CyberSpace Podcast

Josh and Robbie run duos on the pod this week, looking into early information around the recent Citrix vulnerability (CVE-2025-5777) dubbed Bleed 2 for it's similarity to the 2023 vulnerability. Bleed 2 has opened old wounds, and there has been some confusion amongst researchers and defenders due to a few rouge PoC exploits in the wild... I'm sure we'll come back to this exploit as related compromises are disclosed in the following weeks. For the second part, Robbie and Josh look at a simpler...

Join Josh, AJ and Robbie as they unpack recent developments in the threat landscape, including: US gov bans whatsapp for official use, Russia targets Ukraine using Signal. McLaren Ransomware details disclosed and a look inside a disinformation and cyber crime advertisement campaign. Support the show

Gen AI, LLMs and new applications of AI have created novel attack surfaces for attackers to probe, often looking to exfiltrate the hoards of sensitive data held in vector data stores. Luckily, the researchers got there first this time and discovered a super interesting attack sequence that tricks CoPilot into locating the most sensitive data it has access to, and then exfiltrating it to the attackers server. Josh, AJ and Vaughan take a look at this new bug in some depth, before looking at oth...

We're back! And it's been a busy week for cyber security news. Josh, AJ, Robbie and Vaughan, incident responders and SOC leaders gather to discuss a new Ticketmaster data dump reminiscent of a similar dump in 2024, details on a supply chain compromise attack that used an IT provider to go after 70+ companies, including SentinelOne, and finally a look at Ukraine's cyber offensive against a Russian bomber manufacturer. Support the show

We're back, the ET guys share where they've been hiding these last few weeks before rounding up the spike in different data breaches that have occurred in our absence. After TCS declare an internal investigation connected to the M&S breach, could a third party supply chain compromise be the common denominator between all these recent breaches? Towards the end of the pod, we celebrate some wins as the DanaBot malware as a service operation is officially shut down, thanks to some great rese...