Shows / Cybersecurity Headlines
Cybersecurity Headlines
Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.
Episodes
- Cybersecurity Headlines
Google OAuth abused, Japan's trading scams, hijacking with Zoom
Google OAuth abused in DKIM replay attack Japan warns of sharp rise in unauthorized trading North Koreans hijacking Zoom's Remote Control Huge thanks to our…
- Cybersecurity Headlines
Microsoft Entra lockouts, wine tasting malware, job scam solution
Widespread Microsoft Entra lockouts cause by new security feature rollout Malware delivered through diplomatic wine-tasting invites British companies told to…
- Cybersecurity Headlines
Week in Review: CISA workforce cuts, AI slopsquatting risk, CVE funding saga
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by David Spark with guest Trina Ford, CISO, iHeartMedia Thanks to our show…
- Cybersecurity Headlines
Cyberthreat sharing law renewal, APTs love ClickFix, GoDaddy mutes Zoom
Bipartisan push for renewal of cyberthreat information sharing law ClickFix becoming a favorite amongst state-sponsored hackers GoDaddy puts Zoom on mute for…
- Cybersecurity Headlines
MITRE bailout, Krebs exits SentinelOne, Apple fixes zero-days
MITRE gets last-minute bailout from CISA Krebs exits SentinelOne after security clearance pulled Apple fixes two zero-days exploited in targeted iPhone attacks…
- Cybersecurity Headlines
BREAKING: CVE Funding Doesn't Lapse
CISA issued a statement that it execution an option on its contract with MITRE to continue funding the CVE program.
- Cybersecurity Headlines
Government CVE funding set to end, 4chan down following an alleged hack, China accuses US of launching advanced cyberattacks
Government CVE funding set to end Tuesday 4chan, the internet's most infamous forum, is down following an alleged hack China accuses US of launching 'advanced'…
- Cybersecurity Headlines
Slopsquatting risks, Morocco leak, EC ups US-based staff security
AI code dependencies are a supply chain risk Morocco investigates social security leak European Commission increases security measures for US-bound staff…
- Cybersecurity Headlines
CISA cuts planned, Windows 'inetpub' warning, health lab breach
Major workforce cuts planned for CISA Microsoft warns Windows users not to delete 'inetpub' folder Data breach at testing lab affects 1.6 million people Thanks…
- Cybersecurity Headlines
Week in Review: Fake ChatGPT passport, Apple appeals UK encryption, Oracle's obsolete servers
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Carla Sweeney, SVP, InfoSec, Red Ventures…
- Cybersecurity Headlines
Krebs probed, Nissan Leaf hack, Typhoon tariff warning
President orders probe of former CISA Director Chris Krebs Nissan Leaf cars can be hacked for remote spying and physical takeover Infosec experts warn of China…
- Cybersecurity Headlines
OCC major incident, Oracle confirms hack, Smokeloader servers seized
U.S. Comptroller suffers 'major incident' Oracle confirms "obsolete servers" hacked Police seize Smokeloader malware servers and detain customers Thanks to our…
- Cybersecurity Headlines
New WhatsApp vulnerability, Microsoft patches 125 Windows Vulns, Fake Microsoft Office add-in tools push malware
WhatsApp vulnerability could facilitate remote code execution Spyware targeting Chinese diaspora Microsoft Patches 125 Windows Vulns, Including Exploited CLFS…
- Cybersecurity Headlines
Apple encryption appeal, Xanthorox AI tool, weaponizing CRM
Apple appeals UK encryption back door order Researchers warn about AI-driven hacking tool PoisonSeed campaign weaponizes CRM system Thanks to our episode…
- Cybersecurity Headlines
NSA Haugh fired, New WinRAR flaw, ChatGPT fake passport
Haugh fired from leadership of NSA and Cyber Command WinRAR flaw bypasses Windows Mark of the Web security alerts Researcher creates fake passport using…
- Cybersecurity Headlines
Week in Review: Microsoft's account bypass, CrushFTP CVE clash, 23andMe warning
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Howard Holton, COO and industry analyst…
- Cybersecurity Headlines
Google patches Quick Share, ChatGPT temporary outage, UK Mail breach
Google patches Quick Share vulnerability ChatGPT suffered brief outage Wednesday UK's Royal Mail investigates data leak claims Thanks to today's episode…
- Cybersecurity Headlines
North Korean IT workers move into Europe, Stripe API skimming unveils theft techniques, Verizon API flaw exposes call history
North Korean IT worker army expands operations in Europe Stripe API skimming campaign unveils new techniques for theft Verizon call filter API flaw exposed…
- Cybersecurity Headlines
Mozilla Thunderbird takes on Gmail, surge in scans on PAN GlobalProtect VPNs, Microsoft uncovers bootloader vulnerabilities
Mozilla Thunderbird finally takes on Gmail with new email service Surge in scans on PAN GlobalProtect VPNs hints at attacks Microsoft Using AI to Uncover…
- Cybersecurity Headlines
FTC's warning to 23andMe buyer, global phishing threats, Samsung breach
FTC sends warning to future 23andMe buyer Global phishing threat targets 88 countries Samsung data breach tied to old stolen credentials Thanks to today's…
- Cybersecurity Headlines
Document converter warning, Resurge exploits Ivanti, Blacklock hackers exposed
FBI warns of increase in free online document converter scams Resurge malware exploits Ivanti flaw BlackLock hackers exposed through leak site vulnerability…
- Cybersecurity Headlines
Week in Review: Microsoft Trust abuse, 23andMe bankruptcy risks, NIST's growing backlog
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Jonathan Waldrop, CISO, The Weather Company…
- Cybersecurity Headlines
JavaScript injection campaign, solar power vulnerabilities, SIM swap lawsuit
150,000 sites compromised by JavaScript injection Vulnerabilities in numerous solar power systems found T-Mobile pays $33 million in SIM swap lawsuit Huge…
- Cybersecurity Headlines
Ransomware group claims attack on US telecom firm, New ReaderUpdate malware variants target macOS users, Oracle customers claim stolen data
New ransomware group claims attack on US Telecom firm WideOpenWest NSA warned of vulnerabilities in Signal app a month before Houthi strike chat New…
- Cybersecurity Headlines
EncryptHub exploit, Copilot agents, PETs in government
EncryptHub linked to Microsoft Management Console exploit Security Copilot gets AI agents A call for more PETs in government Huge thanks to our episode…
- Cybersecurity Headlines
Hundreds of cyber criminals arrested, 23andMe data, Ukraine railway partially taken down
More than 300 cyber criminals arrested in Africa 23andMe bankruptcy puts millions of DNA records at risk Ukraine's state railway partially down after attack…
- Cybersecurity Headlines
Tornado cash sanctions lifted, Russia Cloudflare outage, Microsoft Trust abused
U.S. Treasury lifts sanctions on Tornado Cash Web service outage in Russia due to reported Cloudflare block Microsoft Trust Signing service abused to code-sign…
- Cybersecurity Headlines
Week in Review: Google acquires Wiz, water utility improvements, more GitHub attacks
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Christina Shannon, CIO, KIK Consumer…
- Cybersecurity Headlines
Stalkerware company breach, Microsoft Zero Day, Global Jira attack
Stalkerware company SpyX suffers data breach Nation-state groups hit organizations with Microsoft Windows zero-day Swiss telecom Ascom the latest victim of…
- Cybersecurity Headlines
PA teachers union breach, Infosys settles lawsuit, Sperm bank data theft
Attackers swipe data from Pennsylvania teachers union Infosys settles $17.5M lawsuit after third-party breach Top U.S. sperm bank discloses data breach Thanks…
- Cybersecurity Headlines
Google Acquires Wiz, CISA must reinstate terminated employees, Commerce Department bans DeepSeek
CISA scrambles to contact fired employees after court rules layoffs 'unlawful' Google acquires cybersecurity firm Wiz for $32 billion US Commerce department…
- Cybersecurity Headlines
GitHub repositories targeted, Apache Tomcat RCE exploit, BEC campaigns target Microsoft 365
23,000 repositories targeted in popular GitHub action Apache Tomcat RCE exploit hits servers—no authentication required Microsoft 365 users targeted in new BEC…
- Cybersecurity Headlines
VPN brute-force attacks, water utilities bill, LockBit developer extradited
Black Basta creates tool to automate VPN brute-force attacks Bipartisan Senate bill offers improved cybersecurity for water utilities LockBit developer…
- Cybersecurity Headlines
Week in Review: ONCD dominates cyber, undocumented Bluetooth commands, DoJ Google breakup
Link to episode page Thanks to our show sponsor, Vanta Do you know the status of your compliance controls right now? Like…right now? We know that real-time…
- Cybersecurity Headlines
Medusa ransoms infrastructure, Google breakup sought, more Booking.com phishing
Medusa ransomware continues to attack infrastructure DoJ seeks to break up Google Another phishing campaign hits Booking.com Huge thanks to our sponsor, Vanta…
- Cybersecurity Headlines
Microsoft patches 57 security flaws, Sola aims to build the 'Stripe for security', US council wants to counter China threats
Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero-Days US communications regulator to create council to counter China technology threats…
- Cybersecurity Headlines
New CISA head, Ballista botnet, PowerSchool breach report
Sean Plankey nominated to head CISA Ballista Botnet hits TP-Link devices PowerSchool publishes breach report Huge thanks to our sponsor, Vanta Do you know the…
- Cybersecurity Headlines
Healthcare breaches expose thousands, X outage, MGM suit dropped
Four healthcare breaches expose over 560,000 records Cyber attack allegedly behind X outages Case against MGM ransomware attack dropped Huge thanks to our…
- Cybersecurity Headlines
ONCD consolidates power, undocumented Bluetooth commands, Japan NTT Breach
ONCD set to consolidate power in U.S. cyber Undocumented commands found in Bluetooth chip used by a billion devices Japanese telecom NTT breach affects 18,000…
- Cybersecurity Headlines
Week in Review: Hegseth orders stand down, ransomware by snailmail, Mark Cuban's lifeline
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by David Spark with guest Brett Perry, CISO, Dot Foods Thanks to our show…
- Cybersecurity Headlines
Company hacked via webcam, Toronto Zoo update, federal contractor obligations
Ransomware gang bypasses EDR via a webcam Toronto Zoo updates January 2024 attack damage House bill requires federal contractors to implement vulnerability…
- Cybersecurity Headlines
Probationary firing protest, hacker names frustration, conversational scam detector
Former top NSA cyber official protests probationary firings Differing names for hackers hinders law enforcement, says security agent Google releases AI scam…
- Cybersecurity Headlines
Apple vs UK encryption backdoor, VMware bugs allow sandbox escape, JavaGhost targets AWS
Apple goes to court to fight UK demand for iCloud encryption backdoor 3 VMware Zero-Day bugs allow sandbox escape The Firefox I loved is gone - how to protect…
- Cybersecurity Headlines
CISA denies claims, Ransomware group claims attack, Latin America's security crisis
CISA denies claims of deprioritizing Russian threats Ransomware group claims attack on U.S. newspaper publisher Latin America's escalating cybersecurity crisis…
- Cybersecurity Headlines
Hegseth orders standdown, Microsoft terminates Skype, Cuban offers lifeline
Hegseth orders Cyber Command to stand down on Russia planning Microsoft hangs up on Skype after 14 years Mark Cuban offers to fund government tech unit that…
- Cybersecurity Headlines
Week in Review: Apple encryption, gamification for security, DISA breach
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Andrew Wilder, CISO, Vetcor Thanks to our…
- Cybersecurity Headlines
Cyber espionage increase, Nakasone cyber warning, PolarEdge exploits Cisco
Chinese cyber espionage jumped 150% last year Nakasone warns of U.S. falling behind adversaries in cyberspace PolarEdge botnet exploits Cisco, ASUS, QNAP, and…
- Cybersecurity Headlines
GitHub repos exposed, HaveIBeenPwned adds 244M stolen passwords, Anagram gamifies cybersecurity training
Thousands of exposed GitHub repositories, now private, can still be accessed through Copilot Cellebrite halts product use in Serbia following Amnesty…
- Cybersecurity Headlines
DISA breach, Swedish backdoors, Dems looking into system access
US employee screening firm confirms breach Swedish law enforcement seeking messaging app backdoors Dems warn of exposed entry points on government systems Huge…
- Cybersecurity Headlines
Australia bans Kaspersky, Government screens hijacked, EU sanctions Lazarus Group
Australia bans Kaspersky over security concerns Government screens hijacked with AI Video of President Trump and Musk EU sanctions North Korean official linked…
- Cybersecurity Headlines
$1.5B Bybit hack, UK E2E pulled, PayPal phishing emails
Hacker steals nearly $1.5 billion from Bybit crypto wallet Apple pulls iCloud end-to-end encryption in the UK PayPal "New Address" feature abused in phishing…
- Cybersecurity Headlines
Week in Review: More telecoms breached, Chase blocks Zelle, more DeepSeek bans
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest TC Niedzialkowski, former CISO Thanks to…
- Cybersecurity Headlines
NioCorp BEC scam, Australian IVF breach, SEC's cyber unit
Minerals company loses $500,000 to BEC scam Australian IVF provider investigating cyber incident SEC replaces cryptocurrency fraud unit with emerging tech team…
- Cybersecurity Headlines
Signal conversations hacked, Ransomware group hits infrastructure, Patch Palo Alto flaw
Russian hackers tap into Signal conversations Ransomware group hits critical infrastructure globally CISA says patch Palo Alto flaw immediately Thanks to…
- Cybersecurity Headlines
OpenSSH flaws enable new attacks, Microsoft prepares for deprecation, Zwipe files for bankruptcy
New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks — Patch Now Microsoft reminds admins to prepare for WSUS driver sync deprecation Zwipe runs out of…
- Cybersecurity Headlines
Zservers takedown, Zelle payment blocks, Finastra data breach
Dutch Police take down Zservers Chase to block Zelle payments to sellers on social media Finastra notifies victims of October data breach Thanks to today's…
- Cybersecurity Headlines
Device code attacks, phone TOAD solution, more telecoms breached
Hackers steal emails in device code phishing attacks Anti-TOAD feature seeks to prevent in-call sideloading attacks Chinese hackers breach more U.S. telecoms…
- Cybersecurity Headlines
Week in Review: CISA officials furloughed, DeepSeek's weak security, Cairncross as cyberdirector
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Doug Mayer, vp, CISO, WCG Thanks to our…
- Cybersecurity Headlines
Apple backdoor spat, Sarcoma hits Unimicron, Sault Tribe attacked
U.S. lawmakers demand UK retraction of Apple backdoor Sarcoma ransomware claims breach at giant PCB maker Unimicron Ransomware attack disrupts Michigan's Sault…
- Cybersecurity Headlines
DOGE hacks America? U.S. adversaries turn to cybercriminals? New LiDAR system ID faces a km away?
DOGE is hacking America This Ad-Tech company is powering surveillance of US military personnel Apple and Google take down malicious mobile apps from their app…