The Security box, podcast 278: The Evolution of Cybersecurity, The Early Years

Hello gang,

Here we go with not notifying you about the program once again. I’ve really got to get better on making sure that we post the notes. Part of this was because the heat has been kicking my tech ass, and we need to get better at getting the podcast out.

I did make sure by looking to see if anything else was missing, and we’re just this episode behind so let’s get this out there.

The RSS feed has the program up, and I did notice that Preston’s segment is at the end, after our good bye segment. I don’t know how that happened, but it happens from time to time.

Here are the show notes including all of the links to stories that were covered within the newsletter.

---

Welcome to the security box, I’m Jared Rimer.

This week’s news is quite large, clocking in over an hour, but well worth it. Some we’ve blogged but others we haven’t.

Full links are provided within these show notes that will be posted to the blog. If you’re reading this through RSS, it’ll be too long for the current RSS flow.

The Evolution of Cybersecurity is our topic as we start with part 1. The title is: The Foundations and Early Years.

Here’s what has been read since podcast 277. For complete details, see the list, or check the blog for other thoughts or coverage.

• US charges alleged operators of Russian bulletproof hosting service
• LastPass, Bitwarden users targeted with fake security alerts
• Have I Been Pwned 1,020 breaches with 17.8 billion accounts
  • Fluke (821.1k) accounts (attributed to Shiny Hunters)
  • Goose Creek (6.6m) accounts (unknown attribution)
  • Paidwork 23.3m accounts (no attribution listed)
  • Suno 55.3m (unknown attribution)
• New ClickLock macOS malware traps users into revealing login password
• Disability news
  • This story is coming from a letter that I got within the last 7 days as of July 21, 2026. It made me angry. Why? It was not because of the supposed attack, it was because how long it took to get notified about it. When a Breach Hits the Disability Community, Time Matters
• OpenAI says model test was behind Hugging Face hack
• Clop ransomware targets Windchill, FlexPLM in data theft attacks
• Newly discovered PamStealer isn’t your typical macOS malware
• Google pays $250K for Linux vulnerability allowing guest VM escapes
• Patch for Windows Defender 0-day could allow attackers to fill hard disk
• In our last podcast, we covered an article titled: Former ransomware negotiator gets 4 years for BlackCat attacks but this time, we have an article titled Ransomware negotiator hired to represent victims was working for the attackers. If you missed last article talking about this story, both may be needing to be read so you get the full story.
• The US government warns that Russia state hackers are coming after your router
• Windows 0-day drops the same day Microsoft releases record number of patches
• Unconfirmed breaches found in the news
  • Customer data from India’s Bank of Baroda leaked online, source and researcher say
  • 75 million Revolut records allegedly for sale: here’s what our researchers found

We hope you enjoy the program, and thanks so much for listening!