Shows / Cybersecurity Headlines
Cybersecurity Headlines
Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.
Episodes
Cybersecurity HeadlinesMeta FTC troubles, CISA urges Covered List, malicious HTML attachments
FTC comes down on Meta monetizing minors CISA urges adoption of Covered List Almost half of HTML attachments found malicious Thanks to today's episode sponsor…
Cybersecurity HeadlinesAuthorities seize 9 crypto exchanges, T-Mobile discloses 2nd data breach of 2023, 'Godfather of AI' quits Google
Authorities seize 9 crypto exchanges used for money laundering T-Mobile discloses 2nd data breach of 2023 'Godfather of AI' quits Google and warns of…
Cybersecurity HeadlinesJuice jacking, data breach lawsuits, Telegram ban lifted
The academic threat of juice jacking Data breach lawsuits on the rise Telegram ban lifted in Brazil Thanks to today's episode sponsor, TrendMicro Cybersecurity…
Cybersecurity HeadlinesVeeam backup targeted, DOJ SolarWinds discovery, Americold frozen out
Hackers target vulnerable Veeam backup servers exposed online DOJ detected the SolarWinds hack 6 months earlier than first disclosed Cold storage giant…
- Cybersecurity Headlines
Week in Review: Energy sector 3CX attack, PaperCut pain continues, all-in-one infostealer
Link to Blog Post This week's Cyber Security Headlines – Week in Review, April 24-28, is hosted by Sean Kelly with our guest, Steve Zalewski, former CISO, Levi…
Cybersecurity HeadlinesNew BellaCiao malware, PaperCut is Clop, Europe tech crackdown
Charming Kitten APT uses a new BellaCiao malware Microsoft blames clop affiliate for PaperCut attacks Big tech crackdown looms as EU, UK ready new rules And…
Cybersecurity HeadlinesMessaging malware update, China reclassifies cyberattacks, more cyberattacks don't use malware
Messaging app update distributes malware China reclassifies cyberattacks Malware-free cyberattacks on the rise And now a word from our sponsor, Tines Ask…
Cybersecurity HeadlinesUS policing AI use for civil rights violations, Bill proposes security testing centers for government tech, Microsoft Edge leaking browsing data to Bing
US policing use of AI for civil rights violations Bill proposes new security testing centers for critical government tech Microsoft Edge is leaking user…
Cybersecurity HeadlinesThreat group taxonomy, disabling EDR, North Dakota's AI cyber tools
A call to standardize threat group naming Threat actors using new tool to disable EDR North Dakota turns to AI for cyber And now a word from our sponsor, Tines…
Cybersecurity Headlines3CX hits utilities, CISA PaperCut warning, Hyena devours GPT4
Energy sector orgs in US, Europe hit by same supply chain attack as 3CX CISA adds 3 actively exploited flaws to KEV catalog, including critical PaperCut bug…
Cybersecurity Headlines"New class" of Russian attackers, GitHub helps open source security, used routers leak info
NCSC warns of "new class" of Russian adversaries GitHub adds Action to help open source security Used routers hold on to secrets Thanks to today's episode…
- Cybersecurity Headlines
Week in Review: 3CX double supply chain attack, Remcos Tax-Day RAT, Surveillance kills morale
Link to Blog Post This week's Cyber Security Headlines – Week in Review, April 17-21, is hosted by Rich Stroffolino with our guest, Shawn Bowen, CISO, World…
Cybersecurity HeadlinesMicrosoft 365 outage, Capita burglary evidence, 3CX attack update
Microsoft 365 outage blocks access to web apps and services Capita has 'evidence' customer data was stolen in digital burglary 3CX supply chain attack was the…
Cybersecurity HeadlinesElon Musk wants to develop TruthGPT, Southwest disrupted by 'technical issue', Officials warn of hackers targeting Cisco routers
Elon Musk wants to develop TruthGPT Southwest's operations resume after a 'technical issue' US, UK warn of govt hackers targeting Cisco routers Thanks to…
Cybersecurity HeadlinesLockBit on macOS, low code security, and QuaDream shuts down
Ransomware comes for macOS The security considerations of low code Israeli offensive cyber company shutting down Thanks to today's episode sponsor, Pentera…
Cybersecurity HeadlinesTax Day RAT warning, NCR POS outage, Urgent Chrome fix
Microsoft warns of Remcos RAT campaign targeting tax accountants NCR suffers POS outage after BlackCat ransomware attack Google releases urgent Chrome update…
- Cybersecurity Headlines
Week in Review: Pentagon papers leak, keeping breaches quiet, Cisco air-gaps Webex
Link to Blog Post This week's Cyber Security Headlines – Week in Review, April 10-14, is hosted by Rich Stroffolino with our guest, Dmitriy Sokolovskiy, CISO…
Cybersecurity HeadlinesGoogle Cloud's weak passwords, pressure on breach disclosure, Discord cooperating on Pentagon leak
Weak passwords targeted on Google Cloud Potential IT snitches warned about employment stitches Discord cooperating with leaked document investigation And now a…
Cybersecurity HeadlinesWindows Nokoyawa ransomware, LinkedIn pushes verification, Russia's Ukraine cyberwar
Windows zero-day exploited in Nokoyawa ransomware attacks LinkedIn and Microsoft Entra introduce a new way to verify professional contacts Russian places…
Cybersecurity HeadlinesMicrosoft warns of Azure shared key abuse, Attackers hide stealer behind AI Facebook ads, OpenAI bug bounty program
Microsoft warns of Azure shared key authorization abuse Attackers hide stealer behind AI chatbot Facebook ads OpenAI to launch bug bounty program And now a…
Cybersecurity HeadlinesNetherlands adopting RPKI, WordPress backdoor, tracing the Pentagon leak
Netherlands to adopt RPKI Widespread backdoor installed on WordPress sites Tracing leaked Pentagon documents And now a word from our sponsor, AppOmni Can you…
Cybersecurity HeadlinesApple zero-day updates, Flipper Zero ban, China Micron probe
Apple releases updates to address zero-day flaws Flipper Zero banned by Amazon for being a 'card skimming device' China to probe Micron over cybersecurity, in…
- Cybersecurity Headlines
Week in Review: North Korea hacks 3CX, DISH ransomware lawsuits, Genesis Market seized
Link to Blog Post This week's Cyber Security Headlines – Week in Review, April 3-7, is hosted by Rich Stroffolino with our guest, Rich Gautier, former CISO…
Cybersecurity HeadlinesCriminal records incident, Samsung's ChatGPT leak, Money Message ransomware
Criminal records office yanks web portal offline amid 'cyber security incident' Samsung reportedly leaked its own secrets through ChatGPT Money Message…
Cybersecurity HeadlinesSpanish hacker arrested, UK offensive cyber principles, eFile malware
Prominent Spanish hacker arrested The UK's Offensive Cyber Capabilities Principles eFile site serving malware Thanks to today's episode sponsor, Normalyze…
Cybersecurity HeadlinesGenesis Market seized by police, Rorschach now the fastest ransomware encryptor, Tax software serving malware
Genesis Market platform seized by police Rorschach is now the fastest ransomware encryptor Tax return software caught serving up malware Thanks to today's…
Cybersecurity HeadlinesTMX data leak, remote work security, WD network breach
TMX reveals customer data leak The security costs of remote work Western Digital confirms network breach Thanks to today's episode sponsor, Normalyze Normalyze…
Cybersecurity Headlines3CX's NK connection, WordPress Elementor hack, DISH faces lawsuits
More evidence links 3CX supply-chain attack to North Korean hacking group Hackers exploiting WordPress Elementor Pro Vulnerability, leaving millions of sites…
- Cybersecurity Headlines
Week in Review: Supply-chain attack on 3CX, AI pause request, WiFi protocol flaw
Link to Blog Post This week's Cyber Security Headlines – Week in Review, March 27-31, is hosted by Rich Stroffolino with our guest, Brett Conlon, CISO…
Cybersecurity Headlines3CX supply chain attack, Vulkan files leaked, Bing hijacked
Supply-chain attack on business phone provider 3CX could impact thousands of companies Vulkan files leak reveals Putin's global and domestic cyberwarfare…
Cybersecurity Headlines802.11 flaw, activists targeted in threat campaign, call for an AI "pause"
Flaw found in WiFi protocol Environmental activists targeted by threat actors Open letter calls for AI "pause" Thanks to today's episode sponsor, Trend Micro…
Cybersecurity HeadlinesMicrosoft unveils OpenAI-based cyber tools, Google accused of destroying antitrust evidence, A million pen tests show security is getting worse
Microsoft unveils OpenAI-based chat tools to combat cyberattacks Google accused of willfully destroying evidence in antitrust battle A million pen tests show…
Cybersecurity HeadlinesPinduoduo malware, CFTC sues Binance, Twitter takes down source code
Pinduoduo malware confirmed Binance sued by CFTC Twitter source code takedown Thanks to today's episode sponsor, Trend Micro Cybersecurity is not just about…
Cybersecurity HeadlinesUK bans TikTok, Windows Snipping patch, Puerto Rico hack
UK bans TikTok from government mobile phones Microsoft pushes OOB security updates for Windows Snipping tool flaw Vice Society claims attack on Puerto Rico…
- Cybersecurity Headlines
Week in Review: post-ransomware lawsuits, cybersecurity as a hindrance, ChatGPT imposters
Link to Blog Post This week's Cyber Security Headlines – Week in Review, March 20-24, is hosted by David Spark with our guest, Kurt Sauer, VP, Information…
Cybersecurity HeadlinesDole data breach, Nexus banking trojan, Pwn2Own Vancouver 2023
Dole discloses data breach after February ransomware attack New Android banking trojan targets financial apps Pwn2Own Vancouver 2023 Day 1: Windows 11 and…
Cybersecurity HeadlinesMore markup leaks, Clop victims go public, Big Tech lobbies on spy law
Another image editor leaks data More Clop victims come forward Big tech lobbies to limit spying law Thanks to this week's episode sponsor, Conveyor Does the…
Cybersecurity HeadlinesBreachForums to shut down, Zero-day used to drain Bitcoin ATMs, DC Health Link hacker motivated by Russian patriotism
BreachForums to shut down amidst law enforcement concerns Hackers use zero-day to drain $1.6 million from Bitcoin ATMs DC Health Link hacker motivated by…
Cybersecurity HeadlinesChina leads zero-days, HinataBot DDoS attacks, screenshot vulnerability
China led zero-days in 2022 HinataBot focuses on DDoS attacks Vulnerability lets you uncrop screenshots Thanks to this week's episode sponsor, Conveyor Does…
Cybersecurity HeadlinesNBA data breach, Emotet in OneNote, Dutch shipping ransomware
NBA is warning fans of a data breach after a third-party newsletter service hack Emotet malware now distributed in Microsoft OneNote files to evade defenses…
- Cybersecurity Headlines
Week in Review: Critical Outlook bug PoC, CISA Plex warning, YouTube AI infostealers
Link to Blog Post This week's Cyber Security Headlines – Week in Review, March 13-17, is hosted by Rich Stroffolino with our guest, JJ Agha, CISO, FanDuel All…
Cybersecurity HeadlinesTelerik breaches Government, Critical Outlook bug, LockBit threatens SpaceX
US Government IIS server breached via Telerik software flaw Critical Microsoft Outlook bug PoC shows how easy it is to exploit LockBit threatens release of…
Cybersecurity HeadlinesSuspects charged in DEA hack, Americans lose billions to scams, TikTok divestment
Two charged in DEA portal hack Americans lose billions in scams TikTok considering divestment Brought to you by the CISO Series.
Cybersecurity HeadlinesMicrosoft phishing warning, Amazon Ring hacked, CISA's vulnerability program
Microsoft warns of large-scale use of phishing kits to send millions of emails daily Ransomware group claims hack of Amazon's Ring CISA creates new ransomware…
Cybersecurity HeadlinesNorth Korea targets security researchers, the UK's National Protective Security Authority, bank failures hit crypto
North Korea targets security researchers UK launches National Protective Security Authority Bank failures bleed into crypto Brought to you by the CISO Series.
Cybersecurity HeadlinesAuthorities bust NetWire RAT, CISA warns of Plex bug after LastPass breach, Blackbaud to pay $3 million for misleading disclosure
FBI and international authorities catch a NetWire RAT CISA warns of actively exploited Plex bug after LastPass breach Blackbaud to pay $3 million for…
- Cybersecurity Headlines
Week in Review: Royal ransomware warning, water system warning, cloud exploitation rising
Link to Blog Post This week's Cyber Security Headlines – Week in Review, March 6-10, is hosted by Rich Stroffolino with our guest, Nick Espinosa, Host, The…
Cybersecurity HeadlinesBiden's cybersecurity budget, AT&T breach alert, GitHub adds 2FA
Biden's budget seeks increase in cybersecurity spending AT&T alerts 9 million customers of data breach after vendor hack GitHub makes 2FA mandatory next week…
Cybersecurity HeadlinesTSA cybersecurity regulations, Lazarus Group zero-day, a video ransom note
TSA issues cybersecurity regulations Lazarus Group deploys zero-day Ransomware gang uses video ransom note Thanks to today's episode sponsor, Packetlabs Reduce…
Cybersecurity HeadlinesBipartisan bill allows US TikTok ban, Twitter content moderation concerns, Emotet malware returns
Bipartisan bill allows for US ban of TikTok EU concerned with Twitter's content moderation plans Emotet malware returns after three-month hiatus Thanks to…
Cybersecurity HeadlinesDoppelPaymer disrupted, EPA warns about water security, rising cloud exploitation
Police disrupt DoppelPaymer EPA releases cybersecurity notice for water systems Cloud exploitation on the rise Thanks to today's episode sponsor, Packetlabs…
Cybersecurity HeadlinesCISA's Royal warning, Chick-fil-A attacked, Play leaks Oakland
U.S. Government warns of Royal ransomware attacks against critical infrastructure Credential Stuffing attack on Chick-fil-A Play Ransomware gang has begun to…
- Cybersecurity Headlines
Week in Review: National Cyber Strategy, CISA scolds software industry, NewsCorp lurked
Link to Blog Post This week's Cyber Security Headlines - Week in Review, February 27-March 3, is hosted by Rich Stroffolino with our guest, Nick Vigier, CISO…
Cybersecurity HeadlinesNational Cybersecurity Strategy, CISA delivers Decider, Bookstore chains hacked
White House gets tough with new National Cyber Strategy CISA releases free 'Decider' tool to help with MITRE ATT&CK mapping British retail chain WH Smith says…
Cybersecurity HeadlinesRussia bans foreign messaging apps, GitHub scans for secrets, Bootkit beats Secure Boot
Russia bans foreign private messaging apps GitHub expands secret scanning Bootkit bypasses Secure Boot Thanks to this week's episode sponsor, Conveyor "I HATE…
Cybersecurity HeadlinesUS Marshals hit by ransomware, DISH outages caused by ransomware, More bad news for LastPass
US Marshals hit by ransomware DISH outages caused by confirmed ransomware attack Some more bad news for LastPass Thanks to this week's episode sponsor…
Cybersecurity HeadlinesCISA wants security responsibility, changes in security since Russia invaded Ukraine, Canadian government bans TikTok on its devices
CISA says to stop passing the security buck The cyber security fallout of Russia's war in Ukraine Canada bans TikTok on government devices Thanks to this…
Cybersecurity HeadlinesNewsCorp reveals attack, TELUS investigating leak, Dish goes offline
News Corp reveals that attackers remained on its network for two years TELUS investigating leak of stolen source code, employee data Dish Network goes offline…
- Cybersecurity Headlines
Week in Review: European airport attacks, military email spill, Dole ransomware attack
Link to Blog Post This week's Cyber Security Headlines – Week in Review, February 20-24, is hosted by Rich Stroffolino with our guest, Jared Mendenhall, Head…
Cybersecurity HeadlinesDole ransomware attack, stress devours CISOs, new Lazarus backdoor
Fruit giant Dole suffers ransomware attack impacting operations Stress pushing CISOs out the door Lazarus group likely using new backdoor to exfiltrate…