Defensive Security Podcast Episode 323

 
Please follow us on YouTube! 
Want episodes a week early?  Consider becoming a Patreon sponsor of the DefSec podcast here.









Here are links to the stories we talked about this week:
https://krebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/
https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/
https://blog.lastpass.com/posts/attack-targeting-macs-via-github-pages
https://cybersecuritynews.com/finwise-insider-breach/
https://arstechnica.com/security/2025/09/how-weak-passwords-and-other-failings-led-to-catastrophic-breach-of-ascension/