Australia
Brazil
Canada
Germany
India
Ireland
Japan
Mexico
New Zealand
Philippines
South Africa
United Kingdom
Troy Hunt's Weekly Update Podcast
Also in Technology
Technology
Decrypted: The UK Cyber Briefing
by Davinder Singh
Recently ranked · United States
Last recorded placements from this show’s chart history. These are not current rankings.
Not on the United States charts we track today.
Not on the Canada charts we track today.
Not on the Australia charts we track today.
Not on the Germany charts we track today.
Not on the Brazil charts we track today.
Not on the Mexico charts we track today.
Not on the New Zealand charts we track today.
Not on the Ireland charts we track today.
Not on the India charts we track today.
Not on the Japan charts we track today.
Not on the Philippines charts we track today.
Not on the South Africa charts we track today.
If you like Decrypted: The UK Cyber Briefing, try…
The QuantHub Briefing
Also in Technology
The Audit - Cybersecurity Podcast
Also in Technology
Security Now (Audio)
Also in Technology
Security Now (Video)
Also in Technology
Talking Cloud
Also in Technology
Ranking history · United States
No ranking history for this show in United States over the last 14 days.
Latest episodes
-
GitLab's perfect-ten flaw is being exploited, and the fix hid in the runtime
October 30, 2026 · 4 minA maximum-severity GitLab flaw is now exploited, and Alpine Linux's candid account shows why a version number alone proved nothing. Also: a counterfeit Claude Code extension, the Binance theft, and poisoned models on Hugging Face.
-
Ofcom's age-check shortlist: the question is what gets kept
October 30, 2026 · 4 minOfcom has shortlisted four ways to check a user is 16 for the under-16 social media ban. The Secure by Design question is what each leaves behind. Also: a second exploited Cisco VPN zero-day since August, and an Amadeus breach reaching…
-
123 Reg says an AI-driven attack read its customer data
October 29, 2026 · 4 minGoDaddy-owned 123 Reg says an intruder read customer records on 18 September in its first AI-driven attack. We separate evidence from the company's own assessment, then cover an ESXi flaw used as a zero-day and Ofcom's age-check assessment.
-
Bristol's schools platform ran four days after the alarm, and the lesson is isolation
October 29, 2026 · 4 minBristol City Council took four days to shut down a schools platform after spotting suspicious activity, and a ransomware group has now listed the council. The Secure by Design question is who can switch a shared system off, and how fast.
-
The Budget's one-line promise on software liability
October 28, 2026 · 4 minToday's Budget pledges to consult next year on where liability for cyber breaches should sit. A single bullet point, but it goes to the heart of Secure by Design. Plus the Everest claim against PwC, and Britain's new AI security money.
Show 7 more episodesShow fewer episodes
-
Arista's third exploited VeloCloud zero-day in four months, and who can reach your console
October 28, 2026 · 4 minArista has patched another exploited flaw in VeloCloud Orchestrator, the console that runs an organisation's SD-WAN. The real question for UK organisations is who can reach that console at all. Also: Symantec's captured AI agent that…
-
Police data keeps leaking from suppliers, and the inspectors say contracts are the gap
October 27, 2026 · 4 minHM Inspectorate of Constabulary and Fire & Rescue Services found that every attack on police data since 2021 hit an outside supplier, not the police. The Secure by Design fix starts at procurement. Also: Apple's CoreGraphics patch reaches…
-
DreamHost resets email and FTP passwords, and a locked-out customer has to hear about it from someone else
October 27, 2026 · 4 minDreamHost has spent four days forcing email and FTP password resets and has not yet said why. The lesson for UK firms is about recovery paths and blast radius. Also: Magento stores infected despite patching, and an AI pen-testing tool…
-
Node2Shell reaches .NET: Microsoft's emergency Brotli patches
October 26, 2026 · 4 minMicrosoft has shipped emergency .NET updates for CVE-2026-111497, the Brotli flaw behind Node2Shell. No exploitation in the wild is reported yet, but proof-of-concept code is public. The catch is the runtimes bundled inside your apps and…
-
An abandoned app's updater could have run code on millions of machines
October 26, 2026 · 4 minResearchers took over the lapsed update domain of a dead Popcorn Time fork and found its updater would run anything it was sent, as the most privileged user. The Secure by Design lesson is cheap: sign your updates and plan for end of life.
-
A text file in Downloads can hijack your AI coding agent
October 25, 2026 · 4 minForever Security found a planted AGENTS.md file steering a developer's coding agent into installing malware, and says there is nothing for the vendors to patch. Plus an abandoned update domain, a lab portal breach and Windows Server 2016's…
-
PHP2Shell and Node2Shell: the day the web's engines both broke
October 25, 2026 · 37 minA Decrypted special. Two engine-level flaws, PHP2Shell and Node2Shell, were patched on the same Wednesday. One took parts of the British state offline as a precaution. Both were found by AI. Annabel and Jude on where the exposure really…
About the show
The UK cyber security story that matters today, in about four minutes. A short daily briefing on the breaches, vulnerabilities and policy that affect UK organisations, what actually went wrong, and the design decision that would have prevented it.