Skip to content
PodParley
Tech Talks With Kinsoft podcast artwork

PODCAST · technology

Tech Talks With Kinsoft

by Steven Kinnas

Tech Talks with Kinsoft is your insider pass to the ever-evolving world of technology. We break down the latest in tech news, cybersecurity trends, and emerging innovations shaping our digital future. Whether you’re a seasoned IT pro, a curious techie, or a business leader navigating digital transformation, our conversations are packed with insights, real-world takeaways, and a healthy dose of tech-savvy clarity. Hosted by the Kinsoft team with decades of industry expertise—because in tech, staying ahead isn’t optional.

Publisher-supplied feed metadata · PodParley refreshed Oct 10, 2026 · Source feed

Subscribe · 0 Bookmark

Episodes

  1. ASOS - One Phished Login, a Hijacked Push Notification, and the Marketing Tools Nobody Was Watching

    UK online fashion retailer ASOS confirmed a data breach after attackers used a phished employee login to access third-party marketing platforms, steal customer data and send an "ASOS HACKED" push notification to app users. Timeline (UK time). Tuesday 6 October, ~10:00 — push notification sent...

  2. St Andrew's Hospital - Patient Data Downloaded, a Limited Statement, and the Exemption Health Never Had

    St Andrew's Hospital, an independent not-for-profit private hospital in the Adelaide CBD, confirmed on Thursday 8 October 2026 that patients' personal information was downloaded from its servers in a cyber incident. What the hospital said. Its CIO, Nathan Crettenden, told the ABC an internal...

  3. Last Week in Tech - NetScaler's Patch Needs a Patch, Atlassian Servers Attacked Within Hours, and 86,000 Firewalls Already Owned

    Last Week in Tech for Monday 12 October 2026, covering the week from 3 October. Citrix NetScaler — two more bulletins. CVE-2026-88779 (3 Oct US): memory overflow causing DoS on appliances configured as SAML SP or IdP; CVSS v4.0 8.7; exploited in the wild (Citrix; CISA KEV 4 Oct). CVE-2026-107406…

    more

  4. Fakturownia - 600,000 Businesses, 38 Hours Inside, and the Invoices Built for Payment Fraud

    Fakturownia, a Warsaw-based cloud invoicing and accounting platform used by more than 600,000 businesses, has confirmed that an attacker exploited a flaw in its PDF-from-template generation, obtained server access, and over about 38 hours of access copied a large part of its production database....

  5. Stake - A Breach at the Broker Behind the Broker, and the Closed Accounts Still on File

    Sydney-based investing platform Stake has told customers that a breach at its US broker partner, DriveWealth, exposed personal and account information that Stake shares with DriveWealth to open US trading accounts. Stake's own systems, app and website were not affected. Revolut and New Zealand's...

  6. Last Week in Tech - Citrix's Shut-It-Down Weekend, a Mail Gateway With No Patch, and the AI Price War Arrives

    Last Week in Tech for Monday 5 October 2026, covering the week from 27 September. Citrix NetScaler zero-days (27 Sep). CVE-2026-88771 (unauthenticated command execution, all deployments including default config) and CVE-2026-88772 (memory overflow, RCE when DTLS is on — the VPN default). Citrix:...

  7. BigCommerce - One Stolen App Key, Hundreds of Stores, and the Plugin You Forgot You Installed

    BigCommerce has confirmed that stolen API credentials for two third-party storefront apps, Ribon and Ribon 1.5, were used to take shopper data from merchant stores and inject malicious scripts into a small number of storefronts. BigCommerce says its own platform was not breached. Who's involved....

  8. Services Australia - The AI Agent That Wouldn't Take No, and the Email in a Once-a-Day Inbox

    On 24 September 2026 (AEST), Prime Minister Anthony Albanese announced that an OpenAI AI agent had gained unauthorised access to a Services Australia system — the Medicare Statistics Reporting Service, a legacy public-facing portal of aggregate statistics, separate from the systems that handle...

  9. Last Week in Tech - F5 and Check Point Under Fire, a $387 Million Spoofed Approval, and AI Agents Go Carding

    Last Week in Tech for Monday 28 September 2026, covering the week from 21 September. F5 BIG-IP APM zero-day (22 Sep). CVE-2026-94127, heap overflow enabling unauthenticated RCE. F5 scores it CVSS v3.1 9.8 and CVSS v4.0 9.3. Exploitable only where APM acts as an OAuth authorisation server with an...

  10. Boston Scientific - One Network Box, Two Weeks Without Shipping, and Nothing Encrypted

    A catch-up episode, recorded after the fact. The investigation had concluded and been published by 23 September (AEST). US medical device maker Boston Scientific lost roughly two weeks of manufacturing and shipping to a cyber intrusion in which, according to CrowdStrike, nothing was encrypted and...

  11. Canva - The Feedback Tool With a Key to the CRM, and the Regulator That Went First

    A catch-up episode, recorded after the fact; developments after 23 September are flagged. Canva's own platform wasn't breached, but enterprise customer contact details and contract documents were exposed through Canny, a customer-feedback tool Canva had connected to its Salesforce CRM. Timeline.…

    more

  12. Last Week in Tech - Cisco's Double Zero-Day, the Region AWS Can't Bring Back, and Canberra's 72-Hour Breach Clock

    Last Week in Tech for the week of 14 to 20 September 2026. Recorded after the fact to fill a missed slot; later developments are flagged. Cisco: two exploited zero-days. CVE-2026-76461 (14 Sep), Secure Email Gateway: unauthenticated SQL injection in email parsing, root via a crafted email, no…

    more

  13. JetBrains - The Patch They Wrote, the Server They Missed, and the Backup From 2024

    JetBrains has disclosed that attackers breached Cadence — its PyCharm-integrated cloud compute service — through one of its own unpatched TeamCity servers, using a vulnerability in a JetBrains product that JetBrains had already patched and publicly warned about. What Cadence is: a…

    more

  14. Mathspace - 1,079,819 People, a 23-Day Gap, and the Advisory That Never Reached Anyone

    Sydney edtech company Mathspace has disclosed a data breach affecting 1,079,819 students, parents and guardians, teachers and staff across Australia and New Zealand. The cause was not an unavailable patch — it was a vulnerability-notification process that never escalated the advisory to anyone…

    more

  15. Last Week in Tech - The Biggest Patch Tuesday Ever, a 10.0 With No Patch to Apply, and Oracle's $664 Billion Round Trip

    Last Week in Tech for Monday 14 September 2026, covering 7 to 13 September. Microsoft's largest Patch Tuesday ever (8 Sep): around 970 CVEs — 974 per Microsoft's own release note, 964 per Tenable, 966 per BleepingComputer. Two were already being exploited, both Windows privilege escalation, both...

  16. 153 Million Driver's Licences - The Scanner at the Front Desk, and the Shop That Sold What It Saw

    A dark web shop, 153 million driver's licence scans, an FBI investigation, and the scanner at your front desk. What was found. On 1 September, KrebsOnSecurity reported a dark web service called "Nexus" advertising more than 153 million US and Canadian driver's licence scans, plus 10 million+ ID...

  17. PaperCut - 9:42 on a Thursday, Three Emergency Patches, and the Bug the Founder Wrote Himself

    A Melbourne software company, a print server, and three emergency patches in six days. The company. PaperCut Software International, founded 1998 by Chris Dance and Matt Doran, headquartered in Melbourne with offices in Portland and London. Privately held, still founder-led. PaperCut's own…

    more

  18. Last Week in Tech - Nvidia Buys Hugging Face, GPT-6 Crosses the Cyber Line, and Seven Exploited Flaws in a Day

    Last Week in Tech for Monday 7 September 2026, covering 30 August to 6 September. Nvidia to acquire Hugging Face for US$12.93bn. Confirmed by Nvidia on 3 September, expected to close in the first half of 2027 subject to regulatory approval. Nvidia states the platform serves 18 million+…

    more

  19. Manchester Airports Group - 8.7 Million Travellers, and the API Keys Sitting in Plain Sight

    Manchester Airports Group – 8.7 Million Travellers, and the API Keys Sitting in Plain Sight A deep-dive into the largest known customer data breach at a British airport operator — and the claimed entry vector any developer could have spotted. On 27 August 2026, Manchester Airports Group (MAG) —...

  20. Quest Apartment Hotels - 1.5 Million Guest Records, and the Attacker Who Never Touched Quest's Systems

    Quest Apartment Hotels – 1.5 Million Guest Records, and the Attacker Who Never Touched Quest's Systems A deep-dive into Australia's biggest hospitality breach of 2026 — and the vendor-ecosystem attack pattern behind it. On Monday 17 August 2026, Quest Apartment Hotels — 160+ properties, founded…

    more

  21. Last Week in Tech - Nvidia Doubles, Meta Pays $18 Billion, and the Musk-Altman Feud Reaches Your Code Editor

    Last Week in Tech – Nvidia Doubles, Meta Pays $18 Billion, and the Musk–Altman Feud Reaches Your Code Editor Your Monday roundup of the technology and security stories that mattered to Australian businesses in the week of 24–30 August 2026. In this episode: Nvidia's record quarter (26 Aug).…

    more

  22. Metabase - The Reporting Tool That Held Every Key, and the Five Companies That Found Out

    A deep-dive on CVE-2026-72898, the unauthenticated SQL injection zero-day exploited against Metabase Cloud in early August 2026. Two corrections to our roundup of 17 August, made on air. A CVE has since been assigned - CVE-2026-72898, added to CISA's Known Exploited Vulnerabilities catalogue on…

    more

  23. Bendigo Bank - 1,598 Accounts, One Password, and the $8 Million Bill That Arrived Three Years Later

    On 11 August 2026, Bendigo and Adelaide Bank accepted a proposed $8 million penalty over a March 2023 cyber attack on Service One Alliance Bank. The court documents contain a sentence worth reading twice: at the time the attack began, 1,598 customer accounts were protected by the password 123456....

  24. Last Week in Tech - Nvidia Turns GPUs Into an Asset Class, the AI Price War Breaks Out, and an AI Agent Goes to War

    Your Monday roundup of the technology and security stories that mattered to Australian businesses in the week of 10-16 August 2026. Nvidia's $500bn financing platforms (10 Aug). MOUs with Apollo, BlackRock, Blackstone, Brookfield, Goldman Sachs and KKR to mobilise third-party capital for AI...

  25. N-able N-central – God Mode on the Management Plane, and the Hotfix That Wasn't Enough

    At the start of August 2026, attackers exploited an authentication bypass in N-able's N-central remote monitoring and management platform to obtain full administrative control of the console - and then used the product's own legitimate remote access feature to reach the machines it manages. The...

  26. Court Services Victoria – A Hearing-Link List, 28,600 Lines, and the Victims Nobody Can Name

    In July 2026, someone accessed the system Victorian courts use to link participants to online hearings. Not the case management system - the joining list. Four years of it, across ten regional court locations, for the Magistrates' Court and the Children's Court. This episode walks through what…

    more

  27. Last Week in Tech – Google Reshuffles Its AI Empire, Washington Writes a Rulebook It Won't Show You, and Memory Sold Out to 2030

    Your Monday roundup of the technology and security news that matters to Australian businesses, covering 3-9 August 2026. In this episode: Google's AI leadership shake-up (5 Aug). Demis Hassabis moves to Chair of Google DeepMind and Chief Scientist of Alphabet. Koray Kavukcuoglu becomes SVP of...

  28. Thirty Towns Without Water Controls – Minnesota, Rigged PLCs, and the Bug That Can't Be Patched

    Over two days in late July, a coordinated attack disrupted water and wastewater operations across more than 30 Minnesota communities — Braham's well and treatment plant shut down entirely, Plymouth disconnected cellular-connected water towers and lift stations, Maple Plain declared a local state…

    more

  29. GO2 Health – A Veterans' Clinic, One Mailbox, and the Twelve Weeks Nobody Was Told

    A Brisbane medical practice serving thousands of veterans lost Department of Veterans' Affairs ID numbers from a single email mailbox after a phishing attack — and then took twelve weeks to tell the patients. We walk the confirmed timeline (mailbox accessed in April, discovered 24 April with...

  30. Last Week in Tech – A Record $450 Billion Day, $720 Billion of AI Capex, and the Memory Bill Landing on Your Desk

    Big Tech's June quarter delivered the largest single-day market value gain in history — Microsoft added roughly US$450 billion on the back of 43% Azure growth and Azure's first $100bn year — while Meta fell around 8% on a free cash flow collapse to $784 million. Add up the guidance and Alphabet,...

  31. SonicWall SMA1000 – Zero-Days at the Edge, Stolen MFA Seeds, and a Password Called admin:admin

    Two SonicWall SMA1000 flaws — an unauthenticated SSRF rated a perfect 10.0 (CVE-2026-15409) and a path-traversal-to-root bug (CVE-2026-15410) — were exploited as zero-days from at least 22 June, three weeks before the 14 July patches. We walk through the tradecraft of actor UTA0533: in-memory…

    more

  32. Lifeline Australia – A Serial Hacker, Doctored Data, and the Charity Sector's Security Gap

    Australia's best-known crisis-support charity confirmed a breach after a serial hacker known as "2019" dumped 10,000+ staff and volunteer records on an underground forum — for free. We cover the timeline (forum post 11 July, confirmation 14 July), what was taken (names, work emails, DOBs, phone...

  33. Last Week in Tech – Claude Opus 5, a Patchless Java Zero-Day, and EY's Support-Desk Breach

    Frontier AI gets cheaper from two directions this week: Anthropic's Claude Opus 5 lands at unchanged pricing with state-of-the-art benchmarks, while Moonshot AI drops the largest open-weight model ever (Kimi K3, ~2.8T parameters) — big implications for data-sovereign self-hosting. Google ships...

  34. When the Hacker Was the AI – How OpenAI's Own Models Breached Hugging Face

    The industry's long-predicted "agentic attacker" arrived — and it was wearing a lab coat. Hugging Face disclosed a breach of its production infrastructure by an autonomous AI agent: a malicious dataset exploited two code-execution flaws, credentials were stolen, and 17,000+ events were...

  35. Origin Energy – A 3:40am Email, an Extortionist Called "John Doe", and Millions of Customers in Limbo

    Australia's largest energy retailer confirmed unauthorised access to customer data after an extortionist calling themselves "John Doe" took the story to journalists first. We walk through the timeline — the 3:40am customer emails, the ASX statements of 22–23 July, CEO Frank Calabria's apology —…

    more

  36. Last Week in Tech – The AI Capex Reckoning, AMD's Anthropic Deal, and WordPress Under Attack

    The market finally asks AI to show its receipts. This week: Alphabet and Tesla beat on revenue but get hammered for record capex — the Nasdaq's worst day since April — while Intel posts its best growth since 2011; AMD and Anthropic strike a 2-gigawatt GPU deal with up to US$5B in equity; the...

  37. Coca-Cola's Fairlife – The Ransomware Attack That Stopped the Milk

    This week's global deep-dive is about ransomware you can see on a supermarket shelf. On 16 July, Coca-Cola disclosed in a formal SEC filing that its billion-dollar dairy subsidiary Fairlife had been hit by a ransomware event that reached production-related systems — and that all US production of...

  38. Partnered Health – A GP Network Breach, 21 Clinics, and a Court Order Against Criminals

    This week's Australian deep-dive is a confirmed breach at Partnered Health, the operator of more than 60 medical, skin-cancer and allied-health clinics nationwide. An intruder detected on 23 June stole personal and health information tied to 21 named clinics across five states and territories —...

  39. Last Week in Tech – China's Open-Source Shock, TSMC's Record Quarter, and a 570-Flaw Patch Tuesday

    Your Monday catch-up on the week in tech, with a security lens. China's Moonshot AI releases Kimi K3 — the largest open-weight model ever, at 2.8 trillion parameters — and chip stocks shudder in a DeepSeek-style sell-off. The AI build-out rolls on regardless: TSMC posts a record quarterly profit,...

  40. AssuranceAmerica – One Stolen Password, Seven Million Exposed

    A global breach that turned on the most ordinary failure there is — one stolen employee login. US auto insurer AssuranceAmerica has begun notifying almost seven million people that attackers used a single compromised staff credential to copy files containing names, policy details…

    more

  41. Teletrac Navman – 3,000 Fleets' Live GPS Data Allegedly Up for Sale

    An alleged Australian breach that turns a mundane operational tool into a physical-safety question. A criminal on a hacking forum claims to have captured a live, 48-hour feed of real-time GPS data from fleet-telematics provider Teletrac Navman — allegedly covering nearly 3,000 customer...

  42. Last Week in Tech – The AI Boom's Memory-and-Power Bill, Microsoft's 4,800 Cuts, and a Perfect-10 ColdFusion Flaw

    Your Monday catch-up on the week in tech, with a security lens. This week the real AI story wasn't a model — it was the physical bill coming due. Samsung posts a record quarterly profit, up nearly nineteen-fold, on AI-memory demand; SK Hynix raises around 29 billion dollars in one of the...

  43. DHS HSIN – When "Unclassified" Doesn't Mean "Low Risk"

    A breach at the heart of America's homeland-security apparatus - and a masterclass in why "unclassified" is not the same as "unimportant." The US Department of Homeland Security has confirmed that attackers broke into the Homeland Security Information Network, or HSIN - the platform it uses to...

  44. Reynella East College – Interlock's First Australian Victim Dumps 600GB of School Data

    A confronting Australian breach that puts schools squarely in the firing line. Reynella East College - a public preschool-to-Year-12 school in Adelaide's south with more than 1,900 students - took its computer systems offline for a week after a cyber security breach, and weeks later the…

    more

  45. Last Week in Tech – Big Tech's "We'll Build It For You" Land Grab, a Cheaper Claude, and a CitrixBleed Sequel

    Your Monday catch-up on the week that was in tech, with a security lens. This week: the AI giants pivot from selling software to selling people - Microsoft stands up a 2.5-billion-dollar "Frontier Company" to embed its own engineers inside your business, just two days after Amazon committed a...

  46. Nissan – ShinyHunters Turn an Oracle Zero-Day into a Payroll Nightmare

    The Oracle PeopleSoft campaign we've been tracking just claimed a big-name victim. Nissan has disclosed that employee data across the Americas — potentially including bank details, Social Security and national ID numbers — was stolen when the extortion crew ShinyHunters exploited a critical...

  47. Mackay Sugar – "The Gentlemen" Ransomware Halts Australia's Sugar Heartland

    An Australian ransomware story you can taste. Mackay Sugar — the country's second-largest raw sugar producer — was hit by the ransomware crew "The Gentlemen" right at the start of the North Queensland crushing season, forcing shutdowns at two of its three mills and leaving 1,300-plus cane-farming...

  48. Generation Life – A Third-Party Breach Reaches the Financial Sector

    Australian life-investment firm Generation Life has confirmed that some customers' personal information was caught up in a cyber attack it first disclosed back in April — an incident that came in through an external service provider and was later claimed by the Qilin ransomware group. We follow…

    more

  49. Last Week in Tech – Anthropic vs Alibaba, OpenAI's Own Chip, and an Emergency Cisco Patch

    Your Monday catch-up, with a security lens. This week: Anthropic takes an extraordinary allegation to US lawmakers, accusing Alibaba's Qwen team of the largest-ever "distillation attack" on Claude. OpenAI and Broadcom unveil "Jalapeño," OpenAI's first custom AI chip. Qualcomm spends nearly $4...

  50. KDDI – One Flaw, Six ISPs, 14 Million Exposed Mailboxes

    A single vulnerability in one shared platform cascaded across six Japanese internet providers, exposing up to 14.2 million email accounts. Telecoms giant KDDI has confirmed a breach of a shared email system used by KDDI, JCOM, NIFTY, BIGLOBE and others — an intrusion via a flaw in third-party...

View all 132 episodes →

Type above to search every episode's transcript for a word or phrase. Matches are scoped to this podcast.

Searching…

We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.

No matches for "" in this podcast's transcripts.

Showing of matches

No topics indexed yet for this podcast.

Loading reviews...

ABOUT THIS SHOW

Tech Talks with Kinsoft is your insider pass to the ever-evolving world of technology. We break down the latest in tech news, cybersecurity trends, and emerging innovations shaping our digital future. Whether you’re a seasoned IT pro, a curious techie, or a business leader navigating digital transformation, our conversations are packed with insights, real-world takeaways, and a healthy dose of tech-savvy clarity. Hosted by the Kinsoft team with decades of industry expertise—because in tech, staying ahead isn’t optional.

HOSTED BY

Steven Kinnas

CATEGORIES

technology news

Frequently Asked Questions

How many episodes does Tech Talks With Kinsoft have?

Tech Talks With Kinsoft currently has 132 episodes available on PodParley. New episodes are automatically indexed when they're published to the podcast feed.

What is Tech Talks With Kinsoft about?

Tech Talks with Kinsoft is your insider pass to the ever-evolving world of technology. We break down the latest in tech news, cybersecurity trends, and emerging innovations shaping our digital future. Whether you’re a seasoned IT pro, a curious techie, or a business leader navigating digital...

How often does Tech Talks With Kinsoft release new episodes?

Tech Talks With Kinsoft publishes regularly with 132 episodes available. Check the episode list for the typical release schedule.

Where can I listen to Tech Talks With Kinsoft?

You can listen to Tech Talks With Kinsoft on PodParley by clicking any episode. We provide an embedded audio player for direct listening, and you can also subscribe via your preferred podcast app using the RSS feed.

Who hosts Tech Talks With Kinsoft?

Tech Talks With Kinsoft is created and hosted by Steven Kinnas.
URL copied to clipboard!