CISO Headlines

This CISO Daily Update covers:

00:00 Introduction

00:06 Columbus Investigates Whether Data Was Stolen in Ransomware Attack

00:47 Record-Breaking $75M Ransom Paid to Dark Angels Gang

01:31 ‘LockBit of Phishing’ EvilProxy Used in More Than a Million Attacks Every Month

02:10 Stolen GenAI Accounts Flood Dark Web With 400 Daily Listings

02:46 OneDrive Phishing Scam Tricks Users into Running Malicious PowerShell Script

03:15 U.S. Court Slashes $78M Lawyers’ Fee in T-Mobile Data Breach Settlement

03:56 Google Workspace Vulnerability Allowed Hackers to Access 3rd-Party Services

04:37 VMware ESXi Auth Bypass Zero-Day Exploited by Ransomware Operators (CVE-2024-37085)

05:18 New MOVEit File Transfer Vulnerability Lets Attackers Escalate Privileges

06:05 The State of Ransomware in Healthcare 2024

06:50 IBM: Cost of a Breach Reaches Nearly $5 Million, With Healthcare Being Hit the Hardest

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 4.3 Million Impacted by HealthEquity Data Breach

00:45 SolarWinds Legal Ruling Expected to Narrow, but Maintain SEC Oversight on Cyber Transparency

01:36 Casper Network Pauses Operations After Cyberattack: What You Need to Know

02:04 Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails

02:51 US Border Agents Must Get Warrant Before Cell Phone Searches, Federal Court Rules

03:23 Unveiling the Stargazer Goblin: A Closer Look at the Stargazers Ghost Network’s $100,000 Malware Operation

04:05 Walmart Discovers New PowerShell Backdoor Linked to Zloader Malware

04:44 Millions of Websites Susceptible to XSS Attack via OAuth Implementation Flaw

05:38 Threat Actors Exploiting OS Command Injection Flaws To Hack Systems, CISA Warns

06:24 RADIUS Protocol Vulnerability Impacted Multiple Cisco Products

07:08 Hackers Exploiting MSHTML Vulnerability to Deliver Atlantida Malware

07:45 Three Ways to Mitigate AI-Based Supply Chain Attacks

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 South Carolina’s Summerville Police Claimed by Rumored Alphv/BlackCat Ransomware Reboot

00:47 Data Breach at Rhode Island Wyatt Detention Facility Estimated to Affect 20,000

01:25 FBCS Data Breach Impact Now Reaches 4.2 Million People

02:00 Columbus Reports Cyber Incident as Multiple Cities Recover From Ransomware Attacks

02:33 US Indicts Alleged North Korean State Hacker for Ransomware Attacks on Hospitals

03:07 A Bug in Chrome Password Manager Caused User Credentials to Disappear

03:47 ServiceNow Flaw Let Remote Attackers Execute Arbitrary Code

04:24 WhatsApp for Windows Lets Python, PHP Scripts Execute With No Warning

05:00 Acronis Warns of Cyber Infrastructure Default Password Abused in Attacks

05:44 Millions of Devices Vulnerable to 'PKFail' Secure Boot Bypass Issue

06:15 Companies Struggle to Recover From CrowdStrike's Crippling Falcon Update

06:50 Most CISOs Feel Unprepared for New Compliance Regulations

07:34 AI-Generated Deepfake Attacks Force Companies to Reassess Cybersecurity

08:20 16% of Organizations Experience Disruptions Due to Insufficient AI Maturity

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Hackers Group Allegedly Leaked Threat Actor List from Crowdstrike With 250M IOC Data

01:00 Bug in Update Checker Blamed for CrowdStrike Outages as Congress Demands Hearing

01:32 Data Breach Exposes US Spyware Maker Behind Windows, Mac, Android and Chromebook Malware

02:16  Hackers Outsmart SEGs with Unbelievably Sophisticated Malware

02:49 Meta Nukes Massive Instagram Sextortion Network of 63,000 Accounts

03:36 Critical ServiceNow RCE Flaws Actively Exploited to Steal Credentials

04:23 GitLab Patched XSS Vulnerability that Lets Attackers Execute Arbitrary Code

05:09 Docker Fixes Critical Auth Bypass Flaw, Again (CVE-2024-41110)

06:09 CISA Warns of Exploitable Vulnerabilities in Popular BIND 9 DNS Software

06:59 Researchers Claim Anyone Can Access Deleted, Private GitHub Repository Data

07:42 Ransomware and BEC Make Up 60% of Cyber Incidents

08:36 Most IT Leaders Say Severity of Cyber-Attacks has Increased

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Pentagon & NASA IT Service Provider Hacked – Confidential Data Leaked Online – Exclusive!

00:53 CrowdStrike Blames a Test Software Bug for That Giant Global Mess It Made

01:34 TracFone to Pay $16 Million to Settle FCC Cyber and Privacy Investigation

02:18 57,000 Patients Impacted by Michigan Medicine Data Breach

02:59 Biggest-Ever Leak of Digital Pirates: 10 Million Exposed by Z-Library Copycat

03:40 AT&T Outage Due to Failed Network Update, FCC Releases New Findings

04:23 Network of Ghost GitHub Accounts Successfully Distributes Malware

05:03 Ransomware Ecosystem Fragmenting Under Law Enforcement Pressure and Distrust

05:47 Microsoft Defender Flaw Exploited to Deliver ACR, Lumma, and Meduza Stealers

06:36 Organizations Warned of Exploited Twilio Authy Vulnerability

07:18 Chrome 127 Patches 24 Vulnerabilities

08:05 Siemens Patches Power Grid Product Flaw Allowing Backdoor Deployment

08:54 Navigating the Complex Landscape of Web Browser Security

09:48 Unprecedented Global Cyberattack Prevalence Reported in Q2

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Ransomware Recovery Effort Cost Suffolk County $25.7 Million, Prompting Investigation

00:53 Fake CrowdStrike Repair Manual Pushes New Infostealer Malware

01:32 Cybercrooks Spell Trouble With Typosquatting Domains Amid CrowdStrike Crisis

02:14 2 Million Microsoft 365 Data Compromised by CrowdStrike Bug

03:09 US Gov Sanctioned Key Members of the Cyber Army of Russia Reborn Hacktivists Group

04:03 BreachForums v1 Hacking Forum Data Leak Exposes Members’ Info

04:44 Philips Vue PACS Vulnerabilities Put Patient Data at Risk: Healthcare Sector on High Alert

05:29 Swipe Right for Data Leaks: Dating Apps Expose Location, More

06:11 Okta Browser Plugin Vulnerable To Reflected Cross-Site Scripting Attacks

06:56 Goodbye? Attackers Can Bypass 'Windows Hello' Strong Authentication

07:32 The CrowdStrike Butterfly Effect: Cyber Pros Weigh In on the Far-Reaching Disaster

08:28 The Changes in the Cyber Threat Landscape in the Last 12 Months

09:18 Seemplicity 2024 Remediation Operations Report: Rising Exposure Management Risk

10:07 Hackers Exploiting Google Cloud for Massive Phishing Attacks

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Los Angeles Superior Court Shuts Down After Ransomware Attack

00:52 EU Gave CrowdStrike the Keys to the Windows Kernel, Claims Microsoft

01:28 Hackers Claim Breach of Daikin: 40 GB of Confidential Data Exposed

01:57 New Linux Variant of Play Ransomware Targeting VMware ESXi Systems

02:30 Hackers Inject Persistent Credit Card Skimmer to Abuse Swap File in Shopping Sites

03:07 Check Point Research Reports Highest Increase of Global Cyber Attacks Seen in Last Two Years

03:53 Ransomware Groups Fragment Amid Rising Cybercrime Threats

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 CrowdStrike Says Logic Error Caused Windows BSOD Chaos

00:49 Threat Actors Attempted to Capitalize CrowdStrike Incident

01:31 Microsoft Says 8.5 Million Windows Devices Impacted by CrowdStrike Incident, Publishes Recovery Tool

02:07 Safety Gear Giant Cadre Holdings Reports Cybersecurity Breach

03:00 LAPD Warns Residents After Spike in Burglaries Using Wi-Fi Jammers That Disable Security Cameras, Smart Doorbells

03:37 DHS Watchdog Rebukes CISA and Law Enforcement Training Center for Failing to Protect Data

04:19 Two LockBit Ransomware Affiliates Plead Guilty in U.S. Federal Court

05:05 U.S. CISA Adds Adobe Commerce and Magento, SolarWinds Serv-U, and VMware vCenter Server Bugs to Its Known Exploited Vulnerabilities Catalog

06:03 Cisco Warns of Unpatched Vulnerability (CVE-2024-20416) in RV340 and RV345 Routers

07:03 US Cyberattacks on the Rise; Businesses in Colorado, California Face Greater Threat: Report

08:01 CISA Publishes Resiliency Playbook for Critical Infrastructure

08:42 Securing Healthcare Data: Dark Web Monitoring Insights for CISOs

09:22 One-Third of Dev Professionals Unfamiliar With Secure Coding Practices

10:20 CISOs Must Shift From Tactical Defense to Strategic Leadership

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Live Updates: Global Tech Outage Grounds Flights and Hits Businesses

00:42 Judge Mostly Drags SEC’s Lawsuit Against SolarWinds Into the Recycling Bin

01:23 AT&T Reports Arrest Made in April Hack, Updates Affected Customers

01:58 USPS Shared Customer Postal Addresses With Meta, LinkedIn and Snap

02:31 Weaponized AWS Packages Spreading Malware through Innocent-Looking JPEGs

03:09 Revolver Rabbit Gang Registers 500,000 Domains for Malware Campaigns

03:51 SolarWinds Fixes 8 Critical Bugs in Access Rights Audit Software

04:30 Critical Splunk Flaw Can Be Exploited to Grab Passwords (CVE-2024-36991)

05:09 SAP AI Core Flaws Expose Sensitive Customer Data and Keys

05:51 New VPN Port Shadow Vulnerability Let Hackers Intercept Encrypted Traffic

06:33 Hackers Could Create Traffic Jams Thanks to Flaw in Traffic Light Controller, Researcher Says

07:08 US Data Breach Victim Numbers Surge 1170% Annually

07:54 Threat Actors Ramp Up Use of Encoded URLs to Bypass Secure Email

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Furniture Giant Shuts Down Manufacturing Facilities After Ransomware Attack

00:46 MNGI Digestive Health Data Breach Impacts 765,000 Individuals

01:24 Over 400,000 Life360 User Phone Numbers Leaked via Unsecured API

02:07 Yacht Giant MarineMax Data Breach Impacts Over 123,000 People

02:50 Anime Figurine Maker Exposes North American Customer Names, Home Addresses

03:30 Qilin Ransomware’s Sophisticated Tactics Unveiled By Experts

04:11 Ivanti Endpoint Manager Flaw Let Hackers Gain Full Control EPM Server

04:55 Atlassian Data Center & Server Flaw Let Hackers Execute Arbitrary Code

05:35 Chrome 126 Updates Patch High-Severity Vulnerabilities

06:34 Oracle Patches 240 Vulnerabilities With July 2024 CPU

07:14 Cisco SSM On-Prem Bug Lets Hackers Change Any User’s Password

07:55 Sensitive Data Sharing Risks Heightened as GenAI Surges

08:41 Ransomware Recovery in Energy, Water Sectors Hits $3M, Quadrupling in One Year

09:24 Unseen Levels of Cyberattacks: Organizations Targeted Ten Times an Hour

10:05 Inside Q2 2024’s Ransomware Surge: Strategies and Geopolitical Impact

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter