in Ukraine Attack 17:00 INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks 17:55 Japan's Onamae Desktop Cloud hacked, nearly 27,000 servers compromised 19:09 Capcom Confirms Data Breach Affecting 11.7 Million Accounts 20:14 Multiple High-Severity Vulnerabilities Found in Siemens APOGEE, TALON, and Desigo Products 21:10 DHS bans DeepSeek products across US federal civilian agencies 21:56 AI Agents at Risk: Managing Who Commands Your AI Access 23:05 Closing SOC Minute: https://www.socminute.com #Cybersecurity #SOC #SecurityNews Support SOC Minute 💙 SOC Minute is independent and free for everyone. If you'd like to help keep the project running, you can support us on Patreon: https://www.patreon.com/SOCMinute

2. 

   17 Oct 2026

   SOC Minute Weekly: Exploited Perimeters, Poisoned Trust, and AI in the Attack Chain

   This week connects actively exploited perimeter systems, compromised software and hardware trust chains, identity attacks, and the expanding role of AI on both sides of security operations—along with the evidence defenders need to patch, contain, and verify each risk. This episode covers 25 cybersecurity stories. Chapters: 00:00 Opening 00:34 Ivanti Warns of Actively Exploited Connect Secure Zero-Day 01:28 Palo Alto Networks alerts on critical PAN-OS RCE zero-day exploited in the wild 02:30 BeyondTrust patches zero-day exploited since August 03:23 Flax Typhoon Exploits Five Flaws Ahead of CISA October 11 Deadline 04:43 Microsoft Patch Tuesday October 2026: Key Vulnerabilities & Snort Rules 05:37 Unpatched AhsayCBS Flaws Exploited to Deploy Webshells and Crypto Miners 06:52 Critical Bricksforge WordPress Flaw Enables Unauthenticated RCE Exploited 07:42 Hackers Exploit Critical RCE Flaw in Collabora to Backdoor Nextcloud 08:30 Inside AvisLoader: New Windows Malware Loader Designed to Resist Disruption 09:35 Attackers Delivered Backdoor via AOMEI Backupper Update Server Tampering 10:20 Critical Docker Hub Flaw Allowed User Impersonation and Image Tampering 11:10 Ledger Confirms Spy Chip Implant Behind Crypto Wallet Thefts 11:55 Microsoft Disrupts 3 Phishing Kits Behind Over 1 Billion Scam Messages 12:42 UAT-11985 Targets Taiwan Research with Google AitM Phishing via Fake Invites 13:27 How to Run a Deepfake Readiness Drill Before a Cloned Voice Hits Your Team 14:22 Critical CVSS 10 Flaw in SAP Cloud SDK for Python Exposes OAuth2 Credentials 15:17 How to Keep AI Agents Operating Within Their Permissions 16:31 Chinese Hacker Uses ARTEX AI and Claude Agents in South Korean Bank Attacks 17:29 CyberXero Uses AI-Powered Attack to Steal Over 628,000 Ukrainian Records 18:14 Anthropic Warns AI Could Enable Self-Propagating IoT Botnets 19:01 NIST, NSA, and CISA Release Incident Readiness Practices for Super Intelligence 20:00 Critical PwnEscape Linux Kernel Flaw Allows Guest VMs to Leak Host Memory 20:58 Hackers Hijack D-Link and Ubiquiti Devices to Resell Bandwidth 21:45 Citizen Lab Links Zero-Click Candiru Spyware to Al Jazeera via Ads 22:39 Nippon Columbia Malware Incident Exposes 8.7 Million Records 23:29 Closing SOC Minute: https://www.socminute.com #Cybersecurity #SOC #SecurityNews Support SOC Minute 💙 SOC Minute is independent and free for everyone. If you'd like to help keep the project running, you can support us on Patreon: https://www.patreon.com/SOCMinute

3. 

   10 Oct 2026

   SOC Minute Weekly: Hijacked Trust, Exposed Infrastructure, and Poisoned Code

   This week, SOC Minute follows active attacks against edge infrastructure, identity and data breaches, AI-branded phishing, targeted malware, and three distinct ways attackers are poisoning trust across the open-source development ecosystem. This episode covers 24 cybersecurity stories. Chapters: 00:00 Opening 00:33 New NetScaler Zero-Day Targeted Attacks Can Disrupt SAML Deployments 01:19 Max severity SonicWall SMA1000 flaw now exploited in attacks 02:12 Cisco warns of critical flaws allowing Nexus switch takeover 03:10 Realtek Jungle SDK Exploit Attempts Spread Cling Botnet via STUN C2 04:05 Danish University DTU Data Breach Exposes Up to 200,000 Users 04:57 Denmark's Population Registry Data Breach Affects 8.8 Million People 05:49 ASOS confirms data breach after hacked in-app notifications 06:42 Hackers Hijack Google Domains via ccTLD Registry Breaches 07:38 China-Aligned TA419 Targets U.S. AI Policy Experts with Microsoft AitM Phishing 08:40 Phishing Platform Targets Credentials via Fake AI Chatbot Ad Portals 09:36 Hackers Use Google Ads and Bing Redirects to Spread Claude ClickFix Malware 10:29 Linux Backdoors Evade Detection by Mimicking Email Security Tools in Asia 11:27 UAC-0099 Deploys ASHVEIN RAT Targeting Ukrainian Government Staff 12:25 Chinese State-linked Hackers Use Automated Tools and Manual Exploits to Steal Data 13:30 Eight Malicious npm Packages Delivered Overlord RAT and Stealer 14:16 FakeGit Malware Campaign Relaunches with Over 17,600 Malicious GitHub Repos 15:21 Credential-Stealing GitHub Actions Workflows Found in Thousands of Repos 16:18 Critical File-Access Flaw Found in Atlassian Jira and Confluence 17:22 Anthropic Launches Free AI Vulnerability Scanner for Open-Source 18:12 Critical Dell System Update Vulnerability Allows Root Privilege Escalation 18:56 Critical Buffer Overflow Found in Savannah lwIP SMTP Client v2.2.1 19:57 Critical Vulnerabilities Found in Grid Protection Alliance openPDC and openHistorian 20:59 Critical LMCache Flaw Allows Unauthenticated Remote Code Execution 21:58 PoeLLM Malware Infects Over 3,400 Servers to Expand Crypto Mining Botnet 22:50 Closing SOC Minute: https://www.socminute.com #Cybersecurity #SOC #SecurityNews

4. 

   3 Oct 2026

   SOC Minute Weekly: Exposed Control Planes, Stolen Access, and AI-Driven Intrusions

   This week, SOC Minute follows active exploitation from exposed enterprise systems and persistent web compromise into stolen identities, targeted malware, and the growing role of AI in data exposure, social engineering, and automated attacks. This episode covers 18 cybersecurity stories. Chapters: 00:00 Opening 00:40 Attackers Exploit Oracle PeopleSoft Flaw to Deploy Web Shells 01:50 WordPress Backdoor Rebuilds Itself Using Files, Database, and Shared Memory 02:46 Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC and Gateway 03:46 Cisco Warns of Critical Authentication Bypass in SD-WAN Manager 04:57 CISA Adds New Fortinet FortiMail Vulnerability to Exploited Catalog 06:06 Critical FortiMail Zero-Day Allows Unauthenticated Arbitrary File Writes 07:20 Dell CSM Flaws Allow Unauthenticated Admin and Root Access on Kubernetes 08:21 Critical Vulnerabilities Found in Armatura One Affecting Access Control Systems 09:38 Warlock Ransomware Exploits SharePoint in Water and Telecom Attacks 10:33 French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Weeks 11:31 Star Blizzard Advances Phishing and Malware with RedFlick Technique 12:29 Lunex Stealer Uses AMD Driver to Evade Security and Steal Credentials 13:27 NeedyMantis: Modular Malware Threat in Targeted Intrusions 14:24 China-Linked UAT-11587 Targets Asian Governments with Antino Backdoor 15:16 OpenAI Agents Accidentally Uploaded User Images to Third-Party Sites 16:29 80,000+ Organizations Exposed by Stolen AI Logins and LLMjacking 17:39 Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures 18:49 Automated AI Agent Used to Breach Cybersecurity Nonprofit DIVD 20:00 Closing SOC Minute: https://www.socminute.com #Cybersecurity #SOC #SecurityNews

5. 

   27 Sept 2026

   SOC Minute Weekly: Poisoned Trust, Exploited Infrastructure, and Agentic Attacks

   Trusted development platforms, browser integrations, cloud identities, and exposed control planes drive a week of active exploitation, supply-chain compromise, agentic abuse, and financial impact. Defenders need verified remediation, access scoping, and connected telemetry across every layer. This episode covers 29 cybersecurity stories. Chapters: 00:00 Opening 00:37 CrowdSec Private GitHub Repos Copied in TanStack npm Supply Chain Attack 01:49 Malicious npm Packages Evade Install-Script Defenses at Runtime 02:58 Malicious Terraform Providers Distribute Go Malware via HashiCorp Registry 03:52 Compromised GitHub Actions Resume Mini Shai-Hulud Malware Execution 04:42 AI-Driven Secret Leaks Double Compared to Human-Coded Commits 05:28 Fake LastPass Authenticator GitHub Repos Spread New Rapuncel Infostealer 06:47 BragJack Exploits AI Browser Agents via Malicious Extensions 07:53 BigCommerce Alerts Merchants of Data Breach via Ribon Apps 08:53 Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers 09:47 Critical Pre-Auth RCE in Orkes Conductor Actively Exploited 10:48 Critical Bifrost AI Gateway Flaw Allows Credentialless Command Execution 11:45 Check Point Fixes Critical Management Server Zero-Day Exploited in Attacks 12:32 Check Point Warns of Active Exploitation in Security Gateway VPN RCE Flaw 13:26 CISA Adds Zyxel Switch Buffer Overflow to Known Exploited Vulnerabilities Catalog 14:21 MikroTrick Chain Lets Attackers Control MikroTik Routers Without Credentials 15:26 CISA Flags Three Actively Exploited Linux Kernel Vulnerabilities 16:29 CISA Warns of Active Exploitation of Three Linux Kernel Flaws 17:15 WordPress Patches Critical Flaw Allowing Remote Code Execution 18:03 Elementor WordPress CSRF Flaw Allows Admin Account Creation 18:51 EvilTokens PhaaS Disrupted After Compromising 12,000 Microsoft Accounts 19:50 Storm-3168: Cloud Attacks Using Compromised Azure Service Principals 20:41 FBI & CISA Warn on Risks of Third-Party ICS Integrators in Critical Infrastructure 21:27 North Korean WaterPlum Hackers Infected 30,000 Devices Worldwide 22:32 Contagious Interview Campaign Hits 30K Devices, Steals $10.7M Crypto 23:22 Bitget Loses $351.6M in Suspected North Korean Hack 24:10 Tracking Storm-2570's Consistent Ransomware Tradecraft 25:03 New Carbonato Botnet Uses AI Agents to Hijack Docker Hosts 25:56 Critical Vulnerabilities Discovered in Eufy Omni C20 and Omni X10 Pro 26:48 ShinyHunters exploits zero-day to breach FBI, steal sensitive data 27:42 Closing SOC Minute: https://www.socminute.com #Cybersecurity #SOC #SecurityNews

6. 

   19 Sept 2026

   SOC Minute Weekly: Emergency Fixes, Trusted Access, and AI-Accelerated Attacks

   Emergency Windows fixes and actively exploited control planes lead into risks across development tooling, identity, critical infrastructure, mobile devices, and trusted cloud services. The episode connects those incidents through access validation, evidence preservation, and defensive context. This episode covers 28 cybersecurity stories. Chapters: 00:00 Opening 00:43 Microsoft Issues Emergency Windows Updates for RDS Failures 01:43 CISA Adds Cisco Secure Email Gateway SQLi to Known Exploited Vulnerabilities 02:48 Dutch NCSC Warns of Imminent Exploitation of Critical Check Point VPN Flaws 03:43 Critical Check Point Flaw Allows Root Privilege Code Execution 04:41 CISA Alerts on Ransomware Exploiting Critical VMware vCenter Flaw 05:37 Critical ScreenConnect Flaw Now Actively Exploited in Real Attacks 06:34 Critical Issabel Framework Flaw Enables Unauthenticated OS Command Execution 07:30 CISA Adds Two Actively Exploited Linux Kernel Vulnerabilities to KEV Catalog 08:34 Critical RCE Flaw in Unbound DNSSEC Validator Fixed in 1.26.1 09:33 Critical Vulnerabilities Discovered in mySCADA myPRO Manager 10:33 Critical Authentication Flaw in Mitsubishi Electric GX Works3 and Motion Control 11:25 Red Heron Exploits Gitea RCE to Compromise 13 Organizations Globally 12:30 Hackers Target Exposed Vite Servers to Steal AWS and Azure Secrets 13:23 Attacker Hijacks AI Coding Assistant, Spreads Malware Across 100 Repos 14:20 Brevo Supply-Chain Attack Injected Malicious Scripts on Customer Sites 15:14 Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts 16:14 Florida DMV Database Breached via Stolen Police Credentials 17:12 KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials 18:12 CenterPoint Energy Confirms Customer Data Stolen in Cyberattack 19:03 Gyazo Server Vulnerability Leads to Theft of 23.6 Million User Records 19:57 Russian Hackers Use AI to Rebuild Malware Faster After Detection 20:52 Hackers Exploit Tencent App Flaw to Deploy GrayRabbit Malware 21:48 Iranian Hackers Deploy Telegram-Controlled Malware Against Dissidents 22:44 Transparent Tribe Deploys New Rust Backdoor Targeting South Asia 23:36 New RatHat Android Malware Uses AI for Automated Device Control 24:27 RatHat Android Malware Exploits ADB to Maintain Shell Access 25:28 3BB Attacker Leveraged MeshCentral Backdoor for Root Access 26:24 CISA Guidance on Using Cyber Decoys to Enhance Detection and Response 27:23 Closing SOC Minute: https://www.socminute.com #Cybersecurity #SOC #SecurityNews

7. 

   12 Sept 2026

   SOC Minute Weekly: Exploited Control Planes, Stolen Trust, and AI at Scale

   A busy week of active exploitation against management and developer infrastructure, attacks on sessions and trusted delivery paths, major personal-data exposure, and the expanding role of AI as both target and tool. This episode covers 26 cybersecurity stories. Chapters: 00:00 Opening 00:31 Cisco confirms active exploitation of critical FMC authentication bypass flaw 01:49 Cisco FMC Flaws Exploited by Ransomware and State Hackers 02:42 N-able patches critical RCE flaw in N-central amid active exploitation 03:50 Critical MikroTik SSH Authentication Bypass Vulnerability Exploited 04:43 Hackers Deploy Linux Rootkit on F5 BIG-IP APM Devices 05:34 Microsoft September 2026 Patch Tuesday fixes 966 flaws and 2 zero-days 06:42 AI-driven attack exploits PaperCut flaws to breach 395 organizations 07:53 GitLab CVSS 10 File-Read Flaw Faces In-the-Wild Probes 08:58 Critical Artifactory Flaws Exploited to Deploy Rust Backdoor Malware 10:00 JetBrains Cadence Breached via Unpatched TeamCity, AWS Credentials Exposed 11:04 Four Spy Groups Deploy BlueMoon Exploit Kit Targeting Chrome and Windows 11:50 China-Linked UNC3569 Exploits Sogou Input Method Flaw for GRAYRABBIT Backdoor 12:39 5,400+ hacked sites deliver ClickFix malware via blockchain storage 13:26 Attackers Use Invisible Unicode Characters to Bypass Email Filters 14:14 Passkey-themed Social Engineering Enables Identity and Cloud Compromise 15:03 BigBear Phishing Service Bypasses MFA at 258 Organizations 16:04 JSCeal Malware Can Bypass Google Auth Using Stolen Session Cookies 16:55 REVSTEALER Modules Disable Windows Defender to Run Crypto Miner 17:56 Microsoft Flags AI-Driven Executive Impersonation and Invoice Fraud 18:44 IDScan Confirms Breach Affecting 153 Million Driver’s License Records 19:54 AdaptHealth Confirms Data Exposure of 4.1 Million in July Cyberattack 20:40 Hackers Exploited Claude AI to Extract Secrets from 1.8M Android Apps 21:45 AI Agent Exploits and Aggregates Stolen LLM Access via Insecure Gateways 22:36 Securing Edge AI in Customer-Owned Environments 23:27 Cloud Security Risks Vary Significantly Across Providers, New Data Shows 24:25 U.S. Agencies Accuse China AI Firms of Distilling Major AI Models 25:22 Closing SOC Minute: https://www.socminute.com #Cybersecurity #SOC #SecurityNews

8. 

   6 Sept 2026

   SOC Minute Weekly: Hijacked Trust, Stolen Sessions, and Exploited Infrastructure

   This week, attackers target exposed edge infrastructure, compromise trusted software distribution, steal authenticated sessions and cloud credentials, exploit familiar work flows, and turn third-party access into large-scale data exposure. This episode covers 23 cybersecurity stories. Chapters: 00:00 Opening 00:27 Active Attacks Exploit Critical Citrix NetScaler Auth Bypass 01:22 Attackers Exploit Two SonicWall SMA 1000 Zero-Days 02:19 China-Linked Fire Ant Targets Cisco Routers to Steal Credentials 03:04 Critical Cisco Nexus 9000 Flaw Lets Remote Attackers Run Code as Root 03:53 New 'Ted' Backdoor Hides in HAProxy to Intercept Web Traffic 04:42 Critical JFrog Artifactory Flaw Exploited Days After Patch 05:49 Coder’s registry compromised to distribute malicious Terraform modules 06:51 BGP Hijack Delivers Malicious Virtualizor Update with Root Access 07:38 CISA Adds Critical Chromium V8 Vulnerability to Exploited Catalog 08:42 GiveWP WordPress Plugin Flaw Lets Hackers Execute Server Commands 09:42 Critical Elementor Pro Flaw Enables Takeover of WordPress Sites 10:27 Critical Langflow Flaw Exploited to Steal OpenAI and AWS Keys 11:15 Anthropic warns of infostealer malware hijacking Claude AI sessions 12:05 The Coding-Agent Trap: Malicious Use of Free LLM Endpoints Exposed 13:08 Microsoft alerts on TerminalFix attacks using reverse tunnels 14:04 ASCII Smuggling Technique Evolves from AI Prompt Injection to Phishing Evasion 15:09 Guildma (Astaroth) Malware Infection via Brazilian Portuguese Email 16:11 Iranian Hackers Use Coding Tests to Deliver Cross-Platform RATs 17:07 US Charges Russian for Malware Campaign Targeting 80,000 Freelancers 18:11 BraZetsu Malware Turns Windows Hosts Into Underground Marketplace Assets 18:56 McKesson Breach Exposes 284 Million Patient Records, ShinyHunters Claims Theft 19:47 Aesto Health Data Breach Exposes Over 9.5 Million Patients 20:45 IDScan sued over breach exposing 153 million driver’s licenses 21:31 Closing SOC Minute: https://www.socminute.com #Cybersecurity #SOC #SecurityNews

9. 

   29 Aug 2026

   SOC Minute Weekly: Exploited Trust, Scaled Intrusions, and AI Under Attack

   This week, trusted identity and familiar applications become entry points, exposed enterprise platforms face active exploitation, critical infrastructure reveals persistent visibility gaps, and AI appears as both an attack accelerator and a security boundary of its own.This episode covers 22 cybersecurity stories.Chapters:00:00 (https://www.youtube.com/watch?v=wf4su2ec9S8) Opening00:26 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=26s) Critical Keycloak Password Reset Flaw Could Let Attackers Hijack Any Account01:25 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=85s) 19 Chrome and Edge Extensions Found Stealing Crypto Wallets02:21 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=141s) ToxicPanda Android Malware Uses VPN Permissions to Block Google Play03:10 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=190s) SynkLoader Malware Spreads via Microsoft Teams Phishing Campaign04:07 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=247s) Critical Avada WordPress Theme Flaw Enables Zero-Click Remote Code Execution04:59 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=299s) Critical Gitea Vulnerability Exploited in Active Code Injection Attacks05:51 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=351s) PaperCut NG and MF Zero-Day Flaw Actively Exploited in Attacks06:41 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=401s) PaperCut issues second emergency patch for exploited NG and MF flaws07:28 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=448s) Critical cPanel Flaw Lets Single Hosting Customer Gain Root Access08:20 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=500s) Critical ownCloud Flaw Exploited to Steal Nuclear Records in Philippines09:21 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=561s) Three CVSS 10.0 ServiceNow Flaws Enable Code Execution and SQL Injection10:14 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=614s) Critical Vulnerabilities Found in Ebyte NE2-D11 Firmware11:12 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=672s) Critical Vulnerabilities Found in Xiiaozet LK100W Devices12:00 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=720s) 296K IoT Botnet, 100+ Water Systems Targeted, New SharePoint RCE Chain12:58 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=778s) US Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches13:48 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=828s) Nimbus Manticore Expands Toolset With New Backdoor and SSH Tunneler14:41 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=881s) FBI Disrupts China-Linked QTFY Platforms Targeting U.S. Infrastructure15:29 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=929s) UAT-10147 Uses AI to Scale Server Attacks and Deploys Advanced Linux Rootkit16:26 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=986s) OpenAI Reveals Reward Hacking Drove AI Agents to Breach Hugging Face17:21 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=1041s) Securing AI Infrastructure: Protecting Gateways and Control Points18:18 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=1098s) Malicious Webpage Can Poison Local AI Models via NVIDIA NemoClaw19:13 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=1153s) CISA Red Team Tests Expose Critical SOC and Cloud Security Gaps20:27 (https://www.youtube.com/watch?v=wf4su2ec9S8&t=1227s) ClosingSOC Minute: https://www.socminute.com (https://www.youtube.com/redirect?event=video_description&redir_token=QUM4Zm9rVERVU1dmakdWNnNjOUFFY2lYS3FFRXxBR3JiS2FtQS14TEo2cWNvcFBXUEU4VHpsN256dkxHdEEySWhqUUgwQXRwY092MkZra1FmcnF2dk9zckVwWlhkdWlVWjAtcTRRLWNjV0NzR0xSazRTemlqaEFrY1QwZUVMNW9V&q=https%3A%2F%2Fwww.socminute.com%2F&v=wf4su2ec9S8)#Cybersecurity (https://www.youtube.com/hashtag/cybersecurity) #SOC (https://www.youtube.com/hashtag/soc) #SecurityNews (https://www.youtube.com/hashtag/securitynews)

10. 

    22 Aug 2026

    SOC Minute Weekly: Exploited Trust, Stolen Access, and AI on Both Sides

    This week follows a chain of exploited trust: identity and gateway abuse, stolen cloud access, actively exploited services, industrial and engineering systems, repurposed infrastructure, software supply-chain attacks, endpoint control, and AI as both an attack surface and a SOC tool. This episode covers 21 cybersecurity stories. Chapters: 00:00 Opening 00:37 CVE-2026-54121: Enterprise CA Privilege Escalation Risk 01:43 Critical NetScaler Flaw Can Bypass Authentication on Gateway Servers 02:44 Suspected Russian Hackers Exploit Google OAuth and WhatsApp for Account Hijacking 03:42 Thousands of Active Leaked AWS Keys Expose Corporate Accounts 04:35 Hacker Claims 3.6M Azure Account Records Stolen from Major Companies 05:31 CareCloud Data Breach Exposes Records of 3.7 Million Patients 06:29 Critical RCE Flaw in Windows IKE Extension Actively Exploited 07:29 CISA: Ransomware Gangs Exploiting Windows Task Host Flaw 08:24 CISA Adds Critical Zimbra OS Command Injection to Known Exploited Vulnerabilities 09:19 CISA Warns of Active Exploitation of Critical MLflow Vulnerability 10:15 Critical Out-of-Bounds Read Vulnerability in Siemens Parasolid 11:17 Active Cyber Threat Targets Siemens S7 PLCs Using AI-Generated Exploits 12:16 Clop Gang Uses Custom Web Shell for Targeted Windchill Data Theft 13:16 Evooo1Bot Linux Botnet Turns Routers Into Traffic Relay Nodes 14:12 StopAndProtect Uses 2,000 Hacked WordPress Sites to Spread Malware 15:10 Hackers Compromise Rust Crate to Deliver Infostealer Malware 16:08 Trojanized npm Packages Deploy AI-Powered RedC2 4.0 Linux Backdoor 17:03 SilkParasite Espionage Targets Central Asian Governments with Five New RATs 18:07 AmnesiaStealer macOS Malware Hijacks Browsers via Remote Control 19:06 AI ‘Mind Viruses’ Can Spread Between Agents Via Persistent Prompt Files 19:58 Wazuh Integrates AI to Enhance SOC Workflows 20:53 Closing SOC Minute: https://www.socminute.com #Cybersecurity #SOC #SecurityNews

11. 

    15 Aug 2026

    SOC Minute Weekly: Exploited Infrastructure, Human Trust, and AI Access Risks

    This week examines actively exploited flaws affecting network, virtualization, collaboration, and enterprise platforms; phone and job-interview social engineering; ransomware, data breaches, and port disruption; and the growing tension between AI privacy, visibility, and delegated access.This episode covers 19 cybersecurity stories.Chapters:00:00 (https://www.youtube.com/watch?v=bKD1NjExxlw) Opening00:38 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=38s) Cisco Warns of High-Severity VPN Flaw Actively Exploited to Crash Devices01:39 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=99s) Critical VMware vCenter Vulnerability Actively Exploited for Remote Access02:41 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=161s) AI-Assisted Exploit Enables Unauthenticated RCE on SharePoint Servers03:39 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=219s) Microsoft Defender 'ShieldBreak' Zero-Day Grants SYSTEM Privileges04:34 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=274s) Critical SAP Commerce Cloud RCE Flaw Targeted in Active Attacks05:27 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=327s) Critical RCE Vulnerability in Siemens Siveillance Video Management Servers06:26 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=386s) Kimsuky Develops Offline AI Stack to Enhance Phishing and Malware07:23 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=443s) UNC6671 Vishing Attacks Target Phones to Steal SaaS Data08:21 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=501s) Sandworm-Linked Group Uses Fake Job Interviews to Deploy Malware09:18 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=558s) Lazarus Group Exploits Windows Zero-Day to Deploy New Backdoor10:09 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=609s) Jewelbug Hackers Breach Govt Webmail While Conducting Crypto Fraud11:02 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=662s) Akira Ransomware Bypasses EDR Using Safe Mode, Steals Data but Fails to Encrypt11:55 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=715s) Hundreds of Fake Chrome VPN Extensions Route Traffic Through Proxy12:51 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=771s) #StopRansomware (https://www.youtube.com/hashtag/stopransomware): Emerging Gunra Ransomware Threat13:53 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=833s) RingCentral Data Breach Exposes 1.6 Million User Accounts14:46 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=886s) Trezor reports data breach impacting nearly 14,000 customers15:36 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=936s) North Carolina Ports Hit by Cyberattack Disrupting Operations16:33 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=993s) Google Advances Private AI Using Homomorphic Encryption with HEIR17:33 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=1053s) AI Delegation Risks: When Broad Access Leads to Security Exposure18:36 (https://www.youtube.com/watch?v=bKD1NjExxlw&t=1116s) ClosingSOC Minute: https://www.socminute.com (https://www.youtube.com/redirect?event=video_description&redir_token=QUM4Zm9rVERBRDlqOVJiTFkzQ3BSeVgyRGozbXxBR3JiS2FuRDB5Nzh5Y3dPdkZqckxqUjBOZzdDR3g0TEpTSGNMTHFVNS1fWDF2MnpvNS1nWjJKV3NKNGphdG0wME1hamhDc1RrY0dBaXhvQmRKWGc0ZTI2UndPdnFIUUM1Wm1m&q=https%3A%2F%2Fwww.socminute.com%2F&v=bKD1NjExxlw)#Cybersecurity (https://www.youtube.com/hashtag/cybersecurity) #SOC (https://www.youtube.com/hashtag/soc) #SecurityNews (https://www.youtube.com/hashtag/securitynews)

12. 

    8 Aug 2026

    SOC Minute Weekly: Wallet Failures, Trusted Access, and AI Security Gaps

    This episode examines cryptocurrency wallet failures, critical vulnerabilities across hosting, analytics, laboratory, and infrastructure software, evolving phishing and npm supply-chain attacks, a major healthcare breach, and new security failures involving AI agents.This episode covers 16 cybersecurity stories.Chapters:00:00 (https://www.youtube.com/watch?v=j98UaJquQ48) Opening00:38 (https://www.youtube.com/watch?v=j98UaJquQ48&t=38s) Coldcard Wallet Flaw Linked to $70M Bitcoin Theft in 41 Minutes01:49 (https://www.youtube.com/watch?v=j98UaJquQ48&t=109s) Critical cPanel Flaw Lets Hosting Customers Run SQL as Database Root02:47 (https://www.youtube.com/watch?v=j98UaJquQ48&t=167s) Critical Integrity Flaw in Thermo Fisher Genetic Analyzers Could Alter DNA Data03:51 (https://www.youtube.com/watch?v=j98UaJquQ48&t=231s) Veeam, Terraform MCP, and Django Patch Critical Vulnerabilities Including CVSS 10.0 Bug04:57 (https://www.youtube.com/watch?v=j98UaJquQ48&t=297s) Metabase SQL Injection Zero-Day Exploited in Data-Theft Attacks06:02 (https://www.youtube.com/watch?v=j98UaJquQ48&t=362s) Microsoft 365 AitM Phishing Campaign Targets Payroll and Finance Emails07:04 (https://www.youtube.com/watch?v=j98UaJquQ48&t=424s) DOUBLECUP ClickFix Service Hides Malware in Browser Cache Images07:59 (https://www.youtube.com/watch?v=j98UaJquQ48&t=479s) Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens09:03 (https://www.youtube.com/watch?v=j98UaJquQ48&t=543s) ChainDrop Malware Infects 1,300+ npm Packages in Supply-Chain Attack10:02 (https://www.youtube.com/watch?v=j98UaJquQ48&t=602s) Attackers Use Oracle SQL Injection to Compile Khunt Toolkit for SYSTEM Access10:56 (https://www.youtube.com/watch?v=j98UaJquQ48&t=656s) Nearly 800 Malicious npm Packages Distribute Cross-Platform RAT and Infostealer11:59 (https://www.youtube.com/watch?v=j98UaJquQ48&t=719s) Crypto Wallet RNG Flaw Linked to $88M Bitcoin Theft12:44 (https://www.youtube.com/watch?v=j98UaJquQ48&t=764s) Unlimited Technology Systems Breach Affects 3.8 Million People13:41 (https://www.youtube.com/watch?v=j98UaJquQ48&t=821s) Meta AI Model Hacks Company During Misconfigured Cybersecurity Test14:39 (https://www.youtube.com/watch?v=j98UaJquQ48&t=879s) Paperclip AI Flaws Allow Remote Host Command Execution15:47 (https://www.youtube.com/watch?v=j98UaJquQ48&t=947s) How Threat Actors Are Weaponizing Cloud-Based AI: A Data-Driven Review16:48 (https://www.youtube.com/watch?v=j98UaJquQ48&t=1008s) ClosingSOC Minute: https://www.socminute.com (https://www.youtube.com/redirect?event=video_description&redir_token=QUM4Zm9rUkZZUjRTSC1MUHNJeUduOVFxSTQtWHxBR3JiS2FuWndTUGpfdUREbmprdUE2MjBsZEd3MU1FckdqRnFraHl3MVJKeUhqNjhNZ0h2MXhHclNOMXBPT194WUlFZjgwemdmY3k0cVh3aUdORnZCN29YRUdsNVhMRHpNbkxR&q=https%3A%2F%2Fwww.socminute.com%2F&v=j98UaJquQ48)#Cybersecurity (https://www.youtube.com/hashtag/cybersecurity) #SOC (https://www.youtube.com/hashtag/soc) #SecurityNews (https://www.youtube.com/hashtag/securitynews)

13. 

    1 Aug 2026

    SOC Minute Weekly: Zero-Days, Trusted Paths, and AI-Powered Intrusions

    This week: actively exploited flaws, critical bugs across network and enterprise platforms, attacks affecting water systems and travelers, compromised trust in browsers and cloud providers, and the growing role of autonomous AI in intrusion activity.This episode covers 19 cybersecurity stories.Chapters:00:00 Opening00:40 Hackers Exploit FastJson Zero-Day RCE Attacks Targeting US Firms01:43 Critical OpenWrt DHCPv6 Flaw Lets Attackers Execute Code as Root02:48 Critical Ruby on Rails Flaw Lets Attackers Read Server Files via Image Uploads03:46 Critical Ruflo MCP Flaw Enables Remote Code Execution and AI Memory Poisoning04:51 Azure Cosmos DB Flaw Exposed Platform-Wide Access Key05:50 Adobe Campaign Classic CVSS 10.0 Flaw Enables Code Execution Without User Action06:50 Coordinated Cyberattack Disrupts 30+ Minnesota Water Systems07:51 DPRK-Linked macOS Malvertising Uses Fake Updates to Steal Crypto08:51 Midnight Blizzard's CaptiveCrunch targets travelers with malware and credential theft09:48 Chinese-Speaking Hackers Target Central Asian Governments Using OctLurk, SilkLurk10:47 Cl0p Affiliates Exploit PTC Windchill and FlexPLM for RCE Attacks11:43 Adform's Ad Script Compromised to Steal Cryptocurrency via Clipboard Hijack12:46 SourTrade Malvertising Campaign Makes Browsers Build Malware Executables13:41 Microsoft Teams Vishing Attacks Deploy Chaos Ransomware in North America14:37 ShinyHunters Gang Claims Ernst & Young Data Breach via Supply-Chain Attack15:39 Amgen Cloud Data Breach Exposes Patient and Corporate Information16:36 OpenAI Models Exploit Artifactory Zero-Days to Escape Testing Environments17:37 NVIDIA Forms 37-Member Open Secure AI Alliance, Open-Sources NOOA Framework18:28 Hermes AI Agent Automates Attack on Thailand's Finance Ministry19:58 ClosingSOC Minute: https://www.socminute.com#Cybersecurity #SOC #SecurityNews

14. 

    25 Jul 2026

    SOC Minute Weekly: Zero-Days, Ransomware, AI & Cybersecurity News

    This episode explores a range of actively exploited vulnerabilities, including significant remote-code-execution issues across software, email, and cloud services, highlighting the rising threats targeting AI environments. This episode covers 16 cybersecurity stories. Chapters: 00:00 Opening 00:23 New Windows LegacyHive zero-day exploit grants admin privileges 02:34 Critical NGINX Vulnerability Risks Worker Crashes and Remote Code Execution 04:23 Critical SharePoint RCE CVE-2026-50522 Actively Exploited 05:57 CISA urgent patch order for exploited Langflow RCE vulnerability 07:44 Critical Bing Image Flaw Allows SVGs to Execute Commands as SYSTEM 09:30 Hackers Abuse ViPNet Updates to Target Russian Government Agencies 11:15 Russian Intelligence Hacks IP Cameras to Monitor NATO & Ukraine Military Movements 12:49 Russian Hackers Exploit Zimbra Zero-Click Flaw for Email Theft 14:27 Hackers Hijack Hotel Wi-Fi DNS to Steal Microsoft 365 Accounts 16:05 Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks 17:39 Fake Claude app promoted via Bing ads spreads SectopRAT malware 19:11 Anubis ransomware claims Coca-Cola Fairlife attack, threatens data leak 20:47 NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens 22:26 Upbound Hack Led to $13M in Fraudulent Acima Leases 24:13 OpenAI Confirms AI Models Escaped Sandbox and Targeted Hugging Face 25:48 JadePuffer ransomware now targets AI model data with EncForge malware 27:34 Closing SOC Minute: https://www.socminute.com #Cybersecurity #SOC #SecurityNews

15. 

    21 Jul 2026

    SOC Minute Weekly: Urgent Flaws and Active Exploitation in Security Infrastructure

    This week's SOC Minute Weekly covers the most important cybersecurity stories, including critical vulnerabilities in platforms, active exploitation trends, and security implications for developer ecosystems, emphasizing the risks of excessive system access.This episode covers 10 cybersecurity stories.Chapters:00:00 (https://www.youtube.com/watch?v=IAXHivhEBb8) Opening00:34 (https://www.youtube.com/watch?v=IAXHivhEBb8&t=34s) Critical wp2shell WordPress Flaw Allows Unauthenticated Code Execution02:05 (https://www.youtube.com/watch?v=IAXHivhEBb8&t=125s) CISA Urges Immediate Patching of Exploited Fortinet FortiSandbox Flaws03:41 (https://www.youtube.com/watch?v=IAXHivhEBb8&t=221s) North Korean Hackers Use Steganography in Fake Coding Tests to Deliver Malware05:36 (https://www.youtube.com/watch?v=IAXHivhEBb8&t=336s) Hackers Exploit Balochistan Police Portal in Multi-Group Espionage07:18 (https://www.youtube.com/watch?v=IAXHivhEBb8&t=438s) Russian State-Sponsored Hackers Exploit Vulnerable Routers Targeting Critical Sectors09:00 (https://www.youtube.com/watch?v=IAXHivhEBb8&t=540s) Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver RAT10:43 (https://www.youtube.com/watch?v=IAXHivhEBb8&t=643s) TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development12:24 (https://www.youtube.com/watch?v=IAXHivhEBb8&t=744s) Abbott Investigates Two Cyber Incidents Amid Extortion Claims14:09 (https://www.youtube.com/watch?v=IAXHivhEBb8&t=849s) MemGhost Attack Tricks AI Assistants into Storing False Memories via Email15:41 (https://www.youtube.com/watch?v=IAXHivhEBb8&t=941s) Least Privilege Principles for Securing Autonomous AI Agents17:26 (https://www.youtube.com/watch?v=IAXHivhEBb8&t=1046s) ClosingSOC Minute: https://socminute.com (https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbVQyUXZvVzlwTGhsdVdHV1g4UHZMd1lJd2Y0d3xBQ3Jtc0tsNjZQb2s2RVAtcXZkZkJrUWRjXy03enF1TTMwU2FzT1lscHRtRmVnWlMtb29LR2JYb19mTmMxM1lpcHdpQ3hOZ19wUU9uOXpPQWJUb1FpTjhocUx4bmZhWllEU21DRDdPNGtNaXM1NzhqN2RHS1ctNA&q=https%3A%2F%2Fsocminute.com%2F&v=IAXHivhEBb8)#Cybersecurity (https://www.youtube.com/hashtag/cybersecurity) #CyberNews (https://www.youtube.com/hashtag/cybernews) #SOCMinute (https://www.youtube.com/hashtag/socminute)

Contact SOC Minute Weekly

Guest appearances

Does not typically book guests

Based on episode analysis; this does not confirm that the show is currently accepting guests.