CISO Headlines

This CISO Daily Update covers:

00:00 Introduction

00:06 Hackers Detail How They Allegedly Stole Ticketmaster Data From Snowflake

00:57 LA County’s Department of Public Health (DPH) Data Breach Impacted Over 200,000 Individuals

01:47 Panera Bread Likely Paid a Ransom in March Ransomware Attack

02:38 Fake Google Chrome Errors Trick You Into Running Malicious PowerShell Scripts

03:25 Beware Of Malicious Search Results Leading To SolarMarker Malware Installation

03:59 Hackers Exploit Legitimate Websites to Deliver BadSpace Windows Backdoor

04:39 Empire Market Owners Charged With Operating $430M Dark Web Marketplace

05:28 Critical Vulnerabilities Exposing Chinese Biometric Readers to Unauthorized Access

06:05 Hidden Backdoor in D-Link Routers Let Attacker Login as Admin

06:58 Malicious Emails Trick Consumers Into False Election Contributions

07:36 Academics Develop Testing Benchmark for LLMs in Cyber Threat Intelligence

Additional Resources:

• Subscribe for daily updates

• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Dordt University Faces Massive Data Leak: Millions of Students and Staff Potentially Affected

00:45 Keytronic Confirms Data Breach After Ransomware Gang Leaks Stolen Files

01:37 New York Times Says Data Breach Affected Freelance Visual Contributors

02:17 Globe Life Discloses Breach Amid Accusations of Fraud and Shady Business Tactics

03:03 Los Angeles Schools Investigating Claims of Data for Sale on Dark Web

03:46 Blackbaud Must Pay $6.75 Million, Improve Security After Lying About Scope of 2020 Hack

04:31 Young Cyber Scammer Arrested, Allegedly Behind Cyberattacks on 45 U.S. Companies

05:10 Former IT Employee Gets 2.5 Years for Wiping 180 Virtual Servers

05:52 New Linux Malware Is Controlled Through Emojis Sent From Discord

06:40 Asus Fixed Critical Remote Authentication Bypass Bug in Several Routers

07:30 SolarWinds Serv-U Vulnerability Let Attackers Access Sensitive Files

08:15 Rockwell Automation Patches High-Severity Vulnerabilities in FactoryTalk View SE

09:05 The Biggest Downsides of Digital ID Adoption

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Truist Bank Confirms Breach After Stolen Data Shows Up on Hacking Forum

00:45 Panera Warns of Employee Data Breach After March Ransomware Attack

01:28 Grand Traverse County Faces Cyberattack: FBI and State Police Investigate

02:10 City of Cleveland Scrambling to Restore Systems Following Cyberattack

03:02 Life360 Says Personal Information Stolen From Tile Customer Support Platform

03:45 New Attack Technique 'Sleepy Pickle' Targets Machine Learning Models

04:27 Dark Web Actor Advertises New Click Fraud Software for Online Marketing Deception

05:07 Google Warns of Pixel Firmware Security Flaw Exploited as Zero-Day

05:56 Microsoft, Late to the Game on Dangerous DNSSEC Zero-Day Flaw

06:38 Kaspersky Finds 24 Flaws in Chinese Biometric Hardware Provider

07:18 Easily Exploitable Critical Vulnerabilities Found in Open Source AI/ML Tools

08:15 0-day Vulnerability In 10,000 Web Apps Exploited Using XSS Payloads

09:03 Cyber Insurance Claims Hit Record High in North America

10:07 Facebook, Meta, Apple, Amazon Most Impersonated in Phishing Scams

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 CISA Warns of Criminals Impersonating Its Employees in Phone Calls

00:42 Findlay Automotive Hit by Cybersecurity Attack, Investigation Ongoing

01:15 Medusa Ransomware Group Claims Cyberattack on Organizations in USA, Canada

01:46 Data Broker Shuts Down Product Related to Driver Behavior Patterns

02:36 Ransomware Group May Have Exploited Windows Vulnerability as Zero-Day

03:24 RansomHub Brings Scattered Spider Into Its RaaS Fold

03:59 Chrome 126, Firefox 127 Patch High-Severity Vulnerabilities

04:41 Fortinet Patches Code Execution Vulnerability in FortiOS

05:22 Microsoft Patches Zero-Click Outlook Vulnerability That Could Soon Be Exploited

06:00 Dark Web Hacker ‘Tombstone’ Markets Google Subdomain Vulnerabilities on Cybercrime Forum

06:39 70% of Cybersecurity Pros Often Work Weekends, 64% Looking for New Jobs

07:33 Security and Privacy Strategies for CISOs in a Mobile-First World

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Cyber Incident Forces Cleveland to Shut Down City Hall

00:43 Pure Storage Confirms Data Breach After Snowflake Account Hack

01:27 Ascension Makes Progress in Restoring Systems After Cyberattack, Patients to See Improved Wait Times

02:13 Central Securities Corporation Faces Cyberattack Claims By Underground Team Ransomware Group

02:43 TellYouThePass Ransomware Exploits Recent PHP RCE Flaw to Breach Servers

03:36 New Warmcookie Windows Backdoor Pushed via Fake Job Offers

04:16 Users of JetBrains IDEs at Risk of GitHub Access Token Compromise

04:55 Arm Zero-Day in Mali GPU Drivers Actively Exploited in the Wild

05:34 Popular Biometric Terminal Vulnerable To QR Code SQL Injection

06:09 Apple Patches Vision Pro Vulnerability Used in Possibly ‘First Ever Spatial Computing Hack’

06:52 Adobe Plugs Code Execution Holes in After Effects, Illustrator

07:23 Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing

08:09 Security Providers View Compliance as a High-Growth Opportunity

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 LendingTree Confirms That Cloud Services Attack Potentially Affected Subsidiary

00:50 Christie’s Data Breach Impacted 45,798 Individuals

01:36 BlackBerry Disputes Cylance Hack Claims, New York Times Confirms Code Breach

02:20 Ticketmaster Attacker Vanishes, Pundits Speculating Arrest

03:00 More_eggs Malware Disguised as Resumes Targets Recruiters in Phishing Attack

03:28 Unencrypting VPN Traffic Through a New TunnelVision Attack

04:12 Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by Hackers

04:53 Critical PyTorch Vulnerability Can Lead to Sensitive AI Data Theft

05:37 Nvidia Patches High-Severity GPU Driver Vulnerabilities

06:28 Cisco Finds 15 Vulnerabilities in AutomationDirect PLCs

07:13 Exploit for Critical Veeam Auth Bypass Available, Patch Now

08:05 IoT Vulnerabilities Skyrocket, Becoming Key Entry Point for Attackers

08:45 Ransomware Tracker: The Latest Figures [June 2024]

09:24 Why CISOs Need to Build Cyber Fault Tolerance Into Their Business

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 New York Times Source Code Stolen Using Exposed GitHub Token

00:54 Frontier Says 750,000 Social Security Numbers Accessed During April Cyberattack

01:45 Texas Attorney General Investigating Several Connected Car Manufacturers Over Data Sharing

02:31 Nearly 400,000 Affected by Data Breach at Eye Care Management Services Company

03:00 Beware of Fake Google Chrome Update Pop-Ups that Installs Malware

03:36 LightSpy Spyware's macOS Variant Found with Advanced Surveillance Capabilities

04:14 Hotel Check-in Kiosks Expose Guest Data, Room Keys

04:47 EmailGPT Exposed to Prompt Injection Attacks

05:27 SolarWinds Flaw Flagged by NATO Pen Tester

06:01 Security Flaws Found in Popular WooCommerce Plugin

06:42 PHP Addressed Critical RCE Flaw Potentially Impacting Millions of Servers

07:38 26% of Organizations Lack Any Form of IT Security Training

08:28 Cyber Insurance Isn’t the Answer for Ransom Payments

09:04 Telecom, Media and Tech Companies Are Cyber Defense Standouts: Moody’s

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Advance Auto Parts: Alleged Data Breach Exposes Millions After Snowflake Cyberattack

00:46 Financial Data Swiped From US Eye Clinics, Over 300k People Affected

01:35 FBI Obtained 7,000 Lockbit Decryption Keys, Victims Should Contact the Feds to Get Support

02:19 SecurityScorecard Files Complaint against Safe Security for Allegedly Misappropriating Trade Secrets

03:14 RansomHub Operation Is a Rebranded Version of the Knight RaaS

03:57 Muhstik Botnet Exploiting Apache RocketMQ Flaw to Expand DDoS Attacks

04:42 Hackers Target Python Developers with Fake "Crytic-Compilers" Package on PyPI

05:24 Exploitation of Recent Check Point VPN Zero-Day Soars

06:06 7-Year-Old Oracle WebLogic Bug Under Active Exploitation

06:49 Vulnerabilities Patched in Kiuwan Code Security Products After Long Disclosure Process

07:25 PoC Exploit Code Published for 9.8-Rated Apache HugeGraph RCE Flaw

08:09 78% of SMBs Fear Cyberattacks Could Shut Down Their Business

08:50 #Infosec2024: Experts Share How CISOs Can Manage Change as the Only Constant

09:35 #Infosec2024: CISOs Need to Move Beyond Passwords to Keep Up With Security Threats

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 FBI Warns of Rise in Work-From-Home Scams

00:42 Microsoft Paid Tenable a Bug Bounty for an Azure Flaw It Says Doesn’t Need a Fix, Just Better Documentation

01:29 Celebrity TikTok Accounts Compromised Using Zero-Click Attack via DMs

02:14 Nationwide Call Disruptions Trigger FCC Investigation into Major U.S. Wireless Carriers

03:05 Accidental or Not, Another Google Leak Exposes Multiple Privacy Breaches

03:52 Linux Version of TargetCompany Ransomware Focuses on VMware ESXi

04:35 Zyxel Addressed Three RCEs in End-of-Life NAS Devices

05:28 Cisco Webex Meetings Meeting Flaw Let Attackers Gain Unauthorized Access

06:13 PoC Exploit Released for Linux Kernel Privilege Escalation Vulnerability

06:59 5 Takeaways From the White House Cybersecurity Workforce Discussion

07:44 #Infosec2024: Organizations Urged to Adopt Safeguards Before AI Adoption

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Clevo Gaming Laptop-Maker Claimed by RansomHub Ransomware Gang

00:52 361 Million Account Credentials Leaked on Telegram: Are Yours Among Them?

01:37 Cyberattack on Telecom Giant Frontier Claimed by RansomHub

02:14 Kickstarter Star Leaks Over Half a Million Records With Clients’ Data

02:57 Christie’s Stolen Data Sold to Highest Bidder Rather Than Leaked, RansomHub Claims

03:43 Dessky Snippets WordPress Plugin Exploited For Card Skimming Attacks

04:31 Beware! New Android Trojan ‘Viper RAT’ on Dark Web Steals Your Data

05:06 Cybercrooks Get Cozy With BoxedApp to Dodge Detection

05:54 Patch Now! Google Chrome Fixes Critical Vulnerabilities

06:47 PoC Exploit Released for macOS Root Access Vulnerability

07:36 37 Vulnerabilities Patched in Android

08:37 Report Highlights How People Trick AI Chatbots Into Exposing Company Secrets

09:22 Account Takeovers Outpace Ransomware as Top Security Concern

10:16 Security Challenges Mount As Companies Handle Thousands of APIs

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter