Podcast
Cyber Bites
Hosted by Edwin Kwan · EN
Your weekly dose of cyber security news by Edwin Kwan
Stay sharp in the digital world! "Cyber Bites" delivers cybersecurity insights, industry trends, and personal experiences to keep you informed and protected.
edwinkwan.substack.com
edwinkwan.substack.com
16episodes
Episodes
Newest firstAll episodes
Cyber Bites - 19th June 2026
5d ago00:12:11Tap to summarize* Malicious JetBrains Marketplace Plugins Discovered Stealing AI API Keys from Developers* A Three-Stage Vulnerability Chain Turning Microsoft 365 Copilot Into a Silent Data Exfiltration Weapon* The Digital Trove: How a Single Hack Exposed One Man’s Entire Life and Why We’re All Vulnerable* FIFA Bug in World Cup Streaming Infrastructure Opened Door to Remote Takeover* Passkeys vs Passwords: Readers Debate Whether a Smartphone PIN Can Really Be Safer Than a Complex Password This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com
Transcribe →
Cyber Bites - 12th June 2026
2w ago00:08:35Tap to summarize* GitHub Announces Sweeping npm Security Overhaul to Combat Supply Chain Attacks* Anthropic Rolls Out Claude Fable 5 in Limited-Time Free Release Before Usage-Based Pricing Kicks In* OpenClaw AI Agent Found Vulnerable to Phishing Attacks, Leaking Sensitive User Data* Apple Introduces Automatic Password Changing Feature for Compromised Credentials This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com
Transcribe →
Cyber Bites - 5th June 2026
3w ago00:11:38Tap to summarize* Anthropic Expands Claude Mythos Preview Access to Australian Organisations Through Project Glasswing* Cybercriminals Exploit ChatGPT Share Links to Distribute Malware Via Fake Outage Pages* Google Chrome Bolsters Security With Session Cookie Theft Protection for All Users* Hackers Exploit Meta’s AI Support Bot to Hijack High-Profile Instagram Accounts* Critical HTTP/2 Bomb Vulnerability Exposes Major Web Servers to Remote Denial-of-Service Attacks This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com
Transcribe →
Cyber Bites - 29th May 2026
4w ago00:09:34Tap to summarize* npm Introduces Human Approval Gates to Counter Software Supply Chain Attacks* Anthropic’s AI Model Finds Over Ten Thousand Critical Vulnerabilities in Global Software Infrastructure* Anthropic’s Restricted Claude Mythos Model Moves Closer to Public Release* AI Emerges as a Game-Changer in Cyber Defence, Australian Signals Directorate Reports This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com
Transcribe →
Cyber Bites - 22nd May 2026
May 2200:11:17Tap to summarize* Grafana Labs Confirms Ransomware Extortion Following TanStack Supply Chain Breach* GitHub Confirms Internal Repository Breach After Employee Device Compromise* Google Accidentally Exposes Details of Unpatched Chromium Vulnerability* CISA Credentials Exposed in Public GitHub Repository for Six Months Before Takedown* HackerOne Slashes Bug Bounty Payouts as AI Floods Open-Source Security Programs This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com
Transcribe →
Cyber Bites - 15th May 2026
May 1500:14:45Tap to summarize* Signal Adds In-App Security Warnings to Combat Social Engineering Attacks* Eighteen-Year-Old Vulnerability Discovered in Nginx Puts Millions of Web Servers at Risk* OpenAI Confirms Security Breach Following Sophisticated Supply Chain Attack* New Zero-Day Exploit Allows USB Stick to Bypass Windows BitLocker Encryption* Agentic AI Is the Security Blind Spot Organisations Can No Longer Afford to Ignore This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com
Transcribe →
Cyber Bites - 8th May 2026
May 800:10:32Tap to summarize* Cybercriminals Abuse Amazon SES to Launch Undetected Phishing Campaigns* ACSC Issues Warning Over ClickFix Attacks Deploying Vidar Stealer Malware* Malicious OpenClaw Skill Weaponizes AI Agent Framework to Distribute Malware* Survey Finds 1 in 8 Employees Consider Selling Company Login Credentials Justifiable* 60% of MD5 Password Hashes Now Crackable in Under an Hour With a Single GPU This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com
Transcribe →
Cyber Bites - 1st May 2026
May 100:10:55Tap to summarize* Critical Linux “copyfiles” Vulnerability Grants Root Access on Major Distributions* Critical cPanel & WHM Authentication Bypass Vulnerability Actively Exploited in the Wild* Google Patches Maximum Severity CVSS 10 Flaw in Gemini CLI Amid Growing AI Tool Vulnerabilities* KnowBe4 Research Reveals 86% of Phishing Attacks Are Now AI-Driven* New “ClawHub” and “ClawSwarm” Malware Campaigns Target AI Agents for Crypto Recruitment This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com
Transcribe →
Cyber Bites - 24th April 2026
Apr 2300:09:23Tap to summarize* Claude Desktop Raises Privacy Concerns Over Silent Browser Extension Installation* Apple Patches iOS Bug That Preserved Deleted Notification Data* Microsoft Teams Becomes Prime Target for Helpdesk Impersonation Scams* Malicious Cryptocurrency Wallet Apps Infiltrate China’s Apple App Store* Anthropic Mythos Discovered 271 Security Vulnerabilities in Firefox This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com
Transcribe →
Cyber Bites - 17th April 2026
Apr 1600:09:05Tap to summarize* Booking.com Confirms Data Breach Exposing Millions of Travellers’ Reservation Details* Adobe Issues Emergency Patch for Actively Exploited Acrobat Reader Zero-Day* Critical Nginx UI Flaw Under Active Exploitation, Enabling Full Server Takeover Without Authentication* WordPress Plugin Suite Backdoored, Thousands of Sites Silently Compromised Since August 2025* OpenAI Unveils GPT-5.4-Cyber, a Defensive AI Model Purpose-Built for Security Teams This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com
Transcribe →