Shows / Cybersecurity Headlines
Cybersecurity Headlines
Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.
Episodes
- Cybersecurity Headlines
Microsoft patches Office zero-day vulnerability, Indian users targeted by Blackmoon, Konni targets blockchain developers
Microsoft patches Office zero-day vulnerability Indian users targeted by Blackmoon Konni targets blockchain developers Huge thanks to our episode sponsor…
- Cybersecurity Headlines
Department of Know: Davos worries, UK-China tensions, calendar concerns
Link to episode page This week's Department of Know is hosted by Rich Stroffolino with guests Krista Arndt, associate CISO, St. Luke's University Health…
- Cybersecurity Headlines
Microsoft Patch problems, Sandworm hits Poland, Dresden Museum cyberattack
Microsoft Outlook and boot problems Sandworm likely behind cyberattack on Poland's power grid Dresden museum network suffers cyberattack Huge thanks to our…
- Cybersecurity Headlines
Multi-stage SharePoint attack, SmarterMail bypass flaw, AI worries Davos
Multi‑stage AiTM phishing and BEC campaign abusing SharePoint SmarterMail auth bypass flaw now exploited despite patch The problem of AI agents emerges at…
- Cybersecurity Headlines
Tesla hacked at Pwn2Own Automotive, Everest sitting on Under Armour data? PurpleBravo fake jobs campaign targets IP addresses
Tesla hacked at Pwn2Own Automotive Everest sitting on Under Armour data? PurpleBravo fake jobs campaign targets IP addresses Huge thanks to our sponsor…
- Cybersecurity Headlines
UK-China forum, Iranian TV hijacked, VoidLink made by AI
UK and China try to ease cyberattack tensions Iranian state TV hijacked VoidLink malware is AI-generated Huge thanks to our sponsor, Dropzone AI Remember…
- Cybersecurity Headlines
Gemini prompt injection flaw exposes calendar info, hacker admits to Supreme Court data leak, researchers uncover PDFSIDER malware
Gemini prompt injection flaw exposes calendar info Hacker admits to leaking stolen Supreme Court data Researchers uncover PDFSIDER malware Huge thanks to our…
- Cybersecurity Headlines
Department of Know: Easterly helms RSAC, Third party apps report, Self-poisoning AI
Link to episode page This week's Department of Know is hosted by Sarah Lane with guests Dmitriy Sokolovskiy, senior vice president, information security…
- Cybersecurity Headlines
NSA dual-hat question, third-party report, GhostPoster extension continues
Cybercom-NSA leadership nominee to assess dual-hat role Two-thirds of third-party applications access sensitive data without justification, says report…
- Cybersecurity Headlines
Easterly helms RSAC, Windows update problems, Police Copilot gaffe
Jen Easterly to helm RSAC Windows January update causes login problems UK police blame Copilot for intelligence mistake Thanks to our episode sponsor…
- Cybersecurity Headlines
U.S. weighs cyberwarfare options, DeadLock uses smart contracts to hide work, China says stop using US and Israeli cybersecurity software
U.S. weighs private companies' cyberwarfare roles China: stop using US and Israeli cybersecurity software DeadLock uses smart contracts to hide work Thanks to…
- Cybersecurity Headlines
GoBruteforcer targets blockchain projects, Android bug causes volume key issues, Verizon to stop automatic phone unlocks
GoBruteforcer targets blockchain projects Android accessibility issue just a bug Verizon to stop automatic phone unlocks Thanks to our episode sponsor…
- Cybersecurity Headlines
Instagram denies breach, Sweden detains spying suspect, n8n attack steals OAuth tokens
Instagram denies breach post-data leak Sweden detains consultant suspected of spying n8n supply chain attack steals OAuth tokens Thanks to our episode sponsor…
- Cybersecurity Headlines
Department of Know: Brightspeed investigates breach, Prompt injection woes
Link to episode page This week's Department of Know is hosted by Rich Stroffolino with guests Johna Till Johnson, CEO and Founder, Nemertes (check out the…
- Cybersecurity Headlines
BreachForums database leaked, Instagram breach worries, UK government exempts self
BreachForums hacking forum database leaked exposing 324,000 accounts Instagram breach exposes user data, creates password reset panic UK government exempts…
- Cybersecurity Headlines
Microsoft enforces admin MFA, Cisco patches ISE, Illinois breaches self
Microsoft to enforce MFA for Microsoft 365 admin center sign-ins Cisco patches ISE security vulnerability after PoC release Illinois state agency breaches…
- Cybersecurity Headlines
ESA confirms new data heist, Ni8mare lets hackers hijack n8n servers, Taiwan blames 'cyber army' for intrusion attempts
ESA confirms new data heist Ni8mare lets hackers hijack n8n servers Taiwan blames 'cyber army' for intrusion attempts Huge thanks to our sponsor, Hoxhunt…
- Cybersecurity Headlines
UK cyber reset, no MFA is a problem, US cyberattacks on display
The UK hits reset on cybersecurity No MFA, Know Problems US may have coordinated cyberattacks with Maduro's arrest Huge thanks to our sponsor, Hoxhunt A small…
- Cybersecurity Headlines
European hospitality blue screen of death, Brightspeed investigates breach, Convicted Bitfinex launderer freed
European hospitality blue screen of death Brightspeed investigates breach Convicted Bitfinex launderer freed Huge thanks to our sponsor, Hoxhunt Traditional…
- Cybersecurity Headlines
Department of Know: Sedgewick confirms incident, Coupang store credit only, AI needs generators
Link to episode page This week's Department of Know is hosted by Rich Stroffolino with guests Peter Clay, CISO, Aireon, and Chris Ray, Field CTO, GigaOm Thanks…
- Cybersecurity Headlines
Palo Alto AI warning, Resecurity hack fiasco, Christmas ColdFusion attack
Palo Alto Networks boss calls AI agents biggest insider threat Hackers claim Resecurity hack, firm says it was a honeypot Thousands of ColdFusion exploit…
- Cybersecurity Headlines
NYC Inauguration bans Flipper Zero, UK taxes crypto, Finland seizes ship
NYC mayoral inauguration bans Flipper Zero and Raspberry Pi devices Crypto must now share account details with UK tax officials Finland seizes suspected cable…
- Cybersecurity Headlines
Unleash Protocol hackers drain millions, DarkSpectre campaigns exposed, Shai-Hulud attack led Trust Wallet heist
Hackers drain millions from Unleash Protocol DarkSpectre campaigns exposed Shai-Hulud attack led Trust Wallet heist Huge thanks to our episode sponsor…
- Cybersecurity Headlines
Silver Fox targets Indian users, Mustang Panda deploys ToneShell, will prompt injection ever be 'solved'?
Silver Fox targets Indian users Mustang Panda deploys ToneShell Will prompt injection ever be 'solved'? Huge thanks to our episode sponsor, ThreatLocker Want…
- Cybersecurity Headlines
Coupang recovers laptop in river, Trust Wallet reports 2k+ wallets drained, Sax discloses 2024 data breach
Coupang recovers laptop allegedly thrown into river Trust Wallet reports 2k+ wallets drained Sax discloses 2024 data breach Huge thanks to our episode sponsor…
- Cybersecurity Headlines
The Department of Know: year in review and predictions
Link to episode page To end off a tumultuous year, our final Department of Know episode of 2025 features a chat between host Rich Stroffolino and producer…
- Cybersecurity Headlines
Rainbow Six Siege breach, backup generators for AI, LastPass reverberations
Rainbow Six Siege suffers breach, gamers go shopping Diesel generators and aircraft engines in high demand to power AI LastPass 2022 breach reverberates…
- Cybersecurity Headlines
Fortinet VPN exploit, Google gmail change, Aflac breach update
Active exploitation of Fortinet VPN bypass utility observed Google possibly allowing users to change default gmail address June Aflac attack resulted in data…
- Cybersecurity Headlines
Scams target MENA region, pen testers accused of blackmail, DDoS protection faces fresh challenges
Coordinated scams target MENA region Pen Test Partners accused of 'blackmail' Hackers steal record $2.7B in crypto in 2025 Thanks to our episode sponsor…
- Cybersecurity Headlines
ServiceNow to acquire cybersecurity startup Armis, MacSync Stealer adopts quieter installation, Nissan customer data stolen in Red Hat raid
ServiceNow to acquire cybersecurity startup Armis MacSync Stealer adopts quieter installation Nissan customer data stolen in Red Hat raid Thanks to our episode…
- Cybersecurity Headlines
Spotify music library scraped, DDoS disrupts French postal services, Fake delivery sites hit holiday shoppers
Spotify music library scraped DDoS disrupts France's postal and banking services Fake delivery websites hit holiday shoppers Thanks to our episode sponsor…
- Cybersecurity Headlines
Department of Know: President signs defense bill, time flies at NIST, Italian ferry malware
Link to episode page This week's Department of Know is hosted by Rich Stroffolino with guests Jason Taule, CISO, Luminis Health, and Chris Ray, Field CTO…
- Cybersecurity Headlines
President's cyber bill, Iranian APT resurfaces, Kimwold DDoS attack
President signs defense bill funding Cyber Command, Pentagon phone security Iranian APT Infy resurfaces with new malware Massive Android botnet Kimwolf…
- Cybersecurity Headlines
Windows RemoteApp problems, ferry malware arrest, Senator's open-source warning
Recent Windows updates break RemoteApp connections France arrests threat actors for installing malware on Italian ferry Senate Intel chair urges safeguard…
- Cybersecurity Headlines
FTC orders crypto to pay, New exploit of React2Shell, Ukraine fraud ring take down
FTC orders crypto to pay New exploit of React2Shell Ukraine-based fraud ring taken down Huge thanks to our sponsor, Adaptive Security This episode is brought…
- Cybersecurity Headlines
Rogue NuGet package steals data, Venezuela's PDVSA suffers attack, patched Fortinet flaws exploited
Rogue NuGet package steals data Venezuela's PDVSA suffers attack Patched Fortinet flaws exploited Huge thanks to our sponsor, Adaptive Security This episode is…
- Cybersecurity Headlines
US taps private firms in cyber offensive, Microsoft updates cause queuing failures, phishing campaign delivers Phantom Stealer
US turns to private firms in cyber offensive Microsoft updates cause queuing failures Phishing campaign delivers Phantom stealer Huge thanks to our sponsor…
- Cybersecurity Headlines
Department of Know: MITRE's weaknesses list, DoD goes postquantum, Coupang fallout
Link to episode page This week's Department of Know is hosted by Rich Stroffolino with guests Andy Ellis, Principal, Duha, and Johna Till Johnson, CEO and…
- Cybersecurity Headlines
MongoDB records exposed, Apple WebKit patches, Coupang culprit identified
16TB MongoDB database exposes nearly 4.3 billion professional records Apple posts updates after discovery of WebKit flaws Coupang data breach traced to…
- Cybersecurity Headlines
'DroidLock' demands ransom, Google fixes secret Chrome 0-day, UK fines LastPass over 2022 breach
'DroidLock' malware demands ransom Google fixes secret Chrome 0-day UK fines LastPass over 2022 breach Huge thanks to our episode sponsor, Adaptive Security…
- Cybersecurity Headlines
Coupang CEO resigns, hactivists target US infrastructure, Israeli cybersecurity hits record funding
CEO of retail giant Coupang resigns Pro-Russia hactivists target US infrastructure Israeli cybersecurity funding hits record Huge thanks to our episode…
- Cybersecurity Headlines
Spain arrest over data records, goodbye dark Telegram, scammers poison AI search results
Spain arrest over data records Goodbye, dark Telegram Scammers poison AI search results Huge thanks to our episode sponsor, Adaptive Security This episode is…
- Cybersecurity Headlines
Ransomware costs billions, cybercrime leads to real violence, three arrested for hacking tools
Ransomware payments pass $4.5 billion Cybercrime networks orchestrate real-world violence Three arrested over possessing hacking tools Huge thanks to our…
- Cybersecurity Headlines
Department of Know: CISO hiring warning, critical threat actor law, Microsoft Defender outage
Link to episode page This week's Department of Know is hosted by Sarah Lane with guests Jason Shockey, CISO, Cenlar FSB, and Mike Lockhart, CISO, Eagleview…
- Cybersecurity Headlines
Palo Alto VPN attacks, NATO cyberdefense exercise, Chinese exploit React2Shell
New wave of VPN login attempts on Palo Alto portals NATO holds its largest-ever cyberdefense exercise Chinese hackers exploiting React2Shell bug Huge thanks to…
- Cybersecurity Headlines
Predator spyware, Russia blocks FaceTime, US cyber strategy coming
Predator spyware spotted across several countries Russia blocks FaceTime Draft US cyber strategy set for January release Huge thanks to our episode sponsor…
- Cybersecurity Headlines
Record-breaking DDoS attack, React bug puts servers at risk, RansomHouse attack
Record-breaking DDoS attack React bug puts servers at risk RansomHouse attack Huge thanks to our episode sponsor, Vanta This message comes from Vanta. What's…
- Cybersecurity Headlines
Microsoft Defender outage disrupts threats, Apple resists India's app order, MuddyWater strikes Israel
Microsoft Defender outage disrupts threats Apple resists India's state-run app order MuddyWater strikes Israel with MuddyViper Huge thanks to our episode…
- Cybersecurity Headlines
India orders web safety app, arrests over IP camera snooping, Albiriox shows up on dark web
India orders web safety app Arrests over IP camera snooping Albiriox shows up on dark web Huge thanks to our episode sponsor, Vanta This message comes from…
- Cybersecurity Headlines
Department of Know: Prompt injection problems, California browser law, Hacklore's security myths
Link to episode page This week's Department of Know is hosted by Rich Stroffolino with guests Mathew Biby, director, cybersecurity, TixTrack, and Derek Fisher…
- Cybersecurity Headlines
Asahi ransomware details, California browser law, Windows Teams accelerated
Japanese brewer Asahi provides details regarding October ransomware attack California law regulating web browsers might impact national data privacy Microsoft…
- Cybersecurity Headlines
Microsoft blocks Entra, AI scammer legislation, ASUS patches AiCloud
Microsoft to block unauthorized scripts in Entra ID logins with 2026 CSP update New legislation targets scammers that use AI to deceive ASUS firmware patches…
- Cybersecurity Headlines
AWS outage botnet smacks 28 countries, LLMs help malware authors evade detection, Anthropic pressed over Claude espionage
AWS outage botnet smacks 28 countries LLMs help malware authors evade detection Anthropic questioned over Claude espionage Huge thanks to our episode sponsor…
- Cybersecurity Headlines
CISA warns of app break-ins, StealC V2 spread through blender files, Russian entrepreneur arrested for treason
CISA warns of app break-ins StealC V2 spread through blender files Russia arrests cybersecurity entrepreneur for treason Huge thanks to our episode sponsor…
- Cybersecurity Headlines
CISA orders feds to patch OIM, Delta Dental incurs breach, Ukraine postal operator systems down
CISA orders feds to patch OIM Delta Dental of Virginia incurs data breach Systems down at postal operator in Ukraine Huge thanks to our episode sponsor…
- Cybersecurity Headlines
Department of Know: Overconfidence new zero-day, FCC torches Salt Typhoon rules, AI uninsurable
Link to episode page This week's Department of Know is hosted by Rich Stroffolino with guests Keith Townsend, Keith Townsend, host CTO Advisor Podcast, founder…
- Cybersecurity Headlines
CrowdStrike insider catch, Spanish airline breach, AI not insurable
CrowdStrike catches insider feeding information to hackers Spanish airline Iberia suffers breach and data leak AI is too risky to insure, say insurers Huge…
- Cybersecurity Headlines
Sturnus captures encrypted chats, PowerSchool schools blamed, SEC security bill
Sturnus Android Trojan captures encrypted chats and hijacks devices Canadian regulators say schools share blame for PowerSchool hack Bill reintroduced to…
- Cybersecurity Headlines
Cloudflare blames database, Crypto heist takedown, WhatsApp flaw exposed billions
Cloudflare blames database Crypto heist takedown WhatsApp flaw exposed billions Huge thanks to our episode sponsor, KnowBe4 Your email gateway isn't catching…
- Cybersecurity Headlines
FCC to torch Salt Typhoon rules, Group claims Danish party website hits, MI5 warns Chinese spies are on LinkedIn
FCC to torch rules from Salt Typhoon Group claims hits on Danish party websites MI5 warns Chinese spies are using LinkedIn Huge thanks to our episode sponsor…