Episode Details

On this week’s show, Patrick Gray, Adam Boileau and James WIlson discuss the week’s cybersecurity news. They cover:

• Palo Alto threat researchers want to attribute to China, but management says shush
• An increasing proportion of ransomware is data extortion. Is this good?
• Cambodia says it’s going to dismantle scam compounds
• CISA sufferers through yet another shutdown
• Google Gemini’s training secrets are being systematically harvested to improve other LLMs
• Academics assess SaaS password managers’ resilience against a malicious server

This episode is sponsored by SSO-firewall integration vendor Knocknoc. Chief exec Adam Pointon joins to talk about the latest in defences… which is to say Knocknoc for Solaris/Sparc and HPUX on PA-RISC?! Okay also that other little known OS… Windows.

This episode is also available on Youtube.

Show notes

• Data-only extortion grows as ransomware gangs seek better profits | Cybersecurity Dive
• Arctic Wolf Threat Report 2026
• Exclusive: Palo Alto chose not to tie China to hacking campaign for fear of retaliation from Beijing, sources say
• Risky Bulletin: Cambodia promises to dismantle scam networks by April - Risky Business Media
• Age of the ‘scam state’: how an illicit, multibillion-dollar industry has taken root in south-east Asia | Cybercrime | The Guardian
• Critical flaw in BeyondTrust Remote Support sees early signs of exploitation | Cybersecurity Dive
• CISA Navigates DHS Shutdown With Reduced Staff - SecurityWeek
• Kimwolf Botnet Swamps Anonymity Network I2P – Krebs on Security
• BADIIS to the Bone: New Insights to a Global SEO Poisoning Campaign — Elastic Security Labs
• Over 500,000 VKontakte accounts hijacked through malicious Chrome extensions | The Record from Recorded Future News
• Password managers' promise that they can't see your vaults isn't always true - Ars Technica
• Zero Knowledge (About) Encryption: A Comparative Security Analysis of Three Cloud-based Password Managers<