Shows / Cybersecurity Headlines
Cybersecurity Headlines
Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.
Episodes
- Cybersecurity Headlines
Blood center attack details emerge, Electoral Commission recovers, Plex suffers password breach
Thousands had data leaked in blood center ransomware attack UK Electoral Commission recovers, 3 years after China hack Npm packages with 2 billion weekly…
- Cybersecurity Headlines
GhostAction campaign, scam centers grow, GPUGate hits IT
GhostAction campaign targets GitHub Scam centers see huge growth in Myanmar GPUGate targets IT firms Huge thanks to our sponsor, Vanta Do you know the status…
- Cybersecurity Headlines
SVG phishing campaign, Anthropic piracy lawsuit, Qantas penalizes executives
New malware phishing campaign hidden in SVG files Anthropic agrees to pay $1.5bn in book piracy lawsuit Qantas penalizes executives for cyberattack Huge thanks…
- Cybersecurity Headlines
Week in Review: Baltimore's expensive gaffe, ransomware takedown outcomes, Workiva Salesforce breach
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Ray Espinoza, vp of information security…
- Cybersecurity Headlines
France cookie fines, CISA TP-Link KEV, sports piracy takedown
France fines Google and Shein over cookie misconduct CISA adds more TP-Link routers flaws to its KEV catalog World's largest sports piracy site shut down Huge…
- Cybersecurity Headlines
Fintech foils bank heist, NotDoor backdoor, Salesloft-Drift impact continues drifting
Fintech foils bank heist NotDoor backdoor Salesloft-Drift impact continues drifting Huge thanks to our sponsor, ThreatLocker ThreatLocker® is a global leader…
- Cybersecurity Headlines
Google: Gmail is secure, Cloudflare blocks largest DDoS attack, Amazon shutters theft campaign
'2.5 billion Gmail users at risk'? Entirely false, says Google Cloudflare blocks largest recorded DDoS attack peaking at 11.5 Tbps Jaguar Land Rover says…
- Cybersecurity Headlines
LLM legalese prompts, Maryland Transit cyberattack, hacking into university
LegalPwn technique hides LLMs prompts inside contract legalese Maryland Transit investigating cyberattack Hacker attempts to forge his way into Spanish…
- Cybersecurity Headlines
Velociraptor C2 tunnel, Baltimore's expensive con, ransomware gangs multiply
Velociraptor forensic tool used for C2 tunneling City of Baltimore gets socially engineered to the tune of $1.5 million Ransomware gang takedowns create more…
- Cybersecurity Headlines
Week in Review: Citrix RCE flaw, steganography revived, major telecom fiasco
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Johna Till Johnson, CEO and founder…
- Cybersecurity Headlines
Malicious nx Packages, AI worker scam, Salt Typhoon attacks Netherlands
Malicious nx Packages leak GitHub, Cloud, and AI Credentials North Korean remote worker scheme boosted by generative AI The Netherlands announces Salt Typhoon…
- Cybersecurity Headlines
Salt Typhoon expands, AI-powered ransomware, Anthropic warns of vibe-hacking
FBI warns of expanded Chinese hacking campaign AI-powered ransomware is a thing now Anthropic warns about "vibe-hacking" Huge thanks to our sponsor, Prophet…
- Cybersecurity Headlines
DOGE puts critical SS data at risk? CISA warns of new exploited flaw, K-Pop stock heist attacker extradited to South Korea
DOGE Put Critical Social Security Data at Risk, Whistle-Blower Says CISA warns of actively exploited Git code execution flaw Alleged mastermind behind K-Pop…
- Cybersecurity Headlines
Farmers Insurance also hit by Salesforce breach, UpCrypter phishing campaign, Pakistan hits Indian government agencies
If Salesforce flutters its wings in San Francisco... How is this still tricking people? From tagging to bagging Huge thanks to our sponsor, Prophet Security…
- Cybersecurity Headlines
Malicious Go module, new Mirai botnet, Silk Typhoon exploits cloud
Malicious Go module steals credentials via Telegram Mirai-based botnet resurfaces targeting systems globally Silk Typhoon hackers exploit cloud trust to hack…
- Cybersecurity Headlines
Week in Review: Celebrating 5 years of Cyber Security Headlines
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino. This is our milestone edition, celebrating five years…
- Cybersecurity Headlines
Apple's urgent update, Scattered Spider sentence, Microsoft seeks SSD feedback
Apple urges iPhone, iPad and Mac update ASAP Scattered Spider operative gets 10 years and a big fine Microsoft seeks customer feedback on SSD failure issues…
- Cybersecurity Headlines
Apple zero-day patch, Jailbreaking ChatGPT-5 Pro, 7-year old Cisco Vulnerability exploited
A patch today keeps the zero-day away Jailbreaking ChatGPT-5 Pro The thing about vulnerabilities is they stay vulnerable Huge thanks to our sponsor, Conveyor…
- Cybersecurity Headlines
UK drops Apple backdoor mandate, Allianz Life breach impacts 1.1M, attack stifles speed cameras
UK agrees to drop 'backdoor' mandate for Apple devices Massive Allianz Life data breach impacts 1.1M people Speed cameras knocked out after cyber attack Huge…
- Cybersecurity Headlines
Workday breach, post-quantum alliance, Chinese group targets Taiwan
Workday confirms data breach An alliance to unify post-quantum cryptography New Chinese threat actor targeting Taiwan Huge thanks to our sponsor, Conveyor If…
- Cybersecurity Headlines
Cisco firewall warning, Colt Telecom cyberattack, CISA's OT request
Cisco warns of maximum-severity defect in firewall software UK's Colt Telecom suffers cyberattack CISA implores OT environments to lock down critical…
- Cybersecurity Headlines
Week in Review: ShinyHunters-Scattered Spider merge, DARPA AI prize, Water infrastructure volunteers
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Steve Zalewski, co-host, Defense in Depth…
- Cybersecurity Headlines
NFC fraud reappears, Canada government breach, Zoom's critical flaw
New wave of NFC relay fraud, call hijacking, and root exploits in banking sector Canada's House of Commons suffers cyberattack Zoom fixes critical Windows…
- Cybersecurity Headlines
Court filing system hack explained, PA AG weighs in on attack, Fortinet attacks raise concerns
Hack of federal court filing system exploited security flaws known since 2020 Pennsylvania attorney general says cyberattack knocked phone, email systems…
- Cybersecurity Headlines
Fortinet SSL VPNs getting hammered, The Netherlands critical infrastructure compromise, Africa the most targeted for cyber attacks
The hits just keep on coming Where's the Little Dutch Boy when you need him? I felt the ransomware down in Africa Huge thanks to our sponsor, Vanta Do you know…
- Cybersecurity Headlines
North Korean crypto theft, Microsoft rolls out back up, four charged in global scheme
North Korean crypto theft Microsoft rolls out PC back up during attack U.S. charges four in $100M global fraud scheme Huge thanks to our sponsor, Vanta Do you…
- Cybersecurity Headlines
DARPA code prize, ScarCruft adds ransomware, Columbia breach tally
DARPA awards $4 million prize for AI code review at DEF CON North Korea ScarCruft group adds ransomware to its activities Columbia University hack affects over…
- Cybersecurity Headlines
Week in Review: UK LegalAid collapse, public ransomware approval, Salesforce breach impact
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Montez Fitzpatrick, CISO, Navvis Thanks to…
- Cybersecurity Headlines
Hybrid Exchange flaw, France telecom breach, Dialysis company attack
Microsoft warns of high-severity flaw in hybrid Exchange deployments France's third-largest mobile operator suffers breach Dialysis company's April attack…
- Cybersecurity Headlines
Gemini AI hijacked, Nvidia rejects AI chip backdoors, phishers abuse Microsoft 365
Hackers hijacked Google's Gemini AI with a poisoned calendar invite to take over a smart home Nvidia rejects US demand for backdoors in AI chips Google says…
- Cybersecurity Headlines
PBS confirms data breach, TSMC fires engineers over theft, Cloudflare: Perplexity is web scraping
PBS confirms data breach after employee info leaked on Discord servers TSMC fires engineers over suspected semiconductor secrets theft Cloudflare on Perplexity…
- Cybersecurity Headlines
Microsoft & Google lead zero day exploits, Plague Linux malware maintains SSH access, panel to create US Cyber Force
Microsoft and Google among most affected as zero day exploits jump 46% Vietnamese hackers use PXA Stealer, hit 4,000 IPs and steal 200,000 passwords globally…
- Cybersecurity Headlines
Akira's SonicWall zero-day, UK Legal-Aid suffers, Luxembourg 5G attack
Huge thanks to our sponsor, ThreatLocker ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect…
- Cybersecurity Headlines
Week in Review: Surveillance camera vulnerabilities, data sovereignty conundrum, French submarine cyberattack
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Derek Fisher, Director of the Cyber Defense…
- Cybersecurity Headlines
ATM Raspberry Pi breach, Easterly West Point cancellation, Chinese company-hacker link
NATM network breached and attacked through 4G Raspberry Pi Easterly's appointment to West Point rescinded Report links Chinese companies to tools used by…
- Cybersecurity Headlines
Oh No! Lenovo, French submarine data breach, Russian pharmacy cyberattack
Oh No! Lenovo You sunk my battleship! Or did you? Russians unable to get a taste of their own medicine Huge thanks to our sponsor, Dropzone AI Security teams…
- Cybersecurity Headlines
Telecom Orange hacked, $2.4M Bitcoin seized from Chaos, Scattered Spider's tactics evolve
Critical Authentication Flaw Identified in Base44 Vibe Coding Platform French telecom giant Orange discloses cyberattack FBI seizes $2.4M in Bitcoin from new…
- Cybersecurity Headlines
Russian flights grounded, Naval group breach, dating app exposed
Hacktivist attack grounds Russian flights Naval group denies breach, hackers beg to differ Dating app breach exposes thousands of women's pictures Huge thanks…
- Cybersecurity Headlines
NASCAR announces breach, Plankey for CISA, 365 Admin outage
NASCAR announces data breach following March cyberattack Plankey appears to be on track to lead CISA Microsoft investigates another outage affecting 365 admin…
- Cybersecurity Headlines
Week in Review: Aruba's hardcoded passwords, Clorox wipes supplier's mess, AI tool deletes everything
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Nick Espinosa, host, The Deep Dive Radio…
- Cybersecurity Headlines
SonicWall releases patches, The Com warning, Compromised Amazon Q extension
SonicWall announces SMA 100 patches FBI warns about The Com Compromised Amazon Q extension deletes everything Huge thanks to our sponsor, Nudge Security Nudge…
- Cybersecurity Headlines
Goodbye toha, AI deletes live data, Adobe apps advisory activated
Goodbye toha, or as they say in Russian, Прощай "Trust the AI," they said. "What could go wrong?" they said Adobe apps advisory activated Huge thanks to our…
- Cybersecurity Headlines
Sharepoint hack linked to Chinese groups, NGOs targeted with phishing tactics, engineer admits US missile theft
Microsoft links Sharepoint ToolShell attacks to Chinese hackers Russian threat actors target NGOs with new OAuth phishing tactics Silicon Valley engineer…
- Cybersecurity Headlines
SharePoint patched, World Leaks hits Dell, $44 million crypto theft
SharePoint RCE flaws patched and exploited from China Dell acknowledges World Leaks data breach $44 million stolen from crypto exchange Huge thanks to our…
- Cybersecurity Headlines
Aruba password warning, SharePoint zero day, Russian vodka maker attacked
Hewlett Packard warns of hardcoded passwords in Aruba access points SharePoint zero-day exploited via RCE, no patch available Russian vodka producer suffers…
- Cybersecurity Headlines
Week in Review: Pentagon's Chinese Engineers, Gemini's email phish, 20-year-old railroad flaw persists
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Cyrus Tibbs, CISO, PennyMac Thanks to our…
- Cybersecurity Headlines
Taiwan semiconductor sector hacked, Salt Typhoon breaches National Guard, Congress ponders Stuxnet
Chinese hackers use Cobalt Strike on Taiwan's semiconductor sector Salt Typhoon breaches National Guard and steals network configurations Congress considers…
- Cybersecurity Headlines
Google's AI tool finds bugs, Europol disrupts hacktivist group, SquidLoader targets Hong Kong
Google says 'Big Sleep' AI tool found bug hackers planned to use Google fixes actively exploited sandbox escape zero day in Chrome China's cyber sector…
- Cybersecurity Headlines
Chinese engineers at Pentagon, HazyBeacon malware, MITRE framework: AADAPT
Pentagon welcomes Chinese engineers into its environment HazyBeacon: It's not a beer, but it leaves a bitter aftertaste What the world needs now is another…
- Cybersecurity Headlines
EU age verification, train brakes vulnerability, Grok-4 jailbroken
EU states to test age verification app (Reuters) AAR pledges to start fixing 20-year old vulnerability next year (Security Week) Grok-4 jailbroken in two days…
- Cybersecurity Headlines
CitrixBleed2 urgent fix, Gemini email flaw, Louis Vuitton cyberattack
CISA gives one day for Citrix Bleed 2 fix Google Gemini flaw hijacks email summaries for phishing Louis Vuitton says UK customer data stolen in cyber-attack…
- Cybersecurity Headlines
Week in Review: ChatGPT URL vulnerability, McDonald's password problem, Perfekt Bluetooth blunder
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Jim Bowie, vp, CISO, Tampa General Hospital…
- Cybersecurity Headlines
Outlook outage continues, Iranian APT activity, Russian ransomware arrest
Look Out! Another Outlook Outage Iranian APTs increased activity against U.S. industries in late spring Russian basketball player arrested in France over…
- Cybersecurity Headlines
AMD has CPU meltdown, Mozilla Thunderbird has vulnerabilities, Indian defense sector attacked
AMD warns of new Meltdown, Spectre-like bugs affecting CPUs Multiple vulnerabilities in Mozilla Thunderbird could allow for arbitrary code execution Bitcoin…
- Cybersecurity Headlines
Rubio Spoofed, RondoDox Botnet, Batavia Spyware
Four members of President Trump's cabinet impersonated Is this some kind of a game? Batavia attacks Russian industrial companies Huge thanks to our sponsor…
- Cybersecurity Headlines
Call of Duty game pulled, U.S. military gets cybersecurity boost, Bank employee helped hackers
Call of Duty game pulled from PC store after reported exploit U.S. military gets cybersecurity boost Bank employee helped hackers steal $100M Huge thanks to…
- Cybersecurity Headlines
Ingram Micro cyberattack, Telefonica possible breach, LLM URL recommendation problem
Ingram Micro suffers ransomware attack Hacker leaks Telefónica data allegedly from new breach ChatGPT prone to recommending wrong URLs, creating a new phishing…
- Cybersecurity Headlines
Undetectable Android spyware is detectable, Hunters ransomware quits, Salt Typhoon dormant
Undetectable Android spyware leaks user logins Hunters ransomware group shuts doors Medical device company Surmodics reports cyberattack Huge thanks to our…
- Cybersecurity Headlines
Columbia hack, hunger relief ransomware, Qantas breach
Student data lost in Columbia University hack German hunger relief charity hit by ransomware Qantas contact center breached Huge thanks to our sponsor, Palo…
- Cybersecurity Headlines
Google issues Chrome security update, ICC targeted by new attack, Microsoft nixes Authenticator password management
Chrome Zero-Day CVE-2025-6554 under active attack — Google issues security update International Criminal Court targeted by new 'sophisticated' attack Kelly…