Episode 15 (9/15/2025)

his episode of Cyber Scoops & Digital Shenanigans highlights the escalating threat of browser-based attacks, encompassing advanced phishing, malicious copy-paste techniques like "ClickFix", dangerous OAuth integrations, and pervasive browser extensions targeting business apps and data. We also examine the critical need for proper data destruction of old hardware to avoid multi-million dollar liabilities, referencing NIST 800-88 guidelines for data sanitization and instances like Morgan Stanley Smith Barney's $155 million in fines. Additionally, the episode covers actively exploited zero-day vulnerabilities in Samsung Android (CVE-2025-21043) and DELMIA Apriso factory software (CVE-2025-5086), the North Korean Kimsuky gang's weaponization of AI for fake IDs and espionage, the emergence of HybridPetya ransomware bypassing UEFI Secure Boot, CISA's controversial push for control over the CVE program, and China's escalating antitrust probe into Nvidia.