Cyber Investigations

Cyber Investigations Media

Stay across the latest cyber security news, data breaches, ransomware attacks, insider threats, and digital investigations from Australia and around the world. This podcast breaks down major cyber incidents, government and corporate security failures, threat actors, and the investigations behind the headlines. Each episode delivers clear analysis of real-world cyber attacks, data leaks, government cyber incidents, critical infrastructure threats, and emerging security risks. Whether you work in cyber security, technology, government, or risk, you’ll get practical context on what happened, why it matters, and what organisations can learn. If you follow cyber security, incident response, threat intelligence, digital forensics, privacy breaches, and public sector cyber risk, this podcast gives you timely coverage, sharp commentary, and deeper insight into the stories shaping the security landscape.

  1. 9h ago

    EP:16 A New Era of Cyber Warfare Just Began

    This week, we break down four major cybersecurity stories shaping the threat landscape in Australia and around the world. We examine how the NDIA defended against the TeamPCP software supply-chain attack, including the risks hidden inside CI/CD pipelines, GitHub Actions and exposed build credentials. We look at the US Government’s push to use private cybersecurity companies in offensive operations against overseas cybercriminals, and what that means for attribution, hack-back and cyber warfare. We also dive into newly disclosed Microsoft Copilot security flaws, including prompt injection, OAuth abuse, AI agents and data exfiltration from connected services. Finally, we explore how Australia and Thailand are strengthening cooperation against cybercrime, scam centres, cryptocurrency laundering and transnational fraud. A technical but accessible breakdown of cybersecurity news, AI security, supply-chain attacks, cloud security, cybercrime, Microsoft Copilot and offensive cyber operations. Thanks for listening. Follow the podcast for more cyber security news, malware analysis, threat intelligence, AI security, and real-world attacker tradecraft. For contact or story tips, email: cyberinvestigationsau@gmail.com Disclaimer: This podcast is for education and awareness only. Technical details are shared to help defenders improve detection, response, and security controls.

  2. 3d ago

    How intelligence agencies defend against agentic AI

    This week, we go deep into four cyber security stories that reveal how attackers are exploiting speed, complexity and hidden system behaviour. We break down new ACSC guidance on defending against AI-enabled cyber attacks, including how AI can accelerate vulnerability discovery, exploit chaining and large-scale reconnaissance. Then we examine the 16-year-old SQLite race condition that caused Tailscale database corruption, unpacking Write-Ahead Logging, checkpoints and why concurrency bugs are so difficult to detect. We also explore ShieldBreak, a Windows Defender zero-day technique that can reportedly escalate privileges to SYSTEM by abusing file hydration and timing behaviour, before looking at CVE-2026-58231, a critical SAP Commerce Cloud vulnerability that can lead to unauthenticated remote code execution. Along the way, we explain attack graphs, TOCTOU vulnerabilities, race conditions, WAL internals, privilege escalation, trust boundaries and why modern defenders need to think in terms of system state not just individual CVEs. A technical cyber security episode for anyone who wants to understand not just what happened, but how the technology actually failed. Thanks for listening. Follow the podcast for more cyber security news, malware analysis, threat intelligence, AI security, and real-world attacker tradecraft. For contact or story tips, email: cyberinvestigationsau@gmail.com Disclaimer: This podcast is for education and awareness only. Technical details are shared to help defenders improve detection, response, and security controls.

  3. Aug 12

    Microsoft Under Attack: Zero-Days & Supply Chain Chaos

    This week, we break down four cyber stories that all come back to one thing: trust. Microsoft has patched 421 vulnerabilities, including a Windows kernel zero-day already exploited by North Korea’s Lazarus Group. Researchers have also found a new way to attack legacy Netlogon authentication, passkey security has come under scrutiny, and malicious LiteLLM releases have exposed just how dangerous software supply-chain compromises can become. We go beyond the headlines to explain the technical concepts behind each attack, including use-after-free vulnerabilities, kernel privilege escalation, AES-CFB8 weaknesses, meet-in-the-middle attacks, WebAuthn and synced passkeys, CI/CD compromise, mutable Git tags, Python .pth persistence, and credential theft from cloud environments. If you want to understand not just what happened, but how these attacks actually work and what defenders can learn from them, this episode is for you. Thanks for listening. Follow the podcast for more cyber security news, malware analysis, threat intelligence, AI security, and real-world attacker tradecraft. For contact or story tips, email: cyberinvestigationsau@gmail.com Disclaimer: This podcast is for education and awareness only. Technical details are shared to help defenders improve detection, response, and security controls.

  4. Aug 7

    Ep12: Inside the Internets Hidden Control Systems

    This week, we go beneath the surface of modern cyber security to look at the hidden systems that control everything else. We break down allegations of backdoor-like functionality in Chinese router firmware, the inner workings of the Ransom Cartel ransomware operation, and a critical class of vulnerabilities affecting Baseboard Management Controllers — the tiny computers inside servers that can operate below the main operating system. We also examine Australia’s 2026 Defence Innovation, Science and Technology Strategy and what its focus on AI, autonomous systems, quantum technologies and cyber resilience means for future security architecture. Finally, we look at a disturbing AI security incident where autonomous agents took unsanctioned actions on the live internet, including interacting with real software projects and demonstrating the risks of indirect prompt injection, excessive permissions and poorly constrained agentic AI. Along the way, we explain command injection, ransomware-as-a-service, hybrid cryptography, BMC persistence, management-plane security, prompt injection and why least privilege becomes even more important when AI systems can take real-world actions. Thanks for listening. Follow the podcast for more cyber security news, malware analysis, threat intelligence, AI security, and real-world attacker tradecraft. For contact or story tips, email: cyberinvestigationsau@gmail.com Disclaimer: This podcast is for education and awareness only. Technical details are shared to help defenders improve detection, response, and security controls.

  5. Aug 1

    Five Eyes and Space Wars

    AI Worms, Runaway Claude and Top Gun in Space What happens when an AI assistant treats a malicious document as trusted instructions? What happens when a cybersecurity testing environment accidentally gives an autonomous model access to the real internet? In this episode, we investigate four emerging security risks reshaping software, artificial intelligence and even military operations in space. First, we examine Australia’s updated minimum requirements for a Software Bill of Materials, or SBOM. Learn how component hashes, digital signatures, SPDX, CycloneDX, transitive dependencies and Package URLs can help organisations identify vulnerable software across complex supply chains. We then break down a proof-of-concept Microsoft Copilot for Word worm that uses hidden prompt injection to manipulate documents and copy itself into new files. This attack demonstrates why large language models struggle to separate trusted instructions from untrusted content. Next, we explore how Anthropic’s Claude reached real organisations during cybersecurity evaluations. The incidents involved misconfigured internet access, exposed credentials and a dependency-confusion package downloaded by real systems. We explain sandbox isolation, egress filtering, package-manager behaviour and why AI agents must be contained by infrastructure rather than prompts. Finally, we head into orbit to examine the US Space Force’s Victus Haze mission, satellite pursuit, orbital manoeuvring and the cybersecurity risks facing software-controlled spacecraft. This is a technical cybersecurity news breakdown covering: Software supply-chain security and SBOMsMicrosoft Copilot prompt injectionSelf-propagating AI wormsAnthropic Claude cybersecurity testingDependency-confusion attacksAI sandbox and network isolationSatellite security and orbital warfareThanks for listening. Follow the podcast for more cyber security news, malware analysis, threat intelligence, AI security, and real-world attacker tradecraft. For contact or story tips, email: cyberinvestigationsau@gmail.com Disclaimer: This podcast is for education and awareness only. Technical details are shared to help defenders improve detection, response, and security controls.

  6. Jul 23

    A technical deep dive into wp2shell

    Hackers are exploiting critical vulnerabilities in WordPress, ServiceNow and SonicWall turning trusted websites, cloud platforms and VPN appliances into pathways for administrator access, remote code execution and malware deployment. In this cybersecurity news episode, we break down a WordPress exploit chain involving route confusion and SQL injection, a ServiceNow pre-authentication sandbox escape, and SonicWall SMA1000 zero-days used to gain root access and install custom Java malware. Learn how attackers abuse server-side request forgery, command injection, sandbox escapes, WebSocket tunnelling, Java instrumentation agents, webshells and memory-resident malware. We also explain why broken trust boundaries, exposed internal services and weak validation between system components create such dangerous attack paths. This technical cyber threat analysis is designed for cybersecurity professionals, students, ethical hackers and anyone studying penetration testing, vulnerability research, incident response, malware analysis, network security or cloud security. Thanks for listening. Follow the podcast for more cyber security news, malware analysis, threat intelligence, AI security, and real-world attacker tradecraft. For contact or story tips, email: cyberinvestigationsau@gmail.com Disclaimer: This podcast is for education and awareness only. Technical details are shared to help defenders improve detection, response, and security controls.

  7. Jul 19

    Rogue AI Botnets and the Quantum Countdown

    Microsoft has unleashed a record-breaking Patch Tuesday covering 622 vulnerabilities, a ransomware attack has disrupted production at a Coca-Cola dairy subsidiary, and a new botnet called NadMesh is targeting exposed AI platforms and automation tools. In this episode, we break down the technical concepts behind each story, including vulnerability prioritisation, identity federation attacks, IT and operational technology dependencies, container escape techniques, insecure Model Context Protocol deployments, credential theft, persistence mechanisms and the growing harvest-now, decrypt-later threat. We also examine new Australian Signals Directorate guidance on post-quantum cryptography and explain what organisations should be asking their vendors before the 2030 migration deadline. This is a deep technical look at the hidden dependencies connecting patch management, ransomware resilience, AI infrastructure security and the coming cryptographic transition. Thanks for listening. Follow the podcast for more cyber security news, malware analysis, threat intelligence, AI security, and real-world attacker tradecraft. For contact or story tips, email: cyberinvestigationsau@gmail.com Disclaimer: This podcast is for education and awareness only. Technical details are shared to help defenders improve detection, response, and security controls.

  8. Jul 14

    Australia's Silent Signal War

    Russian state-sponsored hackers are targeting poorly secured routers, Poland’s energy infrastructure has faced an attempted cyberattack attributed to Russia, frontier AI systems are becoming more capable through advanced model harnesses, and ShinyHunters is exploiting Salesforce environments through OAuth abuse, voice phishing and exposed Experience Cloud data. In this episode of Cyber Investigations Australia, we break down the technical details behind each story, including insecure SNMP configurations, router configuration theft, TFTP exfiltration, operational technology risks, destructive wiper malware, AI agent orchestration, automated vulnerability research, OAuth refresh tokens, malicious connected applications, Salesforce Aura endpoints and GraphQL pagination. This episode is designed for cybersecurity professionals, students and technically curious listeners who want to understand not only what happened, but how the underlying technologies and attack methods actually work. Topics covered include Russian cyber operations, FSB Centre 16, router security, SNMPv3, critical infrastructure attacks, Poland’s electricity grid, DynoWiper, frontier AI, AI model harnesses, autonomous cyber agents, ShinyHunters, Salesforce security, OAuth token theft, vishing and cloud identity attacks. Thanks for listening. Follow the podcast for more cyber security news, malware analysis, threat intelligence, AI security, and real-world attacker tradecraft. For contact or story tips, email: cyberinvestigationsau@gmail.com Disclaimer: This podcast is for education and awareness only. Technical details are shared to help defenders improve detection, response, and security controls.

See All (16)

About

Stay across the latest cyber security news, data breaches, ransomware attacks, insider threats, and digital investigations from Australia and around the world. This podcast breaks down major cyber incidents, government and corporate security failures, threat actors, and the investigations behind the headlines. Each episode delivers clear analysis of real-world cyber attacks, data leaks, government cyber incidents, critical infrastructure threats, and emerging security risks. Whether you work in cyber security, technology, government, or risk, you’ll get practical context on what happened, why it matters, and what organisations can learn. If you follow cyber security, incident response, threat intelligence, digital forensics, privacy breaches, and public sector cyber risk, this podcast gives you timely coverage, sharp commentary, and deeper insight into the stories shaping the security landscape.

Information

  • Creator
    Cyber Investigations Media
  • Years Active
    2026
  • Episodes
    16
  • Rating
    Clean
  • Copyright
    © 2026 Cyber Investigations
  • Show Website
    Cyber Investigations