The 443 - Security Simplified

Episodes

• 
  Regional Cybersecurity Trends with Ryan Davis - The 443 Podcast - Episode 392 21.10.2026 39m

  New Charter Technologies CISO, Ryan Davis joins The 443 to discuss the evolving cybersecurity landscape across different regions, the unique challenges organizations face, and the trends shaping the future of security. Tune in for insights into emerging threats, regional priorities, and how businesses and partners can stay ahead of an ever-changing threat landscape.
• 
  From IT Provider to Security Partner: The Evolution of MSP Cybersecurity - The 443 Podcast - Ep. 391 15.10.2026 49m

  In this episode, WatchGuard CSO Corey Nachreiner sits down with Andrew Morgan, founder of Right of Boom, to discuss the evolving role of MSPs in cybersecurity live from Impact Partner Conference in Nashville. From common security gaps and lessons learned from real-world incidents to the impact of AI, Andrew explores what it takes for MSPs to move beyond selling security tools and become true security providers. Tune in to learn how MSPs can better protect themselves and their customers while preparing for the challenges ahead.
• 
  Microsoft' Digital Defense Report - The 443 Podcast - Episode 390 05.10.2026 1h

  This week on the podcast, we cover a few takeaways from Microsoft’s recent Digital Defense Report. Before that, we discuss the recent Citrix Netscaler zero-days that were potentially under active exploit for weeks before disclosure before reviewing an interesting a bug bounty report on a Microsoft internal tool that was exposed externally.
• 
  Oops, OpenAI Hacked Australia's Health System - The 443 Podcast - Episode 389 28.09.2026 51m

  This week on the podcast, we cover yet another rogue AI security incident that Australia’s Prime Minister disclosed in front of the United Nations last week. Before that, we discuss an FBI alert on WaterPlum, a North Korean threat actor targeting IT professionals. Then, we cover the FBI themselves becoming a victim of cyberattack, this time by ShinyHunters.
• 
  One Image to Root Them All - The 443 Podcast - Episode 388 21.09.2026 35m

  This week on the podcast, we break down how a heap overflow in an image-decoding library nobody thinks about became a pull request inside OpenAI’s internal monorepo. Three researchers chained it with an OpenAI single sign-on flaw to hijack employee ChatGPT and Codex accounts in under 72 hours; and had an AI write the exploit for them. Before that, we cover the actively exploited maximum-severity authentication bypass in Cisco’s Identity Services Engine. Then we close with RatHat, a new Android malware that enables Wireless Debugging, reads its own pairing code from the screen, and asks a commercial AI assistant where to tap.
• 
  Mikrotik and Cisco Active Exploits - The 443 Podcast - Episode 387 14.09.2026 33m

  This week on the podcast, we analyze a set of actively exploited vulnerabilities in Mikrotik’s RouteOS followed by a pair of actively exploited vulnerabilities in Cisco’s Firewall Management Center. After that, we review a phishing attack against Trezor hardware cryptocurrency wallet users that originated with their third party marketing email provider.
• 
  Skynet Comes Online - The 443 Podcast - Episode 386 08.09.2026 54m

  This week, dive into OpenAI’s and METR’s analysis of the rogue OpenAI agents that hacked Hugging Face back in July. We go over the full attack timeline discussing the multiple message boards the agents created and the ultimate goal of their attack against Hugging Face and trust us, its as crazy as it gets. Before that, we discuss a recent dark web service that popped up selling 153 million stolen drivers licenses before discussing a research post into a malware implant discovered in inexpensive Chinese routers.
• 
  An interview with Euler Neto on ErrTraffic - The 443 Podcast - Episode 385 31.08.2026 32m

  This week we sit down with Euler Neto, a cybersecurity analyst at WatchGuard, to discuss his research into the ErrTraffic Malware-as-a-Service loader found targeting Portoguese-speaking users in recent months.
• 
  Cryptographic Context Injection - The 443 Podcast - Episode 384 25.08.2026 31m

  This week on the podcast, we discuss a research post that defines a new attack technique against AI tools called Cryptographic Context Injection. Before that, we cover an authentication bypass vulnerability in CircleCI’s MCP server after discussing 3.6 million records stolen from the Azure tenants of several large organziations.
• 
  American Cyber Mercinaries - The 443 Podcast - Episode 383 17.08.2026 39m

  This week on the podcast, we discuss a new White House memorandum that creates a program to authorize American private companies to begin conducting offensive cyber operations. Before that, we discuss a vulnerability write up for a Citrix Netscaler flaw before covering yet another prompt injection vulnerability in a popular AI tool.
• 
  Iran Hacks the US Water Supply - The 443 Podcast - Episode 382 10.08.2026 41m

  This week on the podcast, we cover a series of alerts form US law enforcement and intelligence sources describing Iran-backed attacks against municipal water supply utilities. Before that, we give an update on the OpenAI and HuggingFace rogue AI saga before discussing a research post on MCP configuration file risks.
• 
  HuggingFace's List of Demands - The 443 Podcast - Episode 381 03.08.2026 41m

  This week on the podcast, we review HuggingFace’s technical write up of their recent run in with a rogue OpenAI model, as well as their CEO’s demands from OpenAI in response. We then cover an interesting research whitepaper that describes a side channel attack that could let AI transcribe typed text by an audio recording alone. We end with a threat intelligence report about DNS Poisoning attacks against hotel Wi-Fi systems.
• 
  OpenAI's Models Go Rogue - The 443 Podcast - Episode 380 27.07.2026 37m

  This week on the podcast, we cover the crazy saga that unfolded between the popular open-source AI platform Hugging Face and the frontier AI lab OpenAI. After that, we discuss a recent WordPress remote code execution vulnerability WP2Shell and the research process that Searchlight Cyber followed to uncover it sing artificial intelligence. Finally, we end with a quick analysis of Palo Alto Global Protec’s authentication bypass vulnerability CVE-2026-0257
• 
  WatchGuard's Cyber Hygiene Report - The 443 Podcast - Episode 379 20.07.2026 44m

  This week on the podcast we cover the key takeaways from the just-released Cyber Hygiene Report from WatchGuard. After that, we discuss a recent alert from CISA and other international security agencies on state-sponsored attacks against network equipment. We end with an interesting research post on exfiltrating data from Claude’s memory.
• 
  Lessons from a CISA Security Incident - The 443 Podcast - Episode 378 13.07.2026 31m

  Enter our AI Innovation Challenge: https://secure.watchguard.com/aichallenge This week on the podcast, we review an after action report from CISA on a security incident they responded to back in May. After that, we cover a vulnerability in Amazon’s Q Extension for VSCode before covering a research post from Microsoft on Giga Wiper.
• 
  NIST and CVE Grading - The 443 Podcast - Episode 377 06.07.2026 32m

  This week on the podcast, we take a look at the impact of the US National Institute of Standards and Technology (NIST) backing away from their previous role of enriching vulnerability CVE records. Before that, we discuss Huntress’s insider threat drama before ending with an AI-assisted vulnerability discovery in the Front Gate Tickets platform.
• 
  NoisyS0cks - The 443 Podcast - Episode 376 02.07.2026 31m

  This week on the podcast we welcome back Ryan Estes from the WatchGuard Endpoint Security attestation team to discuss a recent deep dive analysis of NoisyS0cks. After that, we give an update on the latest trends in Ransomware targeting SMBs.
• 
  The Claude Fable Saga - The 443 Podcast - Episode 375 22.06.2026 34m

  This week on the podcast, we unpack the Claude Fable 5 release and subsequent revocation following an export control directive from the US federal government. After that, we cover the recent FortiBleed credential dump, discussing its likely origins, before reviewing the most recent Windows 0day disclosed by Nightmare Eclipse.
• 
  Helping APAC Organizations Stay Ahead of Cyber Threats with Brett Chalmers - The 443 Podcast - Episode 374 18.06.2026 33m

  Recorded live at WatchGuard’s APAC Partner Conference in Bali, Indonesia, this episode of 443 – Security Simplified features Brett Chalmers joining Marc Laliberte and Corey Nachreiner to discuss the evolving cybersecurity landscape across APAC. The conversation covers emerging threats, security challenges facing organizations, and how MSPs can help customers build resilience and strengthen their security posture in an increasingly complex threat environment.
• 
  Cybersecurity Challenges and Opportunities Across APAC with Henson Yem - The 443 Podcast - Episode 373 04.06.2026 31m

  Recorded live at WatchGuard’s Impact Partner Conference in Bali, Indonesia, this episode features Henson Yem, CIO and Technical Services Director at Tang Technology. Henson joins Marc Laliberte and Corey Nachreiner to discuss the evolving cybersecurity landscape across Australia and APAC, including emerging threats, the growing impact of AI, and the challenges organizations face in strengthening their security posture. The conversation also explores how MSPs can help customers build resilience, improve security maturity, and navigate an increasingly complex threat environment.