Best Persistent Campaign Podcasts (2025)

1
TikTok, China, and the EU: The Battle Over Data Sovereignty 58:06

Play Pause

1h ago58:06

58:06

In this episode, we explore the mounting scrutiny TikTok faces over its handling of European user data, with the EU’s Data Protection Commission (DPC) launching a fresh investigation into alleged transfers of data to China. TikTok, owned by Beijing-based ByteDance, is once again in the crosshairs for possible violations of the General Data Protecti…

1
Booz Allen Invests in Corsha: Defending Machine-to-Machine Communication at Scale 33:00

4h ago33:00

33:00

As the cybersecurity landscape shifts toward hyperautomation and AI-driven autonomy, a new frontier has emerged: the identity and access security of machines. In this episode, we explore Booz Allen Ventures’ strategic investment in Corsha, a company at the forefront of Machine Identity Provider (mIDP) technology. Their collaboration marks a pivotal…

1
WSUS Meltdown: Global Sync Failures and the Shift Toward Cloud Patch Management 27:45

1h ago27:45

27:45

Windows Server Update Services (WSUS) has long been a cornerstone of enterprise patch management—but recent global synchronization failures have raised serious questions about its future viability. In this episode, we dissect the widespread outage that left organizations unable to sync critical Windows updates, unpacking both the technical cause an…

1
Cracking eSIM: Exposing the Hidden Threats in Next-Gen Mobile Security 16:43

12h ago16:43

16:43

eSIM technology has transformed the way we connect—but has it also introduced new vulnerabilities into the heart of modern telecommunications? In this deep-dive episode, we dissect the security architecture, remote provisioning systems, and critical attack surfaces of embedded SIM (eSIM) technology, now deployed in billions of mobile, consumer, and…

1
Do You Want To Be Right Or The Relationship? Why We Insist on Being Right in Politics & Beyond 35:54

18m ago35:54

35:54

In this solo episode, host Corey Nathan shares a personal story that explores a fundamental question many of us face in political and relational discourse: “Do you want to be right, or do you want the relationship?” Prompted by a real-life interaction following his attendance at a local rally, Corey examines how we navigate our convictions, the cos…

1
Qantas Breach and Beyond: Cybersecurity Risks in Australia’s Digital Supply Chains 1:03:23

1d ago1:03:23

1:03:23

As Australia contends with a growing wave of cybersecurity incidents, this episode explores the intersection of national privacy laws, global supply chain vulnerabilities, and public trust in digital security. The recent Qantas data breach—affecting over 5 million customers—was the latest high-profile case to expose how fragile third-party service …

1
Taiwan Sounds the Alarm: TikTok, WeChat, and the Chinese Data Threat 1:06:28

13h ago1:06:28

1:06:28

In this episode, we examine Taiwan’s growing alarm over Chinese mobile applications, especially TikTok and WeChat, in light of rising global concern over data privacy and foreign surveillance. A recent inspection by Taiwan’s National Security Bureau (NSB) revealed that these apps aggressively collect personal data and transmit it to servers located…

1
The Evolution of Atomic macOS Stealer: Backdoors, Keyloggers, and Persistent Threats 45:00

1d ago45:00

45:00

This episode exposes the growing menace of Atomic macOS Stealer (AMOS) — a rapidly evolving malware-as-a-service (MaaS) platform targeting macOS users worldwide. Once seen as a simple data stealer, AMOS has matured into a potent, long-term threat featuring keyloggers, a persistent backdoor, and system-level access, all designed to exfiltrate data a…

1
CitrixBleed Returns: CVE-2025-5777 and the Exploitation of NetScaler Devices 1:02:21

19h ago1:02:21

1:02:21

In this episode, we dissect CitrixBleed 2—a newly disclosed and actively exploited vulnerability affecting Citrix NetScaler ADC and Gateway appliances. Tracked as CVE-2025-5777 (and possibly also CVE-2025-6543), this critical flaw mirrors the notorious original CitrixBleed by allowing attackers to extract sensitive memory content, including user se…

1
SAP’s July 2025 Patch Day: Critical Flaws, CVE-2025-30012, and Ransomware Risk 1:02:01

3d ago1:02:01

1:02:01

In this episode, we break down SAP’s July 2025 Security Patch Day—a high-stakes moment for any enterprise relying on SAP’s core business applications. With 27 new and 4 updated security notes released, including seven rated as critical, this patch cycle directly targets some of the most serious vulnerabilities seen in SAP environments in recent mem…

1
Mike Madrid on the Latino Electorate, Trump's Win in 2024 and What It Means for the Soul of America 1:22:36

3d ago1:22:36

1:22:36

In this episode, host Corey Nathan welcomes back political consultant, author, and Substack contributor Mike Madrid. A renowned expert on Latino voters and co-founder of the Lincoln Project, Mike brings his profound insights on American politics, identity, and democracy. Together, Corey and Mike explore deeply personal stories, historical context, …

1
106GB Exposed? Telefónica, HellCat, and the Silent Data Breach 50:33

1d ago50:33

50:33

In this episode, we explore a shadowy and unconfirmed—but highly consequential—data breach at Spanish telecommunications giant Telefónica. Allegedly orchestrated by the HellCat ransomware group, the breach involves a staggering 106GB of exfiltrated data, including internal communications, customer records, and employee information. Telefónica has y…

1
EP 90: White Farmer Genocide & Trump’s Amnesty with Prof Christi van der Westhuizen 42:16

1d ago42:16

42:16

In this week’s episode, we focus on the controversial allegation of White Farmers’ Genocide in South Africa and Trump’s granting of Refugee Status to ‘persecuted’ white farmers in South Africa. I am joined by Professor Christi van der Westhuizen, Professor of Sociology at the University of Western Cape, Cape Town.…

1
Ingram Micro’s SafePay Ransomware Breach: Human-Operated Threats and Supply Chain Fallout 59:56

4d ago59:56

59:56

The recent ransomware attack on Ingram Micro, a global technology distribution giant, reveals not only a sophisticated human-operated cyber assault—but also the fragile state of modern supply chain cybersecurity. In this episode, we break down how attackers, believed to be affiliated with the SafePay ransomware group, penetrated Ingram Micro’s infr…

1
I Can Fix This! (I Think...) 1:28:55

2d ago1:28:55

1:28:55

With the party split and facing two different near death experiences simultaneously, there are a lot of unanswered questions… Will Ricky ever wake up? What do the dark ones want with 00M-3N and Sett? And will we find a way to destroy ourselves by accident? Send us a text Season 1 System: We are using the One Piece homebrew by Joyful Gent and Bluebe…

1
The Illusion of Shutdowns: What Hunters International's Closure Really Means 42:41

2d ago42:41

42:41

In a sudden and cryptic announcement, the notorious ransomware group Hunters International has declared its shutdown, citing “recent developments” and pledging to release decryption keys to victims. Active since late 2022 and suspected to be a rebrand of the earlier Hive ransomware gang, Hunters International has been responsible for attacks on nea…

1
CISA Flags CVE-2025-6554: Patching Chrome’s Critical Flaw Before It’s Too Late 40:49

5d ago40:49

40:49

A newly discovered and actively exploited zero-day vulnerability in Google Chrome has sent ripples through the cybersecurity community. Known as CVE-2025-6554, this critical type confusion flaw in Chrome’s V8 JavaScript and WebAssembly engine enables remote attackers to perform arbitrary read/write operations or execute code via a single malicious …

1
ANSSI vs. Houken: France Battles Advanced Chinese Hacking Threat 33:16

7d ago33:16

33:16

In this episode, we uncover a high-stakes cyber campaign targeting the heart of French digital infrastructure. ANSSI, France’s national cybersecurity agency, has exposed a Chinese-linked hacking group known as Houken (UNC5174 or Uteus) responsible for a widespread espionage operation since late 2024. This state-adjacent threat actor infiltrated cri…

1
Psychological Manipulation and AI Fraud: How Spain Exposed a $12M Scam 17:21

8d ago17:21

17:21

In this episode, we examine a growing threat reshaping financial crime in Europe: sophisticated, technology-driven investment fraud. Spanish law enforcement has recently dismantled a fraud operation that spanned multiple years, deceived over 300 victims, and resulted in more than $11.8 million in losses. What made this case particularly notable was…

1
CVE-2025-20309: Critical Cisco Root Access Flaw Threatens VoIP Security 41:32

8d ago41:32

41:32

A devastating vulnerability—CVE-2025-20309—has been discovered in Cisco’s Unified Communications Manager (Unified CM) and its Session Management Edition (SME), threatening the security of over a thousand internet-exposed VoIP systems globally. In this episode, we break down this critical flaw, which scores a perfect CVSS 10.0, and explore why it's …

1
macOS Under Siege: NimDoor Malware Targets Telegram, Wallets, and Keychains 43:09

8d ago43:09

43:09

A new, highly advanced malware strain—NimDoor—has emerged as the latest cyber weapon in the arsenal of North Korean state-sponsored hackers, specifically targeting macOS systems used by cryptocurrency and Web3 organizations. This episode explores the complex tactics and alarming capabilities of NimDoor, a malware family showcasing a blend of C++ an…

1
(ICYMI) Bishop Mariann Edgar Budde on Faith, Politics, and Ethical Conversations in a Polarized Nation 1:06:54

6d ago1:06:54

1:06:54

This was such a refreshing conversation with Bishop Mariann Edgar Budde. We recorded it just after she delivered the homily at the National Cathedral the day after the inauguration. Bishop Budde's candor, winsomeness and wisdom shines through in all circumstances - whether it's before a worldwide audience or upon earnest reflection of the impact of…

1
Cisco Unified CM Vulnerability: Root Access Risk for Enterprise VoIP Networks 56:02

8d ago56:02

56:02

A newly disclosed vulnerability—CVE-2025-20309—in Cisco's Unified Communications Manager (Unified CM) and Session Management Edition has sent shockwaves through enterprise VoIP and IT security teams. The flaw stems from hardcoded root SSH credentials that could allow unauthenticated remote attackers to gain full control of affected systems. In this…

1
Forminator Flaw Exposes WordPress Sites to Takeover Attacks: Vulnerability Threatens 600,000+ Sites 50:32

9d ago50:32

50:32

A critical new WordPress vulnerability—CVE-2025-6463—has been discovered in the widely used Forminator plugin, affecting over 600,000 active installations and putting hundreds of thousands of websites at risk of full compromise. In this episode, we dive deep into the mechanics, risks, and remediation of this arbitrary file deletion flaw and explain…

1
Kelly Benefits Breach: Over 550,000 Victims and the Rising Identity Theft Crisis 1:08:04

9d ago1:08:04

1:08:04

In one of the latest large-scale data breaches to hit the U.S. private sector, Kelly Benefits, a provider of payroll and benefits administration services, disclosed a significant cybersecurity incident impacting over 553,000 individuals. The breach, which occurred in December 2024 but was only revealed in April 2025, exposed sensitive personal info…

1
An Important Announcement About This Podcast 2:05

9d ago2:05

2:05

Thank you for being a loyal listener! In this special, final episode, host Mike Allton shares some big, exciting news about the future of our podcast conversations. We're evolving and bringing everything under one roof to create a single, powerhouse weekly show designed to help social media managers win. Listen to this important announcement to hea…

1
FileFix, HTA, and MotW Bypass—The Alarming Evolution of HTML-Based Attacks 46:04

9d ago46:04

46:04

A newly disclosed exploit dubbed FileFix is redefining how attackers bypass Microsoft Windows' built-in security protections—specifically the Mark-of-the-Web (MotW) mechanism. Developed and detailed by security researcher mr.d0x, this attack takes advantage of how browsers save HTML files and how Windows handles HTA (HTML Application) files. The re…

1
Sophisticated Cyberattack on the International Criminal Court: Justice in the Crosshairs 19:37

7d ago19:37

19:37

The International Criminal Court (ICC), the world’s foremost tribunal for prosecuting war crimes, genocide, and crimes against humanity, has confirmed yet another sophisticated cyberattack, highlighting the persistent threat facing high-profile global institutions. This marks the second targeted intrusion against the ICC in recent years, and althou…

1
Critical Flaws in Microsens NMP Web+ Threaten Industrial Network Security 43:40

7d ago43:40

43:40

In a major red flag for the industrial cybersecurity community, three newly disclosed vulnerabilities in Microsens NMP Web+, a popular network management solution used across critical infrastructure, have revealed just how fragile many ICS environments remain. The flaws—two rated critical and one high—allow unauthenticated attackers to bypass authe…

1
Qantas Data Breach: Third-Party Hack Exposes Millions of Frequent Flyers 24:36

10d ago24:36

24:36

In a stark reminder of the aviation industry's growing exposure to cyber threats, Australian airline Qantas recently confirmed a serious data breach—this time not from its own systems, but from a third-party platform used by one of its customer contact centers. The breach exposed personal data for up to six million customers, including names, dates…

1
How to Use AI and Data Better in Everyday Life with Jess Carter 32:06

10d ago32:06

32:06

From writing better emails to helping her son learn the alphabet, Jess Carter is using AI in unexpected ways. In this Q&A episode, Jess shares how she’s integrating AI into both her professional and personal routines, with real examples that span leadership, data storytelling, parenting, and everyday problem-solving. She offers practical advice for…

1
Berlin Regulator Targets DeepSeek AI Over Data Transfers to China 43:41

8d ago43:41

43:41

Germany’s battle over digital sovereignty and data privacy has intensified, with the Berlin Commissioner for Data Protection formally requesting that Google and Apple remove the DeepSeek AI application from their app stores. The move stems from allegations that DeepSeek, a Chinese-developed generative AI platform, violates the EU’s General Data Pro…

1
CISA Flags Citrix NetScaler Flaws: What CVE-2025-6543 Means for Federal and Private Networks 56:41

10d ago56:41

56:41

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added multiple Citrix NetScaler vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog—an urgent signal for federal agencies and private enterprises alike. At the center of this update is CVE-2025-6543, a memory overflow flaw affecting NetScaler ADC and Gateway appli…

1
Cato Networks Secures $359M to Fuel AI-Powered SASE Expansion 17:12

8d ago17:12

17:12

Cato Networks just raised $359 million in Series G funding, pushing its valuation past $4.8 billion and its total funding beyond the $1 billion mark—a milestone that cements its place as one of the most formidable players in the rapidly expanding Secure Access Service Edge (SASE) market. In this episode, we unpack what this massive investment means…

1
Chrome’s Latest Zero-Day: CVE-2025-6554 and Remote Code Execution Risks 54:24

8d ago54:24

54:24

A new high-severity zero-day vulnerability in Google Chrome—CVE-2025-6554—has sent shockwaves across the cybersecurity landscape. This episode dives into the technical details, real-world impact, and broader implications of this actively exploited flaw. Tracked as a type confusion bug in Chrome’s V8 JavaScript engine, the vulnerability allows attac…

1
Faith, Freedom, and the Fight for the 1st Amendment: Daniel Mach of the ACLU on Kennedy v. Bremerton, Religious Charter Schools, and Resisting Trump-Era Overreach 1:09:18

10d ago1:09:18

1:09:18

In this timely episode of "Talkin' Politics & Religion Without Killin' Each Other," host Corey Nathan speaks with Professor Daniel Mach, Director of the ACLU Program on Freedom of Religion and Belief and adjunct professor of law at the George Washington University Law School. They explore the complexities of First Amendment rights, the historical S…

1
EP 89: The Forthcoming Election in Cameroon with Dr. Jude Mutah 44:19

11d ago44:19

44:19

In this week’s episode, we focus on the forthcoming elections in Cameroon. Cameroonians are set to go to the polls in October to choose their president. President Paul Biya has been the President since 1982. But at 92 years of age, sooner or later, he would have to make way for a successor. Who will replace Biya? And will this election mark the daw…

1
Russia’s 16KB Curtain: Cloudflare Throttling and the Future of the RuNet 1:45:31

11d ago1:45:31

1:45:31

Russia has entered a new phase of digital authoritarianism. In a sweeping move, Russian Internet Service Providers (ISPs) have begun systematically throttling access to Cloudflare and other Western-backed services, including infrastructure giants Hetzner and DigitalOcean. This throttling is so severe that it restricts downloads to just 16 kilobytes…

1
Ahold Delhaize Data Breach: 2.2 Million Employee Records Exposed 37:44

9d ago37:44

37:44

Ahold Delhaize, one of the world’s largest food retailers, is now the subject of one of the most significant ransomware breaches in recent U.S. history. Affecting over 2.2 million current and former employees, this incident—claimed by the cybercrime group INC Ransom—highlights the rising threat posed by ransomware-as-a-service operations targeting …

1
The Worst Laid Plans 1:38:49

9d ago1:38:49

1:38:49

We finally get a map of the area we’re about to enter, so now we can figure who is planting bombs and where and how we are going to use the resources we have at hand to kill/save the people we’re here for… Send us a text Season 1 System: We are using the One Piece homebrew by Joyful Gent and Bluebeary, which was inspired by u/Mr-Silvers. Season 2 S…

1
Why Canada Banned Hikvision: National Security vs. Geopolitics 52:07

9d ago52:07

52:07

Canada has taken a definitive stance in the escalating global scrutiny of Chinese technology, ordering surveillance giant Hikvision to cease all operations within its borders. Citing national security concerns and acting on the advice of intelligence agencies, the Canadian government has banned the use of Hikvision products across its public sector…

1
Scattered Spider Takes Flight: Inside the Cybercrime Group’s Move into Aviation 43:38

12d ago43:38

43:38

As the aviation industry becomes more digitally interconnected, its exposure to sophisticated cyber threats continues to grow. One of the most dangerous actors in this space—Scattered Spider, a financially motivated and technically skilled cybercrime group—has recently shifted its focus to target the aviation sector. With recent incidents involving…

1
Perfecting the Pitch: AI-Powered Practice for B2B Sales Success 29:54

12d ago29:54

29:54

Have you ever hung up from a sales call and immediately thought of all the better responses you could have given? Or maybe you've sent your sales team into important conversations only to discover they weren't fully prepared for the tough questions that came their way? In today's high-stakes B2B environment, a single conversation can make or break …

1
Fortnite and the FTC: How Epic Games Misled Players into Unwanted Purchases 54:56

14d ago54:56

54:56

In a landmark case that reshapes the conversation around digital ethics, the Federal Trade Commission’s $520 million settlement with Epic Games over its Fortnite monetization tactics highlights a critical issue facing the modern digital economy: the weaponization of interface design to manipulate users. Central to the case is the use of “dark patte…

1
Microsoft 365 Direct Send Exploited: How Phishing Emails Masquerade as Internal Messages 41:44

14d ago41:44

41:44

Phishing has long been a favored weapon of cybercriminals, but a recent revelation about Microsoft 365’s Direct Send feature has elevated the threat to a new level—from inside the firewall. Designed for internal systems to send notifications without authentication, Direct Send can be abused by malicious actors to spoof emails that appear to origina…

1
Open VSX Registry Flaw Exposes Millions of Developers to Supply Chain Risk 47:26

15d ago47:26

47:26

A critical flaw in the Open VSX Registry—an open-source alternative to the Visual Studio Code Marketplace—recently put over 8 million developers at risk of mass compromise. This vulnerability, discovered in the platform’s GitHub Actions workflow, exposed a super-admin publishing token that could have enabled malicious actors to overwrite or inject …

1
CitrixBleed 2: Critical NetScaler Vulnerability Enables Session Hijacking and MFA Bypass 18:41

15d ago18:41

18:41

A new critical vulnerability in Citrix NetScaler ADC and Gateway systems, dubbed CitrixBleed 2 (CVE-2025-5777), has emerged as a serious threat to remote access infrastructure. This memory exposure flaw allows unauthenticated attackers to extract session tokens directly from device memory — enabling session hijacking and even bypassing multi-factor…

1
OneClik Cyberattack Campaign Targets Energy Sector Using Microsoft ClickOnce and AWS 1:18:25

15d ago1:18:25

1:18:25

A sophisticated cyber-espionage campaign named OneClik is actively targeting energy, oil, and gas organizations using a combination of legitimate cloud infrastructure and novel attack techniques. The campaign, attributed to an unknown but likely state-affiliated actor, leverages Microsoft's ClickOnce deployment technology to deliver custom Golang-b…

1
Central Kentucky Radiology’s 2024 Data Breach Affects 167,000 51:40

15d ago51:40

51:40

In October 2024, Central Kentucky Radiology (CKR), a Lexington-based imaging provider, became the latest victim of a growing trend in healthcare cyberattacks. An unauthorized actor accessed CKR’s systems over a two-day period, compromising sensitive data for approximately 167,000 individuals. The stolen information includes names, Social Security n…

1
Bonfy.AI Launches $9.5M Adaptive Content Security Platform to Govern AI and Human Data 1:09:30

16d ago1:09:30

1:09:30

In a major development at the intersection of cybersecurity and AI governance, Israeli startup Bonfy.AI has officially launched its adaptive content security platform, backed by $9.5 million in seed funding. The company’s mission is bold and timely: to secure content generated by both humans and AI across modern SaaS ecosystems — including high-ris…