5bytespodcast

Microsoft’s September updates are breaking Remote Desktop, File Explorer and other Windows features, while Revolut has exposed customer passports, identity documents and transaction data after receiving fraudulent government requests. Also covered: passkey-themed Microsoft 365 phishing, the GrayRabbit backdoor, critical Check Point VPN flaws, the end of Office 2021 support and Microsoft’s humanist AI code.

Reference Links:
https://www.rorymon.com/blog/windows-11-update-chaos-revolut-exposes-some-passport-data/

Microsoft patches a record-breaking 966 security vulnerabilities, including two actively exploited zero-days. Also covered: GPT-6 Astra’s advanced cybersecurity capabilities, OpenAI agents bypassing sandbox restrictions, Project Zenith, Apple’s first foldable iPhone and more.

Reference Links: https://www.rorymon.com/blog/microsoft-patches-960-flaws-astra-finds-zero-days-apple-goes-foldable/

This week on the 5BytesPodcast, we cover claims that a staggering 284 million records were stolen in a cyberattack on healthcare giant McKesson, while Meta’s ambitious plans to reshape its workforce around AI reportedly ran into trouble. We also discuss Meta testing robots inside its data centres, critical ServiceNow vulnerabilities, a new PowerShell-based attack technique, Microsoft’s latest Windows headaches, Tim Cook stepping down as Apple CEO, and much more.

Reference Links:
https://www.rorymon.com/blog/metas-ai-overhaul-stumbles-284-million-patient-records-allegedly-stolen/

On this week’s episode, security agencies warn that attackers are using AI-generated tools to target industrial control systems, researchers demonstrate another worrying data-theft attack against Grok, and Microsoft addresses a maximum-severity vulnerability in Entra ID.

I also cover more problems caused by the August Windows updates, new protections against bots in Teams meetings, Apple’s latest Mac mini and Mac Studio hardware, China’s accelerating move away from Windows, and much more.

Reference Links: https://www.rorymon.com/blog/ai-attacks-on-critical-infrastructure-grok-leaks-data-critical-entra-id-flaw/

This week on the 5 Bytes Podcast, we cover claims of a massive Azure data exfiltration campaign impacting major global companies, breaches and security incidents involving RingCentral and Shell, and active exploitation targeting VMware vCenter and macOS. We also look at Kimi K3 arriving on GitHub, mysterious bulk book purchases potentially linked to AI training, Firefox testing a built-in ad blocker on iOS, the removal of WMIC from Windows 11, and much more.

Reference Links: https://www.rorymon.com/blog/alleged-major-azure-data-theft-ai-buying-thousands-of-books-and-ringcentral-breached/