Shows / Cybersecurity Headlines
Cybersecurity Headlines
Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.
Episodes
- Cybersecurity Headlines
Azure hit by DDoS, Kenyan government sites recover, EVALUSION emerges
Azure hit by DDoS using 500K IPs Kenyan government websites back online EVALUSION emerges Huge thanks to our episode sponsor, KnowBe4 Your email gateway isn't…
- Cybersecurity Headlines
Department of Know: Autonomous AI cyberattack, CISOs back to work, bus kill switches
Link to episode page This week's Department of Know is hosted by Rich Stroffolino with guests Robb Dunewood, Host, Daily Tech News Show, and Howard Holton…
- Cybersecurity Headlines
Windows 10 update failure, autonomous AI cyberattack, Feds fumble Cisco patches
Microsoft warns of potential Windows 10 update failure China-backed hackers launch first large-scale autonomous AI cyberattack Feds fumbled Cisco patches…
- Cybersecurity Headlines
Cyber laws reprieved, Microsoft screen capture, FBI highlights Akira
Two key cyber laws are back as president signs bill to end shutdown Microsoft's screen capture prevention for Teams users is finally rolling out FBI calls…
- Cybersecurity Headlines
Mobile blackout for Russian travelers, Windows 11 supports 3rd party passkeys, Synology patches BeeStation flaw
Mobile internet blackout for Russian travelers Windows 11 supports 3rd-party passkey apps Synology patches BeeStation flaw Huge thanks to our sponsor, Vanta…
- Cybersecurity Headlines
Google's remote-wipe weapon, Qilin ransomware activity surges, GootLoader is back
Google's Find Hub turns into remote-wipe weapon Qilin ransomware activity surges GootLoader is back Huge thanks to our sponsor, Vanta What's your 2 AM security…
- Cybersecurity Headlines
Reauthorizing CISA, Electric bus kill switches, GDPR for AI
CISA reauthorization Denmark and Norway investigating electric bus "kill switches" European Commission looking to simplify privacy laws for AI Huge thanks to…
- Cybersecurity Headlines
Department of Know: Cybercriminals join forces, SleepyDuck" exploits Ethereum, passwords still awful
Link to episode page This week's Department of Know is hosted by Rich Stroffolino with guests Jacob Coombs, CISO, Tandem Diabetes Care, and Ross Young…
- Cybersecurity Headlines
runC Docker threats, lost iPhone scam, Landfall spyware warning
runC flaws could allow hackers to escape Docker containers Lost iPhone scam warning Landfall Android spyware targets Samsung Galaxy phones Huge thanks to our…
- Cybersecurity Headlines
Hackers use Hyper-V, Cisco UCCX flaw, The Louvre's password
Hackers use Windows Hyper-V to evade EDR detection Critical Cisco UCCX flaw lets attackers run commands as root The Louvre's video security password was…
- Cybersecurity Headlines
Google uncovers PROMPFLUX, CISA warns of CentOS Web Panel bug, Threat group targets academics
Google uncovers PROMPTFLUX malware CISA warns of CentOS Web Panel bug Threat group targets academics Huge thanks to our sponsor, ThreatLocker Cybercriminals…
- Cybersecurity Headlines
Scattered Spider, LAPSUS$, ShinyHunters join forces, Nikkei data breach impacts 17k people, React Native NPM flaw leads to attacks
Scattered Spider, LAPSUS$, and ShinyHunters join forces Nikkei reports data breach impacting 17,000 people React Native NPM flaw leads to attacks Huge thanks…
- Cybersecurity Headlines
"SleepyDuck" uses Ethereum, SesameOp abuses OpenAI API, cybercrooks steal physical cargo
"SleepyDuck" uses Ethereum to keep command server alive SesameOp abuses OpenAI Assistants API Organized crime cybercrooks steal cargo Huge thanks to our…
- Cybersecurity Headlines
Department of Know: Azure security pitfalls, retailer cyberattack profits, Aardvark eats bugs
Link to episode page This week's Department of Know is hosted by Rich Stroffolino with guests Davi Ottenheimer, vp, digital trust and ethics, Inrupt, and Rob…
- Cybersecurity Headlines
Australia BadCandy warning, Cisco firewall attack, Aardvark eats bugs
Australia warns of BADCANDY attacks exploiting Cisco IOS XE Chinese hackers exploiting Cisco ASA firewalls used by governments worldwide OpenAI's Aardvark…
- Cybersecurity Headlines
LinkedIn AI opt-out, NSA leadership candidates, Python foundation withdraws
LinkedIn users have until Monday to opt out of its AI training program New names surface for NSA leadership Open-source security group pulls out of U.S. grant…
- Cybersecurity Headlines
LG Uplus confirms breach, Conduent attack impacts 10M+, hackers exploit tools against Ukraine
LG Uplus confirms cybersecurity incident 10 million+ impacted by Conduent breach Russian hackers exploit tools against Ukrainian targets Huge thanks to our…
- Cybersecurity Headlines
Android malware types like a human, sanctions weaken cyber ecosystems, side-channel extracts Intel, AMD secrets
New Android malware types like a human Sanctions weaken nation-state cyber ecosystems Side-channel attack extracts Intel, AMD secrets Huge thanks to our…
- Cybersecurity Headlines
Atlas browser hijacked, Bye, bye Twitter birdie, Dante spyware surfaces
Atlas browser hijacked Bye, bye Twitter birdie Dante spyware surfaces Huge thanks to our sponsor, Conveyor Security reviews don't have to feel like a…
- Cybersecurity Headlines
Department of Know: Promoting passphrases, questioning international security conferences, gift card hackers
Link to episode page This week's edition of The Department of Know is hosted by Rich Stroffolino with guests Bil Harmer, operating partner and CISO, Craft…
- Cybersecurity Headlines
Microsoft WSUS vulnerability, LastPass death hoax, Copilot phishing technique
Microsoft WSUS vulnerability could allow for remote code execution Fake LastPass death claims used to breach password vaults New CoPhish attack steals OAuth…
- Cybersecurity Headlines
Week in Review: AI powered cyberattacks, Chinese time hacked, the 72 hour workweek
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guests David Cross, CISO, Atlassian, and…
- Cybersecurity Headlines
Jingle Thief exploit, Lazarus targets jobseekers, the 72 hour workweek
Jingle Thief hackers steal millions in gift cards by exploiting cloud infrastructure Lazarus hackers targeted European defense companies Deep Tech work culture…
- Cybersecurity Headlines
TP-Link urges updates, MuddyWater espionage campaign, flaw hits Adobe Commerce
TP-Link urges updates for Omada gateways MuddyWater targets organizations in espionage campaign "SessionReaper" flaw exploited in Adobe Commerce Huge thanks to…
- Cybersecurity Headlines
Russian hackers replace malware with new tools, Windows updates cause login issues, campaign targets high-profile servers
Russian state hackers replace burned malware with new tools Recent Windows updates cause login issues on some PCs Sophisticated campaign targets servers of…
- Cybersecurity Headlines
AWS outage, NSA hacking accusations, High risk WhatsApp automation
DNS failure leads to AWS outage China accuses NSA of hacking national time center Chrome store flooded with high-risk WhatsApp automation Huge thanks to our…
- Cybersecurity Headlines
Europol dismantles SIM farm, Envoy Air compromised, Everest claims Collins hack
Europol dismantles 49 million fake account SIM farm Envoy Air confirms Oracle E-Business Suite compromise Cybercrime group Everest claims Collins Aerospace…
- Cybersecurity Headlines
Week in Review: Velociraptor pushes LockBit, Hartman loses nomination, Sotheby's cyberattack
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guests Tom Hollingsworth, networking technology…
- Cybersecurity Headlines
Sotheby's suffers cyberattack, Cisco "Zero Disco' attacks, Microsoft revokes ransomware certificates
Sotheby's suffers cyberattack Hackers exploit Cisco SNMP flaw in "Zero Disco' attacks Microsoft revokes more than 200 certificates to disrupt ransomware…
- Cybersecurity Headlines
MANGO discloses data breach, Jewelbug infiltrates Russian IT network, nation-state behind F5 attack?
MANGO discloses data breach Threat group 'Jewelbug' infiltrates Russian IT network F5 discloses breach tied to nation-state threat actor Huge thanks to our…
- Cybersecurity Headlines
Legacy Windows protocols expose theft, Fortra admits GoAnywhere defect, Taiwan claims surge in Chinese attacks
Legacy Windows protocols still expose theft Fortra admits exploitation of GoAnywhere defect Taiwan claims surge in Chinese attack efforts Huge thanks to our…
- Cybersecurity Headlines
Salesforce data leak, SimonMed breach, Chipmaker vs. Dutch government
Millions of records exposed in Salesforce data leak SimonMed breach grows from hundreds to over a million Dutch government freezes Chinese-owned chipmaker Huge…
- Cybersecurity Headlines
Velociraptor pushes LockBit, Spain dismantles crime group, SonicWall SSL VPN breach
Huge thanks to our sponsor, Vanta What's your 2 AM security worry? Is it "Do I have the right controls in place?" Or "Are my vendors secure?" ....or the really…
- Cybersecurity Headlines
Week in Review: Crowdsourced ransomware campaign, Windows 10 woes, California opts out
Link to episode page This week's Cyber Security Headlines - Week in Review is hosted by Rich Stroffolino with guests Mike Lockhart, CISO Eagleview, and Dustin…
- Cybersecurity Headlines
Microsoft Azure outage, law firm cyberattack, Russian hacktivists pwned
Azure outage blocks access to Microsoft 365 services and admin portals Major U.S. law firm suffers cyberattack Hacktivists aiming for critical infrastructure…
- Cybersecurity Headlines
DeepMind fixes vulnerabilities, California offers data opt-out, China-Nexus targets open-source tool
Google DeepMind's AI agent finds and fixes vulnerabilities California law lets consumers universally opt out of data sharing China-Nexus actors weaponize…
- Cybersecurity Headlines
North Korean attackers steal crypto. Who's sending UK phones to China? Avnet confirms data breach
North Korean hackers steal more than $2B in crypto Group suspected of sending stolen UK phones to China Avnet confirms breach, says stolen data unreadable Huge…
- Cybersecurity Headlines
Unity vulnerability, Oracle zero-day patched, Discord user info exposed
Unity vulnerability puts popular games at risk Oracle zero-day exploit patched Third-party breach claims Discord user info Huge thanks to our sponsor…
- Cybersecurity Headlines
ParkMobile breach settlement, UK schools vulnerable, Zimbra calendar attacks
ParkMobile 2021 data breach class action suit concludes UK government study suggests secondary schools larger target than businesses Zimbra Collaboration Suite…
- Cybersecurity Headlines
Week in Review: Shutdown furloughs CISA, DoD risk framework, Oracle extortion problem
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Nick Espinosa, nationally syndicated host of The Deep Dive Radio Show…
- Cybersecurity Headlines
Shutdown furloughs CISA, Defender BIOS bug, Motilily dealership cyberattack
Government shutdown furloughs most CISA staff Microsoft Defender bug triggers erroneous BIOS update alerts Motility RV software company suffers cyberattack…
- Cybersecurity Headlines
Breaches set for North America, Outlook bug needs Microsoft support, Air Force admits SharePoint issue
Breach notification letters set to flood North America's mailboxes New bug in classic Outlook only fixed via Microsoft support Air Force admits SharePoint…
- Cybersecurity Headlines
China-linked group linked to new malware, 2024 VMware zero-day still exploited, iOS fixes a bevy of glitches
China-Linked Group Hits Governments With Stealth Malware Chinese hackers exploit VMware zero-day since October 2024 Apple's iOS fixes a bevy of glitches Huge…
- Cybersecurity Headlines
Microsoft blocks AI code, Breach hits WestJet, Harrods suffers new data incident
AI-generated code used in phishing campaign blocked by Microsoft WestJet notifies American consumers of data breach Ukrainian cops spoofed in fileless phishing…
- Cybersecurity Headlines
Dutch espionage arrest, DOD risk management framework, Oyster malvertising
Dutch teenagers arrested for attempted espionage for Russia DoD announces replacement for risk management framework Fake Microsoft Teams installers deliver…
- Cybersecurity Headlines
Week in Review: Jaguar Land Rover attack, indirect prompt injections, card farms in NYC
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by David Spark with guests Brett Conlon, CISO, American Century…
- Cybersecurity Headlines
Windows 10 extension, teenage Vegas hacker released, Boyd Gaming hacked
Microsoft to offer free Windows 10 security updates in Europe Teenage Vegas casino hacker released to parents Boyd Gaming hacked, employee data stolen Huge…
- Cybersecurity Headlines
Suspect arrested over airport attack, DDoS attack hits new record, BRICKSTORM backdoor steals IPs
Person arrested in connection with airport attack Record-breaking DDoS attack hits new highs China-linked attackers use 'BRICKSTORM' backdoor to steal IP Huge…
- Cybersecurity Headlines
European airports restore services, CISA deals with GeoServer exploit, Jaguar Land Rover extends shutdown
European airports restoring services after system breach CISA deals with GeoServer exploit App for outing Charlie Kirk's critics leaks personal data Huge…
- Cybersecurity Headlines
EDR-Freeze, DeepMind persuasion, vendors exit ATT&CK
EDR-Freeze tool suspends security software DeepMind updates Frontier Safety Framework Major vendors withdraw from MITRE EDR Evaluations Huge thanks to our…
- Cybersecurity Headlines
European airport cyberattack, SMS celltower scam, GPT4-powered ransomware
European airport disruption due to cyberattack check-in and baggage software SMS scammers now using mobile fake cell towers GPT-4-powered MalTerminal malware…
- Cybersecurity Headlines
Week in Review: Student hackers increase, CISA wants CVE, Microsoft called hypocritical
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guests Jack Kufahl, CISO, Michigan Medicine, and…
- Cybersecurity Headlines
Google patches zero-day, Copilot's forced installation, Scattered Spider arrests
Google patches sixth Chrome zero-day exploited in attacks this year Microsoft to force install the Microsoft 365 Copilot app in October Two more Scattered…
- Cybersecurity Headlines
Insight Partners warns thousands, Scattered Spider feigns retirement, Consumer Reports calls Microsoft 'hypocritical'
Insight Partners warns thousands after ransomware breach Scattered Spider gang feigns retirement, breaks into bank instead Consumer Reports calls Microsoft…
- Cybersecurity Headlines
Cyber programs extended, older Apple devices attacked, chatbots aid phishing scams
House lawmakers move to extend two key cyber programs Apple 0-day likely used in spy attacks affected older devices Reuters crafts phishing scam with AI…
- Cybersecurity Headlines
Android security changes, CISA incentive audit, LLM usage
Android moving to "risk-based" security updates CISA accused of Cyber Incentive mismanagement How security practitioners use LLMs Huge thanks to our sponsor…
- Cybersecurity Headlines
ShinyHunters hits Vietnam, Petya-NotPetya copycat appears, CISA wants CVE
ShinyHunters hits Vietnam National Credit Information Center HybridPetya is a Petya/NotPetya copycat with UEFI Secure Boot bypass CISA seeks control over CVE…
- Cybersecurity Headlines
Week in Review: Qantas penalizes executives, UK cyberlegislation delayed, SonicWall VPN flaws
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guests Rob Teel, CTO, Oklahoma Department of…
- Cybersecurity Headlines
SonicWall VPM exploits, Fed cyberchief's priorities, U.S spyware investment triples
SonicWall SSL VPN flaws now being actively exploited Acting federal cyber chief outlines his priorities U.S. based investors in spyware firms nearly tripled in…
- Cybersecurity Headlines
npm update, Cursor Autorun flaw details, Microsoft probe over Ascension hack?
The npm incident: nothing to fret about? Cursor Autorun flaw lets repositories execute code without consent Senator Wyden urges FTC to probe Microsoft over…