Ten-Hour Breaches, MikroTik Backdoors, Router Takeovers & the NetScaler Root Cause
From Initial Access · 00:53:50
Show by Bishop Fox
This episode covers an AI agent fleet that compressed two weeks of red team work into ten hours, a two-CVE chain giving attackers full admin on MikroTik routers, and a fraudulent government request that walked Revolut's verification checks straight out the door, plus a sit-down with Bishop Fox's Jon Williams on a critical NetScaler auth bypass and the detection tool built to prove you're patched. Security Headlines: An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation, Unit 42 Your MikroTik Router May Already Be Compromised: Look for SSH User "-2", Security Affairs Revolut Confirms Customer Data Breach Through Fake Government Requests, TechCrunch Also mentioned: Workshop: Weaponizing CloudFormation (available in English and Spanish) Virtual Session: AI & Cybersecurity Priorities for 2027: Executive Chat Event: BSides Cleveland 2026 Blog: Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490 Blog: MikroTrick: Inside the RouteOS Takeover Chain Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit.
More episodes of Initial Access
More episodes
- Nvidia CEO Investigation, N-central Zero-Days, SonicWall MFA Bypass, And A Chainalysis Breach
- Binance $6.36B Hack, VMware ESX Zero-Day, TeamViewer Flaw, And Anthropic AI Exploits
- Direct Access with Farzan Karimi
- PHP2Shell Exploitation, Node2Shell Brotli RCE, And Mimori Ransomware Claims
- PHP2Shell: A Leaked Demo, A Broken Disclosure, and AI at Exploit Speed
- OpenAI Insider, Meta Muse’s Escape Hatch, AI Agents Gone Rogue
- A Third NetScaler Zero-Day, 8 Million Danish ID Records, and Google Pauses Its Bug Bounty
- ShinyHunters PeopleSoft WAF Bypass, Arrests, And OpenAI Astra News
- Zero-Click Exchange RCE, $25 AI Intrusions, and the ShinyHunters FBI Claim
- Patch Tuesday Overload, Broken Threat Feeds & the Scoping Problem
PodSearch is a free, independent podcast search engine. Read about PodSearch, the privacy policy or contact us.