Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

"Dirty Frag", Canvas ransomware, "Mini Shai-Hulud" malware & AI-developed zero-day exploit [324]

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community. Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform. This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows.

Attackers Don't Care About Your CVSS Score

No blind spots. No waiting. Just visibility that works. Customers using Falcon Exposure Management say it has changed how they view and prioritize risk. They’re getting instant clarity across cloud, endpoint, and identity — knowing exactly which exposures to address first. They’re cutting through noise, saving time, and acting faster with AI-powered context from ExPRT.AI. In this video, they share how Falcon Exposure Management delivers the full picture — and why they’ll never go back to legacy VM tools.

What Security Teams See with Falcon Exposure Management

Real voices. Real clarity. Real-time results. In their own words, customers share how Falcon Exposure Management helps them: See their entire attack surface— instantly Understand which assets and exposures matter most Act faster with AI-driven prioritization and guided remediation Customers are sharing how they went from partial visibility to the full picture — and finally know what to fix first.

Mini Shai-Hulud: The Most Sophisticated NPM Supply Chain Attack of 2026

On May 11, 2026, the TanStack namespace was hit by a "Mini Shai-Hulud" supply chain attack. Unlike typical attacks, this did not involve stolen credentials; instead, the threat group TeamPCP hijacked the legitimate GitHub Actions release pipeline. This video covers the technical details of the OIDC token extraction, the "Dead Man's Switch" that triggers a rm -rf / upon credential revocation, and the mandatory remediation order you must follow to save your data. We also discuss how to harden your workflow using release-age cooldowns and OIDC pinning.

How to Integrate ITSM in Aurora Vulnerability Management for Better Visibility & Faster Remediation

See how Arctic Wolf Aurora Vulnerability Management turns risk visibility into remediation through seamless integrations with partners like ServiceNow and ConnectWise. This demo shows how automated ticketing, unified workflows, and prioritized findings help security and IT teams accelerate remediation without added workload.

Is Your Security Built for Today's World?

MSPs are under pressure to deliver stronger security across a growing customer base without adding more tools or people. Despite this, many still rely on approaches that don’t scale, leading to gaps, alert overload, and missed opportunities to grow their security business. The goal of this 30-minute session is to help MSPs take a step back and assess how they’re delivering security today. We’ll walk them through the most common pressure points, help identify where their current approach is falling short, and guide them toward the next conversation based on what matters most to their business.

The Future of Third-Party Risk Management with TITAN AI | Dr. Aleksandr Yampolskiy

Hear from SecurityScorecard CEO and Co-Founder Dr. Aleksandr Yampolskiy on why the future of cybersecurity and Third-Party Risk Management (TPRM) must move beyond static assessments and reactive workflows. In this executive video, Dr. Yampolskiy reflects on SecurityScorecard’s evolution from pioneering security ratings 12 years ago to launching TITAN AI, a platform built to help organizations continuously identify, prioritize, and reduce third-party risk.