CRITICAL: Office Zero-Day + WordPress Admin Takeover + Chrome Extensions Stealing AI Chats | EP 60

CRITICAL: Office Zero-Day + WordPress Admin Takeover + Chrome Extensions Stealing AI Chats | EP 60

Author: Cipherceval January 29, 2026 Duration: 24:52

Microsoft just dropped an emergency patch for an Office zero-day being exploited in the wild. A WordPress plugin has a CVSS 10.0 vulnerability — that's the golden goose of hacking. 900,000 Chrome users had their ChatGPT conversations stolen by malicious extensions with Google's Featured badge. And two cybersecurity professionals pleaded guilty to moonlighting as ransomware affiliates.

Welcome to 2026. It's gonna be a fun year.

In this episode:

  • CVE-2026-21509: Microsoft Office zero-day (security feature bypass)
  • CVE-2026-23550: WordPress Modular DS critical vulnerability
  • Prompt Poaching: Chrome extensions stealing AI conversations
  • Brightspeed breach: Crimson Collective claims 1M+ records
  • Insider threat: Security pros turned BlackCat/ALPHV affiliates

Key takeaway: Update your stuff. A patch does you no good if it isn't installed.

Subscribe for weekly cybersecurity news, vulnerability breakdowns, and threat intelligence.

 

https://forgeboundresearch.com/podcasts/


Ever wonder how a hacker actually thinks when they're picking a digital lock? That's the kind of curiosity that drives Exploit Brokers By Forgebound Research. Hosted by Cipherceval, this isn't just a rundown of the week's scary headlines. Instead, it's a deep, analytical dive into the mechanics behind major cyber events. Each episode takes apart real-world incidents-from sprawling data breaches and clever malware to massive botnet takedowns-and walks through the how and why. The goal is practical: by understanding the tools and tactics used in an attack, we can all build smarter defenses. You'll find a mix of sharp commentary on breaking tech news and clear, insightful tutorials that demystify complex security concepts. Tune in for a perspective that goes beyond surface-level reporting, offering a genuine look into the mindset of both attackers and defenders. This podcast serves as a valuable resource for anyone from IT professionals to simply tech-curious listeners who want to move past fear and into comprehension.
Author: Language: en-us Episodes: 62

Exploit Brokers By Forgebound Research - Tech and Hacking News Commentary
Podcast Episodes
HN24 -  Sandwich Data Breach Alert: Jason's Deli & Subway Under Attack [not-audio_url] [/not-audio_url]

Duration: 20:19
🔒 Dive into the world of cybersecurity as we uncover the latest threats facing businesses in today's digital landscape. In this video, we dissect the Jason's Deli data breach, shedding light on the dangers of credential…
HN23 - One Click Away: The Alarming Reality of Data Theft Exploits [not-audio_url] [/not-audio_url]

Duration: 14:58
In this eye-opening episode of Exploit Brokers, we delve deep into the world of cybercrime, dissecting the sinister Phemedrone Stealer malware and its ability to pilfer your precious data. Join us as we explore the chill…
HN22 - Crypto Chaos: How a Fake SEC Tweet Triggered a Bitcoin Spike [not-audio_url] [/not-audio_url]

Duration: 19:29
In this gripping episode of Exploit Brokers, we delve deep into the intricate world of cryptocurrency and cybersecurity. Our journey begins with the astonishing SEC Twitter hack, where hackers manipulated the SEC's accou…
HN18 - AI's Silent Takeover in the CIA & IRS [not-audio_url] [/not-audio_url]

Duration: 19:45
🔍 In this episode of Exploit Brokers, we dive deep into the growing use of AI by government agencies like the CIA and IRS. Are we heading towards a world where AI is used in ways that could infringe upon our rights and p…