Signal Check

Adrian North

Tech, hacking, security, running, climbing news all in one podcast cause.. why not?

  1. 22h ago

    Episode 139: August 18, 2026

    This episode digs into three critical vulnerabilities shaking up the security landscape: a Windows certificate authority flaw that turns standard users into domain admins, a GitHub Actions injection bug in Snowflake's repo that executes commands through issue forms, and an Android kernel exploit delivered via video calls on Unisoc-powered devices. Adrian breaks down how trusted infrastructure keeps becoming the attack surface we forgot to secure. Stories covered: - Certighost and the Privilege Hiding in Your Certificate Authority (BleepingComputer) - https://www.bleepingcomputer.com/news/security/certighost-and-the-privilege-hiding-in-your-certificate-authority/ - Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection (The Hacker News) - https://thehackernews.com/2026/08/snowflake-github-actions-flaw-lets_0330881554.html - Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access (The Hacker News) - https://thehackernews.com/2026/08/unisoc-volte-video-call-exploit-chain.html - 4 Signs More Mileage Is No Longer Helping Your Training—And What to Do About It (Runner's World) - https://www.runnersworld.com/training/a73435325/running-mileage-limit/ - The Moon's shadow raced across the heart of Spain, and I was there to see it (Ars Technica) - https://arstechnica.com/space/2026/08/the-moons-shadow-raced-across-the-heart-of-spain-and-i-was-there-to-see-it/ - 'Buy Now, Pay Later' Lenders Pitch Loans for Needs Like Electricity and Rent (Hacker News) - https://www.nytimes.com/2026/08/17/business/buy-now-pay-later.html

  2. 1d ago

    Episode 138: August 17, 2026

    This episode covers a North Korean zero-day exploit hitting Windows systems, a new Mirai-based botnet turning routers into traffic relays, and a critical SAP flaw already under active attack just days after being patched. Adrian breaks down why patch-to-exploit windows are shrinking fast and what needs your attention this Monday morning. Plus, a quick signal on knowing when more training miles aren't the answer. Stories covered: - Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor (The Hacker News) - https://thehackernews.com/2026/08/lazarus-exploits-windows-zero-day-to.html - New Evooo1Bot Linux botnet turns routers into traffic relay nodes (BleepingComputer) - https://www.bleepingcomputer.com/news/security/new-evooo1bot-linux-botnet-turns-routers-into-traffic-relay-nodes/ - Max severity SAP Commerce Cloud flaw now targeted in attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/max-severity-sap-commerce-cloud-flaw-now-targeted-in-attacks/ - 4 Signs More Mileage Is No Longer Helping Your Training—And What to Do About It (Runner's World) - https://www.runnersworld.com/training/a73435325/running-mileage-limit/ - Tell HN: Cloudflare silently injects its analytics when you switch nameservers (Hacker News) - https://news.ycombinator.com/item?id=49322107 - A Brown Bear Attacked an Anchorage Runner Who Was on the Trail Alone (Marathon Handbook) - https://marathonhandbook.com/anchorage-runner-bear-attack/

  3. 3d ago

    Episode 136: August 15, 2026

    This episode covers a critical SAP Commerce vulnerability already under active exploit, mass data theft claims hitting major corporations, and a Polish power plant breach through a supposedly secure private cellular network. We also touch on Firefox becoming the last browser to fully support ad blockers, plus quick hits on endurance fueling and climbing grip hacks. Stories covered: - Max severity SAP Commerce Cloud flaw now targeted in attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/max-severity-sap-commerce-cloud-flaw-now-targeted-in-attacks/ - Hacking group claims mass data theft from Shell, Philips, GE, Fiserv and dozens of others - reuters.com (reuters.com) - https://news.google.com/rss/articles/CBMilwFBVV95cUxPVi0xQk5kSzllUS10ZHJtTTNWT1ExNlY5cXlueE1iYzNocmg1em8yWmVyVlROTWVMX1FIdlo2cWZJODROMWlLdFFpM01kbnpOWU95dnlBSlpGTTl3a2l5T3Nob2hEbEprNDM5MWd3U0hoemR4b01ObW5Ya0RxNW1wVV9vTHR6N0R6MktmczlpaS1ERFZsdVNZ?oc=5 - Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine - The Hacker News (The Hacker News) - https://news.google.com/rss/articles/CBMifEFVX3lxTE5Pa25qMUNRSW04SzlyOWRzOWNudEtfLWVqajRacU0wVmMwZDU4NHpIZ1cwNmszQWRwd1l2UU44ZUt3SGx2azg4N2w2anZJSHF3QjFZbC1RZmdpOXNmMDBndkthVjRmeERWMkN2WWZNdGFRaHptTGlZaGhBdk4?oc=5 - Don’t Overthink Your Long-Run Fueling. Here’s Exactly What and When to Eat to Perform Your Best, According to Experts (Runner's World) - https://www.runnersworld.com/nutrition-weight-loss/a73439247/long-run-fueling-guide/ - Firefox is now the last major browser that still supports uBlock Origin (Hacker News) - https://www.pcworld.com/article/3212428/firefox-is-now-the-last-major-browser-that-still-supports-ublock-origin.html - 6 Things That Fixed My Uber-Sweaty Hands—and 2 That Didn’t (Climbing Magazine) - https://www.climbing.com/gear/how-to-prevent-sweaty-hands-for-climbing/

  4. 4d ago

    Episode 135: August 14, 2026

    This episode covers a North Korean zero-day exploit targeting Windows systems, a shocking breach of a Polish power plant through a private cellular network, and a critical VMware vCenter flaw already being exploited in the wild. We also dig into Anthropic's new AI watermarking feature and why it's already being defeated, plus updates on ransomware operations and global cyber threats. Adrian North breaks down six signals worth your attention before the day's chaos begins. Stories covered: - Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor (The Hacker News) - https://thehackernews.com/2026/08/lazarus-exploits-windows-zero-day-to.html - Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine - The Hacker News (The Hacker News) - https://news.google.com/rss/articles/CBMifEFVX3lxTE5Pa25qMUNRSW04SzlyOWRzOWNudEtfLWVqajRacU0wVmMwZDU4NHpIZ1cwNmszQWRwd1l2UU44ZUt3SGx2azg4N2w2anZJSHF3QjFZbC1RZmdpOXNmMDBndkthVjRmeERWMkN2WWZNdGFRaHptTGlZaGhBdk4?oc=5 - Critical VMware vCenter RCE flaw exploited for reverse SSH access (BleepingComputer) - https://www.bleepingcomputer.com/news/security/critical-vmware-vcenter-rce-flaw-exploited-for-reverse-ssh-access/ - AI 'watermark removers' flood the web. Almost none can prove they work. (BleepingComputer) - https://www.bleepingcomputer.com/news/security/ai-watermark-removers-flood-the-web-almost-none-can-prove-they-work/ - The 8 Best New Balance Running Shoes 2026, for Training, Racing, and More (Runner's World) - https://www.runnersworld.com/gear/a22590253/best-new-balance-shoes/ - The Simple Long-Run Hack That Helps Me Run Easier—and Protects My Teeth (Runner's World) - https://www.runnersworld.com/training/a73370479/simple-fix-for-long-run-problems/

  5. 5d ago

    Episode 134: August 13, 2026

    This episode covers a wave of high-stakes threats hitting before most people even pour their coffee — North Korean hackers exploiting a Windows zero-day, a massive cloud portal data-scraping campaign, and a Microsoft Defender vulnerability called ShieldBreak. Adrian also breaks down a sprawling operation using 737 malicious Chrome extensions to intercept traffic from users seeking privacy tools. Stories covered: - Lazarus hackers exploited Windows zero-day to target defense firms (BleepingComputer) - https://www.bleepingcomputer.com/news/security/lazarus-hackers-exploited-windows-zero-day-to-target-defense-firms/ - "City-Forum" data-theft attacks target Salesforce, ServiceNow portals (BleepingComputer) - https://www.bleepingcomputer.com/news/security/city-forum-data-theft-attacks-target-salesforce-servicenow-portals/ - New Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privileges (BleepingComputer) - https://www.bleepingcomputer.com/news/security/new-microsoft-defender-shieldbreak-zero-day-grants-system-privileges/ - 737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One (The Hacker News) - https://thehackernews.com/2026/08/737-chrome-vpn-extensions-caught.html - 3 Simple, Effective Exercises to Ease Tight Hip Flexors and Improve Your Mechanics, Straight From a Physical Therapist (Runner's World) - https://www.runnersworld.com/training/a73415988/exercises-to-ease-tight-hip-flexors/ - The Best Photos of the Big August Solar Eclipse (Wired) - https://www.wired.com/story/best-photos-august-solar-eclipse-spain/

  6. 6d ago

    Episode 133: August 12, 2026

    This episode covers Microsoft's massive Patch Tuesday drop with 400 vulnerabilities including three zero-days, a wild security experiment where researchers caught suspected North Korean operatives applying to fake jobs, and OpenAI's new GPT model built specifically for offensive security work. We dig into what it means when patching becomes archaeology and why the line between remote hiring and state-sponsored infiltration is thinner than you think. Stories covered: - Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days (BleepingComputer) - https://www.bleepingcomputer.com/news/microsoft/microsoft-august-2026-patch-tuesday-fixes-400-flaws-3-zero-days/ - Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers (The Hacker News) - https://thehackernews.com/2026/08/researchers-built-fake-crypto-startup.html - OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development (The Hacker News) - https://thehackernews.com/2026/08/openai-launches-gpt-56-cyber-with.html - This Dad Ran a 4:17 Stroller Mile With His Daughter—and Set an Unofficial World Record (Runner's World) - https://www.runnersworld.com/news/a73395243/stroller-mile-world-record-dad/ - How and When to View the Perseid Meteor Shower (August 2026) (Wired) - https://www.wired.com/story/how-and-when-to-view-the-perseid-meteor-shower-august-2026/ - Running on the Beach Can Boost Your Fitness. Here’s How and Why to Hit the Sand This Summer, According to Experts (Runner's World) - https://www.runnersworld.com/training/a73394959/running-on-beach-benefits/

  7. Aug 11

    Episode 132: August 11, 2026

    This episode covers a critical Metabase zero-day exploit that hit companies before patches could deploy, two actively exploited SonicWall bugs now on CISA's radar, and a guilty plea in the Snowflake breach that came down to missing multi-factor authentication. Adrian also digs into why beach running actually improves your cardio and how major marathons are tightening entry requirements. Stories covered: - Metabase SQLi zero-day exploited in customer data-theft attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/framework-tally-disclose-metabase-data-theft-attacks/ - CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs (BleepingComputer) - https://www.bleepingcomputer.com/news/security/cisa-sonicwall-sma1000-flaws-now-exploited-by-ransomware-gangs/ - Canadian hacker pleads guilty in Snowflake data breach case, stealing data and extorting people for millions - CBC (CBC) - https://news.google.com/rss/articles/CBMitwFBVV95cUxQQ3VuTG1neVVUZHV0U2o5RHM0TXpGMjh2VnlaTV92OUF6akJTTnRGbjhpVGRNdkhGQ2VzbU4xNDJ1SGFMVWppUUI4all2LWZIX3RrQmRtanpaWEp2ZjJfc0dYOUZCYzNCaEo0Y09vbmUzT1ZIakhWamdqQXl4dm9lN01wM0NDTFFicFQ0a0hndy1saC1VTTdkdDJKQ2NwbFZRRktqdmRGRTU2clluWjlFNkpvWU9uM1E?oc=5 - Running on the Beach Can Boost Your Fitness. Here’s How and Why to Hit the Sand This Summer, According to Experts (Runner's World) - https://www.runnersworld.com/training/a73394959/running-on-beach-benefits/ - The Big Marathons and Half-Marathons You Can Still Enter Without a Lottery (Marathon Handbook) - https://marathonhandbook.com/marathons-without-a-lottery/ - Amazon backs power plant that may become top source of US climate pollution (Ars Technica) - https://arstechnica.com/tech-policy/2026/08/amazon-funds-biggest-gas-power-plant-in-us-despite-climate-pledge/

About

Tech, hacking, security, running, climbing news all in one podcast cause.. why not?