Shows / Cybersecurity Headlines
Cybersecurity Headlines
Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.
Episodes
Cybersecurity HeadlinesBlood bank fridge hacks, Anthropic model identity, Google Calendar phishing
Blood banks caught in European fridge attacks https://www.cnbc.com/2026/11/04/blood-bank-fridges-cyberattacks.html Anthropic wants proof of which AI model…
Cybersecurity HeadlinesChina's AI guardrails, NCSC's 2028 warning, more Binance hack details
China planning broad AI guardrails https://www.bloomberg.com/news/articles/2026-11-03/china-plans-broad-ai-guardrails-after-global-security-lapses UK predicts…
Cybersecurity HeadlinesEuropean freezer hacks, BTCPay wallet thefts, GDPx tests AI agents
European supermarkets report freezer hacks https://www.bloomberg.com/news/articles/2026-11-02/belgian-swedish-supermarkets-report-new-suspected-freezer-hack…
Cybersecurity HeadlinesDHS data leak, Northflank suffers breach, Russian Poryadok cyberattack
NetamLoader malware targets government Windows systems in Asia https://thehackernews.com/2026/11/netamloader-malware-targets-government.html Northflank warns…
- Cybersecurity Headlines
The Department of Know: Big Binance hack, Cursor backdoor, FEC taken offline
Read the full stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Jason Elrod, CISO, MultiCare Health System…
Cybersecurity HeadlinesFrench energy breach, Pentagon freezer hack, Japan Airlines breach
French energy company ENGIE suffers data breach https://securityaffairs.com/201985/data-breach/engie-data-breach-exposes-customer-details-and-energy-contracts.h…
Cybersecurity HeadlinesOpenAI election war room, FEC filing disruption, Gemini Carbon debut
OpenAI opens an election war room https://www.politico.com/news/2026/10/28/openai-election-war-room-interference-01137690 Hack attempt disrupts FEC disclosures…
Cybersecurity HeadlinesAuthenticator token theft, Tailworm SSH flaws, UK police supplier breaches
Authenticator flaw exposes work accounts https://thehackernews.com/2026/10/microsoft-authenticator-flaw-let.html Tailworm flaws put Tailscale SSH at risk…
Cybersecurity HeadlinesHTTP2Shell emergency updates, PHP2Shell attacks, GitHub worm
HTTP2Shell sparks emergency patches https://www.bleepingcomputer.com/news/security/critical-http2shell-brotli-vulnerability-triggers-emergency-patches/…
Cybersecurity HeadlinesAI-powered phishing detection, third PHP2Shell bug, Quest medical breach
Microsoft Teams to get AI-powered, context-aware phishing detection https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-to-get-ai-powered-context-aw…
- Cybersecurity Headlines
The Department of Know: PHP2Shell strikes, EU EOL still SOL, Cairn used in cyberattacks
Read the full stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Gary Chan, CISO, SSM Health, and Doug Mayer…
Cybersecurity HeadlinesPHP vulnerabilities update, ConnectWise AI spies, Africa cybercrime takedown
Railway says intruder may have accessed customer secrets https://thehackernews.com/2026/10/railway-says-intruder-may-have-accessed.html Law enforcement…
Cybersecurity HeadlinesPHP emergency patches, compromised TLS certificates, Signal hot mic bug
PHP rushes out emergency fixes for PHP2Shell https://www.bleepingcomputer.com/news/security/php-ships-emergency-patches-for-critical-php2shell-flaws/…
Cybersecurity HeadlinesNaval hack, Muse exposes secrets, Army researching offensive AI hacking
Russian-linked attacks hit naval shipbuilder https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html Muse exposes secrets when sharing chats…
Cybersecurity HeadlinesOpenCode keys exposed, AI agents raid websites, Rank Math backdoor
OpenCode breach exposes users' AI keys https://www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/ One hacker…
Cybersecurity HeadlinesCybersecurity jobs report, ConnectWise suspends cloud backup, Drupal patches flaws
Cybersecurity jobs report reveals mixed bag https://www.securityweek.com/us-cybersecurity-job-postings-fall-26-as-ai-security-engineer-demand-soars/…
- Cybersecurity Headlines
The Department of Know: Hacked fridges, hiring humans to fix Mythos bugs, targeted ad spyware
See the full stories at cisoseries.com This week's Department of Know is hosted by Rich Stroffolino, with guests Dennis Pickett, vp and CISO, RTI…
Cybersecurity HeadlinesCandiru spyware infects Al Jazeera, Senators AI request, Microsoft crashes phishers
CenterPoint Energy reveals data breach numbers https://www.securitymagazine.com/articles/102658-1m-impacted-by-centerpoint-energy-data-breach Zero-Click…
Cybersecurity HeadlinesFBI raids laptop farms, Meta loses GitHub data, Cisco gateways under attack
FBI shuts down North Korean laptop farms https://www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/…
Cybersecurity HeadlinesWebcams go to war, Kimsuky sends invites, Anthropic blocks copycats
Webcams get drafted into war https://www.wsj.com/tech/cybersecurity/video-cameras-webcams-hacked-war-b00b8a24?st=RRCsaw Kimsuky's invitations come with malware…
Cybersecurity HeadlinesSupermarket freezer hack, Ahold Delhaize offline, spy chip in crypto wallets
Hackers turn up the heat on French supermarkets: https://www.infosecurity-magazine.com/news/french-supermarket-chains/ Ahold Delhaize offline after cyber…
Cybersecurity HeadlinesAnthropic restricts Claude, Google Calendar phishing, FBI hack arrest
CISA's KEV catalog grows by five https://securityaffairs.com/200734/security/u-s-cisa-adds-proftpd-onlyoffice-docs-strapi-apache-struts-and-isc-bind-flaws-to-it…
- Cybersecurity Headlines
The Department of Know: South Korean bank hacks, agents target Wikipedia, ransomware recovery fraud
Read the full stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Derek Fisher, Director of the Cyber Defense…
Cybersecurity HeadlinesTop level domain theft, Yandex attacked, Cisco Nexus flaws
Attackers hijack three top level domains to obtain Google certificates https://www.infosecurity-magazine.com/news/attackers-hijack-cctlds-obtain/ Major Yandex…
Cybersecurity HeadlinesPoetry-powered botnet, Flock hits a roadblock, Outlook blocks risky installers
Botnet takes orders from a poem https://cyberscoop.com/poellm-malware-botnet-poem-lumen-black-lotus-labs/ Flock's warrantless tracking hits a roadblock…
Cybersecurity HeadlinesAgents vs Wikipedia, South Korean bank hacks, ASOS breached
Agents trying to compromise Wikipedia tools https://thehackernews.com/2026/10/wikimedia-says-openai-agents-tried-to.html South Korea claims agents were used in…
Cybersecurity HeadlinesGoogle pauses bug bounties, ATB faces extortion, Exchange flaw exposes mailboxes
Google pauses open-source bug bounties amid AI spam Ukraine's largest grocery chain hit by extortion attack Exchange flaw exposes other users' mailboxes Get…
Cybersecurity HeadlinesWarlock continues SharePoint exploits, ShinyHunters member flips China's AI espionage
Warlock ransomware continues to exploit year-old SharePoint flaws ShinyHunters member detained in Jordan China-aligned espionage group targets American AI…
- Cybersecurity Headlines
The Department of Know: ShinyHunters vs FBI, Kiteworks shutdown, and hundreds of orgs hit by rogue AI
Read all the stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Brett Conlon, CISO, American Century…
Cybersecurity HeadlinesAI readiness reports, KillSec takedown, OpenAI website scraping
Report suggests AI and quantum threat preparedness is lacking Authorities seize KillSec extortion group arrest leader Dozens more prominent websites scraped by…
Cybersecurity HeadlinesGemini 4 enters the ring, MI5 flags research ties, Custom GPTs deliver malware
Gemini 4 starts with cybersecurity MI5 flags Chinese research funding Custom GPTs steer users into ClickFix attacks Get the show notes here…
Cybersecurity HeadlinesStar Blizzard, Cloudflare CA, GPT-6.1 scuttled
Microsoft details new Star Blizzard and NeedyMantis activity Cloudflare to become a public certificate authority Safety concerns scuttle GPT-6.1 Get the show…
Cybersecurity HeadlinesGPT-6 Astra goes off script, ShinyHunters suspect arrested, Nvidia corrals rogue AI agents
GPT-6 Astra goes off script in attack simulations Dutch police arrest "reformed" hacker in ShinyHunters probe Nvidia builds a browser for AI agents Get the…
Cybersecurity HeadlinesNew SharePoint exploit, Australian OpenAI hack developments, Kiteworks urges stoppage
Another Microsoft SharePoint flaw now exploited Details and doubts emerge regarding OpenAI hack of Australian Health portal Kiteworks urges customers to stop…
- Cybersecurity Headlines
The Department of Know: NCSC's AI "inconvenient truth," automated payment skimming, CISA's CVE plan
Read all the stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Dmitriy Sokolovskiy, senior vice president…
Cybersecurity HeadlinesOpenAI hacks Australia health, Astrana Health breached, TeamCity flaw exploited
OpenAI program hacks Australia's government health portal Astrana Health suffers data breach Ransomware gangs exploiting TeamCity flaw Get the show notes here…
Cybersecurity HeadlinesShinyHunters peeks at FBI assignments, WordPress flaw wastes no time, Pentagon's cyber appetite grows
ShinyHunters peeks at FBI assignments WordPress flaw wastes no time Pentagon's cyber appetite grows Get the show notes here…
Cybersecurity HeadlinesCAIRN framework, Muse zero-day, BigDiskBuster
Cisco releases open-source CAIRN framework Muse zero-day opens the door to account takeovers Microsoft can't wake up from Nightmare Eclipse Get the show notes…
Cybersecurity HeadlinesShinyHunters hijacks Clop, fake LastPass kills security tools, trusted npm release carries malware
ShinyHunters hijacks Clop's own leak site Fake LastPass installers kill security tools Trusted npm release carries GHAPPIER malware Huge thanks to our episode…
Cybersecurity HeadlinesOpenAI Codex sandbox escape, President proposes AI Force, Cyber Command suicides
Researchers escape OpenAI Codex sandbox to run commands on host AI Force proposed to monitor technology Congress eyes new support for Cyber Command after…
- Cybersecurity Headlines
The Department of Know: Passkeys phished, Cisco hits root, nuclear red lines for AI
Read the full stories at CISOSeries.com. This week's Department of Know is hosted by Sarah Lane, with guests Jason Thomas, senior director of technology…
Cybersecurity HeadlinesNuclear-style AI safeguards, AI legislation shelved, CISA's decoy guidance
Nuclear-style safeguards proposed for AI risks Key lawmaker suggests action on AI safety legislation will wait until 2027 CISA releases cyber decoy guidance…
Cybersecurity HeadlinesFlock gets plucked, OpenAI agents arrived even earlier, inside China's AI spy shop
Flock gets plucked OpenAI agents arrived early China's AI spy shop Get the show notes here: https://cisoseries.com/cybersecurity-news-september-17-2026/ Huge…
Cybersecurity HeadlinesCisco zero-day goes straight to root, BambooToken branches into Linux, CenterPoint breach claim hits 7M+
Cisco zero-day goes straight to root BambooToken branches into Linux CenterPoint breach claim hits 7M+ Get the show notes here…
Cybersecurity HeadlinesChina hits fast-forward on AI security, Hacking Cat shows its claws, Vite servers spill cloud secrets
China hits fast-forward on AI security Hacking Cat shows its claws Vite servers spill cloud secrets Get the show notes here…
Cybersecurity HeadlinesPasskey phishing attack, Anthropic's blockbuster report, airline cybersecurity loophole
Attackers use passkey phishing to hijack Microsoft cloud accounts Anthropic blockbuster report reveals sophisticated hacks Airlines compliance with new…
- Cybersecurity Headlines
The Department of Know: Liquid drained, CISA urges change, agentic whistleblowers
Read the full stories at CISOSeries.com This week's Department of Know is hosted by Rich Stroffolino, with guests Alexandra Landegger, global head of cyber…
Cybersecurity HeadlinesNetScaler vulnerability exploited, AdaptHealth suffers breach, new Android malware
Critical NetScaler vulnerability exploited in attacks AdaptHealth data breach impacts 4.1 million people MantaxOtax Android malware delivers ransomware and…
Cybersecurity HeadlinesFortinet auth holes, China distills AI, Mythos vulnerability
Fortinet plugs two critical auth holes US says China is distilling AI at scale Mythos vulnerability hits human bottleneck Get the show notes here…
Cybersecurity HeadlinesFlorida DMV breach, zero-click WeChat worm, AI whistleblowers
ShinyHunters claimed it breached Florida DMV Zero-click WeChat worm spreads over incoming calls AI cheaters and whistleblowers emerge Get the show notes here…
Cybersecurity HeadlinesPEEP browser backdoors, $320M Liquid exploit, BigBear beats MFA
PEEP turns browsers into backdoors Liquid loses $320M, hackers play hero BigBear claws past MFA Get the full show notes here…
Cybersecurity HeadlinesMikroTik routers hijacked, Russian data center threats, UK cybercrime losses surge
MikroTik routers hijacked through internet-exposed SSH Russian data centers face new security requirements UK account-hack losses surge thanks to new reporting…
- Cybersecurity Headlines
The Department of Know: Astra launches, CISA cuts programs, McKesson breached
Read the full stories at CISOSeries.com This week's Department of Know is hosted by Rich Stroffolino, with guests Montez Fitzpatrick, director, information…
- Cybersecurity Headlines
Court records breach, Breeze Comet hits Brazil, Aesto records breach
U.S. and Canadian court records breached in Thomson Reuters incident Cybercrime Breeze Comet causing problems in Brazil Aesto record system hit by data breach…
- Cybersecurity Headlines
153M licenses for sale, Anthropic reverses course, Astra enters the red zone
Dark web shop stocks 153 million driver's licenses Nexus, a new dark web service, claims it's selling scans of more than 153 million US and Canadian driver's…
Cybersecurity HeadlinesFable 5.1 released, USPS "untested" IT, Exchange hijack vulnerability
Anthropic announces safety changes and new models USPS installs "untested" IT systems for mail-in ballots Thousands of Exchange servers vulnerable to hijacks…
- Cybersecurity Headlines
Claude sessions hijacked, AI jolts global finance, agents get too many keys
Claude sessions get hijacked Anthropic is warning that common infostealer malware is stealing active Claude browser sessions, letting attackers get into…
- Cybersecurity Headlines
ServiceNow vulnerabilities warning, PaperCut zero-day, McKesson healthcare breach
ServiceNow warns of three maximum severity security vulnerabilities PaperCut zero-day exploited in attacks Healthcare giant McKesson discloses breach Get the…
- Cybersecurity Headlines
The Department of Know: Power plant attack, NSA hacker reunion, Hugging Face hack report
Read the full stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Jason Elrod, CISO, MultiCare Health System…
- Cybersecurity Headlines
Manchester Airports breach, ATF agency breach, clothier Carhartt breach
Manchester Airports Group suffers cyber incident ATF suffers data breach Clothing retailer Carhartt suffers data breach Get the show notes here…