Five-minute daily cyber briefings and a deeper weekly review. Choose a date or browse recent episodes.
A five-minute cybersecurity podcast, published on weekdays. Each episode has its audio, a summary, show notes, a transcript and its sources.
Latest · · 5 min
The Amadeus reservation breach widens to Singapore Airlines (about 46,000 booking records), CISA lists the WordPress upgrade-window flaw CVE-2026-119977 as exploited with a November 6 deadline, NSW Health's dental scheme breach is declared a major incident, and University Hospitals is still restoring systems.
· 5 min
Arara Message breach grows to about 77 million email addresses across up to 380 companies, and the service itself was used to send 7.13 million phishing emails; Synology warns of C3RB3R ransomware on unpatched NAS devices; Sega's arcade networks remain offline and Suntory discloses a cloud breach affecting around 100,000 people.
· 5 min
Binance reopened after the record theft and saw billions in net outflows, the Ivanti Connect Secure zero-day chain hits its federal deadline today, and a public Android SMS of Death exploit leaves Android 12 and 13 phones with no fix.
· 5 min
GitLab CVSS 10 flaw in CISA KEV where upgrading GitLab alone does not fix own-Ruby installs, actively exploited Drupal Commerce bypass, PeopleSoft's one CVE hiding three chained flaws, plus Cisco KEV and TeamViewer updates.
· 5 min
KeyDrift malware stealing Cisco SD-WAN encryption keys, a second exploited Cisco firewall zero-day, Warp Panda's low-score VMware logging flaw, PHP2Shell chained to root firewalls, and iRhythm's 8.2 million-person breach listing.
· 5 min
Akari's first edition: ICHI's new offense-versus-defense scoring methodology, the PHP2Shell patching deadline, the Keystone breach, and the widening threat-defense gap.
A long-form weekly podcast and a weekly written intelligence brief. Each edition has its audio, the written brief, a transcript and its sources.
Latest · · 10 min
Week in review: the control plane was the target — FBI attributes the B+ Binance theft to North Korea, Chainalysis discloses an agentic intrusion, KeyDrift steals SD-WAN keys, and GitLab, Cisco and Ivanti face KEV deadlines.
· 12 min
Akari's week-in-review for the week ending October 25, 2026, updated Monday morning: Black October — the critical PHP flaws, AI agents doing the attacking, the LiteLLM supply-chain compromise, new CISA exploited vulnerabilities, the Denmark breach — plus today's patch deadline, PHP2Shell's wider spread, the Tailscale Tailworm flaw, Cloudflare's Brotli rules, and AI news from OpenAI, Moonshot, and Anthropic.
Choose a date to play its episode. Marked dates have a published episode; there is no episode on the others. Dates are US Eastern.
All episodes ICHI Daily ICHI Weekly
Last 14 days · Month view
| Thu 22, October 22, 2026: no episode | Fri 23, October 23, 2026: no episode | Sat 24, October 24, 2026: no episode | Sun 25, October 25, 2026: no episode | Mon 26, October 26, 2026: no episode | Tue 27, October 27, 2026: no episode | Wed 28Daily |
| Thu 29Daily | Fri 30Daily | Sat 31, October 31, 2026: no episode | Sun 1, November 1, 2026: no episode | Mon 2Daily | Tue 3Daily | Wed 4Daily |
ICHI Daily · · 5 min
The Amadeus reservation breach widens to Singapore Airlines (about 46,000 booking records), CISA lists the WordPress upgrade-window flaw CVE-2026-119977 as exploited with a November 6 deadline, NSW Health's dental scheme breach is declared a major incident, and University Hospitals is still restoring systems.
No new episode, no email. Every email links to the episode on ICHI; audio is never attached.
Also from ICHI: ICHI Perspectives, editorial analysis.
ICHI Daily and ICHI Weekly are editorial commentary on ICHI’s evidence. They never change the VECTORS score, incident evidence classifications or intelligence rankings.
ICHI Briefs & Podcasts · ICHI Daily · ICHI Weekly · Episode calendar · ICHI Perspectives · episodes.json · ICHI dashboard · Methodology