Shows / Cybersecurity Headlines

Cybersecurity Headlines
Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.
Episodes
Cybersecurity HeadlinesNew Iran warning, Chinese surveillance company banned, CISA names new executive director
U.S. agencies issue urgent warning over Iran threat Canada bans Chinese surveillance company CISA names new executive director Huge thanks to our sponsor, Palo…
Cybersecurity HeadlinesHawaiian Airlines cyberattack, United Natural Foods update, Russia throttles Cloudflare
Hawaiian Airlines suffers cyberattack United Natural Foods says cyber incident will impact quarterly income Russia throttles Cloudflare making sites…
Cybersecurity HeadlinesWeek in Review: Qilin adds lawyers, Iranian spearphishing campaign, Microsoft Direct Send hack
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Bil Harmer, operating partner and CISO…
Cybersecurity HeadlinesIranian-backed spearphishing campaign, Microsoft Outlook fix, Glasgow suffers cyberattack
Iranian-backed spearphishing campaign seeks out cybersecurity experts Microsoft fixes Outlook bug causing crashes when opening emails Glasgow City Council…
Cybersecurity HeadlinesPatient death linked to ransomware, BreachForums busted again, nOAuth vulnerability
NHS confirms patient death linked to ransomware attack BreachForums busted again Thousands of SaaS apps still vulnerable to nOAuth Huge thanks to our sponsor…
Cybersecurity Headlines70 Microsoft Exchange servers targeted, Apple, Netflix, Microsoft sites hacked, data breach hits Aflac
Hackers target over 70 Microsoft Exchange servers to steal credentials via keyloggers Apple, Netflix, Microsoft sites 'hacked' for tech support scams The 2022…
Cybersecurity HeadlinesRetaliatory Iranian cyberattacks, steel giant confirms breach, ransomware hits healthcare system again
DHS warns of retaliatory Iranian cyberattacks Steel giant Nucor confirms breach Ransomware hits healthcare system again Huge thanks to our sponsor…
Cybersecurity HeadlinesCMS retailer report, Aflac investigates activity, Russian dairy cyberattack
CMC officially points finger at Scattered Spider for Marks & Spencer and Co-op attacks Aflac investigating suspicious activity on its U.S. network Russian…
Cybersecurity HeadlinesWeek in Review: ClickFake deepfake scam, Krispy Kreme breach, NIST ZTA guidance
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Howard Holton, COO and industry analyst…
Cybersecurity HeadlinesCisco, Atlassian fixes, Ryuk member arrested, Viasat Typhoon attack
Cisco, Atlassian fix high-severity vulnerabilities Alleged Ryuk ransomware gang member arrested and extradited Telecom company Viasat attacked by Salt Typhoon…
Cybersecurity HeadlinesEpisource Breach, Predatory Sparrow strikes again, Swiss banks data leak
Over 5 million impacted by Episource breach Predatory Sparrow strikes Iran again Data leak at Swiss banks Huge thanks to our sponsor, Adaptive Security —…
Cybersecurity HeadlinesHackers exploit Langflow flaw, TP-Link routers still vulnerable, Russia detects SuperCard malware attacks
Hackers exploit critical Langflow flaw to unleash Flodrix botnet Organizations warned of vulnerability exploited against discontinued TP-Link routers Russia…
Cybersecurity Headlines2FA middleman, Archetyp seized, Zoomcar hacked
Beware the SMS 2FA middleman Police seize Archetyp Market Zoomcar hack impacts 8.4 million users Huge thanks to our sponsor, Adaptive Security As deepfake…
Cybersecurity HeadlinesWashington Post hacked, WestJet suffers cyberattack, Texas DoT breach
Washington Post investigates hacking incident on journalists' emails Canadian airline WestJet is containing a cyberattack Crash records stolen from Texas DOT…
Cybersecurity HeadlinesWeek in Review: Google and Cloudflare outages, Copilot Zero-Click, Cloudflare's Claude flair
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Christina Shannon, CIO, KIK Consumer…
Cybersecurity HeadlinesMicrosoft Entra attack, Thursday's Cloud outages, Mark Green retires
Hackers attacks target Microsoft Entra ID accounts using pentesting tool Google Cloud and Cloudflare outages reported House Homeland Chairman Mark Green…
Cybersecurity HeadlinesCoPilot zero-click, Operation Secure, FIN6 targets recruiters
Zero-click data leak flaw in Copilot Operation Secure targets infostealer operations FIN6 targets recruiters Huge thanks to our sponsor, Vanta Is your manual…
Cybersecurity Headlines40K IoT cameras stream secrets to browsers, Marks & Spencer taking online orders post-cyberattack, PoC Code escalates Roundcube Vuln threat
CISA, Microsoft warn of Windows zero-day used in attack on 'major' Turkish defense org 40K IoT cameras worldwide stream secrets to anyone with a browser Marks…
Cybersecurity HeadlinesCybersecurity News: Brute forcing Google accounts, Guardian's Secure Messaging, UNFI cyberattack
Brute forcing phone numbers linked to Google accounts The Guardian launches Secure Messaging service United Natural Foods hit by cyberattack Huge thanks to our…
Cybersecurity HeadlinesCyber executive order, Neuberger's infrastructure warning, Mirai botnet warning
Presidential cyber executive order signed Neuberger warns of U.S. infrastructure's cyberattack weakness Mirai botnet infects TBK DVR devices Huge thanks to our…
Cybersecurity HeadlinesWeek in Review: Senators' CSRB bid, Deepfakes dodge detection, Microsoft-CrowdStrike collaboration
Link to episode page This week's Cyber Security Headlines - Week in Review is hosted by Rich Stroffolino with guest Rusty Waldron, chief business security…
Cybersecurity HeadlinesKettering data published, Reddit sues Anthropic, North Face breached
Stolen Kettering Health data published Reddit sues Anthropic for scraping North Face website customer accounts breached Huge thanks to our sponsor, Conveyor…
Cybersecurity HeadlinesRussian bomber maker popped, vishing targets Salesforce, MS helps out governments
Ukraine claims cyberattack on Russian bomber maker Vishing campaign targets Salesforce Microsoft lends a hand to European governments Huge thanks to our…
Cybersecurity HeadlinesMeta, Yandex take heat on browsing identifiers, Acreed malware makes gains, HPE warns of critical auth bypass
Meta and Yandex are de-anonymizing Android users' web browsing identifiers LummaC2 fractures as Acreed malware becomes top dog Hewlett Packard Enterprise warns…
Cybersecurity HeadlinesMS and CrowdStrike partner, Qualcomm bugs exploited, new CISA cut details
Microsoft and CrowdStrike partner to link threat actor names Qualcomm sees Adreno bugs under active exploitation New details on proposed CISA cuts Huge thanks…
Cybersecurity HeadlinesCisco IOS XE exploit, Senators' CSRB request, Australia ransomware law
Exploit for maximum severity Cisco IOS XE flaw now public Senators as for reinstatement of cyber review board to work on Salt Typhoon investigation Australian…
Cybersecurity HeadlinesWeek in Review: Chrome password replacer, Luna Moth exploits, ChatGPT declines shutdown command
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Steve Knight, former CISO, Hyundai Capital…
Cybersecurity HeadlinesWindows startup failures, Victoria's Secret cyberattack, stolen cookie threat
Windows 11 might fail to start after installing KB5058405, says Microsoft Victoria's Secret website goes offline following cyberattack Billions of stolen…
Cybersecurity HeadlinesMicrosoft updates Update, LexisNexis leak, cyber insurance premiums
Microsoft wants to update all the things LexisNexis breach impacts 364,000 people Cyber insurance premium volume expected to double Huge thanks to our sponsor…
Cybersecurity HeadlinesMathWorks confirms ransomware attack, Adidas has data breach, Dutch intelligence warns of cyberattack
MathWorks, Creator of MATLAB, Confirms Ransomware Attack Adidas warns of data breach after customer service provider hack Dutch Intelligence Agencies Say…
Cybersecurity HeadlinesMalicious npm codes, Nova Scotia cyberattack, ChatGPT refuses shutdown command
Malicious npm and VS Code packages stealing data Nova Scotia Power confirms ransomware attack Researchers claim ChatGPT o3 bypassed shutdown in controlled test…
Cybersecurity HeadlinesCISA's Commvault warning, updated Killnet returns, fake VPN malware
CISA warns Commvault clients of campaign targeting cloud applications Russian hacker group Killnet returns with slightly adjusted mandate Fake VPN and browser…
Cybersecurity HeadlinesWeek in Review: Disabling Microsoft Defender, corrupted power inverters, bipartisan training bill
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest George Finney, CISO, The University of…
Cybersecurity HeadlinesSignal shutters Recall, Windows Server vulnerability, pathology lab breach
Signal adds Recall blocker Critical Windows Server 2025 dMSA vulnerability warning Pathology lab suffers data breach Huge thanks to our sponsor, Conveyor Still…
Cybersecurity HeadlinesKettering Health outage, Lumma disrupted, Opexus "major lapse"
Ransomware attack knocks out Kettering Health Lumma malware operation disrupted Federal agencies impacted by "major lapse" at Opexus Huge thanks to our…
Cybersecurity HeadlinesDOJ investigates Coinbase attack, Dutch cyber-espionage law passes, VanHelsing ransomeware leaked
US DOJ opens investigation into Coinbase's recent cyberattack Dutch government passes law to criminalize cyber-espionage Ransomware attack on food distributor…
Cybersecurity HeadlinesLegal Aid breached, patients at risk from cyberattacks, 23andMe buyer
UK's Legal Aid Agency breached NHS patients put at risk from cyberattacks 23andMe has a buyer Huge thanks to our sponsor, Conveyor Ever spent an hour in a…
Cybersecurity HeadlinesUK retailer update, Microsoft Defender disabler, deepfakes target officials
Scattered Spider facilitates UK retail hacks and is moving to the U.S. Defendnot tool can disable Microsoft Defender FBI warns government officials about new…
Cybersecurity HeadlinesWeek in Review: Hackers pump stocks, Microsoft stops screenshots, AI encrypts cybersecurity
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Nick Espinosa, host, The Deep Dive Radio…
Cybersecurity HeadlinesCoinbase hackers bribe staff, Windows 11 hacked at Pwn2Own, Telegram purges black market group
Coinbase says hackers bribed staff to steal customer data and are demanding $20 million ransom Windows 11 and Red Hat Linux hacked on first day of Pwn2Own The…
Cybersecurity HeadlinesAttack on steel producer, EUVD online, CISA advisory overhaul
Steel producer disrupted by cyberattack European Vulnerability Database (EUVD) is online CISA pauses advisory overhaul Huge thanks to our sponsor, Vanta Do you…
Cybersecurity HeadlinesRadware clarifies patch, retailer data stolen, Alabama suffers cyberattack
Radware says recently WAF bypasses were patched in 2023 Marks & Spencer confirms data stolen in ransomware attack Alabama suffers cybersecurity event Huge…
Cybersecurity HeadlinesGlobalX breach, Google settles lawsuits, UK software security guidelines
Global Crossing Airlines Group confirms cyberattack Google settles privacy lawsuits UK launches software security guidelines Huge thanks to our sponsor, Vanta…
Cybersecurity HeadlinesJapan finance hacks, Pearson suffers cyberattack, Teams blocks screen captures
Hackers hijack Japanese financial accounts to conduct billions in trades Education giant Pearson hit by cyberattack exposing customer data Microsoft Teams will…
Cybersecurity HeadlinesWeek in Review: Agriculture ransomware increase, Congress challenges CISA cuts, Disney's slacker hacker
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Dan Holden, CISO, BigCommerce Thanks to our…
Cybersecurity HeadlinesCisco IOS XE vulnerability, Pentagon CIO nomination, new SonicWall vulnerability
Cisco patches a level 10 vulnerability in IOS XE President nominates former Unilever CISO to be Pentagon CIO SonicWall patches a new zero-day vulnerability…
Cybersecurity HeadlinesEuropol shuts down DDoS-for-hire services, CrowdStrike lays off 500 workers, GOV.UK embraces passkeys
Europol shuts down six DDoS-for-hire services used in global attacks CrowdStrike says it will lay off 500 workers Passkeys set to protect GOV.UK accounts…
Cybersecurity HeadlinesCongress challenges CISA cuts, Texas school breached, NSO pays WhatsApp
Congress challenges Noem over proposed CISA cuts Texas school district breach impacts over 47,000 people NSO Group to pay WhatsApp $167 million in damages…
Cybersecurity HeadlinesSignal clones, easyjson warning, UK retail hacker
Signal clone gets hacked Sounding the alarm on easyjson Ransomware group takes credit for UK retail attacks Thanks to today's episode sponsor, ThreatLocker…
Cybersecurity HeadlinesMicrosoft Authenticator passkeys, StealC malware upgraded, CISA budget slashed
Microsoft ends Authenticator password autofill in favor of Edge StealC malware enhanced with stealth upgrades and data theft White House proposes cutting $491M…
Cybersecurity HeadlinesWeek in Review: Cybersecurity CEO busted, Cloudflare's DDoS increase, FBI's help request
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest DJ Schleen, Head of Security, Boats Group…
Cybersecurity HeadlinesUK's Co-op cyberattack, LabHost domains released, NSO WhatsApp damages
UK retailer Co-Op suffers cyberattack FBI shares list of 42,000 LabHost phishing domains NSO group looking at hefty damages in WhatsApp case Thanks to today's…
Cybersecurity HeadlinesScattered Spider extradition, Telecom hack warnings, Impersonation scammer takedown
Alleged 'Scattered Spider' member extradited to U.S. Experts see little progress after major Chinese telecom hack Polish police take down impersonation…
Cybersecurity HeadlinesApple Airplay-Enabled Devices Can Be Hacked, Google tracked 75 zero days, France ties Russian APT28 hackers to 12 cyberattacks
Millions of Apple Airplay-Enabled Devices Can Be Hacked via Wi-Fi Google tracked 75 zero days exploited in the wild in 2024 France ties Russian APT28 hackers…
Cybersecurity HeadlinesUyghur software malware, DDoS jumps, 4chan back
Uyghur Language Software Hijacked to Deliver Malware Cloudflare sees a big jump in DDoS attacks 4chan back online Thanks to today's episode sponsor…
Cybersecurity HeadlinesSAP zero-day active, another OAuth exploit, cybersecurity CEO arrested
SAP zero-day vulnerability under widespread active exploitation Hackers abuse OAuth 2.0 workflows to hijack Microsoft 365 accounts Cybersecurity firm CEO…
Cybersecurity HeadlinesWeek in Review: Secure by Design departure, Microsoft's security report, LLMs outrace vulnerabilities
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Bethany De Lude, CISO emeritus, The Carlyle…
Cybersecurity HeadlinesRussian army map malware, edge tech attack report, Commvault flaw
Russian army targeted by Android malware hidden in mapping app Attackers hit security device defects hard in 2024 Critical Commvault Command Center flaw…
Cybersecurity HeadlinesBlue Shield of California shared private data,FBI IC3 report, Ex-Army sergeant jailed
Blue Shield of California shared private health data of millions with Google The FBI issues its 2024 IC3 report Ex-Army sergeant jailed for selling military…
Cybersecurity HeadlinesMicrosoft Recall updates, Russian orgs deal with networking software updates, SSL.com certificate issuance vulnerability
Microsoft Recall on Copilot+ PC: testing the security and privacy implications Russian organizations targeted by backdoor masquerading as secure networking…