Cyber Mornings Daily

Cyber Mornings Daily is your go-to daily podcast for the latest cybersecurity news, trends, and insights, delivered by AI. Each episode delivers a concise and informative breakdown of the most pressing cyber threats, vulnerabilities, and breaches.

RSS iTunes YouTube Spotify Amazon Music

I see you found this webpage. Welcome to my little AI project. All audio and album art are generated with AI tools from Google. Generation is performed with a combination of Gemini for text and images, and NotebookLM for the audio portion.

January 15th, 2025

2025-01-15

FBI Takeout, Google OAuth Bypass, & MacOS Bugs

First, the FBI's operation to remove the Chinese PlugX malware, which was found on thousands of computers in the United States. This malware was linked to a Chinese cyber espionage group known as Mustang Panda and was capable of spreading through USB drives. Next, a flaw in Google's OAuth system that could allow attackers to access abandoned accounts by registering the domains of defunct startups. This vulnerability stems from inconsistencies in the unique user identifier, enabling attackers to impersonate former employees on various SaaS platforms. Lastly, one source reports on a new bug discovered in macOS, which enables attackers to circumvent the system's integrity protection by loading third-party kernel extensions. This bypass could potentially lead to the installation of rootkits, persistent malware, and an expanded attack surface for further exploitation.

Download
Filetype: WAV - Size: 34 MB - Duration: 11:52m (384 kbps 24000 Hz)