Shows / Cybersecurity Headlines
Cybersecurity Headlines
Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.
Episodes
- Cybersecurity Headlines
USPS phishing, UK IoT law, industrial USB attacks
USPS phishing sites are popular UK bans bad IoT credentials USB malware attacks targeting industrial sites Thanks to our episode sponsor, Dropzone AI Attention…
- Cybersecurity Headlines
Kaiser Permanente breach, DSH Safety Board, Okta stuffing attack
Kaiser Permanente website tracking tools may have compromised customer data DHS announces AI safety board Okta warns of "unprecedented" credential stuffing…
- Cybersecurity Headlines
Week in Review: GitHub comments abused, networkless" attack techniques, Police bodycam AI reports
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Christina Shannon, CIO, KIK Consumer Products…
- Cybersecurity Headlines
Google postpones cookies, Brocade vulnerability warning, ICICI card gaffe
Google postpones third-party cookie deprecation Brocade SAN appliances and switches exposed to hacking ICICI Bank exposes credit cards to wrong users Thanks to…
Cybersecurity HeadlinesChinese keyboard flaws, hacked news story, TikTok on the clock
Chinese keyboard app flaws exposed Threat actors plant fake assassination story ByteDance on the clock to divest TikTok Thanks to this week's episode sponsor…
- Cybersecurity Headlines
Iranian hackers charged, Siemens fixing Palo bug, Russia hacks water plant
Iranian nationals charged with hacking U.S. companies and agencies Siemens working to fix device affected by Palo Alto firewall bug Russian hackers claim…
Cybersecurity HeadlinesTikTok ban update, Sandworm hits Ukraine, North Korean streaming animators
TikTok ban passes the US House Sandworm targets critical Ukrainian orgs North Koreans animating streaming shows Thanks to this week's episode sponsor, Veracode…
- Cybersecurity Headlines
RedLine GitHub connection, MITRE Ivanti breach, E-ZPass spoof sites
RedLine stealer GitHub connection MITRE's breached was through Ivanti zero-day vulnerabilities Researchers find dozens of fake E-ZPass toll websites following…
- Cybersecurity Headlines
Week in Review: Cisco MFA breach, Bad bots surge, Microsoft mail breach fallout
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Dan Walsh, CISO, Paxos Thanks to our show…
- Cybersecurity Headlines
LabHost police bust, Michigan healthcare attack, Windows Fibers vulnerability
Police bust reveals sophisticated phishing-as-a-service platform Overlooked Windows Fibers offer handy route for malicious payload deployment Michigan…
Cybersecurity HeadlinesWater utility threats, GPT-4 hacking, SIM swap solicitation
Sandworm-linked group tied to attack on water utilities GPT-4 reads security advisories Cell carrier workers solicited for SIM swaps Thanks to today's episode…
- Cybersecurity Headlines
Cisco MFA breach, Bad Bots surge, LockBit 3.0 propagates
Cisco announces breach of multifactor authentication message provider Bad bots drive 10% annual surge in account takeover attacks LockBit 3.0 variant generates…
Cybersecurity HeadlinesThreads out in Turkey, Palo Alto backdoor, Microsoft' security overhaul
Meta to close Threads in Turkey Palo Alto fixes backdoor zero-day Details on Microsoft's security overhaul Thanks to today's episode sponsor, Conveyor What are…
- Cybersecurity Headlines
U.S. surveillance reauthorization, Roku breach update, Microsoft breach exposed agencies
House passes reauthorization of U.S. surveillance program Roku says 576,000 accounts compromised in latest security breach Microsoft breach exposed federal…
- Cybersecurity Headlines
Week in Review: Government hospital warning, Sisence breach, Financial firms lose $12b
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Mike Levin, deputy CISO, 3M Thanks to our show…
Cybersecurity HeadlinesPalo Alto patches, CISA's Sisense warning, GitHub repos gamed
Palo Alto Networks fixes several DoS vulnerabilities in PAN-OS operating system Sisense breach exposes customers to potential supply chain attack Threat actors…
Cybersecurity HeadlinesCISA malware analysis, "hunt forward" missions, Spectre v2
CISA expands automated malware analysis US Cyber Command launched "hunt forward" missions Spectre v2: Linux Boogaloo CHECK OUT Capture the CISO season 2 here…
Cybersecurity HeadlinesUkraine cyber head suspended, LG TV vulns, Microsoft exposed passwords
Ukraine's head of cybersecurity suspended and assigned to combat zone Over 90,000 LG Smart TVs exposed to remote attack Microsoft exposed internal passwords in…
Cybersecurity HeadlinesCyberattack impacts vet firm, data privacy bill movement, DOJ hack exposes thousands
Cyberattack causes major disruptions for UK vet firm Data privacy bill pushes forward with bipartisan support Department of Justice hack exposes hundreds of…
Cybersecurity HeadlinesHospital hack warning, Five Eyes follow-up, NYC municipal hack
Government warns hospitals of hackers targeting IT help desks U.S. government contractor Acuity responds to alleged Five Eyes breach New York City becomes…
- Cybersecurity Headlines
Week in Review: Five Eyes breach, Microsoft's Chinese hack response, AT&T customer breach
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by David Spark with guest Steve Gentry, Advisor, Clari Thanks to our show…
- Cybersecurity Headlines
Five Eyes breach, cancer center breach, Pixel zero-day flaw
Classified Five Eyes data theft announced Cancer center data breach affects 800,000 Android Pixel phone zero-day flaws being exploited by forensic companies…
- Cybersecurity Headlines
Microsoft security failings, NIST NVD backlog, Chrome DBSC beta
Report criticizes Microsoft's Chinese hack response NIST needs help with vulnerability backlog Chrome tests feature to prevent session hijacking Thanks to…
- Cybersecurity Headlines
Cyber incident reporting rule, Google blocks spoofed emails, PandaBuy breach
CISA releases draft rule for cyber incident reporting Google now blocks spoofed emails for better phishing protection Breach at online shopping platform…
Cybersecurity HeadlinesIncognito settlement, hallucinated software, phone protocols vulnerable
Google to delete Incognito tracking data Hallucinated software packages as a security vulnerability FCC investigating phone infrastructure security Thanks to…
- Cybersecurity Headlines
AT&T data leak, Linux backdoor discovery, DHS phone data policy
Data of 73 million AT&T customers leaked on dark web Accidental Linux backdoor discovery likely prevented thousands of infections DHS expected to stop buying…
- Cybersecurity Headlines
Week in Review: Spyware boosts zero-days, MFA bombing targets Apple, Facebook snooped Snapchat
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Yaron Levi, CISO, Dolby, and sageinsights.io…
Cybersecurity Headlines17 billion records exposed, Treasury FinSec warning, Hot Topic attacks
17 billion personal records exposed in data breaches in 2023 U.S. Treasury warns financial sector about AI cybersecurity threats Retail chain Hot Topic hit by…
Cybersecurity HeadlinesZero-day rise, SharePoint vulnerability, Facebook sniffs app traffic
Spyware fuels rise in zero-day exploits CISA warns about Microsoft SharePoint vulnerability Facebook snooped on encrypted Snapchat traffic Thanks to today's…
Cybersecurity HeadlinesAPT31 targets families, UK newspaper attacked, Apple MFA bombing
APT31 targeting family members to surveil targets Ransomware gang attacks UK newspaper supporting the homeless MFA bombing attacks target Apple users Thanks to…
Cybersecurity HeadlinesEU targets tech giants, China bans US tech, US cyber force
EU targets tech giants with DMA China starts US tech ban in government Think tank calls for US military cyber service Thanks to today's episode sponsor…
Cybersecurity HeadlinesNew Kimsuky technique, KDE Linux warning, Atlassian critical flaws
Kimsuky turns to compiled HTML Help files for cyberattacks KDE issues warning after theme wipes Linux user's files Critical flaw in Atlassian Bamboo data…
- Cybersecurity Headlines
Week in Review: McDonald's outage explained, SIM swap fraud, spyware agreement support
Link to blog post This week's Cyber Security Headlines – Week in Review, is hosted by Rich Stroffolino with guest Gerald Auger Ph.D., Chief Content Creator…
Cybersecurity HeadlinesMicrosoft Server crashes, npm package discrepancies, Nemesis marketplace raided
Microsoft confirms Windows Server issue behind domain controller crashes Over 800 npm packages found with discrepancies Nemesis darknet marketplace raided in…
Cybersecurity HeadlinesWater task force, Loop DoS attacks, GitHub vulnerability fixer
US plans Water Sector Cybersecurity Task Force Loop DoS attack exploits the infinite regress of UDP GitHub tool uses AI to fix vulnerabilities Thanks to…
Cybersecurity HeadlinesMid-stream ESports hack, System glitch costs millions, LockBit reemerges with vengeance
Mid-stream hack postpones ESports league Bank loses $40 million after "systems glitch" LockBit reemerges with vengeance Thanks to today's episode sponsor…
Cybersecurity HeadlinesChange Healthcare payout, FTC probe into Reddit, Japanese tech giant breached
UnitedHealth fronts over $2 billion in recovery efforts Spyware agreement gains more international support FTC probes Reddit's AI data licensing ahead of IPO…
Cybersecurity HeadlinesMcDonald's outage update, Chrome URL protection, Birmingham Alabama outage
Global McDonald's outage blamed on third-party vendor, not cyberattack Google adds real-Time URL protection for Chrome Network outages hit Birmingham Alabama…
- Cybersecurity Headlines
Week in Review: Russian Microsoft exfiltration, JetBrains Rapid7 feud, Change Healthcare fallout
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Alexandra Landegger, Executive Director and…
Cybersecurity HeadlinesChange Healthcare fallout, Fortinet SQL warning, Yacht company breach
Change Healthcare - AHA asks for aid, HHS questions HIPAA compliance Fortinet warns of severe SQLi vulnerability in FortiClientEMS software Yacht company…
Cybersecurity HeadlinesGemini vulnerabilities, NYT-OpenAI drama, GitHub leak report
Researchers find vulnerabilities in Gemini New York Times denies it "hacked" OpenAI for lawsuit Leaked GitHub secrets up 28% Thanks to today's episode sponsor…
Cybersecurity HeadlinesLockBit claims hack, CISA understaffed, US and Russia election concerns
LockBit takes credit for hacking South African pension fund CISA's OT attack response team understaffed US and Russia accuse each other of potential election…
Cybersecurity HeadlinesRoku forces reset, French agencies targeted, Fintech firm taken offline
Roku forces reset after 15,000 accounts compromised French government agencies targeted in "unprecedented" attacks Fintech firm taken offline by ransomware…
Cybersecurity HeadlinesMicrosoft breach update, CISA flags JetBrains, ChatGPT creds sale
Microsoft says Russian hackers breached its systems, accessed source code CISA adds JetBrains TeamCity bug to its KEV catalog Over 225,000 compromised ChatGPT…
- Cybersecurity Headlines
Week in Review: German Webex gaffe, Google engineer indicted, Cloudflare's AI firewall
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest David Cross, SVP/CISO, Oracle. Also check out…
Cybersecurity HeadlinesFlipperZero attacks Teslas, Google engineer indicted, PetSmart attack warning
Flipper Zero WiFi attack can unlock and steal Tesla cars Former Google engineer indicted for stealing AI secrets for Chinese companies PetSmart warns customers…
Cybersecurity HeadlinesOnline fraud hits record losses, states urge Meta to crack down on scammers, Apple issues update for zero-day flaw
Online fraud hits record losses States urge Meta to crack down on scammers Apple issues update for zero-day flaw Thanks to today's episode sponsor, Conveyor…
Cybersecurity HeadlinesUS cyber strategy update, spyware sanctions, ALPHV exits
US cybersecurity strategy update on the way US Treasury issues first spyware sanctions UK denies responsibility for ALPHV takedown Thanks to today's episode…
Cybersecurity HeadlinesNorth Korea semiconductor hacks, ALPHV goes dark, China AI vouchers
North Korea targets semiconductor industry ALPHV infrastructure goes dark China to offer computing vouchers to AI startups Thanks to today's episode sponsor…
Cybersecurity HeadlinesNSO code verdict, Change Healthcare fallout, law firm breach
NSO Group to ordered to give Pegasus code to WhatsApp Change Healthcare confirms BlackCat, Schumer asks for aid Law firm announces data breach affecting…
- Cybersecurity Headlines
Week in Review: GenAI BEC explodes, NIST updates framework, vending machine gaffe
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Russ Ayres, SVP of Cyber & Deputy CISO…
Cybersecurity HeadlinesCencora pharma breach, Gen-AI explodes BEC, Chinese doorbell warning
Pharma giant Cencora announces data breach GenAI drives surge in BEC attacks Popular video doorbell easy hijacked Thanks to today's episode sponsor, Egress…
Cybersecurity HeadlinesEO limits PII, Australia's espionage struggle, Lazarus zero-day
Biden signs order limiting the sale of personal data Australia claims its seeing unprecedented "foreign interference" Lazarus Group targeting Windows and PyPi…
Cybersecurity HeadlinesNIST framework 2.0, Optum linked to BlackCat, ScreenConnect exploitations continue
NIST releases cybersecurity framework 2.0 Optum attack linked to BlackCat ransomware ScreenConnect exploitations continue Thanks to today's episode sponsor…
Cybersecurity HeadlinesCyber Security Headlines: SVR tactics, brand spamming, steel giant cyberattack
SolarWinds attackers changing tactics Brand domains used in spam operation Steel giant hit with cyberattack Thanks to today's episode sponsor, Egress People…
Cybersecurity HeadlinesPolice taunt LockBit, PayPal's cookie patent, vending machine controversy
British police taunt LockBit administrator PayPal files patent for new stolen cookies detector Vending machine crash reveals face recognition tech Thanks to…
- Cybersecurity Headlines
Week in Review: LockBit gets bitten, airline bot gaffe, exploding car keys
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Thom Langford, CISO, Velonetic Thanks to our…
Cybersecurity HeadlinesLockBit's thwarted upgrade, AT&T's massive outage, Change Healthcare cyberattack
LockBit was building next gen encryptor before takedown Thousands of wireless customers suffer outage Prescription delays due to Change Healthcare cyberattack…
Cybersecurity HeadlinesLockBit gang doesn't keep its word, the LockBit bounty, White House tackles U.S. maritime threats
Thanks to today's episode sponsor, Conveyor Happy Thursday. Are you tired of us talking about how Conveyor's AI can now autofill OneTrust security…
Cybersecurity HeadlinesLockBit update, Signal usernames, NSA Cyber Director retires
LockBit takedown update Signal now lets users keep phone numbers private NSA Cybersecurity Director Rob Joyce to retire Thanks to today's episode sponsor…