Dougbot, RedSun, ATHR, Vishing, Cisco, Google, Chrome, Severance, Shor, Josh Marpet.. - SWN #573

A wave of alarming cyber threats is reshaping the security landscape, with researchers exposing critical vulnerabilities in Microsoft Windows and Cisco systems, while cybercriminals deploy AI-powered vishing platforms to automate credential theft. The episode opens with Chaotic Eclipse revealing a new 'Red Sun' zero-day exploit that bypasses even the latest Windows patches, sparking controversy over Microsoft's handling of researcher disclosures. Meanwhile, the ATHR platform demonstrates how AI and human-like agents can conduct sophisticated voice phishing attacks to steal Google, Microsoft, and Coinbase credentials—highlighting a dangerous evolution in social engineering. Cisco's recent patch blitz for Webex and Identity Services Engine vulnerabilities underscores the growing 'bug apocalypse,' where agentic AI accelerates discovery but also amplifies risk. On the privacy front, Google Chrome's failure to block 30+ browser fingerprinting techniques reveals a troubling gap in user protection, while new Android policies attempt to limit app access to contacts and location—though with questionable effectiveness. The show also dives into the destabilizing potential of stablecoins under the new Genius Act, warning of a looming crisis where small banks could collapse from fraudulent stablecoin injections or even deliberate inflation manipulation.