In this episode of Secure Disclosure, we break down two major cyber-security incidents shaking the industry. First, researcher Charlie Eriksen joins us to reveal how the Shai Hulud “The Second Coming” worm compromised over 800 NPM packages and triggered 30,000+ secret-filled GitHub repos and why the worm can even wipe your machine when containment fails. Then, we sit down with Jérémy Sicon and Quentin Bourgue from sekoia.io to uncover a highly sophisticated phishing campaign abusing Booking.com accounts using PureRAT malware and a sprawling criminal ecosystem. Subscribe for weekly deep dives into the threats shaping our digital world. 00:00 – Introduction 01:03 – Shahalude: The Second Coming 17:07 – Sponsored Segment (Aikido SafeChain) 17:10 – Malware-for-Hire: Booking.com Phishing Operation