Cover image of show Blumira Briefings

Blumira Briefings

Podcast by Blumira

English

News & politics

Limited Offer

2 months for 19 kr.

Then 99 kr. / monthCancel anytime.

  • 20 hours of audiobooks / month
  • Podcasts only on Podimo
  • All free podcasts
Get Started

About Blumira Briefings

Staying on top of security news shouldn't be another full-time job.Enter Blumira Briefings, our weekly panel series where security experts break down the headlines you might have missed, and explain what they actually mean for your security practice! 🔒Each week, join a lineup of different Blumira experts (and sometimes special guests!) who will:Share the top threats, suspects, and risks we're seeing across our detection and response platformDiscuss significant security stories and what they mean for YOUProvide practical advice you can actually implement right away••Keep it conversational, informative, and under 30 minutes

All episodes

35 episodes

episode CISA Credentials, Drupal Security Update, and Shai-Hulud Clones - Blumira Briefings artwork

CISA Credentials, Drupal Security Update, and Shai-Hulud Clones - Blumira Briefings

Welcome to Blumira Briefings, your top headlines and trends for your security practice. This week's episode: - Government Contractor Exposes Sensitive CISA and AWS GovCloud Credentials on Public GitHub - Drupal Issues Critical Security Update Amid Warnings of Rapid Exploit Development Risk - Shai-Hulud Worm Clones Emerge After Source Code Leak, Intensifying NPM Supply Chain Attacks Have a security topic you want us to cover? Let us know in the comments! Sources: Contractor’s public GitHub account exposed GovCloud and CISA credentials https://www.csoonline.com/article/4173305/contractors-public-github-account-exposed-govcloud-and-cisa-credentials.html -- Drupal is rolling out an emergency security update on May 20. You cannot miss it https://securityaffairs.com/192407/security/drupal-is-rolling-out-an-emergency-security-update-tomorrow-you-cannot-miss-it.html -- Shai-Hulud worm copycats emerge after source code leak https://securityaffairs.com/192366/malware/shai-hulud-worm-copycats-emerge-after-source-code-leak.html

22 May 2026 - 16 min
episode Mini Shai-Hulud, BitLocker Bypass, and AI Vulnerability Discovery - Blumira Briefings artwork

Mini Shai-Hulud, BitLocker Bypass, and AI Vulnerability Discovery - Blumira Briefings

Welcome to Blumira Briefings, your top headlines and trends for your security practice. This week's episode: - ‘Mini Shai-Hulud’ Malware Compromises Hundreds of Open-Source Software Packages in Supply Chain Attack - Researcher Releases Proof-of-Concept for BitLocker Bypass and Privilege Escalation on Windows Systems  - Patch Tuesday, Accelerating Attacks, and AI Vulnerability Discovery Have a security topic you want us to cover? Let us know in the comments! Sources: ‘Mini Shai-Hulud’ malware compromises hundreds of open-source packages in sprawling supply-chain attack https://cyberscoop.com/mini-shai-hulud-supply-chain-malware-attack/ Windows BitLocker zero-day gives access to protected drives, PoC released https://thehackernews.com/2026/04/litellm-cve-2026-42208-sql-injection.html Google warns artificial intelligence is accelerating cyberattacks and zero-day exploits https://securityaffairs.com/191984/ai/google-warns-artificial-intelligence-is-accelerating-cyberattacks-and-zero-day-exploits.html Patch Tuesday, May 2026 Edition https://krebsonsecurity.com/2026/05/patch-tuesday-may-2026-edition/

15 May 2026 - 14 min
episode cPanel Vulnerability, Global Phishing, and the Instructure Breach - Blumira Briefings artwork

cPanel Vulnerability, Global Phishing, and the Instructure Breach - Blumira Briefings

Welcome to Blumira Briefings, your top headlines and trends for your security practice. This week's episode: - A critical authentication bypass vulnerability, identified as CVE-2026-41940, in cPanel and WHM software is currently being actively exploited by threat actors. - Microsoft has unveiled details of a sophisticated global phishing campaign that successfully targeted over 35,000 users across 26 countries in mid-April 2026, with the majority of victims in the United States, particularly within healthcare and finance sectors. - Instructure, the U.S.-based educational technology company known for its widely used Canvas learning management system, has confirmed a cybersecurity incident that exposed the personal data of users. Have a security topic you want us to cover? Let us know in the comments! Sources: Hackers target governments and MSPs via critical cPanel flaw CVE-2026-41940 https://securityaffairs.com/191666/breaking-news/hackers-target-governments-and-msps-via-critical-cpanel-flaw-cve-2026-41940.html -- Microsoft warns of global campaign stealing auth tokens from 35K users https://securityaffairs.com/191695/security/microsoft-warns-of-global-campaign-stealing-auth-tokens-from-35k-users.html -- Educational tech firm Instructure data breach may have impacted 9,000 schools https://securityaffairs.com/191686/cyber-crime/educational-tech-firm-instructure-data-breach-may-have-impacted-9000-schools.html

8 May 2026 - 15 min
episode CISA KEV Additions, LiteLLM Vulnerability, ShinyHunters, and Copy Fail - Blumira Briefings artwork

CISA KEV Additions, LiteLLM Vulnerability, ShinyHunters, and Copy Fail - Blumira Briefings

Welcome to Blumira Briefings, your top headlines and trends for your security practice. This week's episode: - The U.S. Cybersecurity and Infrastructure Security Agency has added two critical vulnerabilities to its Known Exploited Vulnerabilities catalog, signaling active exploitation - A severe SQL injection vulnerability, identified as CVE-2026-42208, in BerriAI's LiteLLM Python package has been actively exploited by threat actors in the wild. - The ShinyHunters cybercriminal group has exploited a security incident at Anodot, an artificial intelligence-driven data analytics vendor, to access data from multiple clients, including Vimeo.  - copy[dot]fail proof of concept requires only an unprivileged local user account for local privilege escalation to occur -- Have a security topic you want us to cover? Let us know in the comments! -- Sources: CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV https://thehackernews.com/2026/04/cisa-adds-actively-exploited.html -- LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure https://thehackernews.com/2026/04/litellm-cve-2026-42208-sql-injection.html -- ShinyHunters exploit Anodot incident to target Vimeo https://securityaffairs.com/191448/security/shinyhunters-exploit-anodot-incident-to-target-vimeo.html Chapters: 0:00 Intro 0:37 CISA KEV Additions: ConnectWise and Microsoft  3:26 LiteLLM SQL Injection Vulnerability  9:14 ShinyHunters Anodot Breach  11:42 Copy Fail

1 May 2026 - 15 min
episode SharePoint Zero-Day, Prompt Injection Vulnerabilities, and Chrome Extensions - Blumira Briefings artwork

SharePoint Zero-Day, Prompt Injection Vulnerabilities, and Chrome Extensions - Blumira Briefings

Welcome to Blumira Briefings, your top headlines and trends for your security practice. This week's episode: - Microsoft has released its April 2026 Patch Tuesday updates, addressing a record 167 security vulnerabilities across its product portfolio. - Security researchers have identified prompt injection vulnerabilities in prominent enterprise artificial intelligence (AI) agents, specifically Microsoft Copilot Studio and Salesforce Agentforce. - Cybersecurity researchers have uncovered a widespread campaign involving 108 malicious Google Chrome browser extensions that have been actively stealing sensitive data from an estimated 20,000 users. -- Have a security topic you want us to cover? Let us know in the comments! -- Sources: -- Microsoft Patch Tuesday for April 2026 fixed actively exploited SharePoint zero-day https://securityaffairs.com/190831/security/microsoft-patch-tuesday-for-april-2026-fixed-actively-exploited-sharepoint-zero-day.html -- Copilot and Agentforce fall to form-based prompt injection tricks https://www.csoonline.com/article/4159079/copilot-and-agentforce-fall-to-form-based-prompt-injection-tricks.html -- 108 malicious Chrome extensions caught stealing Google and Telegram data from 20,000 users https://www.bitdefender.com/en-us/blog/hotforsecurity/malicious-chrome-extensions-steal-google-telegram-data

17 Apr 2026 - 13 min
En fantastisk app med et enormt stort udvalg af spændende podcasts. Podimo formår virkelig at lave godt indhold, der takler de lidt mere svære emner. At der så også er lydbøger oveni til en billig pris, gør at det er blevet min favorit app.
En fantastisk app med et enormt stort udvalg af spændende podcasts. Podimo formår virkelig at lave godt indhold, der takler de lidt mere svære emner. At der så også er lydbøger oveni til en billig pris, gør at det er blevet min favorit app.
Rigtig god tjeneste med gode eksklusive podcasts og derudover et kæmpe udvalg af podcasts og lydbøger. Kan varmt anbefales, om ikke andet så udelukkende pga Dårligdommerne, Klovn podcast, Hakkedrengene og Han duo 😁 👍
Podimo er blevet uundværlig! Til lange bilture, hverdagen, rengøringen og i det hele taget, når man trænger til lidt adspredelse.

Choose your subscription

Most popular

Limited Offer

Premium

20 hours of audiobooks

  • Podcasts only on Podimo

  • No ads in Podimo shows

  • Cancel anytime

2 months for 19 kr.
Then 99 kr. / month

Get Started

Premium Plus

Unlimited audiobooks

  • Podcasts only on Podimo

  • No ads in Podimo shows

  • Cancel anytime

Start 7 days free trial
Then 129 kr. / month

Start for free

Only on Podimo

Popular audiobooks

Get Started

2 months for 19 kr. Then 99 kr. / month. Cancel anytime.