Smashing Security podcast #474: Polymarket can predict the future. So how did it miss this hack?

This episode transcript reviews recent active incidents: Polymarket suffered a supply‑chain front-end JavaScript compromise that siphoned roughly $3M from users, and a Fortinet vulnerability (“FortiBleed”) exposed credentials on an estimated 75,000 firewalls enabling attackers to harvest and crack credentials and deploy a Go-based password stealer. The discussion highlights scale and long-tail risk (especially for SMEs), the role of third-party integrations and credential reuse, and recommends immediate mitigations like rotating credentials, enforcing phishing-resistant MFA, and reducing internet exposure of critical devices.