CISO Headlines

This CISO Daily Update covers:

00:00 Introduction

00:06 Dark Web Actor Claims to Pilfer 2TB of Compressed Data from QuoteWizard

00:50 Collection Agency FBCS Ups Data Breach Tally to 3.2 Million People

01:37 Alleged Heineken Data Breach Potentially Impacts Over 8,000 Employees

02:11 Spoofing Shein for Credential Harvesting

02:45 Utah Student Gives Hackers False Information to Thwart Phishing

03:28 Authorities Ramp Up Efforts to Capture the Mastermind Behind Emotet

04:25 Beware: Fake Browser Updates Deliver BitRAT and Lumma Stealer Malware

05:12 High-Risk Atlassian Confluence RCE fixed, PoC Available (CVE-2024-21683)

05:53 Researcher Uncovers Flaws in Cox Modems, Potentially Impacting Millions

06:32 CISA Adds Oracle Weblogic Server Flaw to Its Known Exploited Vulnerabilities Catalog

07:29 Critical Flaw In SkyBridge Routers Let Attackers Inject Commands

08:06 Ransomware Rises Despite Law Enforcement Takedowns

08:54 Businesses Must Prioritize Digital Trust to Avoid Major Problems

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Snowflake Denies Breach, Blames Data Theft on Poorly Secured Customer Accounts

00:50 Ticketmaster Confirms Data Breach Impacting 560 Million Customers

01:47 Data Leak Exposes Business Leaders and Top Celebrity Data

02:28 AI Company Hugging Face Detects Unauthorized Access to Its Spaces Platform

03:07 Microsoft Warns of Surge in Cyber Attacks Targeting Internet-Exposed OT Devices

03:55 More Than 600,000 Routers Knocked Out in October by Chalubo Malware

04:41 Critical Apache LOG4J2 Flaw Still Threatens Global Finance

05:23 Privacy is the Leading Concern Regarding AI Smartphones, Study Finds

06:10 Lack of Skills and Budget Slow Zero-Trust Implementation

07:22 Utilities Saw Fewer Q1 Ransomware Attacks Than Other Sectors. A Dragos Analyst Explains Why

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Nurses at Ascension Hospital in Michigan Raise Alarms About Safety Following Ransomware Attack

00:55 Johnson & Johnson Reports Data Breach Potentially Linked to Massive Cencora Breach

01:39 Everbridge Warns of Corporate Systems Breach Exposing Business Data

02:23 Okta Warns of Credential Stuffing Attacks Targeting Customer Identity Cloud

03:12 Police Seize Over 100 Malware Loader Servers, Arrest Four Cybercriminals

04:12 Shady 'Merry-Go-Round' Ad Fraud Network Leaves Orgs Hemorrhaging Cash

05:00 Family-Owned Woodworking Company Western Dovetail Hit by Akira Ransomware Attack

05:35 Cyber Espionage Alert: LilacSquid Targets IT, Energy, and Pharma Sectors

06:11 RedTail Crypto-Mining Malware Exploiting Palo Alto Networks Firewall Vulnerability

06:46 Critical WordPress Plugin Flaws Exploited to Inject Malicious Scripts and Backdoors

07:24 PoC Exploit Released for Microsoft Edge Information Disclosure Vulnerability

07:57 Progress Telerik Report Server Flaw Let Attackers Bypass Authentication

08:45 CISA Alerts Federal Agencies to Patch Actively Exploited Linux Kernel Flaw

09:32 Pretty Much All of the Headaches Affecting MSPs Are Due to Cybersecurity

10:12 59% of Public Sector Apps Carry Long-standing Security Flaws

10:54 NIST Says NVD Will Be Back on Track by September 2024

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Massive Google Leak Exposes Search Algorithm Secrets

00:44 First American December Data Breach Impacts 44,000 People

01:27 Toshiba Email Compromise Reveals Social Security Numbers

02:04 Internet Archive Disrupted by Sustained and “Mean” DDoS Attack

02:50 Ransomware Attack on Seattle Public Library Knocks Out Online Systems

03:36 U.S. Treasury Sanctions Chinese Nationals Behind Billion-Dollar 911 S5 Botnet Fraud

04:18 U.S. Sentences 31-Year-Old to 10 Years for Laundering $4.5M in Email Scams

05:11 Surge in Discord Malware Attacks as 50,000 Malicious Links Uncovered

05:59 Over 90 Malicious Android Apps With 5.5M Installs Found on Google Play

06:56  Cybercriminals Abuse Stack Overflow to Promote Malicious Python Package

07:37 Check Point Warns of Zero-Day Attacks on its VPN Gateway Products

08:32 Foxit PDF Reader and Editor Flaw Let Attackers Escalate Privilege

09:10 Citrix Workspace App Lets Attackers Elevate Privileges From Local User to Root User

09:51 Vulnerabilities in Eclipse ThreadX Could Lead to Code Execution

10:34 Why CVEs Are an Incentives Problem

11:16 Social Distortion: The Threat of Fear, Uncertainty and Deception in Creating Security Risk

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Christie’s Confirms Breach After RansomHub Threatens to Leak Data

01:04 Hacker Claims Ticketmaster Data Breach: 560M User Details and Card Info at Risk

01:45  Check Point VPN Targeted for Initial Access in Enterprise Attacks

02:24 WordPress Plugin Abused to Install E-Skimmers in E-Commerce Sites

03:03 Alleged Cyberattack Strikes Allied Telesis: LockBit Ransomware Suspected

03:37 Breach Forums Return to Clearnet and Dark Web Despite FBI Seizure

04:21 TeaBot Banking Trojan Activity on the Rise, Zscaler Observes

05:04 Novel BLOODALCHEMY Malware Examined

05:38 Exploit Released for Maximum Severity Fortinet RCE Bug, Patch Now

06:21 Critical Vulnerability in PMB Library Software: CVE-2024-26289

07:14 Zscaler Client Connector Zero-interaction Privilege Escalation Vulnerability

07:53 Widespread Data Silos Slow Down Security Response Times

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Sav-Rx Discloses Data Breach Impacting 2.8 Million Americans

01:02 Google Shares Details on Accidental File Deletion that Impacts Pension Fund’s Accounts

01:42 The U.S. Moves a Step Closer to a Cyber Force

02:33 New ATM Malware Family Emerged in the Threat Landscape

03:18 Ransomware Attack Hits Medical Device Manufacturer

03:55 A High-Severity Vulnerability Affects Cisco Firepower Management Center

04:51 SingCERT Warns Critical Vulnerabilities Found in Multiple WordPress Plugins

05:39 LangChain JS Framework Vulnerability Let Hackers Read Arbitrary File on Servers

06:37 GNOME Remote Desktop Vulnerability Let Attackers Read Login Credentials

07:17 Human Error Still Perceived As the Achilles’ Heel of Cybersecurity

08:07 Digital ID Adoption: Implementation and Security Concerns

09:12 New Tricks in the Phishing Playbook: Cloudflare Workers, HTML Smuggling, GenAI

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Cencora Data Breach Exposes US Patient Info From 11 Drug Companies  

00:57 MITRE December 2023 Attack: Threat Actors Created Rogue VMs to Evade Detection

01:42 Fake AV Websites Used to Distribute Info-Stealer Malware

02:18 Arc Browser’s Windows Launch Targeted by Google Ads Malvertising

03:09 Hackers Phish Finance Orgs Using Trojanized Minesweeper Clone

03:59 Newly Discovered Ransomware Uses BitLocker to Encrypt Victim Data

04:41 Experts Find Flaw in Replicate AI Service Exposing Customers' Models and Data

05:26 CVE-2024-5148: GNOME Remote Desktop Vulnerability Exposes Sensitive Information

06:20 NSA Releases Guidance On Zero Trust Maturity To Secure Application From Attackers

07:05 Best Buy and Geek Squad Were Most Impersonated Orgs by Scammers in 2023

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 A Consumer-Grade Spyware App Found in Check-in Systems of 3 US Hotels

00:49 Cybercriminals Exploit Cloud Storage For SMS Phishing Scams

01:34 Threat Actor Claiming Access to AWS, Azure, MongoDB & Github API Keys

02:10 Compromised Recording Software Was Served From Vendor’s Official Site, Threat Researchers Say

03:06 Ransomware Attacks Exploit VMware ESXi Vulnerabilities in Alarming Pattern

03:57 Moroccan Cybercrime Group Impersonates Nonprofits and Abuses Cloud Services to Rake In Gift Card Cash

05:03 Feds Continue to Rack Up Convictions in BEC Cases As Georgia Man Gets 10-Year Sentence

05:43 Critical Flaw in Replicate AI Platform Exposes Proprietary Data

06:21 WinRAR Flaw Let Attackers Deceive Users with ANSI Escape Sequences

07:09 Apple’s Wi-Fi Positioning Can Be System Abused To Track Users

07:53 CISA Warns of Actively Exploited Apache Flink Security Vulnerability

08:31 Ransomware Fallout: 94% Experience Downtime, 40% Face Work Stoppage

09:32 NVD Leaves Exploited Vulnerabilities Unchecked

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Threat Actors Exploited Bitbucket Artifacts to Expose AWS Secrets in Plaintext

00:57 CentroMed Data Breach Exposed 400,000 Patient Records

01:40 Laundering Cash From Healthcare, Romance Scams Lands US Man in Prison for a Decade

02:21 Hackers Sell Fake Pegasus Spyware on Clearnet and Dark Web

03:04 Intercontinental Exchange to Pay $10M SEC Penalty Over VPN Breach

04:01 Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass

04:49 Rockwell Advises Disconnecting Internet-Facing ICS Devices Amid Cyber Threats

05:38 UserPro Plugin Vulnerability Allows Account Takeover

06:20 Critical Netflix Genie Bug Opens Big Data Orchestration to RCE

07:15 Critical Vulnerability in Honeywell Virtual Controller Allows Remote Code Execution

07:50 Ivanti Patches Critical Code Execution Vulnerabilities in Endpoint Manager

08:23 Report Reveals 341% Rise in Advanced Phishing Attacks

09:24 Beware – Your Customer Chatbot is Almost Certainly Insecure: Report

09:57 CEOs Accelerate GenAI Adoption Despite Workforce Resistance

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Blackbasta Group Claims to Have Hacked Atlas, One of the Largest US Oil Distributors

00:51 GhostEngine Mining Attacks Kill EDR Security Using Vulnerable Drivers

01:43 EPA Issues Alert After Finding Critical Vulnerabilities in Drinking Water Systems

02:35 Malware Delivery via Cloud Services Exploits Unicode Trick to Deceive Users

03:24 23-Year-Old Arrested for Running 100M Incognito Dark Web Market

04:05 Kansas City Cyberattack Disrupts KC Scout Cameras, Impacts Crash Investigations and Services

04:45 CasperSecurity Stealer Attacking Windows Machine to Remote Desktop Credentials

05:36 Critical GitHub Enterprise Server Flaw Allows Authentication Bypass

06:35 NextGen Healthcare Mirth Connect Under Attack - CISA Issues Urgent Warning

07:20 Researchers Uncover Flaws in Python Package for AI Models and PDF.js Used by Firefox

08:02 YouTube Has Become a Significant Channel for Cybercrime

08:50 Deepfakes Rank As the Second Most Common Cybersecurity Incident for US Businesses

09:34 Over 60% of Network Security Appliance Flaws Exploited as Zero Days

10:31 70% of CISOs Expect Cyber-Attacks in Next Year, Report Finds

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter