Shows / Cybersecurity Headlines
Cybersecurity Headlines
Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.
Episodes
- Cybersecurity Headlines
Chinese hackers hit US agencies, Ring locks out police, Boston Scientific feels cyber pain
China contractor hack hits US agencies Ring throws away the key Boston Scientific feels cyber pain Get the show notes here…
- Cybersecurity Headlines
China's hackers pick DeepSeek, OpenAI blocks Russian influence push, webpages mess with local AI
China's hackers pick DeepSeek OpenAI blocks a Russian influence push A webpage can mess with local AI Get the show notes here…
- Cybersecurity Headlines
SynkLoader throws in the kitchen sink, NIST flags multi-cloud sprawl, ReliaQuest blocks a ShinyHunters swing
SynkLoader throws in the kitchen sink NIST flags multi-cloud sprawl ReliaQuest blocks a ShinyHunters swing Get the show notes here…
- Cybersecurity Headlines
UK power plant hack, AI zero click, children's hospital breach
UK power plant disabled for four days by Iran-linked hackers Zero-click Grok and Gemini chat history theft possible through cryptographic context injection…
- Cybersecurity Headlines
The Department of Know: Living off Azure, OpenAI's "defender window," and AI-driven PLC attacks
Read the full sotry at CISOSeries.com This week's Department of Know is hosted by Rich Stroffolino, with guests Bil Harmer, CISO, Supabase, and David B. Cross…
- Cybersecurity Headlines
CISA MLFlow warning, Siemens PLCs warning, CareCloud confirms breach
CISA warns of hackers exploiting critical MLflow vulnerability ICS operators warned of AI-driven attacks on Siemens PLCs Electronic health record company…
- Cybersecurity Headlines
OpenAI rewrites safety rules, US charges 17 Iranian hackers, Defender crashes fixed
OpenAI rewrites safety rules after threshold warning US charges 17 in Iranian hacking campaign Microsoft fixes Windows Defender crash bug Get the show notes…
Cybersecurity HeadlinesAI "mind virus," malware living off Azure, an Irregular post-mortem
Persistent prompts prove potentially pernicious The malware is coming from inside Microsoft Irregular releases AI sandbox escape post-mortem Get the show notes…
Cybersecurity HeadlinesNorth Korean IT worker lands federal job, Azure records go up for sale, GitHub goes down
Federal agency hires North Korean IT worker Millions of Azure records allegedly for sale GitHub outage hits Actions and Copilot Get the show notes here…
- Cybersecurity Headlines
SAP Commerce flaw exploited, Mirai boosts capabilities, Shell investigates breach
Max severity SAP Commerce Cloud flaw now targeted in attacks New Mirai variant adds stealth capabilities to botnet code Shell investigates potential incident…
- Cybersecurity Headlines
The Department of Know: Ransomware gangs, Copilot apps, and drones phone home
Read the full stories at CISOSeries.com This week's Department of Know is hosted by Sarah Lane, with guests Peter Gregory, author of over 50 books on…
- Cybersecurity Headlines
Akira's innovative attack, WhatsApp's scam alert, White House TCO strategy
Akira affiliate's innovative "crash mode" attack almost worked WhatsApp rolls out scam alert feature White House looks to private sector for help against…
- Cybersecurity Headlines
UK tackles AI bioweapon risk, DeadLock goes on-chain, evil twin flies home from DEF CON
UK eyes AI gene-synthesis guardrails DeadLock puts ransomware on the blockchain An evil twin flies home from DEF CON Episode show notes…
- Cybersecurity Headlines
Water systems get cyber lifeline, hackers jump into Polish power plant, local governments knocked offline
Water systems get a federal cyber lifeline Hackers jump into Polish power plant Cyberattacks knock local governments offline Episode show notes…
- Cybersecurity Headlines
Sandworm's poisoned VPN, Royal Navy drones phone China, OpenAI loosens cyber limits
OpenAI loosens cyber limits for vetted defenders Sandworm's fake recruiters plant a poisoned VPN Royal Navy drones phone home to China Episode show notes…
- Cybersecurity Headlines
OpenAI slows Astra, Irregular won't talk, Senate confirms Cassady
OpenAI slows release of Astra model citing cyber capabilities Irregular won't say if there were more rogue incidents U.S. cyber ambassador nominee Cassady…
- Cybersecurity Headlines
Faked bug reports, Meta's rogue AI, China investigates Palo Alto
Apple's bug bounty program overwhelmed by fake AI generated reports China launches cybersecurity review into Palo Alto Networks products Meta AI hacks external…
- Cybersecurity Headlines
AI safety tests reach the internet, Private Relay flaw unmasks IPs, weak telcos invite Salt Typhoon
AI safety tests spill onto the real internet Private Relay flaw unmasks IP addresses Weak telcos left door open for Salt Typhoon Get the show notes here…
- Cybersecurity Headlines
ChainDrop hits npm, Pass-ta-key targets passkeys, AI runs amok in Africa
ChainDrop attack hits npm Pass-ta-key attacks target passkeys AI accounts for most cybercrime in Africa Get the show notes here…
- Cybersecurity Headlines
License plate readers as stalking tools, ExfilSquad dumps UK police data, the ever-shrinking patch window
When license plate readers become stalking tools ExfilSquad dumps UK police contact data China-linked hackers shrink the patch window Get the show notes here…
- Cybersecurity Headlines
UK investments agency breach, CISA water warning, Anthropic rogue threesome
UK's state investments agency suffers data breach CISA tells utilities to remove internet-exposed PLCs following Minnesota attacks Anthropic says its AI hacked…
- Cybersecurity Headlines
The Department of Know: Minnesota water hack, LLM finds encryption flaw, human error hit Hugging Face
This week's Department of Know is hosted by Rich Stroffolino, with guests Janet Heins, CISO, ChenMed, and Derek Fisher, Director of the Cyber Defense and…
- Cybersecurity Headlines
Analog Devices breach, Copilot AI worm, Teams ransomware vishing
Semiconductor firm Analog Devices discloses data breach Copilot for Word POC copies hidden prompts into new documents Microsoft Teams vishing attacks lead to…
- Cybersecurity Headlines
OpenAI agent reaches Modal, Minnesota water systems hacked, fake Russian companies steal real money
OpenAI agent's escape reaches a Modal customer Hackers hit Minnesota water systems Fake Russian companies, real stolen money Get the show notes here…
- Cybersecurity Headlines
Leaky BMCs, Claude finds encryption flaws, Google's new names
Thousands of server BMCs leak password hashes Claude finds flaws in encryption Google gives old threat actors new names Get the show notes here…
- Cybersecurity Headlines
Nvidia opens AI security tent, Microsoft adds cyber sprinter to MDASH, Fairlife ransomware spills data
Nvidia opens the AI security tent Microsoft puts a cyber sprinter in MDASH Fairlife ransomware spills data Get the show notes here…
- Cybersecurity Headlines
Iran infrastructure warning, ChatGPT global outage, self-assembling malware
U.S. agencies warn of Iran-linked actors targeting water and energy control systems ChatGPT suffered brief global outage on Saturday Malvertising sends malware…
- Cybersecurity Headlines
The Department of Know: OpenAI hacks Hugging Face, Chinese LLM ban, Kratos takedown
This week's Department of Know is hosted by Rich Stroffolino, with guests Nick Espinosa, host, Deep Dive Radio Show, and Dennis Pickett, vp, CISO, Westat…
- Cybersecurity Headlines
AI agents risk, Upbound Group breach, Dolphin X Stealer
AI Agents become fastest growing exposed attack surface Consumer finance company Upbound Group blames data breach for millions in losses Dolphin X Stealer uses…
- Cybersecurity Headlines
OpenAI behind Hugging Face hack, TrickBot tunnels through DNS, Acrobat extension opens WhatsApp
OpenAI behind Hugging Face hack TrickBot tunnels through DNS Acrobat extension opens WhatsApp Get the show notes here: Huge thanks to our sponsor, QuilrAI AI…
- Cybersecurity Headlines
Bit2Watt instability, AI models cheat, Chinese LLM ban
Bit2Watt threatens power stability All AI models cheat at cyber evaluations US weighing Chinese LLM ban Get the show notes here…
- Cybersecurity Headlines
Hugging Face fights AI hacks, World Cup streamers get red cards, WordPress enters a patching race
Hugging Face fights AI hacks with AI World Cup streamers get a red card WordPress enters a patching race Get the show notes here: Huge thanks to our sponsor…
- Cybersecurity Headlines
Fairlife dairy cyberattack, ACR Stealer surge, Abbott Labs incidents
Dairy company Fairlife suffers cyberattack Microsoft warns of surge in ACR Stealer attacks on customers Abbott Labs investigates two cyber incidents amid…
- Cybersecurity Headlines
The Department of Know: CMMC suspended, ShareFile shutdown, Context Bombing strikes back
"Context Bombing" flips the script on prompt injections Pentagon suspends CMMC Phase II requirements Old tech, new problems Get the show notes here…
- Cybersecurity Headlines
ClickLock's kill loops, TELEPUZ ClickFix tricks, 1Password's agentic login
ClickLock stealer uses kill loops to force password entry TELEPUZ malware uses ClickFix to steal data and run commands 1Password's new Agentic Mode lets Claude…
- Cybersecurity Headlines
Zoom's wake-up call, zero-day SonicWall patch, 23andMe's growing breach bill
Zoom's account takeover wake-up call Two zero-days, one urgent SonicWall patch 23andMe's breach bill keeps growing Show Notes…
- Cybersecurity Headlines
CMMC Phase II suspended, tracking troops in Iran, defenders turn to context bombing
Pentagon suspends CMMC Phase II requirements US troop location data under attack in Iran "Context Bombing" flips the script on prompt injections Get the show…
- Cybersecurity Headlines
Russia's router access routes, MemGhost haunts AI memory, DHS alert got waved off twice
Russia's router access routes MemGhost haunts AI memory DHS alert got waved off… twice Get the show notes here…
- Cybersecurity Headlines
Multifunction Windows backdoor, NSA revives TAO, urgent ShareFile warning
Windows backdoor stuffs multiple wipers and ransomware code into a single package NSA brings back Tailored Access Operations name for elite hacking unit…
- Cybersecurity Headlines
The Department of Know: France gets ready for quantum, JadePuffer ransomware, UK's Cyber Shield
Link to the episode This week's Department of Know is hosted by Rich Stroffolino, with guests Davi Ottenheimer, principal, Flying Penguin, and Chris Ray, field…
- Cybersecurity Headlines
Interpol's global fraud sweep, China's Claude Code flag, old Github account tricks
Interpol's fraud sweep goes global China flags Claude Code Old GitHub accounts, new tricks Get the show notes here…
- Cybersecurity Headlines
Mexico's big cyber test, Roundcube mailserver snooped on, Cash App found lax
Mexico's first cyber test gets tested Snoops break into Roundcube mailservers Cash App owner pays up over lax security Get the show notes here…
- Cybersecurity Headlines
UK Cyber Shield, Japanese telco attack, China AI model limits
The UK's Cyber Pledge and Cyber Shield Millions exposed in Japanese telco attack China looking to curb overseas model access Get the show notes here: Thanks to…
- Cybersecurity Headlines
India tax RAT, prompt injection crypto scam, France pushes quantum-safe
Suspected China-Nexus hackers use fake Indian tax filing utility to deploy DcRAT Prompt injection attacks trick AI Agents into making crypto payments France to…
- Cybersecurity Headlines
First AI ransomware, AdaptHealth suffers cyberattack, UK cyber plan delayed
JadePuffer ransomware used AI agent to automate entire attack AdaptHealth suffers cyberattack UK's National Cyber Action Plan launch delayed by political…
- Cybersecurity Headlines
The Department of Know: PeopleSoft exploit, Ford brings back gray beards, LLM vetting
This week's Department of Know is hosted by Rich Stroffolino, with guests David Cross, CISO, Atlassian; Kathleen Mullin, Director, SABSA Institute; Montez…
- Cybersecurity Headlines
Consumer security worries, Vought supervises spy budgets, Fortibleed exposes Fortinet
Card data theft remains top concern for U.S. consumers OMB chief to oversee spy agency budgets Fortibleed leads to ransomware attacks and 430,000 Fortinet…
- Cybersecurity Headlines
Hide My Email bug shows real addresses, Fable 5 gets the greenlight, Microsoft Teams hits back on AI bots
Hide My Email bug shows real addresses Fable 5 gets the greenlight DHS confirms hackers breached HSIN Get the show notes here…
- Cybersecurity Headlines
Bash hits AI, DHS announces ANCHOR-CI, Aikido buys Root
Bash can spell trouble GNU for AI agents DHS to unveil critical infrastructure council Aikido buys Root Get the show notes here…
- Cybersecurity Headlines
US seizes illegal World Cup domains, WhatsApp offers usernames for phone privacy, $10M reward for Russia-based cyber campaign
US seizes illegal World Cup domains WhatsApp offers usernames for phone number privacy $10M reward for Russia-based cyber campaign Get the show notes here…
- Cybersecurity Headlines
CISA's Cisco deadline, China's Mythos competitor, Amazon Q flaw
CISA sets urgent deadline to fix exploited Cisco flaw Chinese cybersecurity company claims it has a better-than-Mythos bug finder Amazon Q flaw enables cloud…
- Cybersecurity Headlines
ShinyHunters hits MSG, Cal Water confirms no damage, CISA SASE guide
ShinyHunters hits Madison Square Garden Cal Water finds no evidence of OT activity New CISA guide helps agencies adopt SASE for Zero Trust Get the show notes…
- Cybersecurity Headlines
Copilot AI attacks cybercrime tools, hackers exploit Cisco zero-day, China's 360 vs Mythos
Copilot AI knocks down cybercrime tools Hackers exploit Cisco zero-day China's 360 says it matches Anthropic's Mythos Get the show notes here…
- Cybersecurity Headlines
Feds seize scam infrastructure, Dragos unveils AI for OT security, Scattered Spider hackers plead guilty
Feds seize alleged cyber-scam infrastructure Dragos unveils AI for OT security Scattered Spider hackers plead guilty Get the show notes here…
- Cybersecurity Headlines
OpenAI takes on Mythos, Klue hits security shops, Five Eyes has eyes on AI
OpenAI takes on Anthropic's Mythos Klue hack hits security shops Five Eyes has eyes on AI models Get the show notes here…
- Cybersecurity Headlines
Brazil phone alert hack, Prinz Eugen ransomware, Congress deepfake bill
Hackers suspected in Brazil cell phone alert Prinz Eugen ransomware prioritizes recent files for encryption Congress presents bill to protect people from…
- Cybersecurity Headlines
The Department of Know: SearchLeak, Check Point zero-day, and pulling the plug on Fable
This week's Department of Know is hosted by Rich Stroffolino, with guests Arif Hameed, CISO, C&R Software; Adam Palmer, CISO, First Hawaiian Bank; Jon Collins…
- Cybersecurity Headlines
Police clean WordPress sites, Klue OAuth breach, Warner's CISA warnings
Police clean ups SocGholish-infected sites tied to Evil Corp Klue OAuth breach linked to Icarus Salesforce data theft attacks Warner warns of CISA cuts…
- Cybersecurity Headlines
Anthropic tells G7 to cooperate, Fortinet VPN leak exposes credentials, Crypto Clipper abuses reviews
Anthropic tells G7 to cooperate Fortinet VPN leak exposes credentials Crypto Clipper abuses reviews, narrators, and comments Get the show notes here…
- Cybersecurity Headlines
Athena coalition, Estonia's quarantine, Arch hit with malware
Athena coalition looks to secure open source Estonia to quarantine Russian email domains Malicious package wave hits Arch Linux Get the show notes here…