This week the Canvas story is back. Instructure has paid ShinyHunters and says the stolen student data has been destroyed, but nobody in the security industry believes them. A telehealth platform breach exposed over 700,000 patients from a company most of them have never heard of.

Twin brothers got fired on a Teams call, forgot it was still recording, and deleted 96 government databases while talking through their plan out loud. Kids are beating age verification with a drawn-on mustache. A fake Claude Code installer is stealing developer credentials through Google search ads. And Google has confirmed for the first time that hackers used AI to find and exploit a zero-day.

Plus, a stoner just recovered $400,000 in Bitcoin after losing his password while high in 2015.

Chapters
00:00 Intro
01:42 Breach Watch: Canvas Pays ShinyHunters
05:56 Breach Watch: OpenLoop Health Breach
10:20 Twin Brothers Delete 96 Government Databases
14:03 Kids Bypass Age Verification With a Fake Mustache
19:18 Fake Claude Code Installer
24:34 Hackers Used AI to Find a Zero-Day
30:20 Stoner Recovers $400K Bitcoin With AI
33:57 Audi VIN Vulnerability
40:32 Security Socials
47:24 UK Banks Storing Biometric Data
51:47 Waymo Cars Driving Into Floods

Subscribe to the weekly newsletter at riskycreative.com or find us as The Awareness Angle on LinkedIn, TikTok, Instagram, YouTube, Spotify and Apple Podcasts.

📩 Newsletter
🎧 Spotify
🎧 Apple Podcasts
📸 Instagram
🎵 TikTok: @infosecant
▶️ YouTube

🎵 Music: "16" by Falling Forever
Creative Commons Attribution 4.0

Podden och tillhörande omslagsbild på den här sidan tillhör Risky Creative - Cyber Security for Humans. Innehållet i podden är skapat av Risky Creative - Cyber Security for Humans och inte av, eller tillsammans med, Poddtoppen.