CISO Headlines

This CISO Daily Update covers:

00:00 Introduction

00:06 Car Dealership Company AutoNation Says CDK Ransomware Incident Cut Into Quarterly Earnings

00:44 Virginia Elections Department Dismisses Data Breach Claims

01:40 “Massive Data Sale in History: 2 Billion Rows, 122 GB, 361M Emails & Passwords for Just $500!”

02:23 Email Addresses of 15 Million Trello Users Leaked on Hacking Forum

03:01 Kaspersky Leaves U.S. Market Following the Ban on the Sale of Its Software in the Country

03:39 New Jellyfish Loader Threat Discovered: Advanced Techniques for System Infiltration

04:15 'Konfety' Ad Fraud Uses 250+ Google Play Decoy Apps to Hide Malicious Twins

05:02 CISA Adds OSGeo GeoServer GeoTools Bug to Its Known Exploited Vulnerabilities Catalog

05:44 Microsoft Finally Fixes Outlook Alerts Bug Caused by December Updates

06:27 Apache HugeGraph-Server RCE Vulnerability Under Active Attack

07:12 Void Banshee APT Exploits Microsoft Zero-Day in Spear-Phishing Attacks

07:51 Half of SMEs Unprepared for Cyber-Threats

08:34 Talk Security, Not Tech: Ivanti Study Urges CISOs to Educate Leaders on AI Risks

09:14 The Linux Foundation and OpenSSF Release Report on the State of Education in Secure Software Development

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 AT&T Paid a $370,000 Ransom to Prevent Stolen Data From Being Leaked

00:48 Data of Millions of mSpy Customers Leaked Online

01:25 6 Million Records of Pinterest Database Leaked – What’s Inside!

01:53 Attackers Exploit URL Protections to Disguise Phishing Links

02:28 ZDI Shames Microsoft For – Yet Another – Coordinated Vulnerability Disclosure Snafu

03:08 Facebook Ads for Windows Desktop Themes Push Info-Stealing Malware

03:48 CRYSTALRAY Hackers Infect Over 1,500 Victims Using Network Mapping Tool

04:33 Juniper Junos Flaw Let Attackers Gain Full ‘Root’ Access

05:02 WP Time Capsule Plugin Update Urged After Critical Security Flaw

05:49 Pressure Mounts for C-Suite Executives to Implement GenAI Solutions

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Rite Aid Disclosed Data Breach Following RansomHub Ransomware Attack

00:52 Hackers Stole ‘Nearly All’ Call Logs Over Six Months From AT&T

01:34 Indiana County Files Disaster Declaration Following Ransomware Attack

02:22 Disney’s Internal Slack Breached? NullBulge Leaks 1.1 TB of Data

03:04 ‘Magic Soap’ Producer Discloses Data Breach, but Details Are Scarce

03:50 Homoglyphs and IL Weaving Used To Evade Detection in Malicious NuGet Campaign

04:38 GitLab Sends Users Scrambling Again With New CI/CD Pipeline Takeover Vuln

05:25 Citrix NetScaler ADC & Gateway Impacted by regreSSHion RCE Vulnerability

06:08 Critical Flaw in Exim MTA Could Allow to Deliver Malware to Users’ Inboxes

07:01 Hackers Use PoC Exploits in Attacks 22 Minutes After Release

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 CDK Expects Car Dealership System Outage to Last Until at Least June 30

00:47 Designed Receivable Solutions Data Breach Impacts 585,000 People

01:27 Dangerous AI Workaround: 'Skeleton Key' Unlocks Malicious Content

02:08 Interpol Seizes Millions in Global Crackdown Against Scammers

02:43 PoC Exploit for Critical Fortra FileCatalyst Flaw Published (CVE-2024-5276)

03:28 Gas Chromatograph Hacking Could Have Serious Impact: Security Firm

04:01 GitLab Security Updates Patch 14 Vulnerabilities

04:44 CISA Warns of Exploited GeoServer, Linux Kernel, and Roundcube Vulnerabilities

05:24 Prompt Injection Flaw in Vanna AI Exposes Databases to RCE Attacks

05:58 Majority of Critical Open Source Projects Contain Memory Unsafe Code

06:39 CISOs Reveal Firms Prioritize Savings Over Long-Term Security

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Microsoft Blamed for Million-Plus Patient Record Theft at US Hospital Giant

00:44 LockBit Lied: Stolen Data Is From a Bank, Not US Federal Reserve

01:29 BianLian Ransomware Targets Better Business Bureau, US Dermatology Partners

02:15 Developer Errors Lead to Long-term Exposure of Sensitive Data in Git Repos

02:48 New Medusa Android Trojan Targets Banking Users Across 7 Countries

03:40 AzzaSec Reveals Advanced Windows Ransomware Builder, Threatens Cybersecurity

04:24 Fresh MOVEit Bug Under Attack Mere Hours After Disclosure

05:08 Apple Patches AirPods Bluetooth Vulnerability That Could Allow Eavesdropping

05:50 Siemens Sicam Vulnerabilities Could Facilitate Attacks on Energy Sector

06:26 VMware ESXi Vulnerability Allows Attackers to Bypass Authentication

06:59 Identity Crime Reports Drop 16% Annually but Job Scams Surge

07:42 Gaining and Retaining Security Talent: A Cheat Sheet for CISOs

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Neiman Marcus Data Breach Disclosed as Hacker Offers to Sell Stolen Information

00:45 CISA Confirms Hackers May Have Accessed Data From Chemical Facilities During January Incident

01:24 Creditors’ Service Provider Leaked Millions of Records With Lawsuit History

01:52 Several Plugins Compromised in WordPress Supply Chain Attack

02:39 New Attack Technique Exploits Microsoft Management Console Files

03:20 UK and US Cops Band Together to Tackle Qilin’s Ransomware Shakedowns

03:56 Chrome 126 Update Patches Memory Safety Bugs

04:37 Recent Zyxel NAS Vulnerability Exploited by Botnet

05:10 Meta’s Virtual Reality Headset Vulnerable to Ransomware Attacks: Researcher

05:42 Cloud Breaches Impact Nearly Half of Organizations

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Santander US Reveals Employee Bank Account Details Stolen

00:49 Los Angeles Unified Confirms Student Data Stolen in Snowflake Account Hack

01:33 Change Healthcare Lists the Medical Data Stolen in Ransomware Attack

02:16 US Government Sanctions Twelve Kaspersky Lab Executives

03:11 ANY. RUN Malware Sandbox Provider’s Employee Email Compromised

03:54 CISA Issues New Advisory for Industrial Control Systems

04:33 Facebook PrestaShop Module Exploited to Steal Credit Cards

05:21 Risk of Getting Malicious Extension From Chrome Store Way Worse Than Google’s Letting On, Study Suggests

06:15 Pressure Mounts on CISOs As SEC Bares Teeth With Legal Action

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 CDK Global Cyberattack Cripples 15,000 US Auto Dealerships

00:50 Baltimore, One of America’s Deadliest Cities, Leaks Identities of Residents Who Reported Crimes

01:37 Advance Auto Parts Confirms Data Breach in SEC Filing; Reports Losses Around $300,000

02:27 Alleged AMCOM Data Breach Exposes Sensitive Military Documents on Dark Web

03:13 Hacker Leaks Data of 33,000 Accenture Employees in Third-Party Breach

03:46 Linux Version of RansomHub Ransomware Targets VMware ESXi VMs

04:31 An Unpatched Bug Allows Anyone to Impersonate Microsoft Corporate Email Accounts

05:06 Researchers Uncover UEFI Vulnerability Affecting Multiple Intel CPUs

05:53 SolarWinds Serv-U Path-Traversal Flaw Actively Exploited in Attacks

06:36 Atlassian Patches High-Severity Vulnerabilities in Confluence, Crucible, Jira

07:22 Fortra Warns of Hard-Coded Password Vulnerability in The Filecatalyst

08:21 LockBit Most Prominent Ransomware Actor in May 2024

09:02 Improving OT Cybersecurity Remains a Work in Progress

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 IntelBroker Hacker Claims Apple Breach, Steals Source Code for Internal Tools

00:39 MEDUSA Ransomware Targets AJE Group: $1.5M Price Tag for 646GB of Data

01:21 Circle K Atlanta Allegedly Breached, Data Stolen

02:02 Crown Equipment Confirms a Cyberattack Disrupted Manufacturing

02:35 FTC Sues Adobe for ‘Trapping’ Users in Deceptive Subscription Practices

03:13 ShrinkLocker Uses Windows BitLocker Utility To Infect Computers

03:50 Cryptojacking Campaign Targets Exposed Docker APIs

04:27 Warning: Markopolo's Scam Targeting Crypto Users via Fake Meeting Software

04:57 Chrome 126 Update Patches Vulnerability Exploited at Hacking Competition

05:39 Mailcow Mail Server Flaws Expose Servers to Remote Code Execution

06:30 CISA Warns of PoC Exploit for Vulnerability in RAD SecFlow-2 Industrial Switch

07:09 Cybersecurity Burnout Costing Firms $700m+ Annually

08:02 The Perilous Role of the CISO: Navigating Modern Minefields

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 AMD Data Breach: IntelBroker Claims Theft of Employee and Product Info

00:50 BlackSuit Ransomware Leaks Kansas City Police Data in Failed Ransom Plot

01:34 Amtrak Discloses Data Breach, Users Urged to Reset Passwords

02:14  Akira Ransomware Claims the TETRA Technologies, 40GB of Sensitive Data at Risk

02:48 MEDUSA Ransomware Group Demands $220,000 from US Institutions, Threatens Data Exposure

03:28 Medibank Breach: Security Failures Revealed (Lack of MFA Among Them)

04:10 Guidehouse and Nan McKay to Pay $11.3M for Cybersecurity Failures in COVID-19 Rental Assistance

04:50 SonicWall Environment Left Open, Exposing Some Data – Customers Safe

05:19 Cleveland Confirms Ransomware Attack As City Hall Remains Closed

05:58 Critical RCE Flaws in vCenter Server Fixed (CVE-2024-37079, CVE-2024-37080)

06:49 CVE-2024-37902 (CVSS 10): Critical Flaw in Deep Java Library Opens Door to System Takeover

07:29 92% of Organizations Hit by Credential Compromise from Social Engineering Attacks

08:15 Report Reveals Record Exploitation Rate For Load Balancers

09:07 Quarter of Firms Suffer an API-Related Breach

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter