CISA has issued a warning about active attacks targeting Microsoft SharePoint, urging immediate hardening measures. The NSA, in conjunction with other agencies, is promoting coordinated vulnerability disclosure to better collaborate with security researchers. A new macOS threat called ClickLock Stealer is identified, utilizing social engineering and process termination to bypass security. Critical vulnerabilities in Splunk and Zoom have been patched after discovery. The Spirals ransomware has been observed to encrypt entire victim networks in less than 24 hours. New techniques are emerging that exploit a Windows feature to evade Endpoint Detection and Response systems. The LabubaRAT, written in Rust, is being distributed disguised as NVIDIA software. In a significant data privacy development, 23andMe has agreed to an $18 million settlement following its 2023 data breach. The episode also recounts a past, audacious data center heist. Finally, the show features an interview with Ryan Kalember of Proofpoint discussing the emerging insider threat posed by agentic AI.