Open Tabs: the StashGrid podcast
A short cybersecurity podcast from Nova and Nyx Cache: the stories I opened on my phone and meant to read later, explained in a few minutes, with the fix where there is one. Every story links to its original source below.
Listen on Spotify, Apple Podcasts or Amazon Music (search "Open Tabs by StashGrid"), or watch on YouTube.
Open Tabs 7: Claude Code Extension Backdoor, WordPress and GitLab Under Attack
3 Nov 2026 · Watch on YouTube · Listen on Spotify
Backdoor week. The official Claude Code extension on Open VSX was swapped for a poisoned copy that quietly added an SSH key, a WordPress flaw drew nearly 63,000 attack attempts in a day, Drupal Commerce and a max-severity GitLab bug are being exploited, and an admin learns that a swear word is not a password strategy. Library pick: lock down SSH.
- The Hacker News: official Claude Code extension trojanized
- The Hacker News: WordPress RCE flaw draws nearly 63,000 attempts
- BleepingComputer: Drupal Commerce Core flaw exploited
- BleepingComputer: max-severity GitLab flaw exploited
- The Register: the swear-word password
Open Tabs 6: NetScaler Patched Again, AD FS Locks Down, Okta RADIUS Blocks Everyone
26 Oct 2026 · Watch on YouTube · Listen on Spotify
Identity week. NetScaler boxes that were already patched need patching again, Microsoft locks down a forgotten AD FS key store, Okta's new RADIUS agent blocks everyone until you say otherwise, and Defender for Identity gets easier for small teams.
- Citrix CTX697191
- The Hacker News: September NetScaler bugs exploited
- Microsoft KB5121391 (AD FS DKM container)
- Okta RADIUS agent version history
- Defender for Identity: what's new
- Windows 11 25H2 release health (KB5124010)
- Library pick: DNSSEC explained, with a lab
Open Tabs 5: Your ISP, Your Phone and Fake ChatGPT Ads: Who's Watching?
19 Oct 2026 · Watch on YouTube · Listen on Spotify
Your internet provider still sees most of where you go, your Android phone may check your location hundreds of times a day, fake ChatGPT ads push malware, the FBI's jobs portal gets hit, and a teenager earns a Microsoft bug bounty. Plus the two-minute fix where there is one.
- ISP still sees most of where you go
- Android checks location 500+ times a day
- Fake ChatGPT ads deliver malware
- A free open-source Android ad blocker
- FBI confirms incident on its jobs portal
- Teen finds a Microsoft token flaw, earns $5,000
- Tab of shame: the once-a-month NAS
- Library pick: what clearing your cache does
Open Tabs 4: Card Skimmers, From the Gas Pump to the Checkout Page
12 Oct 2026 · Watch on YouTube · Listen on Spotify
Card skimmers moved from the gas pump to the cash machine to the checkout page. Five stops: Bluetooth skimmers inside pumps, ATM cameras and shimmers, SNAP skimming losses, Magecart code on checkout pages, and why tap-to-pay is safer.
- FBI: Skimming
- UC San Diego: Bluetana
- Nextgov/FCW: USDA OIG on SNAP skimming losses
- Philadelphia Inquirer: NJ and PA move to chip SNAP cards
- Pennsylvania OSIG: EBT lock feature
- Malwarebytes: Magecart hits major payment networks
- BleepingComputer: Ghost Tap
- VERIFY (10TV): tap to pay vs skimmers
- Library pick: is this link safe?
Open Tabs 3: Living Off the Land: LOLBins, GTFOBins and How Defenders Catch Them
9 Oct 2026 · Watch on YouTube · Listen on Spotify
The scariest hacking tools might already be on your computer. Attackers use the trusted programs that ship with Windows and Linux instead of their own malware, and defenders catch it anyway.
- LOLBAS
- GTFOBins
- Sigma detection rules
- Lab 10: test detections with Atomic Red Team and Wazuh
- Linux privilege escalation cheat sheet
Open Tabs 2: LLM Red Teaming, Splunk and a Honeypot: We Tested Everything
9 Oct 2026 · Watch on YouTube · Listen on Spotify
Three labs, three real tests, and every one broke in a way the documentation didn't warn about: an AI that kept leaking its secret, a Splunk time machine, and a honeypot.
- LLM red teaming lab
- Splunk lab for beginners
- Home honeypot lab (OpenCanary)
- Maltego lab for beginners
- Which SIEM to learn
Open Tabs 1: AI Agents, Docker Sandboxes and GitHub Actions Malware
9 Oct 2026 · Watch on YouTube · Listen on Spotify
Put the agent in a box: an AI coding agent reportedly wipes thousands of files, Docker ships sandboxes for AI agents, two GitHub Actions keep serving malware after a fix, and Kiteworks pulls the plug for six hours.
- AI agent deletes 48,000 files
- Docker's sandboxes for AI agents
- GitHub Actions re-enabled with the payload still active
- Kiteworks urges a 6-hour server shutdown
Voiced by AI characters Nova and Nyx Cache; stories chosen by Steven Browning. Spot a mistake or know a better way? Tell us.