Shows / Cybersecurity Headlines
Cybersecurity Headlines
Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.
Episodes
- Cybersecurity Headlines
Drift blames exploit on North Korea, GitHub attacks target South Korea, Die Linke breach threatens data leak
Drift says exploit was North Korean intelligence operation GitHub used in multi-stage attacks targeting South Korea Data leak threatened after Die Linke attack…
- Cybersecurity Headlines
Department of Know: Axios malware, TeamPCP campaign, New Storm infostealer
Link to episode page This week's Department of Know is hosted by Sarah Lane, with guests Jack Kufahl, CISO, Michigan Medicine, and Adam Palmer, CISO, First…
- Cybersecurity Headlines
Malicious npm packages, CISA budget cuts, hackers exploit React2Shell
36 Malicious npm packages exploited to deploy persistent implants Hundreds of millions to be cut from CISA in proposed budget Hackers exploit React2Shell in…
- Cybersecurity Headlines
Texas hospital breach, CISA orders NetScaler patch, ISO file RAT warning
250,000 affected by data Breach at Texas hospital CISA says, "patch Citrix NetScaler bug by Thursday" Researchers uncover mining operation using ISO lures Get…
- Cybersecurity Headlines
New iOS patches over DarkSword, FBI: surveillance hack is major incident, Cisco code stolen in Trivy-linked breach
Apple pushes new patches over DarkSword FBI: US surveillance hack is major incident Cisco code stolen in Trivy-linked breach Get the show notes here…
- Cybersecurity Headlines
Axios poisoned, TeamPCP details, Claude Code leaked
HTTP client introduces malicious dependency TeamPCP testing the open source supply chain Claude source code leaked Get the show notes here…
- Cybersecurity Headlines
macOS Terminal ClickFix attacks, Russian court sentences 'Flint', CareCloud probes data breach
macOS Terminal gets ClickFix attacks Russian court sentences 'Flint' over card fraud CareCloud probes data breach Get the show notes here…
- Cybersecurity Headlines
Department of Know: Gemini scours dark web, NSA worries about cybersecurity, APIs run loose
Link to episode page This week's Department of Know is hosted by Rich Stroffolino with guests Dennis Pickett, vp, CISO, RTI International, and Jacob Combs…
- Cybersecurity Headlines
FBI email theft, Lloyds Bank glitch, API keys running loose
FBI confirms theft of director's personal emails Lloyds customer data exposed in IT glitch Hundreds of valid API keys discovered on the Web Get the show notes…
- Cybersecurity Headlines
Alleged RedLine dev extradited, Red Menshen spies with BPFDoor, is US cybersecurity slipping?
Alleged RedLine dev extradited to US Red Menshen uses BPFDoor to spy Former NSA chiefs worry US cybersecurity is slipping Check out our show notes for all…
- Cybersecurity Headlines
Torg Grabber targets crypto, TeamPCP backdoors LiteLLM, GitHub AI bug detection
Torg Grabber targets crypto wallets TeamPCP backdoors LiteLLM GitHub adds AI security bug detection Check out our show notes for all story links…
- Cybersecurity Headlines
FCC router ban, drone hit AWS, Crunchroll leak
FCC bans foreign routers Drone activity disrupts AWS region Crunchyroll confirmed data leak Check out our show notes for all story links…
- Cybersecurity Headlines
DarkSword exploit hits GitHub, Gemini AI agents scour dark web, Trivy supply chain attack expands
New DarkSword exploit hits GitHub Gemini AI agents scour the dark web Trivy supply chain attack expands Check out our show notes for all story links…
- Cybersecurity Headlines
Department of Know: SaaS apps enable breaches, real-time cyber protection, IoT botnet takedown
Link to episode page This week's Department of Know is hosted by Rich Stroffolino with guests Bil Harmer, CISO, Supabase, and Chris Ray, Field CTO, GigaOm…
- Cybersecurity Headlines
International botnet takedown, California city ransomed, Azure Monitor phishing
Law enforcement seizes botnet infrastructure California city and LA transit agency report cybersecurity issues Microsoft Azure Monitor alerts used for callback…
- Cybersecurity Headlines
Critical SharePoint flaw, real-time cyberattack prevention, CISA's Intune warning
Critical Microsoft SharePoint flaw now exploited in attacks 1stProtect reveals endpoint security platform intended to prevent cyberattacks in real time CISA…
- Cybersecurity Headlines
DarkSword emerges, "ShieldGuard" dismantled, NK IT worker army rakes in money
DarkSword emerges from suspected Russian hackers "ShieldGuard" dismantled after malware discovery North Korea's fake IT worker army rakes in $500M/year Get…
- Cybersecurity Headlines
Energy strategy, scammer accord, font-rendering attack
Energy Department to release first cyber strategy Tech giants sign on to fight scammers Font-rendering hides malicious commands from AI in plain sight Get…
- Cybersecurity Headlines
Stryker hospital tools safe, models apply to power AI scams, cybercrime up 245%
Stryker hospital tools safe, digital ordering services down Models apply to be the face of AI scams Cybercrime up 245% since Iran conflict Get links to all our…
- Cybersecurity Headlines
Department of Know: OpenAI vulnerability scanner, US new cyber strategy, VPN SEO poisoning
Link to episode page This week's Department of Know is hosted by Rich Stroffolino with guests Jonathan Waldrop, CISO, Acoustic, and Chris Ray, Field CTO…
- Cybersecurity Headlines
Royal Bahrain Hospital breach, Canada's Loblaw breached, New York water laws
Payload Ransomware group claims breached of Royal Bahrain Hospital Canadian food retailer Loblaw confirms data breach New York cyber regulations for water…
- Cybersecurity Headlines
Iran boosts cyberattacks, VENON targets Brazilian banks, England Hockey investigates breach
Iran boosts cyberattacks VENON targets Brazilian banks England Hockey investigates breach Get links to all the stories in our show notes…
- Cybersecurity Headlines
Meta apps offer new scam protection, Google's Wiz acquisition finalized, China curbs state-run OpenClaw use
Meta apps offer new scam protection Google's Wiz acquisition finalized China curbs state-run OpenClaw use Get links to all the stories in our show notes…
- Cybersecurity Headlines
New Cyber Command chief, Russia targets Signal, Codex Security
NSA and Cyber Command head confirmed Russians targeting encrypted messaging app users OpenAI rolls out vulnerability scanner Get links to all the stories in…
- Cybersecurity Headlines
InstallFix spreads fake Claude sites, UNC4899 breaches crypto, UK cyber-fraud crackdown
InstallFix attacks spread fake Claude code sites UNC4899 breaches crypto firm via trojanized file UK launches cyber-fraud crackdown unit Get links to all the…
- Cybersecurity Headlines
Department of Know: Quantum-Safe certificates, Iranian cyberattack risks, 90 zero-days
Link to episode page This week's Department of Know is hosted by Sarah Lane with guests John Barrow, CISO, JB Poindexter & Co., and Derek Fisher, Director of…
- Cybersecurity Headlines
FBI network breach, GitHub distributes stealer, Hackers abuse .arpa
FBI investigates suspicious activities on agency network Over 100 GitHub repositories distributing BoryptGrab stealer Hackers abuse .arpa DNS and ipv6 to evade…
- Cybersecurity Headlines
Apple blocks ByteDance, Google's 90 zero-days, Iran backdoors U.S. organizations
Apple blocks ByteDance Chinese apps Google says 90 zero-days were exploited in attacks last year Iran intelligence backdoored U.S. bank, airport, software…
- Cybersecurity Headlines
Possible iPhone-hacking toolkit used by spies, Hacker mass-mails HungerRush extortion emails, Tycoon 2FA phishing platform dismantled
Possible iPhone-hacking toolkit used by spies Hacker mass-mails HungerRush extortion emails Tycoon 2FA phishing platform dismantled Get the show notes here…
- Cybersecurity Headlines
Quantum decryption, OpenAI's deal, South Korea leaks crypto keys
Quantum decryption gets theoretically easier OpenAI alters the deal with the Pentagon South Korea leaks crypto keys for all to see Get the show notes here…
- Cybersecurity Headlines
Chrome quantum-safe certificates, Gemini Live vulnerability, UK warns of Iranian cyberattacks
Chrome unveils quantum-safe certificates Vulnerability allowed hijacking Gemini Live UK warns of Iranian cyberattack risks Get the show notes here…
- Cybersecurity Headlines
Department of Know: iPhone, iPad and Grok get greenlight, WiFi gets snitched
Link to episode page This week's Department of Know is hosted by Rich Stroffolino with guests Dan Holden, CISO, Commerce, and Mark Eggleston, CISO, CSC Thanks…
- Cybersecurity Headlines
Gottumukkala ousted, Wyden blocks Rudd, Hackers weaponize Claude
Gottumukkala ousted as CISA Director Ron Wyden blocks Rudd confirmation to lead Cyber Command, NSA Hackers Weaponize Claude Code in Mexican government…
- Cybersecurity Headlines
NATO adopts Apple, Education and Healthcare backdoor, Apex One flaws
iPhone and iPad cleared for classified NATO work U.S. Education and Healthcare targeted with Dohdoor backdoor Trend Micro warns of critical Apex One code…
- Cybersecurity Headlines
Google disrupts UNC2814, 3M+ impacted by TriZetto breach, Cisco bug exploited since 2023
Google disrupts UNC2814 3M+ impacted by TriZetto breach Cisco bug exploited since 2023 Get links to all of today's news in our show notes here: Thanks to…
- Cybersecurity Headlines
Hacked in 30 minutes, Claude distillation, DeFi shutdown after attack
Threat actors break out in under 30 minutes Claude allegedly hit with distillation attacks DeFi platform shutting down after crypto theft Get links to all of…
- Cybersecurity Headlines
US healthcare breach affects 140k, experts warn against replicating humans, Shai-Hulud-like worm targets devs
140k affected by US healthcare breach Data advocates warn against replicating humans Shai-Hulud-like worm targets developers Get links to all of today's news…
- Cybersecurity Headlines
Department of Know: Chrome zero-day, exploits, Copilot summarizes confidential emails, Identity abuse problems
Link to episode page This week's Department of Know is hosted by Rich Stroffolino with guests Montez Fitzpatrick, CISO, Navvis, and Peter Gregory, author…
- Cybersecurity Headlines
Arkanix was POC, 600 Fortinet firewalls breach, Russia heightens tension
Arkanix Stealer – the new AI info-stealer experiment AI-assisted hacker breached 600 Fortinet firewalls in 5 weeks Russia stepping up hybrid attacks, preparing…
- Cybersecurity Headlines
CISA's DELL order, Android AI malware, browsers as weak link
CISA orders urgent patch of Dell flaw Android malware uses Gemini to navigate infected devices Half of all cyberattacks start in the browser, says Palo Alto…
- Cybersecurity Headlines
Copilot summarizes confidential emails, ShinyHunters targets CarGurus, Texas sues TP-Link
Microsoft Copilot summarizes confidential emails ShinyHunters takes CarGurus records Texas sues TP-Link over router hack Get the full show notes here…
- Cybersecurity Headlines
Hacking protestors, UK "locks the door," Kenyan politician phone cracked
Hackers target anti-government protestors UK launches "lock the door" cybersecurity campaign Cellebrite linked to phone hack on Kenyan politician Get the full…
- Cybersecurity Headlines
Eurail traveler data for sale, EU Parliament blocks AI features, Washington Hotel discloses ransomware hit
Eurail stolen traveler data now up for sale EU Parliament blocks AI features Japan's Washington Hotel discloses ransomware hit Get the full show notes here…
- Cybersecurity Headlines
Department of Know: VoidLink threatens multi-cloud, flaw threatens Claude extension, China practices on infrastructure
Link to episode page This week's Department of Know is hosted by Sarah Lane with guests Jon Collins, Field CTO, GigaOm, and Adam Palmer, CISO, First Hawaiian…
- Cybersecurity Headlines
Ivanti actor identified, search overviews manipulated, ClickFix leverages Nslookup
One threat actor responsible for 83% of recent Ivanti RCE attacks Google's AI search overviews manipulated by scammers Microsoft warns of DNS-based ClickFix…
- Cybersecurity Headlines
Hackers abuse Gemini, Apple patches ancient bug, CISA criticizes shutdown
Hackers abuse Gemini AI for all attack stages, says Google Apple patches decade-old possibly exploited iOS zero-day Acting CISA chief critiques potential DHS…
- Cybersecurity Headlines
Crazy gang abuses employee monitoring tool, Nevada unveils new data classification, Georgia healthcare breach impact grows
Crazy gang abuses employee monitoring tool Nevada unveils new data classification Georgia healthcare breach impacts more than 620,000 Get the show notes here…
- Cybersecurity Headlines
Google gets EU Wiz approval, Microsoft secures Secure Boot certificates, North Korean hackers target crypto exec
EU grants Google approval for Wiz Microsoft rolls out Secure Boot certificates before expiration North Korean hackers target crypto exec Get the show notes…
- Cybersecurity Headlines
UNC3886 targets Singapore telecoms, VoidLink exhibits multi-cloud capabilities and AI code, 135,000+ OpenClaw instances exposed
UNC3886 targets Singapore telecom sector VoidLink exhibits multi-cloud capabilities and AI code 135,000+ OpenClaw instances exposed to internet Get the show…
- Cybersecurity Headlines
Department of Know: GSA's CMMC requirements, AWS intruder AI heist, Moltbook raises the stakes
Link to episode page This week's Department of Know is hosted by Rich Stroffolino with guests Nick Ryan, former CISO, and Chris Ray, Field CTO, GigaOm Thanks…
- Cybersecurity Headlines
OpenClaw embraces VirusTotal, CISA EOL Deadline, ransomware hits BridgePay
OpenClaw turns to VirusTotal to boost security CISA gives federal agencies one year to remove end-of-life devices Payments platform BridgePay confirms…
- Cybersecurity Headlines
Substack admits breach, Russian attacks target Winter Olympics, GitHub Codespaces enable RCE
Substack admits data breach Russian attacks target Winter Olympics GitHub Codespaces enable RCE Get the show notes here: Huge thanks to our sponsor, Strike48…
- Cybersecurity Headlines
Ukraine tightens controls on Starlink terminals, VMware ESXi flaw now exploited, SolarWinds Web Help Desk bug under attack
Ukraine tightens controls on Starlink terminals VMware ESXi flaw now exploited SolarWinds Web Help Desk bug under attack Get the show notes here…
- Cybersecurity Headlines
Metro bug, more social bans, leaky Moltbook
React Native Metro bug impacts thousands of servers Greece and Spain set to ban social media for kids Moltbook shows the dangers of vibe coding Get the show…
- Cybersecurity Headlines
OpenClaw targets ClawHub users, Notepad++ update delivers malware, APT28 attackers abuse Microsoft Office zero-day
OpenClaw targets ClawHub users Notepad++ update delivers malware APT28 attackers abuse Microsoft Office zero-day Get the show notes here…
- Cybersecurity Headlines
Department of Know: CISA's cryptography categories, Gottumukkala's ChatGPT gotcha, NTLM says goodbye
Link to episode page This week's Department of Know is hosted by Rich Stroffolino with guests Steve Zalewski, co-host, Defense in Depth, and Nick Espinosa…
- Cybersecurity Headlines
Police question Coupang CEO, Russia bakery cyberattack, Australian real estate scandal
Coupang CEO questioned by police regarding data breach probe Cyberattack on large Russian bread factory disrupts deliveries Real estate agents in Australia use…
- Cybersecurity Headlines
France fines unemployment agency, Teams flags calls, UK pushes deterrence
France fines unemployment agency €5 million over data breach Microsoft Teams addition will allow for suspicious calls to be reported UK leaders warned about…
- Cybersecurity Headlines
Sandbox flaw exposes n8n instances, Fake Moltbot assistant drops malware, PeckBirdy takes flight for cross-platform attacks
Sandbox flaw exposes n8n instances Fake Moltbot assistant drops malware PeckBirdy takes flight for cross-platform attacks Check out the show notes here…
- Cybersecurity Headlines
US cyber chief uploaded sensitive files into public ChatGPT, Vibe-coded 'Sicarii' ransomware can't be decrypted, WhatsApp account feature combats spyware
US cyber chief uploaded sensitive files into public ChatGPT Vibe-coded 'Sicarii' ransomware can't be decrypted WhatsApp account feature combats spyware Check…