By early afternoon on 21 October 2026, the Dutch government's cyber-security agency had taken its own website offline as a precaution because of flaws in PHP, the language behind about seven of every ten websites whose server-side language can be identified. PHP had not yet published a fix. That day and the next, governments and organisations from Canada to Japan did the same. This episode follows what PHP does on a server, how a request that runs out of memory can leave data half-built for the cleanup step to trust, the second flaw one fix also closed, why the problem found in 2024 sat unfixed, the leak and the early release, the official advice, and where the record stood on 23 October 2026.

In February 2024, a login with a username and password that were not the user's own reached Change Healthcare, a company most patients had never heard of, which sits between pharmacies, doctors and insurers. The portal did not ask for anything more. Over nine days the attackers moved through the network, copied data out, and then set off ransomware. UnitedHealth took Change offline, pharmacies and providers struggled to get claims processed and paid, and the company paid a ransom of twenty-two million dollars. This episode follows how it worked, what the public record says about who was behind it, how the count of people reached about 192.7 million, and the one control that was missing.

This podcast uses AI-generated narration, visuals and music.

Over a weekend in September 2022, footage of the next Grand Theft Auto appeared on a fan forum, and Rockstar Games confirmed that an unauthorized third party had been inside its systems. Rockstar has never said how. Uber, breached days earlier, did: by its own account, a contractor's password that Uber believes was likely bought, repeated login approval requests, and one request accepted. This episode follows what Rockstar, its parent company Take-Two and Uber put on the record, keeps the forum poster's claims labelled as claims, and turns to the federal Cyber Safety Review Board's findings: across the attacks it studied, credentials were stored where teams share information, in chat and wikis, and the route to the most valuable material often ran through them.

This video uses AI-generated narration, visuals, and music.