FFmpeg's 21 zero-days, Ruby cooldown feature, Microsoft disrupted by Shai-Hulud worm & Meta AI tool compromise / Intel Chat [#331]

Episode notes

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community . DepthFirst reported that it's autonomous security agent discovered 21 previously unknown vulnerabilities in FFmpeg, a widely deployed multimedia framework used across browsers, streaming infrastructure, and other systems that process media . Bundler, 4.0.13 introduces a new security feature called cooldown, aimed at reducing the impact of software supply chain attacks in the Ruby ecosystem . A new variant of the Shai-Hulud supply chain worm, known as Miasma, briefly disrupted Microsoft's software development ecosystem after compromising dozens of GitHub repositories . Meta says approximately 20,000 Instagram accounts may have been compromised through the abuse of an AI powered account recovery support system . Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform. This podcast is

• Intel Chat: Cisco CUCM exploited, ransomware profiles, Gamaredon & AI agent phishing [335]56 / 100
• The evolving fraud landscape in the age of AI with Tamas Kadar [#334]
• Anthropic restriction, ServiceNow incident, Fortinet credential harvesting & Ukraine accesses EU cyber reserve / Intel Chat [#333]
• Last call for Defenders - How we're actually using AI in the SOC with Eric Capuano / Defender Fridays [#332]
• AI-assisted SOC training with Carlo Anez / Defender Fridays [#330]