Jared's Technology Podcast Network · Jared Rimer

Sans News Bites for December 2, 2025

December 9, 2025·1 hr 14 min·4 clips

Kupang says personal data for nearly 34 million customers was accessed without authorization.

1. Jared’s Technology Podcast Network covers the Sans News Bytes newsletter for December 2, 2025, after renaming the show away from the old technology focus. 2. Jared Reimer hosts, and he reads the Sans newsletter while adding reactions from Lee Neely, Moses Frost, and other editors whose comments are quoted in the file. 3. The episode asks what security news matters most from Sans volume 27, number 87, and how the items affect users, regulators, and defenders. 4. Kupang’s disclosure says personal data for 33.7 million customers was accessed without authorization, including names, email addresses, phone numbers, shipping addresses, and partial order histories. 5. The Kupang item says the incident was first detected on November 18, 2025, while the investigation placed intruder access back to June 24, 2025. 6. Jared highlights the possibility of an insider threat because local media suggested a former employee may have been involved and because the company received emailed threats. 7. India’s November 21, 2025 directive requires phone makers to pre-install Sanchar Sathi and keep it visible, accessible, and not disabled or deleted. 8. Jared says Sanchar Sathi can identify spoofed international calls using India’s country code, report fraud through call, SMS, and WhatsApp, and block stolen devices. 9. He questions the privacy and surveillance implications of forcing installation and says the policy is different from an opt-in app choice. 10. Singapore’s Ministry of Home Affairs directed Apple and Google to prevent spoofing of gov.sg and Singapore government agency names in iMessage and Google Messages by the end of November 2025. 11. Jared notes that Singapore already used the gov.sg SMS sender ID since July 2024 and that the new directive extends protections to messaging platforms. 12. He and the quoted editor question how Apple and Google will enforce the restrictions and whether threat actors will find bypasses. 13. Crisis24 is rebuilding the CodeRED emergency notification environment after ransomware forced it to decommission the legacy system. 14. The CodeRED compromise involved names, addresses, email addresses, phone numbers, and passwords tied to user profiles. 15. Jared points out that the rebuild uses backups from March 31, 2025, so some accounts will not return in the new system. 16. CISA warns that commercial spyware campaigns are targeting Signal and WhatsApp users with zero-click exploits, impersonation, phishing, and malicious QR codes. 17. Jared reads a long Fluent Bit item about five vulnerabilities, including CVE-2025-12972 and CVE-2025-12970, which could lead to remote code execution or other compromise. 18. The episode’s tone shifts between table-of-contents commentary, quoted editor reactions, and Jared’s own side notes about what he knows and does not know. 19. People focused on current security news, breach reporting, and platform policy fights would get the most from this episode. 20. Listeners wanting polished analysis without long newsletter read-throughs may skip this episode.

As heard by us

A security update that makes backup gaps the real headline.

Jared states the shift without fuss: the podcast is now mostly about security, while the technology podcast remains in play when it fits. From there, the episode turns to Sans News Bytes and the Crisis24 Code Red story, where the practical center of gravity is the rebuild from…

Read the full review in PlayNext →

Why you'd press play

A renamed security roundup that turns a ransomware rebuild into the headline.

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from Jared's Technology Podcast Network