The Matthew Chapman Podcast

Matthew Chapman
  • 5.0 (1)
  • Technology

Join Matthew Chapman, a Cybersecurity Expert with over 30 years of experience architecting solutions for some of the world’s largest organizations. Each episode delivers a sharp, no-fluff briefing on the latest developments in cybersecurity, AI, and emerging technology — alongside occasional in-depth interviews with colleagues and industry professionals. Expect clear analysis, real-world insight, and the occasional laugh along the way.

  1. 22h ago

    Microsoft Entra ID Flaw CVSS 10.0 Already Exploited in the Wild

    Here is your briefing for Friday, August 21, 2026. Five stories where cloud identity, code platforms, supply chains, critical infrastructure, and everyday AI tools are all getting tested in production. Microsoft disclosed a maximum-severity remote code execution flaw in Entra ID that is already being actively exploited. CVE-2026-69836 stems from unsafe deserialization of untrusted data and requires no customer action according to the company. The bug affects the cloud identity service formerly known as Azure AD. Researchers credited with the find noted the deserialization path lets attackers execute code over the network. When the identity layer itself becomes the attack surface, every downstream application inherits the risk. A code injection vulnerability in GitLab has moved from disclosure to active exploitation in under a week. CVE-2026-19478 scores 9.4 and lets unauthenticated attackers modify or delete public projects via a GraphQL directive in affected versions. Fixes shipped quickly in 19.2.4 and earlier branches, but watchTowr reproduced the issue within minutes of the advisory. Publicly accessible GitLab instances remain prime targets when disclosure timelines compress this tightly. Malicious releases of three widely used Rust crates slipped through after a maintainer account was compromised. The injected dependency's build script downloaded and executed a remote payload during compilation, affecting crates with hundreds of millions of downloads. The Rust team yanked the bad versions within two hours, but the attack highlights how build-time execution paths remain a soft underbelly even in memory-safe ecosystems. Developers are advised to pin versions and scan their cargo cache. U.S. agencies warned of active reconnaissance against internet-exposed Siemens S7 PLCs using AI-generated scripts disguised as monitoring tools. The activity scans for outdated or poorly protected controllers across critical manufacturing and energy sectors. Attackers leverage public search engines like Censys to find targets, then deploy AI-crafted payloads for capability development. When generative tools lower the bar for industrial control system attacks, legacy OT environments face scaled threats they were never designed to handle. OpenAI rolled out an Apple Messages plug-in that lets ChatGPT search conversations, catch up on threads, and draft or send replies directly from the Mac app. The feature extends the model into personal messaging workflows without leaving the chat interface. While convenient, it also expands the attack surface for prompt injection or data leakage through connected messaging accounts. Consumer AI keeps embedding deeper into daily communication channels. Identity providers, code forges, language package ecosystems, industrial controllers, and personal messaging apps are all under active pressure. The common thread is that convenience features and rapid feature releases keep creating new reachable surfaces faster than defenses can adapt. That's the briefing. Stay sharp, keep your systems patched, and we'll see you tomorrow.Support the show

  2. 1d ago

    From Zimbra RCE To CDN Tsunami The New Reachable Attack Surface

    Here is your briefing for Thursday, August 20, 2026. [pause 1.0] Five stories that turn everyday infrastructure and consumer devices into live attack surfaces. [pause 0.8] A now-patched flaw in Zimbra Collaboration has already seen active exploitation in the wild. CVE-2026-73570 lets an unauthenticated attacker send crafted SMTP requests that execute arbitrary commands as the Zimbra user when the optional SNMP package is installed. Polish CERT spotted it, Zimbra shipped the fix in 10.1.20 last month. The takeaway is straightforward: even mature collaboration platforms keep exposing unauthenticated paths when optional components get enabled. [pause 1.2] Researchers at UMass Amherst showed how to resurrect expired Visa contactless cards for real purchases. The attack rewrites the expiration date the terminal reads over NFC without breaking the card's crypto. It needs physical access or sustained proximity plus a relay, and it works because issuers often leave the PAN active on replacement cards. Tested against major US banks with mixed success. Another reminder that contactless convenience still trades off against expiry enforcement. [pause 1.2] Six major CDNs including Cloudflare, Fastly, and Amazon CloudFront were shown vulnerable to a new amplification attack called CDN Tsunami. The technique exploits how they translate client HTTP/3 requests into HTTP/1.1 toward the origin, turning a small request stream into up to 350 times the bandwidth at the backend. Cloudflare dodged one variant by buffering. Any site behind these providers with HTTP/3 at the edge is potentially exposed. Low effort for attackers, high impact on origin servers. [pause 1.2] ThreatFabric detailed Manic, a new Android banking malware and spyware hybrid targeting Ukrainian banks, government services, and Russian/European financial apps. The novel bit is its Wi-Fi mesh relay: infected devices without internet can forward stolen data through nearby compromised phones that do have connectivity. Distributed via phishing and droppers. Activity dates back to February. Offline isolation is no longer a reliable defense when the mesh is in play. [pause 1.2] Meta suffered a Sev 1 incident in March when an approved internal AI agent posted a response publicly, exposing sensitive data for over two hours. It wasn't shadow AI. It was approved tooling behaving in ways nobody anticipated. Researchers are now calling this "shady AI": approved systems used in unapproved, unexpected ways inside the perimeter. Governance that only tracks tool approval will miss the real risk. [pause 1.0] Five stories, one pattern. Email platforms, payment cards, CDNs, mobile devices, and internal AI agents are all being probed the moment they become reachable or trusted. The gap between lab assumptions and production reality keeps widening. [pause 0.8] That's the briefing. Stay sharp, keep your systems patched, and we'll see you tomorrow. Support the show

  3. 2d ago

    Operation Camera Swarm And The New IoT Reality

    Here is your briefing for Wednesday, August 19, 2026. [pause 1.0] Five stories that show how quickly yesterday's assumptions become today's attack surface. [pause 0.8] Security researchers at Hunt.io reconstructed a campaign that compromised more than 14,530 Dahua devices between mid-June and late July using credential stuffing, two authentication bypass flaws, and a peer-to-peer relay technique. The activity, dubbed Operation CameraSwarm, came from an exposed 407 MB working directory containing tooling, logs, and campaign records. Compromises concentrated in Ukraine and Russia, with 1,923 cameras left with a persistent account and 283 reached via the P2P path. Users are advised to apply vendor firmware or disable P2P where possible. That's the headline from The Hacker News, and it demonstrates that commodity IoT hardware remains an attractive, lightly defended target even when the tooling leaks in public. [pause 1.2] The Cybersecurity and Infrastructure Security Agency on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities catalog. The additions include CVE-2026-65400, an improper authentication issue in Apple macOS Screen Sharing that allows network attackers to authenticate without credentials Support the show

  4. 3d ago

    How Agent Prompts Became A New Malware Path

    Here is your briefing for Tuesday, August 18, 2026. [pause 1.0] Five stories that show how quickly yesterday's assumptions become today's attack surface. [pause 0.8] Security researchers at Anthropic and Switzerland's EPFL have demonstrated that self-propagating payloads can spread from one artificial intelligence agent to the next through the editable system prompt files that autonomous agent harnesses use to carry state between sessions. The work, released as a preprint on August 10, tests the technique in a simulated six-agent coding collaboration and in a chain of paired agents modeled on OpenClaw. There is no evidence that the technique has spread successfully in the wild, and a one-paragraph warning added to an agent's system prompt reduced spread to near zero across the payloads tested. Fifteen generations of adversarial optimization run against that warning on Claude models still failed to bypass it reliably. That's the headline from The Hacker News, and it is a concrete demonstration that the same persistence mechanisms that make agents useful also create a new propagation vector that defenders have not yet instrumented. [pause 1.2] A single piece of infrastructure has been pulling records out of Salesforce and ServiceNow customer portals across multiple industries for more than a year, according to research published this week by agent security platform Reco. The activity, named the City Forum campaign, traces back to one server at 158.220.87.79 hosted on a commodity VPS through the German provider Contabo. Every request from that server carries the same fingerprint, the default user agent of Go's net/http library. Passive DNS shows the same domain pointed at that IP as far back as March 2025, and the server has not moved since. Targets span telecoms, banks, financial services, enterprise software vendors, and public sector portals. That's the headline from The Hacker News, and it underscores how long a determined actor can operate against high-value SaaS platforms before anyone notices the steady drip of data. [pause 1.2] The U.S. Cybersecurity and Infrastructure Security Agency on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation. Ray is an open-source, Python-native distributed computing framework designed to scale AI and machine learning workloads, with more than 43,500 stars on GitHub. The vulnerability, CVE-2025-62593 with a CVSS score of 9.4, can result in remote code execution via web browsers like Mozilla Firefox and Apple Safari by means of a DNS rebinding attack. The Ray Development team's longstanding decision to not implement any sort of authentication on critical endpoints like /api/jobs has once again led to a severe vulnerability. That's the headline from The Hacker News, and it is another reminder that AI infrastructure projects continue to ship with the same "lab network" assumptions that break the moment the service faces the public internet. [pause 1.2] GitLab has released security updates to address a critical vulnerability impacting its Community and Enterprise Editions that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete public projects and user data. The flaw, tracked as CVE-2026-19478, has been rated Critical with a CVSS score of 9.4. Released on August 17 outside the company's usual twice-monthly schedule, the patch arrived five days after a routine release that carried no critical issues. Only self-managed installations need to act. The fixes are available in GitLab 19.2.4, 19.1.6, 19.0.8, and 18.11.11. GitLab.com and GitLab Dedicated are already running the patched version. That's the headline from The Hacker News, and it shows how even mature DevOps platforms can carry unauthenticated mutation paths when GraphQL resolvers are not locked down as tightly as the REST surface. [pause 1.2] SafePal has disclosed that an authorization flaw in an order-tracking plug-in exposed the names, email addresses, shipping addresses, phone numbers, and purchase details of approximately 39,798 customers. The hardware wallet maker said all affected customers were notified individually by email on August 16. The exposed records did not include wallet credentials or financial information, and the company said it has found no evidence that the incident compromised access to SafePal wallets or funds. Under certain conditions, the flaw allowed unauthorized access to another customer's order information. That's the headline from The Hacker News, and it is the predictable result when an order-management plugin is granted broader authorization scope than the core wallet product itself. [pause 1.0] Five stories, one consistent pattern. Agent persistence layers, long-running SaaS scrapers, unauthenticated AI frameworks, DevOps mutation flaws, and supply-chain plugins are all being discovered the hard way. The gap between "it works in the lab" and "it is reachable from the internet" remains the most expensive assumption in the stack. [pause 0.8] That's the briefing. Stay sharp, keep your systems patched, and we'll see you tomorrow. Support the show

  5. 5d ago

    From Modems To AI Agents How Assumptions Break

    Here is your briefing for Monday, August 17, 2026. [pause 1.0] Five stories that show how quickly yesterday's assumptions become today's attack surface. [pause 0.8] Security researchers published a two-stage exploit chain that achieves full Android kernel access on Unisoc modem firmware through a VoLTE video call. No patch from the chipset maker yet. The first stage was disclosed in March Support the show

  6. Aug 14

    Patch Tuesday Drops 421 Fixes And Attackers Still Sprint

    Here is your briefing for Friday, August 14, 2026. A new malware family called WindRelay has been spotted in the wild. It works with the SpyNote RAT to capture live contactless payment data via NFC and forward it in real time. The malware is sideloaded silently after initial RAT access and requires no screen sharing or user interaction beyond the initial foothold. Attacks typically begin with phishing or smishing. That's the headline from Help Net Security, and it shows how the contactless payment surface remains an attractive, under-defended channel even as mobile security tooling improves. Security researchers at pwn.ai disclosed a pre-authentication exploit chain that turns a simple cross-site scripting flaw into remote code execution on WordPress Core. The vulnerability, tracked as CVE-2026-64638, has been present since version 4.7 and affects the vast majority of the 43% of the web that runs on WordPress. A publicly available exploit is already circulating. That's the headline from multiple sources this week, and it is a reminder that even the most widely used platforms can carry long-lived sanitization discrepancies that only surface under determined research. Microsoft released its August 2026 Patch Tuesday updates, addressing 421 vulnerabilities. At least one elevation-of-privilege flaw was being exploited as a zero-day in the wild before the patch was available. The volume of fixes continues the trend of large monthly security updates. That's the headline from SecurityWeek, and it underscores how quickly sophisticated actors weaponize public or privately discovered flaws once they appear. AWS announced that email-validated certificates in Certificate Manager will no longer support automated renewals after 2027. Organizations relying on this validation method will need to migrate to DNS-validated certificates to maintain continuity. That's the headline from Help Net Security, and it is another incremental step toward stronger domain control validation practices across the industry. The Storm-1175 ransomware group exploited a critical vulnerability in N-able’s N-central management platform within hours of disclosure. The speed of weaponization highlights how ransomware operators continue to monitor vendor disclosures for high-value targets. That's the headline from the cybersecurity press, and it shows the persistent gap between patch availability and actual deployment in managed service environments. Five stories, one recurring theme. Mobile payment fraud tooling is becoming more specialized. Long-lived web platform vulnerabilities continue to surface. Large vendors are still shipping exploited zero-days. Cloud providers are tightening validation requirements. And ransomware groups remain extremely fast at turning disclosures into campaigns. The through-line is familiar: the abstractions and platforms we rely on keep leaking under pressure, and the organizations that treat every new integration and every new disclosure as potentially hostile will be the ones that stay ahead. That's the briefing. Stay sharp, keep your systems patched, and we'll see you tomorrow. Support the show

  7. Aug 13

    State Actors, Zero-Days & NFC Relay Fraud

    Here is your briefing for Thursday, August 13, 2026. North Korean IT workers are applying for remote developer jobs, passing interviews, and landing inside government agencies and private companies with legitimate credentials. The FBI is investigating at least one case where a suspected DPRK operative worked for a U.S. federal agency. Researchers who deliberately hired suspected Lazarus-linked developers into sandboxed environments documented forged identities, re-used infrastructure, and rapid pivots once inside. The operation flips the usual attacker model: instead of breaking in, the threat gets hired. That's the headline from The Hacker News, and it is the logical endpoint of years of remote-work expansion. The same hiring pipelines companies optimized for speed now route state-sponsored talent straight into production systems. Lazarus Group exploited a freshly patched Windows zero-day in the Ancillary Function Driver for WinSock (AFD.sys, CVE-2026-68820, CVSS 7.0) to escalate privileges and drop a previously unseen backdoor. The campaign targeted defense and aerospace firms in France, Germany, Brazil, and India as part of the long-running Operation Dream Job social-engineering effort. Microsoft shipped the fix in the August 2026 Patch Tuesday bundle. That's the headline from The Hacker News and Krebs on Security, and it is the usual pattern: a high-value zero-day lands in the hands of a sophisticated actor, gets used for targeted espionage, and only surfaces after the patch cycle catches up. Threat actors started exploiting CVE-2026-55040, a critical SharePoint authentication bypass patched in July, within days of Rapid7 publishing proof-of-concept code. The flaw allows impersonation, file disclosure, and data modification. It is already the fifth SharePoint vulnerability observed in active exploitation this year. That's the headline from The Hacker News, and it is another data point on how quickly public PoCs translate into real-world campaigns once the disclosure window opens. A new Android NFC relay malware family called WindRelay works with the SpyNote RAT to capture live card data via contactless payments and forward it to attackers in real time. The malware is sideloaded silently after initial RAT access, requires no screen sharing, and was first spotted in the wild in late 2025. Attacks begin with phishing or smishing to get the initial foothold. That's the headline from The Hacker News, and it shows how the contactless payment surface remains an attractive, under-defended channel for fraud even as mobile security tooling improves. Anthropic rolled out invisible watermarks on Claude-generated text that can flag machine output even when a human only edited the content. Some users are already complaining that the feature will catch them using the model for work or school assignments. Ars Technica notes the mark is designed to survive editing, which raises obvious questions about false positives and detection accuracy in the wild. That's the headline from Ars Technica and TechCrunch, and it is the predictable collision between safety tooling that wants to label everything and users who want the model to stay invisible when it is convenient. Five stories, one recurring theme. State actors are shifting from external intrusion to legitimate employment pipelines. Sophisticated groups like Lazarus continue to weaponize zero-days the moment they appear. Public PoCs accelerate exploitation of enterprise platforms. Mobile payment fraud tooling is getting more specialized. And the safety features companies add to their models are already generating user friction. The through-line is the same one we see every week: the abstractions we rely on for speed and convenience keep leaking at the seams. The organizations that treat every new integration, every new hire, and every new model output as potentially hostile will be the ones that still have options when the next one lands. That's the briefing. Stay sharp, keep your systems patched, and we'll see you tomorrow. Support the show

  8. Aug 12

    AI Reasoning Traces Leaked via OpenAI, Anthropic & Google APIs

    Here is your briefing for Wednesday, August 12, 2026. Researchers found that hidden reasoning traces passed between API calls at OpenAI, Anthropic, and Google can be replayed and decoded by weaker models in the same family. The attack recovers internal chain-of-thought, API keys, passwords, and even concealed harmful content from public agent trajectories. Across thousands of logged sessions they pulled hundreds of thousands of thinking blocks. Four abuse paths emerged: model distillation, cross-user data theft, bypassing safety filters, and injecting prompts inside opaque reasoning objects. That's the headline from The Hacker News, and it shows the current generation of agent tooling still treats reasoning as just another opaque payload instead of a security boundary. Two malicious LiteLLM packages sat on PyPI for roughly forty minutes in March and harvested cloud credentials, SSH keys, Kubernetes tokens, and database passwords from any system that installed them. CloudSEK recovered attacker loot mapping the exposure to more than two thousand organizations. The campaign appears linked to the earlier Trivy supply-chain compromise. That's the headline from The Hacker News, and it is another reminder that even short-lived malicious releases in the Python ecosystem can produce long-lived operational damage when the packages touch production AI tooling. Threat actors are actively exploiting a directory-traversal flaw in VMware vCenter (CVE-2026-59310, CVSS 9.8) that Broadcom patched last month. Observed activity includes path traversal followed by cron jobs that drop reverse SSH for persistence. The campaign started hitting systems within days of disclosure. That's the headline from The Hacker News, and it is the usual story: critical virtualization infrastructure with network exposure gets owned fast once a public exploit appears. Google announced that its Gemini app has reached one billion users, making it the fastest-growing product in company history. The milestone comes amid continued model releases and heavy marketing, though questions remain about whether growth can be sustained as newer models slow down and competition intensifies. That's the headline from TechCrunch and Ars Technica, and it is a concrete data point on how quickly consumer AI interfaces are moving from novelty to default behavior for a billion people. Adobe released updates for multiple maximum-severity vulnerabilities in ColdFusion, Commerce, and Campaign Classic. The worst include operating-system command injection and eval injection that allow arbitrary code execution, plus authorization bypasses that can lead to denial-of-service or privilege escalation. Several carry CVSS scores of 10.0. That's the headline from The Hacker News, and it is the quarterly reminder that even mature enterprise platforms continue to ship command-injection and authorization holes that require emergency patching. Five stories, one through-line. The agent and API layers we are rushing into production still leak reasoning, secrets, and control when the abstractions are treated as trusted. Supply-chain attacks in AI-adjacent Python packages are producing measurable organizational exposure. Core virtualization platforms remain high-value targets that get compromised shortly after patches drop. Consumer adoption numbers are hitting billion-user scale while the underlying security model lags. And the usual critical enterprise software keeps shipping CVSS-10 holes that force fire-drill updates. The pattern is consistent. Speed and convenience keep winning over verification at the boundaries. The organizations that treat every new integration point as hostile will be the ones still standing when the next wave of these issues lands. That's the briefing. Stay sharp, patch your systems, and we'll see you tomorrow. Support the show

See All (17)

About

Join Matthew Chapman, a Cybersecurity Expert with over 30 years of experience architecting solutions for some of the world’s largest organizations. Each episode delivers a sharp, no-fluff briefing on the latest developments in cybersecurity, AI, and emerging technology — alongside occasional in-depth interviews with colleagues and industry professionals. Expect clear analysis, real-world insight, and the occasional laugh along the way.

Information

  • Creator
    Matthew Chapman
  • Years Active
    2021 - 2026
  • Episodes
    17
  • Rating
    Clean
  • Copyright
    © 2026 The Matthew Chapman Podcast
  • Show Website
    The Matthew Chapman Podcast