Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Microsoft' Digital Defense Report - The 443 Podcast - Episode 390

This week on the podcast, we cover a few takeaways from Microsoft's recent Digital Defense Report. Before that, we discuss the recent Citrix Netscaler zero-days that were potentially under active exploit for weeks before disclosure before reviewing an interesting a bug bounty report on a Microsoft internal tool that was exposed externally.

Sophos Named a Leader in the IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises 2026

Sophos has been named a Leader in the IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises 2026, recognizing the strength of our prevention-first approach and stopping AI-era threats as early as possible. Attackers using frontier AI models can now find vulnerabilities and generate exploits faster than organizations can patch them. And when malicious code is already running before an alert fires, detection alone is too late.

From Isolated Attacks to Continuously Optimized Operations

Security teams have spent years improving their ability to detect and respond to cyber threats. More visibility, better tools, and richer telemetry have helped organizations identify suspicious activity across users, devices, applications, and infrastructure. But the nature of the challenge is changing. Modern attacks are rarely defined by a single event.

Oops, OpenAI Hacked Australia's Health System

30,000+ devices compromised. 7,000+ crypto wallets targeted. Roughly $10M stolen. And that’s only one story. This week on The 443: Security Simplified, Marc Laliberte and Corey Nachreiner unpack a new wave of security incidents where identity, access, and AI collide. They cover: WaterPlum activity spanning 100+ countries More than 7,000 cryptocurrency wallets impacted, worth roughly $10M ShinyHunters’ claimed theft of 3 TB of FBI-related data An AI agent reportedly accessing Australian government health data beyond its intended permissions.

Your Clients Already Deployed AI. Nobody Sold Them the Security for It.

Every vendor this year says the same thing: AI is transforming cybersecurity. True, and not useful. Here is the useful version. AI is doing two things at once. It is compressing the time between a vulnerability being found and being exploited, which is the part everyone talks about. And it is quietly installing a brand new attack surface inside your clients' businesses, which is the part nobody is selling against yet.

Oops, OpenAI Hacked Australia's Health System - The 443 Podcast - Episode 389

This week on the podcast, we cover yet another rogue AI security incident that Australia's Prime Minister disclosed in front of the United Nations last week. Before that, we discuss an FBI alert on WaterPlum, a North Korean threat actor targeting IT professionals. Then, we cover the FBI themselves becoming a victim of cyberattack, this time by ShinyHunters.