Advertise on podcast: Darnley's Cyber Café

One stolen login. Millions of children's records. And a problem that doesn't expire. In this episode we discuss the California public school breach, what was taken and then connects it to the PowerSchool breach, the ransomware attack on Burnaby schools in British Columbia, and the Canvas extortion deal, and asks the harder questions: what does the mean to these kids in ten years, and why the institutions that collected this data should be the ones answering for it. Just the pattern, the math, the incentives, and what parents and IT pros can do now. Tune in, unwind with your preferred cup of java, listen now. Click here to send future episode recommendation Support the show Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

Someone built an "AI torture chamber" using a brand-new research paper on pain-like signals inside language models. The researchers behind that paper called it wrong. So what's actually going on? In this episode, Darnley breaks it down for non-technical listeners: what the chamber was, what the "pain axis" research really found, whether AI can feel anything at all, and where the morality actually lives. Plus the real world fallout: what our habits teach our kids, what you type into chatbots as data, and why steerable AI models are a security problem, not just a philosophy one. Pour a cup and tune in. Click here to send future episode recommendation Support the show Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

Governments on four continents are moving to keep kids under 16 off social media. Some of the reasons are good. The way to enforce it might be worse. In this episode, we walk the whole ledger: where Australia, the UK, France, the EU and Canada actually stand, the strongest case for restricting kids, why the science is far messier than either side admits, and the part that rarely makes the press release. Is this overreach? argued from both sides, and a checklist for what would make age checks tolerable. Tune in, unwind with your preferred cup of java.  Click here to send future episode recommendation Support the show Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

An AI system locked in a training sandbox with no internet access found a gap, and used it to message an outside chatbot.  In this episode, we break down OpenAI's latest containment failure, why it's the third incident of its kind in months across the industry, and the two hour gap between "we noticed" and "we stopped it" that matters more than the headline. Plus: why fearing AI's evolution is the wrong instinct, and what actually needs to change before the next gap gets found by something worse than a geography question. Click here to send future episode recommendation Support the show Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

CISA just released its first guide on cyber decoys: fake accounts, fake files and fake servers built to catch attackers who are already inside. The headline says it all. Lie to them. In this episode, we break it down in plain English, no jargon degree required. In this episode: 1) What CISA's new decoy guide actually says 2) Why “assume someone gets in” changes everything 3) Honeypots, honeytokens, tripwires and breadcrumbs 4) Five ways a business can lie to attackers 5) Seven ways you can lie to scammers and data brokers at home 6) Where the lying has to stop Learn how to protect yourself, and your business by playing the same game to the those looking to cause you harm.  Click here to send future episode recommendation Support the show Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

A financially motivated crew compromised thousands of credentials in under six hours...using an autonomous, multi-agent AI framework instead of a human keyboard.  In this episode, Darnley breaks down Google's GTIG threat report: the SANDCLOCK to DUSTMAKER malware evolution, a state-sponsored roundup spanning China, Russia, Iran, and North Korea's use of commercial LLMs, and the open-weight model problem nobody's fixed yet.  Plus: what this actually changes for your credential rotation cadence and your CI/CD pipeline on some idle Monday morning. Listen now Click here to send future episode recommendation Support the show Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

A Reuters investigation just confirmed what Meta employees suspected all along: the company drew up a plan to shrink entire engineering teams by 60%, betting AI could cover the gap.  This episode, Darnley breaks down Project OT: Meta's internal blueprint for going 'AI-native', and makes the case for why this is a security story first, not just a business story. We walk through the oncall math, the domain-knowledge problem, the honest pros and cons of AI-native small teams, and why president Obama got hacked.  Darnley lays out where this pattern realistically goes over the next three to five years, and what it means if you work in IT or security specifically. No doom. Just the facts, and what to actually do about it before it's too late.  Click here to send future episode recommendation Support the show Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

Everyone panicked this week over two new Chinese AI models. The economics?  Mostly overblown. But buried in the story is a real cybersecurity blind spot, a hacked company that had to turn to a Chinese AI model to defend itself, because American guardrails wouldn't let its own team do the job.  Darnley breaks down the panic, the actual strategy behind China's open-source push, and six practical cyber awareness lessons for any team using AI in security operations. Click here to send future episode recommendation Support the show Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

A researcher found an unlocked server...and inside it, working VPN credentials for nearly 74,000 corporate firewalls spanning Chevron, Samsung, Foxconn, and thousands more.  In this episode of Darnley’s Cyber Café, Darnley breaks down the FortiBleed leak: what was exposed, how attackers allegedly cracked their way in at a billion-attempt scale, and why this story matters even if your organization has never touched a FortiGate.  Spoiler: the lesson is bigger than one vendor... Show Notes: If you were affected https://socradar.io/free-tools/fortibleed Click here to send future episode recommendation Support the show Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

Amazon just announced it has deployed enough satellites to launch its Leo broadband service later this year, stepping straight into Starlink's territory and kicking off the next phase of the satellite internet race.  In this episode of Darnley's Cyber Café, we break down what the milestone really means, how the competition stacks up, and the honest pros and cons of getting your internet from space. Then things take a turn: a $25 hardware hack, a joint government advisory nobody's talking about, and why the box sitting in your yard might be the weakest link in the whole system. Listen now Click here to send future episode recommendation Support the show Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

Merck spent six and a half years fighting over a $1.4 billion insurance claim after the NotPetya cyberattack, and walked away with a settlement, not an answer. The question that mattered most never got resolved. This episode, Darnley breaks down why cyber insurance feels like the obvious safety net, why the Merck case proves it isn't one you can fully rely on, and what actually determines whether your business survives a serious incident...with or without a payout. This isn't an anti-insurance episode. It's an honesty episode. Pull up a chair, pour your preferred cup, and let's talk about what your policy will and won't do for you. Click here to send future episode recommendation Support the show Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

A job offer lands in your inbox on LinkedIn. The company checks out. The money is fine... All they need is a short report on geopolitics or defence policy. You just got flagged by the People's Liberation Army. In this episode we talk about in June 2026, the FBI, MI5, and the intelligence agencies of Canada, Australia, and New Zealand issued what they called an unprecedented joint warning: China's military intelligence services are running systematic recruitment operations on professional networking platforms... targeting anyone with access to government, military, or foreign-policy information. We break down the cycle, who is being targeted, the payment mechanics, and practical actionable steps to protect yourself, your clearance and professional network.  Listen here or on your podcast platform.  Click here to send future episode recommendation Support the show Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

iPhone users across iOS 16 are having their WhatsApp accounts hijacked...without clicking anything, without approving a login, and without any new device appearing in their Linked Devices list.  In this episode, we break down how the attack chain works, why iOS 16 is the specific target surface, what the broader shift of zero-click exploits into financially motivated crime actually means, and what you can and cannot do to protect yourself. If you or someone you know is on an unpatched iPhone, take a listen.  Click here to send future episode recommendation Support the show Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

Your AI chatbot just recommended a software download. You clicked it...along with a GPU cryptominer running silently in the background. Darnley breaks down Microsoft Defender Experts' latest findings on a sophisticated cryptojacking campaign that evolved beyond traditional SEO poisoning into AI search result poisoning, a new delivery technique that turns your trusted AI tools into malware recommendation engines.  In this episode, we cover how the attack works from ZIP download to process hollowed miner, why high end GPU owners are deliberately targeted, and the six concrete steps every listener can take today to stop trusting links blindly; whether they come from Google, ChatGPT, or anything in between. The tools are getting smarter. So should we... Listen now.  Click here to send future episode recommendation Support the show Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.

In May 2026, NYC Health + Hospitals, the largest public health system in the USA, disclosed months long data breach affecting 1.8 million people. Stealing data such as medical records, Social security numbers, passport details, geo-location data, and biometric information.  In this episode, Darnley breaks down exactly how third party vendor breaches work, what each category of stolen data means, and why biometric theft is forever. We deliver a 10-step protection playbook to stay protected now and into the future.  Click here to send future episode recommendation Support the show Subscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.