Five-minute daily cyber briefings and a deeper weekly review. Choose a date or browse recent episodes.
A five-minute cybersecurity podcast, published on weekdays. Each episode has its audio, a summary, show notes, a transcript and its sources.
Latest · · 5 min
CISA confirms active exploitation of GPUStack, FreeSWITCH, IBM Aspera Faspex and the OpenSSH SSHhole flaw with a November 12 deadline; Google patches the eighth exploited Chrome zero-day of 2026; SonicWall's VPN MFA bypass nears its deadline; fake GitHub security tools infect over 2,000 PCs.
· 5 min
Monday briefing: unpatched D-Link DGS-3130 switch zero-days with no fix yet, a ForgeRock identity chain that reached remote vehicle control for two automakers, Microsoft's cloud-mitigated Entra flaw rated 10.0, rising scans for the OpenSSH musl flaw, and coding-agent approvals leaking secrets to GitHub.
· 6 min
Akari's Friday briefing: five US agencies warn of ongoing attacks heating up refrigeration and cold-chain systems, an emergency OpenSSH fix for a password bypass on Alpine Linux, a log-hiding backdoor inside Control Web Panel, and DreamHost's months-long File Manager breach.
· 5 min
Akari's Thursday briefing: the Zyxel GS1900 zero-day behind 996 compromised switches, Sekoia's APT29 mobile watering-hole campaign and the Apple flaw CISA just listed, a root flaw in Debian and Ubuntu's APT package manager, and DigiCert's archived-data breach.
· 5 min
The Amadeus reservation breach widens to Singapore Airlines (about 46,000 booking records), CISA lists the WordPress upgrade-window flaw CVE-2026-119977 as exploited with a November 6 deadline, NSW Health's dental scheme breach is declared a major incident, and University Hospitals is still restoring systems.
· 5 min
Arara Message breach grows to about 77 million email addresses across up to 380 companies, and the service itself was used to send 7.13 million phishing emails; Synology warns of C3RB3R ransomware on unpatched NAS devices; Sega's arcade networks remain offline and Suntory discloses a cloud breach affecting around 100,000 people.
· 5 min
Binance reopened after the record theft and saw billions in net outflows, the Ivanti Connect Secure zero-day chain hits its federal deadline today, and a public Android SMS of Death exploit leaves Android 12 and 13 phones with no fix.
· 5 min
GitLab CVSS 10 flaw in CISA KEV where upgrading GitLab alone does not fix own-Ruby installs, actively exploited Drupal Commerce bypass, PeopleSoft's one CVE hiding three chained flaws, plus Cisco KEV and TeamViewer updates.
· 5 min
KeyDrift malware stealing Cisco SD-WAN encryption keys, a second exploited Cisco firewall zero-day, Warp Panda's low-score VMware logging flaw, PHP2Shell chained to root firewalls, and iRhythm's 8.2 million-person breach listing.
A long-form weekly podcast and a weekly written intelligence brief. Each edition has its audio, the written brief, a transcript and its sources.
Latest · · 10 min
The week of the second door: SonicWall's exploited SAML and MFA bypass, the five-agency cold-chain refrigeration advisory, WordPress and Ivanti deadline lessons, APT29's patched-flaw phone chains, SSHhole scanning pressure, OpenAM's critical but unexploited flaws, and third-party platform breaches from Amadeus to Iris Plaza and Arara.
· 10 min
Week in review: the control plane was the target — FBI attributes the B+ Binance theft to North Korea, Chainalysis discloses an agentic intrusion, KeyDrift steals SD-WAN keys, and GitLab, Cisco and Ivanti face KEV deadlines.
· 12 min
Akari's week-in-review for the week ending October 25, 2026, updated Monday morning: Black October — the critical PHP flaws, AI agents doing the attacking, the LiteLLM supply-chain compromise, new CISA exploited vulnerabilities, the Denmark breach — plus today's patch deadline, PHP2Shell's wider spread, the Tailscale Tailworm flaw, Cloudflare's Brotli rules, and AI news from OpenAI, Moonshot, and Anthropic.
Choose a date to play its episode. Marked dates have a published episode; there is no episode on the others. Dates are US Eastern.
All episodes ICHI Daily ICHI Weekly
Last 14 days · Month view
| Thu 29, October 29, 2026: no episode | Fri 30, October 30, 2026: no episode | Sat 31, October 31, 2026: no episode | Sun 1Weekly | Mon 2, November 2, 2026: no episode | Tue 3, November 3, 2026: no episode | Wed 4, November 4, 2026: no episode |
| Thu 5, November 5, 2026: no episode | Fri 6, November 6, 2026: no episode | Sat 7, November 7, 2026: no episode | Sun 8Weekly | Mon 9, November 9, 2026: no episode | Tue 10, November 10, 2026: no episode | Wed 11, November 11, 2026: no episode |
ICHI Weekly · · 10 min
The week of the second door: SonicWall's exploited SAML and MFA bypass, the five-agency cold-chain refrigeration advisory, WordPress and Ivanti deadline lessons, APT29's patched-flaw phone chains, SSHhole scanning pressure, OpenAM's critical but unexploited flaws, and third-party platform breaches from Amadeus to Iris Plaza and Arara.
No new episode, no email. Every email links to the episode on ICHI; audio is never attached.
Also from ICHI: ICHI Perspectives, editorial analysis.
ICHI Daily and ICHI Weekly are editorial commentary on ICHI’s evidence. They never change the VECTORS score, incident evidence classifications or intelligence rankings.
ICHI Briefs & Podcasts · ICHI Daily · ICHI Weekly · Episode calendar · ICHI Perspectives · episodes.json · ICHI dashboard · Methodology