Welcome to your daily cybersecurity podcast.
🛡️ Bulletproof hosting: new national guidance – The Australian Cyber Security Centre releases updated recommendations to mitigate risks posed by “bulletproof hosting” providers frequently used by cybercriminals to evade law-enforcement and defensive actions.
🧪 Wireshark vulnerabilities patched – CERT-FR publishes an advisory detailing several flaws in Wireshark, some of which may trigger denial-of-service conditions or application crashes when parsing specially crafted packets.
✈️ Iberia discloses customer data leak – The Spanish airline confirms a data breach originating from a compromised vendor, exposing personal information, identifiers, and travel-related details of customers.
🔐 Azure Bastion security flaw – A critical weakness affecting Azure Bastion may allow security bypass, potentially exposing cloud environments that lack proper isolation or configuration.
🛠️ Metasploit adds FortiWeb zero-day exploit – The Metasploit framework now includes an exploit for an unpatched zero-day vulnerability in FortiWeb, increasing the risk for organizations running unprotected Fortinet appliances.
⚡️ Don’t think — patch! 🚀
📚 Sources:
🔗 Guidance – Australian Cyber Security Centre
https://www.cyber.gov.au/about-us/view-all-content/news/new-guidance-for-mitigating-risks-from-bulletproof-hosting-providers
🔗 CERT-FR – Wireshark Vulnerabilities (CERTFR-2025-AVI-1026)
https://www.cert.ssi.gouv.fr/avis/CERTFR-2025-AVI-1026/
🔗 Iberia – Vendor Security Breach
https://www.bleepingcomputer.com/news/security/iberia-discloses-customer-data-leak-after-vendor-security-breach/
🔗 Azure Bastion Vulnerability
https://cybersecuritynews.com/azure-bastion-vulnerability/
🔗 Metasploit – FortiWeb Zero-day Exploit
https://cyberpress.org/metasploit-framework-updated-with-exploit-for-fortiweb-zero-day/
📞 Your feedback is welcome!
📧 Email: radiocsirt@gmail.com
🌐 Website: https://www.radiocsirt.org
📰 Weekly Newsletter: https://radiocsirtintl.substack.com
#CyberSecurity #Wireshark #Azure #Iberia #Fortinet #Metasploit #CloudSecurity #BulletproofHosting #RadioCSIRT 🎧