Keep Quiet, Blame the Insider, and Hope Nobody Notices

The Jerich Show Podcast
The Jerich Show Podcast
Keep Quiet, Blame the Insider, and Hope Nobody Notices
Loading
/

In this week’s episode, Javvad Malik and Erich Kron wade through the latest cybersecurity soap opera where silence, spin, and shady stats take center stage:

  • 61% of U.S. companies claim they’ve been hit by insider breaches. Is this a shocking revelation… or just the result of someone finally checking the logs?
  • CISOs are under growing pressure to zip it about incidents. Because nothing says “strong security posture” like sweeping breaches under the rug and hoping the auditors don’t trip over the lump.
  • Hackers are holding Google’s data hostage unless two threat intel employees get the boot. Extortion? Performance review outsourcing? You decide.
  • Meanwhile in the UK, the government sat on a secret breach review for two years before sheepishly releasing it. Because transparency apparently has an expiration date.

Grab your headphones as we unpack what these stories really mean for security leaders, why “insider risk” is the boogeyman of the week, and how the industry’s favorite strategy still seems to be: “Shh… maybe they won’t notice.”

Salt Typhoon, National Guard Stormed, Fake Headlines, & Ransomware Quitting

The Jerich Show Podcast
The Jerich Show Podcast
Salt Typhoon, National Guard Stormed, Fake Headlines, & Ransomware Quitting
Loading
/

This week, Erich and Javvad dig into Salt Typhoon’s year-long hack of the National Guard (somebody check the cyber sandbags!), marvel at scammers out-faking CNN, BBC, and CNBC to push bogus investments, and celebrate the rarest of cyber events: a ransomware gang calling it quits and actually handing out free decryptors. Grab your popcorn—cyber drama doesn’t get juicier than this!

Patch Me If You Can: Cyber Oops, Selfies & Seizures

The Jerich Show Podcast
The Jerich Show Podcast
Patch Me If You Can: Cyber Oops, Selfies & Seizures
Loading
/

In this episode of The Jerich Show, Erich Kron and Javvad Malik dive headfirst into the week’s most curious, cringeworthy, and critical cybersecurity stories.

First up: a global honeypot powered by over 5,300 compromised Cisco devices—courtesy of the ViciousTrap botnet. Then, it’s schadenfreude central as the developers of DanaBot malware accidentally infect themselves. Karma, meet keyboard.

We’ll also unpack Europol’s massive takedown of ransomware infrastructure, which led to the seizure of 300 servers and €3.5 million in crypto. Not to be outdone, two ATM heist suspects made their arrest even easier… by taking selfies mid-crime.

And finally, the UK’s NCSC shows us how to securely retire old tech—because tossing servers in the skip just isn’t secure policy.

Join Erich and Javvad for sharp takes, security snark, and the cybersecurity fails you’ll want to learn from (or at least laugh at).

Patch Me If You Can: Cyber Oops, Selfies & Seizures

The Jerich Show Podcast
The Jerich Show Podcast
Patch Me If You Can: Cyber Oops, Selfies & Seizures
Loading
/

In this episode of The Jerich Show, Erich Kron and Javvad Malik dive headfirst into the week’s most curious, cringeworthy, and critical cybersecurity stories.

First up: a global honeypot powered by over 5,300 compromised Cisco devices—courtesy of the ViciousTrap botnet. Then, it’s schadenfreude central as the developers of DanaBot malware accidentally infect themselves. Karma, meet keyboard.

We’ll also unpack Europol’s massive takedown of ransomware infrastructure, which led to the seizure of 300 servers and €3.5 million in crypto. Not to be outdone, two ATM heist suspects made their arrest even easier… by taking selfies mid-crime.

And finally, the UK’s NCSC shows us how to securely retire old tech—because tossing servers in the skip just isn’t secure policy.

Join Erich and Javvad for sharp takes, security snark, and the cybersecurity fails you’ll want to learn from (or at least laugh at).

From Rogue Radios to Hijacked Chips: Cyber Threats Go Global!

The Jerich Show Podcast
The Jerich Show Podcast
From Rogue Radios to Hijacked Chips: Cyber Threats Go Global!
Loading
/

In this episode of The Jerich Show, join your favorite cybersecurity duo, Erich Kron and Javvad Malik, as they dive into some truly wild cybercrime stories making headlines around the globe. Hackers who’ve been terrorizing UK retailers have hopped the pond to target US companies, while Japan’s bold plan to double its cybersecurity workforce might mean saying sayonara to tough certifications. Meanwhile, the EU arms defenders with a shiny new vulnerability database, and the discovery of rogue communication devices lurking in Chinese-made solar inverters sparks fresh paranoia. Plus, could your CPU itself soon be held hostage by ransomware? Tune in for laughs, insights, and a healthy dose of cyber skepticism!

Stories from the show:

Hackers behind UK retail attacks now targeting US companies
https://www.bleepingcomputer.com/news/security/google-scattered-spider-switches-targets-to-us-retail-chains/

Japan aims to double cybersecurity specialists by 2030, relax certification requirements
https://asianews.network/japan-aims-to-double-cybersecurity-specialists-by-2030-relax-certification-requirements/

EU launches vulnerability database to tackle cybersecurity threats
https://therecord.media/eu-launches-vulnerability-database

CPU microcode hack could infect processors with ransomware directly
https://www.techradar.com/pro/security/cpu-microcode-hack-could-infect-processors-with-ransomware-directly

‘Rogue’ communication devices found on Chinese-made solar power inverters
https://www.utilitydive.com/news/rogue-communication-devices-found-on-chinese-made-solar-power-inverters/748242/

Lockbit hacked, Qlin jumps to #1 and Google gets serious against scams

The Jerich Show Podcast
The Jerich Show Podcast
Lockbit hacked, Qlin jumps to #1 and Google gets serious against scams
Loading
/

In this episode, Erich and Javvad discuss how Lockbit appears to be hacked again, Qlin makes a jump to #1 in the ransomware game, Google gets serious against scams with Gemini, and more!

 

Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android

https://thehackernews.com/2025/05/google-rolls-out-on-device-ai.html

 

Qilin Ransomware Ranked Highest in April 2025 with 72 Data Leak Disclosures

https://thehackernews.com/2025/05/qilin-leads-april-2025-ransomware-spike.html

 

LockBit ransomware gang hacked again

https://www.computing.co.uk/news/2025/security/lockbit-ransomware-gang-hacked-again

 

UK Cyber Insurance Claims Second Highest on Record

https://www.infosecurity-magazine.com/news/uk-cyberinsurance-claims-second/

Iran attacked,Huge DDoS Attack and more!

The Jerich Show Podcast
The Jerich Show Podcast
Iran attacked,Huge DDoS Attack and more!
Loading
/

Erich and Javvad recap the top stories in Cybersecurity this week including the cyber attack on Iran and a huge DD0S attack. All this and More

Bad actors arrested, phishing with google, Darkula get’s an upgrade and more!

The Jerich Show Podcast
The Jerich Show Podcast
Bad actors arrested, phishing with google, Darkula get's an upgrade and more!
Loading
/

Erich and Javvad summarize this week’s cyber soap opera and bring you a tangled web of digital deceit, artificial “intelligence,” and just enough government extradition drama to keep things spicy.

From Spain With Wire Fraud: Alleged “Scattered Spider” member Tyler Buchanan thought sunny Spain was a safe hideout—until the long arm of U.S. justice said hola. Extradited for allegedly scamming Caesars and MGM, his toolkit included SIM swapping and social engineering. Welcome to America, Tyler—hope you like federal courtrooms.

Phishing with Google’s Seal of Approval: Meanwhile, phisherfolk are reusing Google’s DKIM signatures like they’re leftover lasagna—slapping them onto spoofed emails from no-reply@accounts.google.com and tricking even the most paranoid clickers. The result? Legit-looking credential traps hosted on Google Sites. It’s like gourmet phishing, served with a side of irony.

Darcula Gets a Brain Upgrade: And if you thought cybercrime required effort, think again. The Darcula phishing kit now uses generative AI to do all the heavy lifting. Bad grammar and clunky templates? Gone. Now, even your cousin Steve with zero hacking skills can impersonate a bank in 100 languages. Thanks, AI.

Tune in for a romp through the latest digital deceptions, complete with dark web drama and facepalms galore. Stay sharp—because the hackers definitely are.

Cyber prof goes missing, ransomware group hacked back, passwords stink, and more!

The Jerich Show Podcast
The Jerich Show Podcast
Cyber prof goes missing, ransomware group hacked back, passwords stink, and more!
Loading
/

In this episode Erich and Javvad discuss a cyber professor that went away, a ransomware group hacks back, passwords are still poor, and more!

Old MS vuln left open, sperm bank breached, WordPress sites exploited and more!

The Jerich Show Podcast
The Jerich Show Podcast
Old MS vuln left open, sperm bank breached, WordPress sites exploited and more!
Loading
/

In this episode, Erich and Javvad discuss a breach of a sperm bank in California, an 9-year old Microsoft vuln that they feel is too unimportant to patch (although it’s being exploited), and a hack of over 2000, WordPress sites