5bytespodcast

Microsoft patches a record-breaking 966 security vulnerabilities, including two actively exploited zero-days. Also covered: GPT-6 Astra’s advanced cybersecurity capabilities, OpenAI agents bypassing sandbox restrictions, Project Zenith, Apple’s first foldable iPhone and more.

Reference Links: https://www.rorymon.com/blog/microsoft-patches-960-flaws-astra-finds-zero-days-apple-goes-foldable/

This week on the 5BytesPodcast, we cover claims that a staggering 284 million records were stolen in a cyberattack on healthcare giant McKesson, while Meta’s ambitious plans to reshape its workforce around AI reportedly ran into trouble. We also discuss Meta testing robots inside its data centres, critical ServiceNow vulnerabilities, a new PowerShell-based attack technique, Microsoft’s latest Windows headaches, Tim Cook stepping down as Apple CEO, and much more.

Reference Links:
https://www.rorymon.com/blog/metas-ai-overhaul-stumbles-284-million-patient-records-allegedly-stolen/

On this week’s episode, security agencies warn that attackers are using AI-generated tools to target industrial control systems, researchers demonstrate another worrying data-theft attack against Grok, and Microsoft addresses a maximum-severity vulnerability in Entra ID.

I also cover more problems caused by the August Windows updates, new protections against bots in Teams meetings, Apple’s latest Mac mini and Mac Studio hardware, China’s accelerating move away from Windows, and much more.

Reference Links: https://www.rorymon.com/blog/ai-attacks-on-critical-infrastructure-grok-leaks-data-critical-entra-id-flaw/

This week on the 5 Bytes Podcast, we cover claims of a massive Azure data exfiltration campaign impacting major global companies, breaches and security incidents involving RingCentral and Shell, and active exploitation targeting VMware vCenter and macOS. We also look at Kimi K3 arriving on GitHub, mysterious bulk book purchases potentially linked to AI training, Firefox testing a built-in ad blocker on iOS, the removal of WMIC from Windows 11, and much more.

Reference Links: https://www.rorymon.com/blog/alleged-major-azure-data-theft-ai-buying-thousands-of-books-and-ringcentral-breached/

Coming up this week, Microsoft patches 400 vulnerabilities, including an actively exploited zero-day.

Microsoft accidentally pushes a new OneDrive app to Windows 11 PCs, DEF CON attendees are accused of causing Wi-Fi chaos on a Delta flight, and OpenAI rolls out a powerful new AI model specifically for cybersecurity.

Plus, we’ve got some notable Windows 365 updates and plenty more.

All that and more on this week’s episode of the 5 Bytes Podcast.

Reference Links:
https://www.rorymon.com/blog/400-microsoft-flaws-rogue-wi-fi-at-30000-feet-gpt-5-6-cyber/