Visual Studio Code malware, Sinkholes reversal, Chinese pen-testing & FortiSIEM zero-day / Intel Chat [#286]

episode

Previously titled “#286 - Intel Chat: Visual Studio Code malware, Sinkholes reversal, Chinese pen-testing & FortiSIEM zero-day” — renamed by the publisher on Aug 2, 2026

The Cybersecurity Defenders Podcast not yet transcribed

▲ 0

Transcript

This episode hasn't been transcribed yet Upvotes decide what gets transcribed next — 0 so far. Sign in to upvote

recent transcribed audio

A.I. Safety Goes Mainstream + a ‘Hard Fork’ Exit AMA 1h 25m · 18 Sep 2026 · Hard Fork

AWP: Beyond the Exam Room: Purpose, Myopia, and Population Health 54 min · 17 Sep 2026 · EyeCode Media

Essentials: How to Assess & Improve All Aspects of Your Fitness | Dr. Andy Galpin 35 min · 17 Sep 2026 · Huberman Lab

#502 – Psychiatry, Insane Asylums, Mental Illness, ECT, Lobotomies, Freud & Jung 3h 43m · 17 Sep 2026 · Lex Fridman Podcast

September 16, 2026 PC - Sep 16, 2026 1h 50m · 16 Sep 2026 · Fairfax County Planning Commission

Planning Commision 09/16/2026 - Sep 16, 2026 56 min · 16 Sep 2026 · Prince William County Planning Commission

Report any issue

Source

Recorded26 Jan 2026

Publisherfast.wistia.com ↗

Handlerec:15515243

Show notes

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.North Korean threat actors are targeting macOS software developers in a new malware campaign that abuses Visual Studio Code (VS Code) confi gurations to deliver JavaScript-based backdoors, according to research from Jamf.Sinkholes are usually seen as the end of a malicious campaign - the point where domains are seized and abuse stops.China’s pen-testing and red-team ecosystem has always been hard to observe, especially since many teams stopped participating in international CTFs post-2018.A critical zero-day vulnerability, CVE-2025-64155, has been discovered in Fortinet’s FortiSIEM platform by Horizon3.ai, allowing unauthenticated remote code execution and privilege escalation to root.Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform.This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows. Start today for free at limacharlie.io.

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.

Transcript

Related