On this week’s show Patrick Gray and Adam Boileau discuss the week’s cybersecurity news:

• Yes, the Trump admin really did just add a journo to their Yemen-attack-planning Signal group
• The Github actions hack is smaller than we thought, but was targeting crypto
• Remote code exec in Kubernetes, ouch
• Oracle denies its cloud got owned, but that sure does look like customer keymat
• Taiwanese hardware maker Clevo packs its private keys into bios update zip
• US Treasury un-sanctions Tornado Cash, party time in Pyongyang?

This week’s episode is sponsored by runZero. Long time hackerman HD Moore joins to talk about how network vulnerability scanning has atrophied, and what he’s doing to bring it back en vogue. Do you miss early 2000s Nessus? HD knows it, he’s got you fam.

Show Notes:

The Trump Administration Accidentally Texted Me Its War Plans - The Atlantic https://www.theatlantic.com/politics/archive/2025/03/trump-administration-accidentally-texted-me-its-war-plans/682151/

Using Starlink Wi-Fi in the White House Is a Slippery Slope for US Federal IT | WIRED https://www.wired.com/story/white-house-starlink-wifi/

Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories’ CI/CD Secrets Exposed https://thehackernews.com/2025/03/github-supply-chain-breach-coinbase.html

GitHub Actions Supply Chain Attack: A Targeted Attack on Coinbase Expanded to the Widespread tj-actions/changed-files Incident: Threat Assessment (Updated 3/21) https://unit42.paloaltonetworks.com/github-actions-supply-chain-attack/

Critical vulnerabilities put Kubernetes environments in jeopardy | Cybersecurity Dive https://www.cybersecuritydive.com/news/critical-vulnerabilities-kubernetes-jeopardy/743448/

Researchers back claim of Oracle Cloud breach despite company’s denials | Cybersecurity Dive https://www.cybersecuritydive.com/news/researchers-oracle-cloud-breach/743447/

The Biggest Supply Chain Hack Of 2025: 6M Records Exfiltrated from Oracle Cloud affecting over 140k Tenants | CloudSEK https://www.cloudsek.com/blog/the-biggest-supply-chain-hack-of-2025-6m-records-for-sale-exfiltrated-from-oracle-cloud-affecting-over-140k-tenants

Capital One hacker Paige Thompson got too light a sentence, appeals court rules | CyberScoop https://cyberscoop.com/capital-one-hacker-paige-thompson-sentence-appeals-court/

US scraps sanctions on Tornado Cash, crypto ‘mixer’ accused of laundering North Korea money | Reuters https://www.reuters.com/business/finance/us-scraps-sanctions-tornado-cash-crypto-mixer-accused-laundering-north-korea-2025-03-21/

Tornado Cash Delisting | U.S. Department of the Treasury https://home.treasury.gov/news/press-releases/sb0057

Major web services go dark in Russia amid reported Cloudflare block | The Record from Recorded Future News https://therecord.media/russia-websites-dark-reported-cloudflare-block

Clevo Boot Guard Keys Leaked in Update Package https://www.binarly.io/blog/clevo-boot-guard-keys-leaked-in-update-package

Six additional countries identified as suspected Paragon spyware customers | CyberScoop https://cyberscoop.com/six-countries-suspected-paragon-spyware-customers/

The Citizen Lab’s director dissects spyware and the ‘proliferating’ market for it | The Record from Recorded Future News https://therecord.media/ron-deibert-citizen-lab-spyware-interview

Malaysia PM says country rejected $10 million ransom demand after airport outages | The Record from Recorded Future News https://therecord.media/malaysia-pm-says-country-rejected-ransom-demand-airport-cyberattack

Hacker defaces NYU website, exposing admissions data on 1 million students | The Record from Recorded Future News https://therecord.media/hacker-nyu-website-admissions-race

Notre Dame uni students say outage creating enrolment, graduation, assignment mayhem - ABC News https://www.abc.net.au/news/2025-03-20/notre-dame-uni-students-says-cyber-attack-playing-havoc/105075278

DNA of 15 Million People for Sale in 23andMe Bankruptcy https://www.404media.co/dna-of-15-million-people-for-sale-in-23andme-bankruptcy/