Zero-Days, VPN Leaks & Listener Qs: Cyber Threats That Just Got Real_

### Hosts

- Professor CyberRisk

- Cyber Cowboy

---

### Live Cyber Maps

- Bitdefender Threat Map: https://threatmap.bitdefender.com/

- Checkpoint Threat Map: https://threatmap.checkpoint.com/

- Kaspersky Cyber Threat Map: https://cybermap.kaspersky.com/

- Talos Intelligence – ebc_spam Map: https://talosintelligence.com/ebc_spam

---

### Episode Information

**Title:** _Zero-Days, VPN Leaks & Listener Qs: Cyber Threats That Just Got Real_

**Episode Number:** 3x17

---

### Overview

Professor CyberRisk and Cyber Cowboy break down a wave of fresh exploits targeting enterprise systems, open-source platforms, and consumer devices — all backed by active threat intel. They kick things off with powerful questions from a listener in military/law enforcement, cover recent zero-days and VPN bugs, and dissect the cybercriminal playbook now exploiting accessibility APIs and fashion brands alike.

---

### Guest Information

None this episode

---

### Topics Covered

- Essential cyber hygiene for defense and law enforcement professionals

- Real-world deterrence: what it takes to punish threat actors

- SharePoint zero-day hits public sector

- Arch Linux packages laced with Chaos RAT

- Dior breach via third-party vendor

- ExpressVPN leak and RDP exposure

- Banking trojan weaponizes Windows UI Automation

---

### Top Stories

**🧨 Widespread SharePoint Zero-Day Exploitation Hits U.S. Agencies**

Hackers exploit CVEs 2025-49704/49706 to deploy Warlock ransomware via malicious web shells.

📎 [Daily Security Review coverage](https://dailysecurityreview.com/)

---

### Additional Cybersecurity News – Titles and URLs

**🧪 Arch Linux AUR Packages Deliver Chaos RAT**

📎 [DSR Report](https://dailysecurityreview.com/)

**🕵️‍♂️ Dior Confirms Customer Data Breach via Vendor Compromise**

📎 [DSR Article](https://dailysecurityreview.com/)

**🧱 ExpressVPN Bug Exposed Real IPs During RDP Use**

📎 [DSR Coverage](https://dailysecurityreview.com/)

**🐍 Coyote Malware Variant Exploits Windows UI Automation for Credential Theft**

📎 [The Hacker News report](https://thehackernews.com/)

---

### Resources & Links

None this episode

---

### Call to Action

- Subscribe: Stay updated on cybersecurity threats.

- Leave a Review: Let us know what you think.

- Join the Conversation: Follow our community and ask questions.

---

### Sponsor

No sponsors this episode

---

### Podcast Socials & Website

- Website: https://www.youvealreadybeenhacked.com

- X: @professorcyberrisk

- YouTube: https://www.youtube.com/@YABHPodcast

- Discord/Community Forum: coming soon