ShinyHunters breached the University of Nottingham using a critical Oracle PeopleSoft zero-day, leaking passport numbers, National Insurance numbers, disability data and financial records for 455,000 students. If you studied at Nottingham, check haveibeenpwned.com now.

A hidden camera was found in a ceiling tile at 2 Marsham Street, London, the Home Office building that approved China's controversial new mega-embassy. Nobody knows who put it there or how long it was recording.

Someone filed fake data breach notices on Maine's official breach portal, which publishes filings instantly with no verification. The Register reported one as fact before readers flagged it.

Also this week: ServiceNow admits a security incident months after allegedly being warned. 10,000 malicious domains registered ahead of the FIFA World Cup. A disgruntled researcher bypasses BitLocker because Microsoft made him homeless. Google Chrome permanently kills uBlock Origin. The Met Police gives Apple and Samsung an ultimatum over stolen phones.

Phish of the Week: Temu callback phishing using a real password reset email.

CHAPTERS
0:01 Intro
3:45 Breach of the Week: University of Nottingham data breach and Oracle PeopleSoft zero-day
8:41 Hidden camera found in Whitehall building that approved China's mega-embassy
13:54 ServiceNow security incident: customer data accessed
16:36 FIFA World Cup 2026: 10,000 malicious domains
21:33 Nightmare Eclipse drops eighth Windows zero-day, bypasses BitLocker
27:39 Fake data breach notices posted to Maine's official portal
33:19 Google Chrome permanently kills uBlock Origin
37:51 Met Police urges Apple and Samsung to make stolen phones unusable
39:40 Apple Passwords auto-change feature
42:07 Phish of the Week: Temu password reset misuse
46:19 Security Socials: Police use AI to enhance CCTV image

Newsletter: https://www.linkedin.com/newsletters/the-awareness-angle-newsletter-7274932363787132928/
Music: "16" by Falling Forever. https://fallingforever.bandcamp.com/track/16. CC BY 4.0: https://creativecommons.org/licenses/by/4.0/

Rss Apple Podcaster
Podden och tillhörande omslagsbild på den här sidan tillhör Risky Creative - Cyber Security for Humans. Innehållet i podden är skapat av Risky Creative - Cyber Security for Humans och inte av, eller tillsammans med, Poddtoppen.