Episode Details
Back to Episodes
ShareFile explained, healthcare in critical cyber condition and click fix tops malware charts
Description
ShareFile emergency explained, a year of Salesforce breaches examined, healthcare cybersecurity in critical condition and click fix goes number one for malware.
David Shipley covers Progress Software's emergency ShareFile shutdown, now tied to a previously unknown high-severity path traversal flaw in Storage Zone Controller 5.x/6.x with patches available (5.12.5 and 6.0.2) and no evidence of prior exploitation.
Microsoft's analysis of a year of ShinyHunters activity compromising corporate Salesforce environments by abusing trust via OAuth (IT-support phone cons, vendor token theft such as Salesloft/Drift, and misconfigured guest access), prompting new monitoring tooling.
A Fortified Health Security report finding healthcare fixed only 6% of identified risks in H1 2026 amid surging vulnerabilities, third-party risk, and weak identity hygiene.
ReversingLabs and ReliaQuest research showing ClickFix social-engineering is now a leading malware delivery method; and Telstra's nationwide outage traced to an obsolete time server hit by a GPS rollover bug, disrupting Triple Zero calls and prompting Senate scrutiny.
00:00 Sponsor NordLayer
00:37 Headlines Overview
01:06 ShareFile Patch Explained
03:25 Salesforce OAuth Break Ins
06:01 Hospitals Drowning in Risks
08:24 ClickFix Malware Surge
11:13 Telstra Time Server Outage
12:32 Wrap Up and Sign Off