Daniel and Sophie jump right into this week's episode with the return of favorite segments like D'oh, Behind Bars, and Who Got Pwned. They cover a VMWare patch so urgent, it's even being issued to EOL software. Roku had some trouble this week with angry customers and breached accounts (which, by the way, are barely worth 50 cents). We saw some sour news from the US goverment this week: CISA fell victim to a breach, and the FBI announced record losses to cybercrime in 2023. The Technado team covers all this and more in this week's Rapid Fire segment. In today's Deep Dive, Daniel gives us a detailed look at MagnetGoblin (the threat behind Ivanti, Magento, and more hacks). We take a look at some of the threat group's favorite tools and tactics, as well as the 1-day vulnerabilities they've been exploitin recently. In a bonus Deep Dive, there's a Python Infostealer lurking in messaging services - and thanks to the researchers at Cybereason, we have the latest on each variant and how this attack works. Want to read further? Check out the articles Soph and Dan covered today: https://www.malwarebytes.com/blog/news/2024/03/patch-now-vmware-escape-flaws-are-so-serious-even-end-of-life-software-gets-a-fix https://www.bleepingcomputer.com/news/security/over-15-000-hacked-roku-accounts-sold-for-50-each-to-buy-hardware/ https://9to5mac.com/2024/03/10/security-bite-hackers-breach-cisa-forcing-the-agency-to-take-some-systems-offline/ https://www.bleepingcomputer.com/news/security/fbi-us-lost-record-125-billion-to-online-crime-in-2023/ https://thehackernews.com/2024/03/proof-of-concept-exploit-released-for.html https://www.darkreading.com/application-security/japan-blames-north-korea-for-pypi-supply-chain-cyberattack https://www.bleepingcomputer.com/news/security/mitm-phishing-attack-can-let-attackers-unlock-and-steal-a-tesla/ https://www.bleepingcomputer.com/news/google/google-engineer-caught-stealing-ai-tech-secrets-for-chinese-firms/ https://www.scmagazine.com/news/change-heal