Episode Details

In this episode of Prime Cyber Insights, we break down Microsoft's strategic decision to phase out SMS-based passwords for Entra ID, moving toward mandatory passkeys to combat the rise of AI-driven social engineering. We analyze the Lazarus Group's latest exploitation of a Windows 11 zero-day and the discovery of Jewelbug, a dual-threat APT group combining geopolitical espionage with financial heists. The briefing also covers the Helix extortion incident at Uber Freight and the deployment of new real-time smishing defenses by Surfshark to address the 19 billion spam texts targeting users monthly.

Topics Covered

• 🔐 Microsoft’s aggressive timeline for retiring SMS and voice authentication.
• 🚨 Lazarus Group’s use of CVE-2026-68820 to target global defense firms.
• 🌐 Jewelbug APT: The intersection of state-backed spying and crypto theft.
• 🛡️ Smishing defenses and the WindRelay NFC relay malware threats.
• 📦 Investigation into the Helix extortion group’s breach of Uber Freight.
• 🛒 Critical account hijacking vulnerabilities in Adobe Commerce and Magento.

Disclaimer: Prime Cyber Insights is a production of the Neural Newscast network. All coverage is for informational purposes and practitioners should consult official advisories before implementing controls.

Neural Newscast is AI-assisted, human reviewed. View our AI Transparency Policy at NeuralNewscast.com.

• (00:09) - Introduction
• (00:24) - The End of SMS MFA
• (01:03) - Conclusion
• (01:03) - Lazarus Zero-Day & Jewelbug Espionage
• (01:03) - Logistics Breaches & Smishing Defense