Show notes

Oracle privately confirms Cloud breach to customers

Oracle have finally issued a written notification to customers about their cybersecurity incident.

Head of NSA and US Cyber Command reportedly fired | Cybersecurity Dive

Trump fires numerous National Security Council staff - The Washington Post

Trump administration under scrutiny as it puts major round of CISA cuts on the table | Cybersecurity Dive

Hackers Spied on US Bank Regulators’ Emails for Over a Year - Bloomberg

This is how Jeffrey Goldberg got added to the Signal chat

Cybercriminals are trying to loot Australian pension accounts in new campaign | The Record from Recorded Future News

$500,000 stolen in Australian super fund data breach | Superannuation | The Guardian

Australian regulator pulls licenses of 95 companies in effort to crack down on investment scams | The Record from Recorded Future News

Everest ransomware group’s darknet site offline following defacement | The Record from Recorded Future News

On March 28, 2025, a threat actor leaked internal data from Medialand, a major bulletproof hosting (BPH) provider long linked to Yalishanda (LARVA-34).

There's a ransomware group named DragonForce going around hacking its rivals. After Mamona and BlackLock, the group has now hacked RansomHub

The DragonForce ransomware group hacked two rivals this month

CISA, experts warn of Crush file transfer attacks as ransomware gang makes threats | The Record from Recorded Future News

Kill Security Campaign Targets CrushFTP Servers

National Vulnerability Database | NIST

Microsoft patches zero-day actively exploited in string of ransomware attacks | CyberScoop

Exploitation of CLFS zero-day leads to ransomware activity | Microsoft Security Blog

Is The Sofistication In The Room With Us? - X-Forwarded-For and Ivanti Connect Secure (CVE-2025-22457)