Best Seize The Gap Podcasts (2025)

1
The 2025 U.S. Open at Oakmont Golf PREVIEW: Draftkings + One-and-Done Picks + Best Bets & Wagers 36:51

7d ago36:51

36:51

Welcome to 'Birdies, Bogeys, Bushwood'! We're here to talk about golf and have a good time... and to make a couple of bucks while doing it. I mean, the tab at the 19th Hole we've been running doesn't pay for itself... Join your hosts Jamie G and Magnum Mills as they break down everything you need to know before setting your lineups or placing your …

1
Google’s $32B Bid for Wiz Faces DOJ Fire: A Cloud Security Power Play or Market Grab? 1:02:01

40m ago1:02:01

1:02:01

In this episode, we break down the seismic implications of Google’s proposed $32 billion acquisition of Wiz, the world’s largest cybersecurity unicorn—and why this isn’t just another tech deal. At the core is the U.S. Department of Justice's antitrust investigation, triggered by concerns that the deal could tighten Google’s grip on a critical secto…

1
SimpleHelp Exploit Fallout: Ransomware Hits Utility Billing Platforms 1:03:42

16h ago1:03:42

1:03:42

In this critical episode, we dive into the alarming exploitation of CVE-2024-57727, a vulnerability in SimpleHelp Remote Monitoring and Management (RMM) software actively leveraged by ransomware operators since early 2025. This isn't just a theoretical risk—it's already being used to compromise utility billing providers and downstream MSP customers…

1
TeamFiltration and Token Theft: The Cyber Campaign Microsoft Never Saw Coming 1:01:04

19h ago1:01:04

1:01:04

In this episode, we dissect UNK_SneakyStrike—a major account takeover campaign targeting Microsoft Entra ID users with precision and scale. Tracked by Proofpoint, this campaign began in December 2024 and has since escalated, leveraging TeamFiltration, a legitimate penetration testing tool, to enumerate users and launch password spraying attacks tha…

1
Three CVEs, One Risk: Arbitrary Code Execution in Nessus Agent for Windows 44:04

22h ago44:04

44:04

In this episode, we dive deep into one of the most critical attack techniques in modern cyber warfare: privilege escalation—and how it recently hit center stage with three high-severity vulnerabilities discovered in Tenable’s Nessus Agent for Windows. We break down CVE-2025-36631, CVE-2025-36632, and CVE-2025-36633, which, when exploited, allow a n…

1
WestJet Cyberattack: Cracks in Aviation’s Digital Armor 25:52

1d ago25:52

25:52

A major cyberattack has rocked Canada's second-largest airline, WestJet—crippling internal systems and prompting warnings for customers to monitor their accounts and change passwords. But this is more than just a corporate incident. It’s the latest sign of a broader, escalating crisis in aviation cybersecurity. In this episode, we examine the WestJ…

1
Silent Surveillance: The Hidden Risks in 40,000+ Unsecured Cameras 49:37

2d ago49:37

49:37

In this episode, we dig into a disturbing yet underreported national security threat: the exploitation of internet-connected surveillance cameras—especially those manufactured in the People’s Republic of China—as a cyber weapon against U.S. critical infrastructure. Drawing from recent DHS intelligence briefings and independent cybersecurity analyse…

1
Paragon’s Promise vs. Reality: How Graphite Is Being Used Against Journalists and Activists 1:10:32

2d ago1:10:32

1:10:32

In this episode, we dive deep into the alarming revelations surrounding Graphite, a powerful spyware tool developed by Israeli firm Paragon Solutions. Promoted as a “responsible alternative” to the NSO Group’s Pegasus, Graphite is now implicated in the surveillance of journalists, humanitarian activists, and civil society figures—contrary to the ve…

1
zeroRISC Secures $10M to Commercialize OpenTitan and Reinvent Supply Chain Security 51:51

3d ago51:51

51:51

zeroRISC just raised $10 million to bring OpenTitan—the first open-source silicon Root of Trust—to market. In this episode, we break down what this funding means for the future of supply chain security, and why investors are betting on open hardware to fix vulnerabilities baked into modern chips. We explore how geopolitical tension, forced labor en…

1
Fog, RedFox, and the Rise of Silent Intruders: Cyberattacks Surge Against Financial Institutions 34:42

3d ago34:42

34:42

The financial services industry is under siege. In this episode, we unpack the latest findings from Radware’s 2025 Financial Threat Analysis and multiple intelligence reports detailing a relentless rise in cyberattacks targeting banks and financial institutions across the globe. We examine the surge in sophisticated attacks that blend legitimate to…

1
9.8 Severity and Counting: Inside Trend Micro’s Latest Security Emergency 32:08

4d ago32:08

32:08

In this episode, we break down Trend Micro’s urgent June 10th security update that patched ten high- and critical-severity vulnerabilities—some with CVSSv3.1 scores as high as 9.8—across Apex Central and Endpoint Encryption PolicyServer (TMEE). While no active exploitation has been observed, the risks are too severe to ignore. We spotlight the most…

1
Zero-Day in the Call Center: Mitel MiCollab Exploited in Active Attacks 12:27

4d ago12:27

12:27

In this episode, we dissect the critical vulnerabilities plaguing Mitel MiCollab, a widely used unified communications platform, and explore how attackers are exploiting these flaws in the wild. Recently, security researchers uncovered a trio of dangerous vulnerabilities, including CVE-2024-35286 (a SQL injection flaw), CVE-2024-41713 (an authentic…

1
The Info-Stealer Sting: A Deep Dive into INTERPOL's Operation Secure 14:39

4d ago14:39

14:39

Join us for a gripping discussion on "Operation Secure," a landmark international crackdown that reverberated through the dark corners of the cybercriminal world between January and April 2025. Led by INTERPOL and involving law enforcement from 26 countries, primarily across the Asia-Pacific region, this massive coordinated effort, bolstered by cri…

1
Tomcat Manager Attacks: 400 IPs in Coordinated Brute-Force Attack 34:49

6d ago34:49

34:49

On June 5, 2025, GreyNoise flagged a massive spike in coordinated brute-force login attempts targeting Apache Tomcat Manager interfaces. Nearly 400 unique IP addresses, many traced back to DigitalOcean infrastructure, were involved in a widespread and opportunistic campaign. In this episode, we dissect the attack pattern, what makes Apache Tomcat a…

1
TxDOT Data Leak: 423,391 Texans Exposed 44:32

6d ago44:32

44:32

On May 12, 2025, the Texas Department of Transportation (TxDOT) disclosed a significant data breach that compromised crash reports containing personal data of over 423,000 individuals. In this episode, we take a forensic look at what went wrong, how one compromised account enabled unauthorized downloads of sensitive crash data, and what this means …

1
Ghost Students and AI Scams: How Identity Theft is Gutting Financial Aid 43:49

6d ago43:49

43:49

What happens when hundreds of thousands of college applications are submitted—not by hopeful students, but by bots using stolen identities? In this episode, we dive deep into the alarming rise of financial aid fraud in U.S. higher education, driven by "ghost students" and increasingly sophisticated scams powered by AI. From fraud rings applying for…

1
The Secret to Turning Emotional Connection into Lasting Audience Engagement with AnneMoss Rogers 54:00

6d ago54:00

54:00

What if your personal trauma could become the most powerful tool to inspire hope and resilience in your audience? Learn why transforming trauma into a message of growth and hope can create a powerful impact when paired with emotional connection and authentic storytelling. Gain the knowledge to inspire your audience with resilience—not pity—by shari…

1
Inside the React Native NPM Supply Chain Breach: 16 Packages, 1 Million+ Downloads, and a RAT in the Code 41:15

7d ago41:15

41:15

In this episode, we break down the massive supply chain attack that rocked the React Native ecosystem beginning on June 6, 2025. Over 16 NPM packages, collectively downloaded over one million times per week, were silently weaponized with a Remote Access Trojan (RAT) embedded in obfuscated code. The attack, linked to the same threat actor behind the…

1
Mirai Strikes Again: Spring4Shell, Wazuh, and TBK DVRs Exploited in Live Campaigns 43:52

7d ago43:52

43:52

In this episode, we dive into the latest wave of active Mirai botnet campaigns exploiting high-severity remote code execution (RCE) vulnerabilities in critical enterprise and IoT systems. The Mirai malware—still evolving nearly a decade after its first appearance—has adapted its tactics to weaponize recent CVEs with CVSS scores of 9.8 and 9.9, impa…

1
UNFI Breach: How One Cyberattack Shook the North American Food Supply 36:53

7d ago36:53

36:53

On June 5, 2025, United Natural Foods Inc. (UNFI)—North America's largest publicly traded wholesale food distributor and primary supplier for Whole Foods—was struck by a major cyberattack that forced the company to shut down key IT systems. The result: widespread delivery disruptions to over 30,000 locations across the U.S. and Canada, eerily empty…

1
Malware-as-Code: The Rise of DaaS on GitHub and the Collapse of Open-Source Trust 39:46

10d ago39:46

39:46

In this episode, we dissect one of the most sophisticated ongoing cybercrime trends—malware campaigns weaponizing GitHub repositories to compromise developers, gamers, and even rival hackers. By abusing GitHub’s search functionality and reputation signals, threat actors are pushing backdoored code under the guise of popular tools, game cheats, and …

1
ClickFix: How Fake Browser Errors Became the Internet’s Most Dangerous Trap 47:15

12d ago47:15

47:15

In this episode, we dive deep into ClickFix, also tracked as ClearFix or ClearFake—a highly effective and deceptive malware delivery tactic that emerged in early 2024. ClickFix exploits the human tendency to trust browser prompts by using fake error messages, CAPTCHA pages, and verification requests to convince users to execute malicious PowerShell…

1
Exposed and Extorted: The ViLE Hackers and the Legal Gaps Enabling Doxing 47:31

12d ago47:31

47:31

Cybercrime is rapidly evolving—and so are its tactics. In this episode, we dissect the findings of SoSafe’s Cybercrime Trends 2025 report and explore the six key trends reshaping the global threat landscape, including AI as an attack surface, multichannel intrusions, and the rising exploitation of personal identities. But we don’t stop at theory. W…

1
Chrome Under Fire: Three Zero-Days, One Month, and Nation-State Exploits 28:23

13d ago28:23

28:23

In this episode, we dive deep into three actively exploited zero-day vulnerabilities discovered in Google Chrome in 2025, each of which was patched in rapid succession following targeted attacks. At the center is CVE-2025-5419, a high-severity out-of-bounds read/write flaw in the V8 JavaScript engine that allows attackers to exploit heap corruption…

1
Australia Forces Transparency: The World’s First Mandatory Ransomware Payment Reporting Law 1:02:01

13d ago1:02:01

1:02:01

Australia just made cyber history. On May 30, 2025, the nation became the first in the world to enforce mandatory ransomware payment reporting under the newly enacted Cyber Security Act 2024. In this episode, we dissect what this means for businesses, law enforcement, and the global cybersecurity landscape. We break down the key aspects of the legi…

1
$25M for AI Email Security: Trustifi’s Big Bet on the MSP Market 32:00

13d ago32:00

32:00

In this episode, we dive into Trustifi’s recent $25 million Series A funding round, led by growth equity firm Camber Partners. Specializing in AI-powered email security, Trustifi has now raised a total of $29 million to accelerate its product development, go-to-market strategy, and global marketing initiatives—especially in the MSP space. We unpack…

1
What does it really take to turn your personal story into a successful speaking business? Learn how with Aaron Golub 43:21

13d ago43:21

43:21

Are you treating your speaking career like a business—or just a side hustle? Discover why resilience is the foundation of a lasting speaking career—your ability to adapt, persist, and evolve will determine your long-term success. Understand that leveraging your unique background—whether athletic, academic, or personal—helps create a compelling stor…

1
Google Chrome vs. Failing CAs: The Policy Behind the Distrust 55:25

14d ago55:25

55:25

In this episode, we dissect Google's recent and upcoming decisions to distrust several Certificate Authorities (CAs) within the Chrome Root Store, including Entrust, Chunghwa Telecom, and Netlock. These high-impact moves are rooted in Chrome's strict enforcement of compliance, transparency, and security standards for public trust. We explore the ro…

1
CVE-2025-48827 & 48828: How vBulletin’s API and Template Engine Got Weaponized 1:35:55

14d ago1:35:55

1:35:55

Two critical, actively exploited vulnerabilities in vBulletin forum software—CVE-2025-48827 and CVE-2025-48828—have put thousands of websites at immediate risk of full system compromise. In this episode, we dissect how these flaws, triggered by insecure usage of PHP’s Reflection API and abuse of vBulletin’s template engine, allow unauthenticated at…

1
JINX-0132: How Cryptojackers Hijacked DevOps Infrastructure via Nomad and Docker 1:07:22

14d ago1:07:22

1:07:22

In this episode, we dissect the JINX-0132 cryptojacking campaign — a real-world example of how threat actors are exploiting cloud and DevOps environments to mine cryptocurrency at scale. We unpack how cybercriminals targeted misconfigured Docker APIs, publicly exposed HashiCorp Nomad and Consul servers, and vulnerable Gitea instances — turning ente…

1
Password Hashes Leaked via Linux Crash Handlers: The Truth Behind CVE-2025-5054 & 4598 16:11

15d ago16:11

16:11

In this episode, we unpack two newly disclosed Linux vulnerabilities—CVE-2025-5054 and CVE-2025-4598—discovered by the Qualys Threat Research Unit (TRU). These race condition flaws impact Ubuntu’s apport and Red Hat/Fedora’s systemd-coredump, exposing a little-known but critical attack vector: core dumps from crashed SUID programs. We dive into how…

1
Multi-Stage Phishing Attacks Now Use Google Infrastructure—Here’s How 13:51

15d ago13:51

13:51

Recent phishing campaigns have entered a new phase—one where trust is weaponized. In this episode, we break down how cybercriminals are exploiting legitimate services like Google Apps Script and Google Firebase Storage to host phishing pages, evade detection, and steal credentials. Using cleverly crafted lures such as fake DocuSign notifications, i…

1
Inside the AVCheck Takedown: How Law Enforcement Disrupted a Key Cybercrime Tool 17:34

15d ago17:34

17:34

In this episode, we unpack the international takedown of AVCheck, one of the largest counter antivirus (CAV) services used by cybercriminals to test and fine-tune malware before deployment. Led by Dutch authorities and supported by agencies from the U.S., Germany, France, and others, this operation marks a major win in Operation Endgame—a sweeping …

1
ConnectWise Breach: Nation-State Exploits CVE-2025-3935 in ScreenConnect 15:06

18d ago15:06

15:06

ConnectWise has confirmed a cyberattack targeting ScreenConnect, its remote access solution used by thousands of Managed Service Providers (MSPs). The breach is reportedly tied to a sophisticated nation-state actor and linked to CVE-2025-3935, a critical ViewState code injection vulnerability that could allow Remote Code Execution (RCE). In this ep…

1
Browser vs. GPU: Firefox 139 Collides with NVIDIA Drivers 14:10

18d ago14:10

14:10

In this episode, we dive into the graphical corruption saga triggered by Firefox version 139, released on May 27, 2025. Aimed at uncovering what went wrong, we review reports from across the web detailing how the update wreaked havoc for Windows users running NVIDIA graphics cards—particularly those with multi-monitor setups using mixed refresh rat…

1
Unbound Raises $4M to Secure Generative AI in the Enterprise 20:08

18d ago20:08

20:08

In this episode, we break down the recent $4 million seed funding round for Unbound, a startup tackling one of the biggest unsolved problems in enterprise AI: how to stop employees from leaking sensitive data through ungoverned use of Generative AI tools. Unbound’s AI Gateway aims to be the missing link between rapid AI adoption and responsible usa…

1
Windows Updates, Reimagined: Inside Microsoft’s Unified Orchestration Push 16:18

19d ago16:18

16:18

Microsoft is taking direct aim at one of the biggest pain points in the Windows ecosystem: update fragmentation. In this episode, we dive deep into the details of Microsoft’s newly announced Windows-native update orchestration platform, currently in private preview. We explore how this unified infrastructure aims to centralize updates for all apps,…

1
Systemd as a Weapon: How PumaBot Exploits Linux Persistence 18:38

19d ago18:38

18:38

Linux systems are under siege—particularly in the world of IoT and internet-exposed servers. In this episode, we dissect PumaBot, a new GoLang-based botnet that's turning Linux IoT devices into cryptomining workhorses. We’ll break down how attackers brute-force SSH credentials, install malware disguised as legitimate services, and use systemd for s…

1
The LexisNexis Breach: 364,000 Records Exposed via GitHub 17:22

19d ago17:22

17:22

On December 25, 2024, while most businesses were offline, a serious data breach struck LexisNexis Risk Solutions—exposing the personal data of over 360,000 individuals. The twist? The attack vector wasn’t a direct hack, but an indirect compromise through a third-party GitHub repository. Even more concerning, the breach went undetected until April 1…

1
Ransomware Hits MathWorks: Week-Long Outage Disrupts Millions 12:30

20d ago12:30

12:30

On this episode, we dissect the ransomware attack that brought MathWorks—a cornerstone software provider for engineers, scientists, and educators—to a grinding halt. The attack, which began on May 18, 2025, and was officially confirmed on May 26, crippled a wide range of customer-facing and internal systems, from MATLAB Online and ThingSpeak to lic…

1
Zscaler Acquires Red Canary: What It Means for AI-Powered Security Operations 14:27

20d ago14:27

14:27

The cybersecurity market is booming, projected to triple in size from $215 billion in 2025 to $697 billion by 2035. This explosive growth is being fueled by rising cyber threats, the digital transformation of global businesses, and an urgent need for advanced security operations. One of the clearest signals of this momentum? Zscaler’s acquisition o…

1
DragonForce Breaches MSPs via SimpleHelp Flaws: Inside CVE-2024-57726 16:47

20d ago16:47

16:47

In this episode, we unpack a critical supply chain breach that’s rattled the cybersecurity world: the exploitation of multiple zero-day vulnerabilities in SimpleHelp Remote Support Software — most notably CVE-2024-57726, a privilege escalation flaw scored 9.9 by the NVD. Threat actors linked to the DragonForce ransomware operation and the Scattered…

1
The missing piece in your speaking strategy that WILL exponentially expand your reach—with Frank Kitchen 1:00:00

20d ago1:00:00

1:00:00

Are you ready to unlock the mindset of excellence that every top speaker needs? In this episode, discover how an unforgettable talk begins well before stepping on the stage. Effective speaking starts with audience research—not general—but knowing exactly who you are speaking to before getting in front of them. Having the mindset of excellence and a…

1
the Memorial presented by Workday 2025 Preview: Draftkings + One-and-Done Picks + Best Bets & Wagers 34:01

20d ago34:01

34:01

Welcome to 'Birdies, Bogeys, Bushwood'! We're here to talk about golf and have a good time... and to make a couple of bucks while doing it. I mean, the tab at the 19th Hole we've been running doesn't pay for itself... Join your host Magnum Mills as he breaks down everything you need to know before setting your lineups or placing your bets for the 2…

1
Fentanyl, Firearms, and $200M in Crypto: Dark Web Crime Meets Global Law Enforcement 13:50

21d ago13:50

13:50

This episode dives deep into Operation RapTor, one of the largest international crackdowns on dark web crime to date. We analyze how coordinated law enforcement actions across ten countries led to the arrest of 270 individuals, the seizure of $200 million in currency and digital assets, and the dismantling of major darknet marketplaces including In…

1
Marlboro-Chesterfield Pathology Ransomware Breach: 235,000 Patients Affected 12:27

21d ago12:27

12:27

In this episode, we take a deep dive into the recent Marlboro-Chesterfield Pathology (MCP) ransomware attack—one of the most significant healthcare breaches of 2025. On January 16th, MCP detected unauthorized activity on its internal systems. Just days later, the SAFEPAY ransomware group claimed responsibility, posting stolen data—over 30GB of sens…

1
How Infostealers Like Stealc Use TikTok Accounts to Exfiltrate Stolen Data 22:54

21d ago22:54

22:54

In this episode, we dive deep into the underground cybercrime ecosystem powering the surge of modern infostealers—Stealc, Vidar, and LummaC2. These malware strains aren't just code—they're full-service products sold as Malware-as-a-Service (MaaS), giving even low-skilled attackers access to powerful data theft tools. We break down how these stealer…

1
Securing the Future: Technology, Compliance, and Control in Asset-Based Lending 44:28

21d ago44:28

44:28

ACS CFO and CIO Greg Meyer joins host Andrew Pace for a deep dive into the operational backbone of modern recovery and collections. With nearly two decades of leadership at ACS, Greg discusses the growing overlap between finance, IT, and compliance—and what it means for lenders today. From securing sensitive data to building scalable frameworks for…

1
The Great Screenshot Scandal: Microsoft Recall and Signal’s DRM Shield 28:34

22d ago28:34

28:34

In this episode, we dive deep into the growing tension between AI innovation and data privacy through the lens of a major controversy: Microsoft’s Windows 11 Recall feature. Designed to screenshot nearly everything a user does every few seconds, Recall creates a searchable visual archive of on-screen activity. But while Microsoft claims it enhances…

1
Bumblebee Malware Returns: IT Pros Targeted Through SEO Poisoning and Typosquatting 28:48

22d ago28:48

28:48

In this episode, we break down the resurgence of the Bumblebee malware loader and its latest distribution method: blackhat SEO campaigns and trojanized software installers. By mimicking legitimate download pages through typosquatted domains and poisoning Bing search results, attackers are tricking IT professionals into unknowingly infecting their o…

Podcasts Worth a Listen

Seize The Gap Podcasts

Podcasts Worth a Listen

Quick Reference Guide