CISO Headlines

This CISO Daily Update covers:

00:00 Introduction

00:06 OmniVision Discloses Data Breach After 2023 Ransomware Attack

00:50 Threat Actors USDoD and SXUL Claim 70 Million Rows of Sensitive Data in Alleged Prison Data Breach

01:28 American Radio Relay League Cyberattack Takes Logbook of the World Offline

02:08 Threat Actor Chucky, Owner of LeakBase Claims Knowmad Mood Data Breach

02:52 GitCaught Campaign Relies on GitHub and Filezilla to Deliver Multiple Malware

03:40 New BiBi Wiper Version Also Destroys the Disk Partition Table

04:18 PoC Exploit for Ivanti EPMM Privilege Escalation Flaw Released (CVE 2024-22026)

05:02 QNAP QTS Zero-Day in Share Feature Gets Public RCE Exploit

05:42 Vulnerability Found in Fluent Bit Utility Used by Major Cloud, Tech Companies

06:21 AI Python Package Flaw ‘Llama Drama’ Threatens Software Supply Chain

07:01 Cybercriminals Shift Tactics to Pressure More Victims Into Paying Ransoms

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Company That Assists Health Care Insurers Discloses 2023 Data Breach

00:55 Grandoreiro Banking Trojan Resurfaces, Targeting Over 1,500 Banks Worldwide

01:47 Chinese Nationals Arrested for Laundering $73 Million in Pig Butchering Crypto Scam

02:30 Ransomware Gang Targets Windows Admins via PuTTy, WinSCP Malvertising

03:13 North Korea-Linked IT Workers Infiltrated Hundreds of US Firms

04:10 Rumors of BreachForums Reboot 3.0 Already Brewing on Socials

04:53 Intel Discloses Max Severity Bug in Its AI Model Compression Software

05:41 CISA Warns of Hackers Exploiting Chrome, EoL D-Link Bugs

06:26 Critical Security Flaws Uncovered in Popular WordPress eCommerce Theme XStore

07:27 CISOs Grapple With IBM's Unexpected Cybersecurity Software Exit

08:08 How a New Wave of Deepfake-Driven Cybercrime Targets Businesses

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 Cybercriminals Exploiting Microsoft's Quick Assist Feature in Ransomware Attacks

01:07 Law Enforcement Data Stolen in Wichita Ransomware Attack

01:46 Scammers Fake Docusign Templates to Blackmail & Steal From Companies

02:32 Crook Brags About US Army and $75B Defense Biz Pwnage

03:06 Rockford Public Schools Ransomware Attack Encrypted and Stole Student Data

03:48 US Offers $5 Million for Info on North Korean IT Workers Involved in Job Fraud

04:33 SugarGh0st RAT Variant Used in Targeted AI Industry Attacks

05:28 IoT Cameras Exposed by Chainable Exploits, Millions Affected

06:16 PoC Exploit Released for Ivanti EPMM MobileIron Core

07:04 Critical Git Vulnerability Allows Rce When Cloning Repositories With Submodules (CVE-2024-32002)

07:57 Researchers Uncover 11 Security Flaws in GE HealthCare Ultrasound Machines

08:42 CISO Confidence in AI Security Grows as GenAI Adoption Rises

09:22 Cloud Security Incidents Make Organizations Turn to AI-Powered Prevention

10:16 HP Exposes Low-Effort, High-Impact Cat-Phishing Targeting Users

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 Ransomware Attack on Singing River Health System Impacted 895,000 People

00:48 FBI Seize BreachForums Hacking Forum Used to Leak Stolen Data

01:25 PDF Exploitation Targets Foxit Reader Users

02:05 As the FBI Closes In, Scattered Spider Attacks Finance, Insurance Orgs

02:52 MITM Attacks Can Still Bypass FIDO2 Security, Researchers Warn

03:39 Nissan Attack Exposes Sensitive Data of Thousands

04:22 Ebury Botnet Malware Compromises 400,000 Linux Servers Over Past 14 Years

05:11 Adobe Fixed Multiple Critical Flaws in Acrobat and Reader

06:01 D-Link Routers Vulnerable to Takeover Via Exploit for Zero-Day

06:45 Flaw in Wi-Fi Standard Can Enable SSID Confusion Attacks

07:34 A Third of CISOs Have Been Dismissed “Out of Hand” By the Board

08:16 Core Security Measures to Strengthen Privacy and Data Protection Programs

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 Zscaler Confirms Only Isolated Test Server Was Hacked

00:43 Ongoing Campaign Bombards Enterprises with Spam Emails and Phone Calls

01:16 Phorpiex Botnet Sent Millions of Phishing Emails to Deliver LockBit Black Ransomware

02:03 Telegram CEO Calls Out Rival Signal, Claiming It Has Ties to US Government

02:41 NIST Confusion Continues as Cyber Pros Complain CVE Uploads Stalled

03:33 Hackers Use DNS Tunneling to Scan and Track Victims

04:06 Android Malware Poses as WhatsApp, Instagram, Snapchat to Steal Data

05:02 Google Fixes Sixth Actively Exploited Chrome Zero-Day This Year

05:54 Critical Flaws in Cacti Framework Could Let Attackers Execute Malicious Code

06:51 SAP Patches Critical Vulnerabilities in CX Commerce, NetWeaver

07:37 Apple Warns About iOS Zero-Day Exploit

08:06 Microsoft Fixes Windows Zero-Day Exploited in QakBot Malware Attacks

08:50 Tailoring Responsible AI: Defining Ethical Guidelines for Industry-Specific Use

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 AI Abused to Clone Voices, FBI Warns

00:52 Hacker Offers Data Allegedly Stolen from the City of New York

01:34 INC Ransomware Source Code Selling on Hacking Forums for $300,000

02:16 FCC Reveals Royal Tiger, Its First Tagged Robocall Threat Actor

03:03 Vermont Passes Data Privacy Law Allowing Consumers to Sue Companies

03:49 Malicious Python Package Hides Sliver C2 Framework in Fake Requests Library Logo

04:39 Severe Vulnerabilities in Cinterion Cellular Modems Pose Risks to Various Industries

05:24 Apple iTunes For Windows Flaw Let Attackers Execute Malicious Code

06:06 AI’s Rapid Growth Puts Pressure on CISOs to Adapt to New Security Risks

07:00 Critical Vulnerabilities Take 4.5 Months on Average to Remediate

Additional Resources:

• Subscribe for daily updates

• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

#CISO #CISODailyUpdate #CyberNEXT #cybersecurity #CISOHeadlines

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 The Post Millennial Hack Leaked Data Impacting 26 Million People

00:47 U.S. Law Enforcement Cracks Down on Over 3,000 Money Mules

01:41 New LLMjacking Attack Lets Hackers Hijack AI Models for Profit

02:17 Ohio Lottery Data Breach Impacted Over 538,000 Individuals

03:00 As White House Preps New Cyber Rules for Healthcare, Neuberger Says Backlash Is Unwarranted

03:46 FIN7 Hacker Group Leverages Malicious Google Ads to Deliver NetSupport RAT

04:32 Critical Next.js Vulnerability Let Attackers Compromise Server Operations

05:29 PoC Released for Critical PuTTY Private Key Recovery Vulnerability

06:15 Exploited Chrome Zero-Day Patched by Google

06:52 CISA: Black Basta Ransomware Breached Over 500 Orgs Worldwide

07:35 Okta’s Security Chief on the Company’s Own Cyberattack and How the ‘Battleground’ Has Shifted

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 Dell Warns of Data Breach, 49 Million Customers Allegedly Affected

00:51 Boeing Confirms $200M Cyber Extortion Attempt of LockBit

01:25 Catholic Health System Ascension Warns of Disruptions Following Cyberattack

02:01 New 'LLMjacking' Attack Exploits Stolen Cloud Credentials

02:47 Zscaler Is Investigating Data Breach Claims

03:28 Monday[.]com Removes “Share Update” Feature Abused for Phishing Attacks

04:05 Vast Network of Fake Web Shops Defrauds 850,000 & Counting

04:50 F5 Fixes Big-IP Next Central Manager Flaws With Public PoCs (CVE-2024-21793, CVE-2024-26026)

05:31 Mirai Botnet Exploits Ivanti Connect Secure Flaws for Malicious Payload Delivery

06:24 Golang Vulnerability Alert: Remote Code Execution & Infinite Loop DNS Lookup

07:13 CISA Starts CVE “Vulnrichment” Program

07:52 Social Engineering in the Era of Generative AI: Predictions for 2024

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 Brandywine Realty Trust Confirms Data Breach After Ransomware Attack

00:48 One Year On, Universities Org Admits MOVEit Attack Hit Data of 800K People

01:27 Scattered Spider Group a Unique Challenge for Cyber Cops, FBI Leader Says

02:06 MediExcel Exposes 500K Patient Documents

02:36 FBI Warns of Gift Card Fraud Ring Targeting Retail Companies

03:17 Attackers Leverage TunnelVision Vulnerability to Expose User Data

03:46 Veeam Fixes RCE Flaw in Backup Management Platform (CVE-2024-29212)

04:19 The CyberPower UPS Vulnerability Threatening Critical Systems Across Sectors

04:45 Litespeed Cache WordPress Plugin Actively Exploited in the Wild

05:34 A Third of Tech CISOs Are Unhappy With Their Income

06:10 97% of Organizations Hit by Ransomware Turn to Law Enforcement

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 LockbitSupp Identified As Dmitry Khoroshev and Indicted for Ransomware Crimes

00:58 MITRE Hack: China-Linked Group Breached Systems in December 2023

01:41 Play Ransomware Group Claims Responsibility for Disrupting Kansas City Scout System

02:23 RSAC: Securing Foundational Tech Critical to Upholding Democratic Values, Says Blinken

03:20 BetterHelp to Pay $7.8 Million to 800,000 in Health Data Sharing Settlement

04:07 Citrix Addresses High-Severity Flaw in NetScaler ADC and Gateway

04:49 Oracle Weblogic Server Flaw Allows Attackers Full Control – PoC Released

05:30 Report Shows AI Fraud, Deepfakes Are Top Challenges For Banks

06:14 Ransomware Operations Are Becoming Less Profitable

06:59 Only 45% of Organizations Use MFA to Protect Against Fraud

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter