CISO Headlines

This CISO Daily Update covers:

00:00 Introduction

00:06 3AM Ransomware Stole Data of 464,000 Kootenai Health Patients

00:38 Orion SA Says Scammers Conned Company Out of $60 Million

01:14 Architect of Ransomware-as-a-Service Model Extradited to U.S. After More than a Decade on the Run

01:57 Donald Trump’s X Interview With Elon Musk Delayed, Owner Blames ‘Massive DDOS Attack’

02:31 Ivanti Warns of Critical vTM Auth Bypass With Public Exploit

03:12 Researchers Uncover Vulnerabilities in AI-Powered Azure Health Bot Service

03:45 SAP Patches Critical Vulnerabilities in BusinessObjects, Build Apps

04:23 Outlook RCE Vulnerability: Exploitation Details Revealed

05:07 Microsoft Fixes 6 Zero-Days Under Active Attack

05:46 35% of Exposed API Keys Still Active, Posing Major Security Risks

06:21 Hidden Crisis in Cybersecurity: 17 Out of 20 Professionals Suffering From Fatigue and Burnout

07:00 NIST Formalizes World's First Post-Quantum Cryptography Standards

07:35 Cost of a Data Breach 2024: Financial Industry

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Sumter County Sheriff’s Office Systems Hit by Rhysida Ransomware

00:40 Almost 50 PII Categories Impacted in Data Breach at East Valley Institute of Technology

01:14 FBI Disrupts the Dispossessor Ransomware Operation, Seizes Servers

01:53 CrowdStrike Tries to Patch Things Up With Cybersecurity Industry

02:31 Mega Money, Unfathomable Violence Pervade Thriving Underground Doxxing Scene

03:16 UN Adopts Controversial Cybercrime Treaty

03:51 Justice Department Disrupts North Korean ‘Laptop Farm’ Operation

04:21 FreeBSD Releases Urgent Patch for High-Severity OpenSSH Vulnerability

05:06 Vulnerability in Windows Driver Leads to System Crashes

05:41 Microsoft Warns of OpenVPN Vulnerabilities, Potential for Exploit Chains

06:31 Critical Vulnerabilities in Qualcomm’s Adreno GPU Affecting Billions of Android Devices

07:10 High-Risk Cloud Exposures Surge Due to Rapid Service Growth

07:51 74% of Ransomware Victims Were Attacked Multiple Times in a Year

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 ADT Disclosed a Data Breach That Impacted More Than 30,000 Customers

00:48 CSC ServiceWorks Discloses Data Breach After 2023 Cyberattack

01:29 Iranian Hackers Ramping Up US Election Interference, Microsoft Warns

02:09 Donald Trump’s Campaign Says Its Emails Were Hacked

02:48 Malware Force-Installs Chrome Extensions on 300,000 Browsers, Patches DLLs

03:30 Hackers Return $12 Million Taken During Ronin Network Breach

04:13 Researchers Uncover 10 Flaws in Google's File Transfer Tool Quick Share

04:53 Microsoft Warns of Unpatched Office Vulnerability Leading to Data Exposure

05:40 New AMD SinkClose Flaw Helps Install Nearly Undetectable Malware

06:22 Vulnerability Allowed Eavesdropping via Sonos Smart Speakers

07:08 Shorter TLS Certificate Lifespans Expected to Complicate Management Efforts

07:47 Malware-as-a-Service and Ransomware-as-a-Service Lower Barriers for Cybercriminals

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Cyber Incident Shuts Down North Miami City Hall: What You Need to Know

00:43 Michigan Hospital System Struggles With Cyberattack as Healthcare Industry Decries ‘Russian’ Ransomware

01:21 Rhysida Ransomware Group Claims to Have Breached Bayhealth Hospital in Delaware

02:00 Massive DDoS Attack: Record-breaking 419 TB of Malicious Traffic Within 24 Hours

02:32 US Offers $10 Million for Info on Iranian Leaders Behind CyberAv3ngers Water Utility Attacks

03:06 Royal Ransomware Successor BlackSuit Has Demanded More Than $500 Million

03:50 US Dismantles Laptop Farm Used by Undercover North Korean IT Workers

04:25 “Perfect” Windows Downgrade Attack Turns Fixed Vulnerabilities Into Zero-Days

05:04 Chrome, Safari, Mozilla Under Siege: ‘0.0.0.0 Day’ Vulnerability Exposes Millions

05:42 AWS Patches Vulnerabilities Potentially Allowing Account Takeovers

06:26 Critical 1Password Vulnerability: Hackers Could Exploit Security Flaw to Access Unlock Keys

07:02 GhostWrite Flaw: Hackers Can Access and Control Your Computer’s Memory

07:38 Cisco Warns of Critical RCE Zero-Days in End of Life IP Phones

08:16 Thousands of Exposed Industrial Control Systems in US, UK Threaten Water Supplies

08:54 AI Model Achieve 98% Accuracy in Collecting Threat Intelligence From Dark Web Forums

09:37 Researchers Detailed the Evolution of Cybercriminal Underworld

10:32 #BHUSA: CISA Director Confident in US Election Security

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Microsoft Punches Back at Delta Air Lines and Its Legal Threats

00:44 Ransomware Attack Cost LoanDepot $27 Million

01:13 Largest Data Breach Ever? Lawsuit Against National Public Data for Allegedly Compromising Data of 3 Billion People

02:06 Police Take Just 2 Days to Recover $40M Stolen in Business Email Scam

02:56 Georgia’s Voter Portal Gets a Crash Course in Client Versus Backend Input Validation

03:32 Critical Progress WhatsUp RCE Flaw Now Under Active Exploitation

04:17 Hackers Could Spy on Cellphone Users by Abusing 5G Baseband Flaws, Researchers Say

04:57 Windows Update Flaws Allow Undetectable Downgrade Attacks

05:37 Phishing Attacks Can Bypass Microsoft 365 Email Safety Warnings

06:09 Critical ServiceNow Vulnerability Exposes Organizations to Remote Code Execution Attacks

06:48 Ransomware in 2024: More Attacks, More Leaks, and Increased Sophistication

07:44 Critical Solar Power Grid Vulnerabilities Risk Global Blackouts

08:26 CISA Releases Guide to Enhance Software Security Evaluations

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Hacker Wipes 13,000 Devices After Breaching Classroom Management Platform

00:49 Calibrated Healthcare Suffers Data Breach, Patient Information Compromised

01:26 Non-Profit Blood Center OneBlood Recovering from Cripping Ransomware Attack

02:13 AI-Fueled Phishing Scams Raise Alarm Ahead of U.S. Presidential Election

02:51 Illinois Relaxes Biometric Privacy Law So Snafus Won’t Cost Businesses Billions

03:29 FTC Settles for $12M With Scammers Operating $213M Pyramid Scheme

04:09 Google Warns of an Actively Exploited Android Kernel Flaw

04:47 CISA Adds Microsoft COM for Windows Bug to Its Known Exploited Vulnerabilities Catalog

05:41 Western Digital’s WD Discovery App Flaw Allows Code Execution

06:18 Jfrog Artifactory Flaw Let Attackers Poison Artifact Caches

07:05 #BHUSA: 99% of Global 2000 Firms Have Recently Breached Vendors

07:48 #BHUSA: Ransom Payments Surge, Organizations Pay Average of $2.5m

08:22 Email Attacks Skyrocket 293%

09:04 CVEs Surge 30% in 2024, Only 0.91% Weaponized

09:45 #BHUSA: 17.8m Phishing Emails Detected in First Half of 2024

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 CrowdStrike to Delta Airlines: Don’t Blame Us for Your Woes

00:38 Insured Loss Impact Could Reach $1B Following CrowdStrike Outage

01:16 Threat Actor Claiming Breach of Gregory’s Foods 400Gb Database

01:40 Keytronic Incurred Approximately $17 Million of Expenses Following Ransomware Attack

02:18 332 Million Email Addresses Scraped from SOCRadar. io Published Online

02:55 Sneaky SnakeKeylogger Slithers Into Windows Inboxes to Steal Sensitive Secrets

03:42 Ransomware Gang Targets IT Workers With New SharpRhino Malware

04:13 Critical Vulnerability in Apache OFBiz Requires Immediate Patching

04:57 Immediate Action Required: Critical Apache InLong Vulnerability Exploitable

05:36 Leaked Wallpaper Exploit Let Attackers Escalate Privilege on Windows Systems

06:22 AI Expected to Improve IT/OT Network Management

07:22 #BHUSA: Nation-State Attacks Target Hardware Supply Chains

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Millions of US Voter Data Exposed in 13 Misconfigured Databases

00:41 Hackers Attempt to Sell the Personal Data of 3 Billion People Resulting From an April Data Breach

01:12 Surge in Magniber Ransomware Attacks Impact Home Users Worldwide

01:51 City of Columbus Offers Credit Monitoring to Employees After Massive Cyberattack Hits Government Facilities

02:36 DoJ and FTC Sue TikTok for Violating Children's Privacy Laws

03:24 Avtech Camera Vulnerability Actively Exploited in the Wild, CISA Warns

04:10 Linux Kernel Impacted by New SLUBStick Cross-Cache Attack

04:52 Microsoft Patched a Critical Edge Flaw that Led to Arbitrary Code Execution

05:41 Security Bypass Vulnerability Exposed in Rockwell Automation Logix Controllers

06:36 Organizations Fail to Log 44% of Cyber Attacks, Major Exposure Gaps Remain

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 FBI Warns of Scammers Posing as Crypto Exchange Employees

01:00 Pharma Giant Cencora Says Personal Health Data Leaked During February Cyber Incident

01:45 Employees at Dell, AT&T, Verizon, Capital One, and Other Companies Exposed via Popular Office App

02:22  DDoS Attacks May Target Election Infrastructure, FBI Warns

02:59 Mining Giant Fresnillo Confirms Cyber Security Incident: Operations Continue Normally

03:36 Smart Cars Share Driver Data, Prompting Calls for Federal Scrutiny

04:20 Tech Support Scam Ring Leader Gets 7 Years in Prison, $6M Fine

04:56 Homebrew Security Audit Finds 25 Vulnerabilities

05:24 Bitdefender Vulnerability Let Attackers Trigger SSRF Attack

06:01 Over 1 Million Domains at Risk of 'Sitting Ducks' Domain Hijacking Technique

06:47 Airlines Are Flying Blind on Third-Party Risks

07:21 BEC Attacks Surge 20% Annually Thanks to AI Tooling

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 DDoS Attack Triggers New Microsoft Global Outage

00:36 Ransomware Attack on Major US Blood Center Prompts Hundreds of Hospitals to Implement Shortage Protocols

01:06 CrowdStrike Faces Lawsuits From Customers, Investors

01:44 Phishing Attack Steals Donations from Trump Voters Using Fake Website

02:21 Fraud Ring Pushes 600+ Fake Web Shops via Facebook Ads

03:06 Meta to Pay Texas $1.4bn for Unlawful Biometric Data Capture

03:41 DigiCert Revoking Many Certificates Due to Verification Issue

04:12 Multiple SMTP Servers Vulnerable to Spoofing Attacks, Let Hackers Bypass Authentication

04:56 20,275 VMware ESXi Vulnerable Instances Exposed, Microsoft Warns of Massive Exploitation

05:46 Chrome 127 Improves Cookie Protection on Windows

06:21 Credential Disclosure in LastPass

06:53 U.S. Customs and Border Protection Issues Guide for Travelers on Facial Recognition Opt-Out

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter