Shows / Cybersecurity Headlines
Cybersecurity Headlines
Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.
Episodes
Cybersecurity HeadlinesICANN lookups, push notification spying, Google's Gemini
Krebs on ICANN Lookups Wyden warns of spying push notifications Google unveils Gemini Huge thanks to our sponsor, Barricade Cyber Solutions Has your…
Cybersecurity HeadlinesMexican spyware trial, Breach of ColdFusion vuln, Malicious loan app downloaded 12MM
Spyware trial implicating former Mexican president kicks off Federal agency breached through Adobe ColdFusion vulnerability Malicious loan app downloaded 12…
Cybersecurity HeadlinesNuclear site hacked, Iranian water breaches, ChatGPT data leaks
UK nuclear site attacked by state-linked attackers US confirms Iranian actors behind water breaches The infinite regress of ChatGPT data exfiltration Huge…
Cybersecurity HeadlinesCredit Unions outage, Roblox-Twitch extortion, Apple zero-days
Credit unions facing outages due to ransomware attack on cloud provider Roblox, Twitch allegedly targeted by ransomware cartel Apple fixes two new iOS…
- Cybersecurity Headlines
Week in Review: Okta breach expands, Former Uber CISO speaks, OpenAI's chatbot leak secrets
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Christina Shannon, CIO, KIK Consumer Products…
Cybersecurity HeadlinesManufacturing tops extortion, RETVec battles spam, new Zyxel warnings
Manufacturing industry tops cyber extortion trend Google's RETVec the latest warrior on bad emails Zyxel warns of vulnerabilities in NAS devices Huge thanks to…
Cybersecurity HeadlinesOkta breach expands, JAXA cyberattack, leaky GPTs
All Okta customers exposed in breach JAXA hit by cyberattack OpenAI's chatbots leak secrets Huge thanks to our sponsor, SpyCloud For some people ignorance is…
Cybersecurity HeadlinesRansomware gang busted in Ukraine, North Texas water utility cyberattack, Former Uber CISO breaks 6-year silence
Ransomware gang busted in Ukraine by international operation North Texas water utility hit with cyberattack Former Uber CISO speaks out after 6-year silence…
Cybersecurity HeadlinesInternational AI agreement, water utility attack, Ukraine cyberattack on Russian aviation
International AI agreement PA water utility hit by cyberattack Ukraine claims cyber attack against Russian aviation Huge thanks to our sponsor, SpyCloud Our…
Cybersecurity HeadlinesLondon & Zurich, Fidelity National Financial attacks, Royal Family's hospital, Vanderbilt University Med Center attacks, US Nuclear lab and Gulf Air breaches
London & Zurich, and Fidelity National Financial attacks Royal Family's hospital and Vanderbilt University Med Center suffer cybersecurity incidents Gulf Air…
Cybersecurity HeadlinesCyber exec hacked hospital, 'Citrix Bleed' vuln targeted, Binance CEO steps down in $4 billion settlement
Cyber exec admits hacking hospital as a sales tactic 'Citrix Bleed' vulnerability targeted by nation-state hackers Binance CEO steps down in $4 billion…
Cybersecurity HeadlinesHealthcare hit with MOVEit, malware uses trig, OpenAI shakeup
Healthcare platform impacted by MOVEit Threat actors find a use for trigonometry What's happening with OpenAI Thanks to today's episode sponsor, Egress People…
Cybersecurity HeadlinesClorox CISO departure, BlackCat's SEC complaint, Dudley interim NCD
Clorox CISO departs months after cyberattack ALPHV/BlackCat Ransomware gang files SEC complaint Drenan Dudley acting national cyber director while Coker…
- Cybersecurity Headlines
Week in Review: UK Health data shared, SSH keys vulnerable
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Jay Wilson, CISO, Insurity Thanks to our show…
Cybersecurity HeadlinesFortinet Injection bug, Another Samsung breach, government Rhysida warning
Fortinet warns of critical command injection bug in FortiSIEM Another data breach for Samsung Rhysida warning from FBI and CISA Thanks to today's episode…
Cybersecurity HeadlinesMicrosoft Copilot, YouTube addresses AI uploads, CISA's AI roadmap
Microsoft goes all in on Copilot YouTube's AI disclosure requirement CISA's AI Roadmap Thanks to today's episode sponsor, Sysdig For businesses innovating in…
Cybersecurity HeadlinesIPStorm botnet dismantled, Social media giants will face child safety lawsuits, Authorities warn of Royal ransom gang threat
IPStorm botnet dismantled after hacker's guilty plea Federal court rules social media giants must face child safety lawsuits Authorities warn of Royal ransom…
Cybersecurity HeadlinesCyber Security Headlines: Australian ports attacked, impacts of AI on terrorist content, Google sees faked Bard ads
Australian ports hit with cyberattack AI companies join on to Christchurch Call to Action Generative AI threatens to dismantle terrorist content detection…
Cybersecurity HeadlinesChina bank ransomed, UK health data shared, Boeing data published
Industrial and Commercial Bank of China suffers ransomware attack UK health data donated for medical research shared with insurance companies Boeing data…
- Cybersecurity Headlines
Week in Review: Okta explains hack, Google Calendar as C2, Selling military data
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by Sean Kelly with guest Howard Holton, CTO, GigaOm Thanks to today's episode…
Cybersecurity HeadlinesUS most breached, ChatGPT gets DDoS, Clop exploits SysAid
US most breached country last quarter OpenAI blames DDoS attacks for ongoing ChatGPT outages Clop exploits SysAid vulnerability Thanks to today's episode…
Cybersecurity HeadlinesShields Ready campaign, AI imagery rules for the election, App Defense Alliance moves to Linux Foundation
US launches "Shields Ready" campaign Microsoft and Meta announced AI imagery rules App Defense Alliance moves under the Linux Foundation Thanks to today's…
Cybersecurity HeadlinesMarina Bay Sands customer data hacked, Atlassian bug escalated to 10.0 severity, Fake crypto app steals over $700,000
Singapore's Marina Bay Sands customer data stolen in cyberattack Atlassian bug escalated to 10.0 severity Fake Ledger Live app steals over $700,000 in crypto…
Cybersecurity HeadlinesDropper bypasses Google, CISA's zero-day worries, Google Calendar as C2
Android Dropper-as-a-Service Bypasses Google's Defenses Increase in zero-day exploits worries CISA Google Calendar as a C2 infrastructure Thanks to today's…
Cybersecurity HeadlinesOkta's hack explanation, Looney Tunables exploited, Lazarus likes KandyKorn
Okta explains hack source and response timeline Looney Tunables now being exploited Lazarus Group uses KandyKorn against blockchain engineers Thanks to today's…
- Cybersecurity Headlines
Week in Review: Cloudflare's power outage, Washington breaches, Wiki-Slack attack
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Shawn Bowen, CISO, World Kinect Corporation…
Cybersecurity HeadlinesCloudflare's power outage, Apache HelloKitty attempt, Boeing incident continues
Power outage darkens Cloudflare dashboard and APIs Apache ActiveMQ flaw sees HelloKitty attempt Boeing says cyber incident affects parts and distribution…
Cybersecurity HeadlinesUK summit pledge to tackle AI risks, 'Kill switch' shuts down Mozi botnet, EU regulator bans Meta's ad practices
Countries at UK summit pledge to tackle AI risks 'Kill switch' deliberately shuts down notorious botnet EU regulator bans Meta's targeted advertising practices…
Cybersecurity HeadlinesCanada bans WeChat, no ransom pledge, India's opposition sees state-sponsored attacks
Canada bans WeChat on government devices 40 countries sign no ransom pledge Apple warns Indian opposition leaders about iPhone attacks Thanks to today's…
Cybersecurity HeadlinesAI Executive Order, Russia' VirusTotal, Roaming leaks locations
Executive order outlines generative AI rules in the US Russia launchings its own VirusTotal Roaming data could leak geolocations Thanks to today's episode…
- Cybersecurity Headlines
DC Elections breach, LockBit Boeing breach, StripedFly's stealthy sting
DC Board of Elections breach may include entire voter roll LockBit claims Boeing breach StripedFly malware infects 1 million Windows and Linux hosts Thanks to…
- Cybersecurity Headlines
Week in Review: Okta's compromise issues, Cisco's additional headache, CISA protests cuts
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Arvin Bansal, former CISO, Nissan Americas…
Cybersecurity HeadlinesiLeakage threatens Apple, CISA's catastrophic cuts, HTTP DDoS surge
ILeakage attack steals emails, passwords from Apple devices and browsers CISA protests potential 25% budget cut as "catastrophic" Surge in hyper-volumetric…
Cybersecurity HeadlinesSMIC advanced chips, Roundcube exploit, Philadelphia email access
SMIC making advanced chips with ASML tech Roundcube webmail exploited with zero-day Philadelphia's week somehow gets worse Thanks to today's episode sponsor…
Cybersecurity HeadlinesCisco IOS XE infections remain high, California sidelines GM's driverless cars, Canada accuse China of 'Spamouflage' campaign
Cisco IOS XE Update: Number of infected devices via zero-day remains high California sidelines GM's driverless cars, citing safety risk Canada accuse China of…
Cybersecurity HeadlinesChrome IP Protection, Microsoft Security Copilot, Cisco patches IOS XE
Chrome testing IP Protection Microsoft tests Security Copilot Cisco releases IOS XE patches Thanks to today's episode sponsor, Vanta Growing a business? That…
Cybersecurity HeadlinesOkta system attacked, another Cisco vulnerability, RagnarLocker arrest
Okta HAR support system attacked Cisco identifies additional IOS XE vulnerability Key Ragnar Locker player arrested in Paris Thanks to today's episode sponsor…
- Cybersecurity Headlines
Week in Review: Water cyber-regs rescinded, Cisco zero-day attacks, Signal debunks zero-day
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Andrew Wilder, CISO, Community Veterinary…
Cybersecurity HeadlinesCops sting RagnarLocker, more 23andMe leaks, Casio discloses breach
International sting operation brings down RagnarLocker More 23andMe records leaked Casio discloses data breach Huge thanks to our sponsor, Vanta Growing a…
Cybersecurity HeadlinesWinRAR exploitation, Five Eyes warns about China, ServiceNow data exposure
State-backed attackers exploit WinRAR zero-day Five Eyes warns of Chinese IP theft ServiceNow data exposure issue identified Huge thanks to our sponsor, Vanta…
Cybersecurity HeadlinesZero-day attacks affect 10,000 Cisco devices, US government warns of Confluence vuln exploitation, D-Link confirms data breach
Zero-day attacks affect over 10,000 Cisco devices US government warns of widespread exploitation of Confluence vulnerability D-Link confirms data breach caused…
Cybersecurity HeadlinesSecurity camera warnings, Signal denies zero-day, Equifax fined in UK
Israeli government warns to secure home security cameras Signal debunks zero-day report Equifax fined for 2017 data breach Huge thanks to our sponsor, Vanta…
Cybersecurity HeadlinesCDW possibly attacked, AvosLocker joint advisory, EPA rescinds water regs
LockBit claims attack on CDW FBI and CISA publish joint advisory regarding AvosLocker ransomware EPA rescinds cyber regulations for water sector Huge thanks to…
- Cybersecurity Headlines
Week in Review: Internet-wide zero-day DDoS, 23andMe data breach, curl flaw overhyped
Link to blog post This week's Cyber Security Headlines – Week in Review, is hosted by Rich Stroffolino with guest Martin Choluj, VP Security ClickHouse Thanks…
Cybersecurity HeadlinesMicrosoft thwarts Akira, Sullivan appeals conviction, ToddyCat targets telcos
Microsoft thwarts large-scale ransomware attack Former Uber CISO files appeal ToddyCat group targets telcos Thanks to today's episode sponsor, Hyperproof Is…
Cybersecurity HeadlinesHijacked 404 pages, Chinese attackers target Confluence, Adobe's "icon of transparency"
404 pages hijacked Atlassian Confluence attacked by state-backed actors Adobe's "icon of transparency" Thanks to today's episode sponsor, Hyperproof It's more…
Cybersecurity HeadlinesZero-day fuels largest-ever DDoS attack, 23andMe resets user passwords after data leak, Exchange gets 'better' patch for critical bug
Internet-wide zero-day bug fuels largest-ever DDoS attack 23andMe resets user passwords after genetic data posted online Microsoft Exchange gets 'better' patch…
Cybersecurity HeadlinesMiddle East hacktivists, Curl security flaw, HelloKitty improves ransomware
Hacktivist attacks abound in the Middle East Network protocol open-source tool Curl faces worst security flaw in a long time HelloKitty ransomware source code…
Cybersecurity HeadlinesMGM ransomware costs, Blackbaud breach settlement, 23andMe breach claims
MGM Resorts quotes ransomware tab at $110 million Blackbaud in $49.5 million settlement for May 2020 ransomware attack 23andMe investigates breach claims…
- Cybersecurity Headlines
Week in Review: Progress FTPbug, CloudFlare DDoS mistake, Lazarus Meta recruiters
Link to blog post This week's Cyber Security Headlines – Week in Review, is hosted by Rich Stroffolino with guest Bob Schuetter, CISO, Ashland Thanks to our…
Cybersecurity HeadlinesApple zero-day patch, Cisco 911 patch, ICS exposure warning
Apple rolls out patch for active iOS Zero-Day Cisco patches urgent Emergency Responder flaw Researchers warn of 100,000 exposed ICS systems Thanks to our…
Cybersecurity HeadlinesRed Cross hacktivist rules, Looney Tunables hit Linux, CISA violates First Amendment
Red Cross issues hacktivist rules Looney Tunables hits major Linux distros CISA may have violated the First Amendment Thanks to our episode sponsor, Conveyor…
Cybersecurity HeadlinesGPU driver exploits, EU strengthens spyware protections, NSA's AI Security Center
Arm and Qualcomm warn about exploited GPU drivers EU Parliament strengthens spyware protections for journalists NSA creates AI Security Center Thanks to our…
Cybersecurity HeadlinesProgress FTP bug under active exploit, Norway urges Europe-wide Meta data collection ban, KillNet claims attack against Royal Family website
Critical Progress FTP bug now being exploited in attacks Norway urges Europe-wide ban on Meta's targeted data collection KillNet claims DDoS attack against…
Cybersecurity HeadlinesCloudflare's protection bypass, ALPHV healthcare victim, Lazarus Meta recruiter
Cloudflare DDoS protections bypassed using Cloudflare McLaren Health Care becomes latest ALPHV/BlackCat victim Lazarus Group poses as Meta recruiters to…
- Cybersecurity Headlines
Week in Review: New MOVEIt troubles, fallout from government email breach, H&R Block faces RICO charges
Link to blog post This week's Cyber Security Headlines – Week in Review, is hosted by Rich Stroffolino with guest Andrew Storms, VP of security, Replicated…
Cybersecurity HeadlinesGovernment email damage, Johnson Controls attacked, Google's 5th zero-day
Chinese hackers stole emails from US State Dept in Microsoft breach Johnson Controls faces $51 million ransomware demand Google fixes year's fifth Chrome…
Cybersecurity HeadlinesGPU pixel-stealing, info-stealing on GitHub, Sony hackers hit NTT Docomo
GPUs vulnerable to pixel-stealing attacks Info-stealing commits hit GitHub Alleged Sony hackers hit NTT Docomo Thanks to today's episode sponsor, AppOmni Are…
Cybersecurity HeadlinesMultiple threat actors lay claim to Sony hack, Philippines health org struggling with ransomware recovery, Flair Airlines leaked user data for months
Multiple threat actors lay claim to Sony hack Philippines health org struggling to recover from ransomware attack Canadian Flair Airlines leaked user data for…
Cybersecurity HeadlinesMixin Network breach, Kia and Hyundai thefts explode, stress testing voting equipment
Mixin Network loses $200 million Kia and Hyundai exploit linked to massive car thefts Stress testing voting equipment Thanks to today's episode sponsor…