Defensive Security Podcast Episode 318

I have no idea why Riverside.fm (the service we use to record the podcast) has such an audio/video sync problem for the first minute or so of the recording. We’re working on it…

On to the show. Here are the links for this week&#…

Citrix fixed three NetScaler flaws, one of them actively exploited in the wild

Citrix addressed three vulnerabilities in NetScaler ADC and NetScaler Gateway, including one that has been actively exploited in the wild. Citrix addressed three security flaws (CVE-2025-7775, CVE-2025-7776, CVE-2025-8424) in NetScaler ADC and NetScaler Gateway, including one (CVE-2025-7775) that it said has been actively exploited in the wild. “Exploits of CVE-2025-7775 on unmitigated appliances have been observed.” […]

Iran, Russia talk military cooperation, regional security

The Russian Ministry of Defense announced that Deputy Defense Minister Alexander Fomin met with Kazem Jalali, Iran’s Ambassador to Moscow, for talks on bilateral military cooperation and key international and regional security issues.

Fragmented SSE Is a Risk You Can’t Afford

Cisco Secure Access solves the problem of point product patchworks, offering a unified architecture that moves with the user, not just the network.

Tesla is a stock promotion scheme that has run out of road

Deaths Mount as Lawyers Flee Tesla Tesla has systematically hidden, delayed, or minimized reporting of its safety failures while maintaining its public image and stock valuation. The fact that a Japanese pedestrian death occurred so close to the high-p…

Docker fixes critical Desktop flaw allowing container escapes

Docker fixed a critical flaw in the Docker Desktop app for Windows and macOS that could potentially allow an attacker to escape the confines of a container. Docker fixed a critical vulnerability, tracked as CVE-2025-9074 (CVSS score of 9.3), impacting Docker Desktop app for Windows and macOS. An attacker can exploit the flaw to potentially escape […]