CISO Headlines

This CISO Daily Update covers:

00:06 City of Wichita Shuts Down IT Network After Ransomware Attack

00:38 Cyber Alliance Threatens Major U.S. Energy Firms: High Society and Cyber Army of Russia Collaborate

01:17 MedStar Health Breach: Hackers Accessed Emails & Files

02:02 CISA Says ‘No More’ to Decades-Old Directory Traversal Bugs

02:43 Beware Of Phishing Attacks Targeting AmericanExpress Card Users

03:26 APT42 Hackers Posing As Event Organizers To Hijack Victim Network

04:07 New 'Cuckoo' Persistent macOS Spyware Targeting Intel and ARM Macs

04:50 Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution

05:32 NVIDIA ChatRTX for Windows Vulnerability Lets Attackers Escalate Privileges

06:21 Organizations Go Ahead With AI Despite Security Risks

07:07 #RSAC: 70% of Businesses Prioritize Innovation Over Security in Generative AI Projects

08:07 The Era of Web DDoS Tsunamis and Strategies for Defense

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 Microsoft Ties Executive Pay to Security Following Multiple Failures and Breaches

01:00 F Society Targets Rutgers University, Bitfinex in Latest Cyberattack

01:45 Ransomware Drama: Law Enforcement Seized Lockbit Group’s Website Again

02:32 Illinois’ Biometric Data Privacy Law Could Soon Be Less Costly for Violators

03:27 These Dangerous Scammers Don’t Even Bother to Hide Their Crimes

04:13 Four Critical Vulnerabilities Expose HPE Aruba Devices to RCE Attacks

05:00 Path Traversal Vulnerability Elimination in Software Sought by Feds

05:53 Android Bug Leaks DNS Traffic to Hackers While Switching VPN Servers

06:39 Linksys Router Flaws Exposed, Poc Published, Patch Unavailable!

07:25 Beware Android Users! Hackers May Steal Your Money Through Apps

08:15 93% of Security Leaders Have Increased SaaS Security Budgets

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

#CISO #CISODailyUpdate #CyberNEXT #cybersecurity #CISOHeadlines

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 Dropbox Says Attackers Accessed Customer and MFA Info, API Keys

00:49 Data Breach Hits Panda Restaurants

01:33 Cybersecurity Consultant Arrested After Allegedly Extorting IT Firm

02:14 Microsoft Graph API Emerges as a Top Attacker Tool to Plot Data Theft

02:56 DPRK's Kimsuky APT Abuses Weak DMARC Policies, Feds Warn

03:50 US and UK Warn of Disruptive Russian OT Attacks

04:47 REvil Ransomware Scum Sentenced to Almost 14 Years Inside, Ordered to Pay $16 Million

05:45 Cisco IP Phones Exposed: Vulnerabilities Allow Hackers to Disrupt, Spy, and Even Make Calls

06:24 New "Goldoon" Botnet Targets D-Link Routers With Decade-Old Flaw

07:07 Critical MailCleaner Vulnerabilities Let Attackers Execute arbitrary command

08:00 Three-quarters of CISOs Admit App Security Incidents

08:44 Most Companies Changed Their Cybersecurity Strategy in the Past Year

09:30 Ransom Recovery Costs Reach $2.73 Million

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 More Than 450K Hit by JPMorgan Breach

00:48 Ex-NSA Employee Sentenced to 22 Years for Trying to Sell U.S. Secrets to Russia

01:25 US Charges 16 Over ‘Depraved’ Grandparent Scams

02:11 Carmakers Lying About Requiring Warrants Before Sharing Location Data, Senate Probe Finds

02:56 Bitcoin Forensic Analysis Uncovers Money Laundering Clusters and Criminal Proceeds

03:31 New Cuttlefish Malware Infects Routers to Monitor Traffic for Credentials

04:17 ZLoader Malware Evolves with Anti-Analysis Trick from Zeus Banking Trojan

05:02 CISA Says GitLab Account Takeover Bug Is Actively Exploited in Attacks

05:41 Postman API Testing Platform Flaw Exposes Sensitive Credentials

06:21 To Damage OT Systems, Hackers Tap USBs, Old Bugs & Malware

07:16 1 in 5 US Ransomware Attacks Triggers Lawsuit

07:56 DBIR: Vulnerability Exploits Triple as Initial Access Point for Data Breaches

08:54 Lawsuits and Company Devaluations Await For Breached Firms

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 Kansas City System Providing Roadside Weather, Traffic Info Taken Down by Cyberattack

00:42 Philadelphia Inquirer Struck by Cyberattack

01:19 Change Healthcare Hacked Using Stolen Citrix Account With No MFA

02:07 US Spy Agencies to Share Intelligence on Critical Infrastructure in Policy Revamp

02:53 Google Blocked 2.3M Apps From Play Store Last Year for Breaking the G Law

03:49 Millions of Malicious 'Imageless' Containers Planted on Docker Hub Over 5 Years

04:31 New Latrodectus Malware Attacks Use Microsoft, Cloudflare Themes

05:06 Threat Actors Claiming of 0-Day Vulnerability in Zyxel VPN Device

05:39 Linux Kernel Vulnerability (CVE-2024-26925) Let Hackers Access Unauthorized Data

06:14 Ransom Payments Surge by 500% to an Average of $2M

06:59 DHS, CISA Partner to Secure Critical Infrastructure in the Age of AI

07:43 Ransomware Rising Despite Takedowns, Says Corvus Report

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 FCC Fines Carriers $200 Million for Illegally Sharing User Location

00:46 Financial Business and Consumer Solutions (FBCS) Data Breach Impacted 2M Individuals

01:27 Voter Registration System Taken Offline in Coffee County Cyber-Incident

02:07 Agent Tesla and Taskun Malware Targeting US Education and Govt Entities

02:43 HookChain – A New Sophisticated Technique Evades EDR Detection

03:18 Sandbox Escape Vulnerabilities in Judge0 Expose Systems to Complete Takeover

04:15 New R Programming Vulnerability Exposes Projects to Supply Chain Attacks

04:54 Multiple Brocade SANnav Storage Area Network Flaws Allow Device Compromise

05:22 2023 Was the Year Threat Actors Disabused Our Trust in Digital

06:04 Addressing Risk Caused by Innovation

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 Okta Warns of Unprecedented Surge in Proxy-Driven Credential Stuffing Attacks

00:57 Hackers May Have Accessed Thousands of Accounts on the California State Welfare Platform

01:36 US Post Office Phishing Sites Get As Much Traffic As the Real One

02:24 FBI: Fraudsters Using Fake Online Dating Verification Apps to Scam Lovers

03:16 Bogus npm Packages Used to Trick Software Developers into Installing Malware

04:01 Kaiser’s Website Tracking Tools May Have Compromised Data on 13 Million Customers

04:47 Thousands of Qlik Sense Servers Open to Cactus Ransomware

05:41 Brokewell Android Malware Supports an Extensive Set of Device Takeover Capabilities

06:22 Windows Kernel EoP Vulnerability (CVE-2024-21345) Gets PoC Exploit Code

07:02 Mitel Issues Critical Fixes for XSS Vulnerabilities in MiContact Center Business

08:00 Top 5 Breaches Caused by Infostealer Infections

08:50 Most People Still Rely on Memory or Pen and Paper for Password Management

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Central Power Systems & Services’ Website Down After Alleged Hunters Group Cyberattack

00:43 Plasma Donation Company Octapharma Slowly Reopening As BlackSuit Gang Claims Attack

01:20 Anti-Trump PAC Lincoln Project Scammed for $35,000 After Vendor Email Hack

02:09 State-Sponsored Hackers Exploit Two Cisco Zero-Day Vulnerabilities for Espionage

02:53 Autodesk Drive Abused in Phishing Attacks

03:29 DOJ Arrested the Founders of Crypto Mixer Samourai for Facilitating $2 Billion in Illegal Transactions

04:30 DragonForce Ransomware Group Uses LockBit's Leaked Builder

05:08 Supplement Maker Hack Allegedly Exposes 1M Customers

05:45 Vulnerabilities Expose Brocade SAN Appliances, Switches to Hacking

06:40 CISA Adds Microsoft Windows Print Spooler Flaw to Its Known Exploited Vulnerabilities Catalog

07:30 Skylab IGX IIoT Gateway Vulnerability (CVE-2024-4163): Root Access for Attackers

08:13 11% of Cybersecurity Teams Have Zero Women

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 Russian Hackers Claim Cyberattack on Indiana Water Plant

00:50 Volkswagen Hacked – Hackers Stolen 19,000 Documents From VW Server

01:33 Ring Customers Get $5.6 Million in Privacy Breach Settlement

02:17 US Offers a $10 Million Reward for Information on Four Iranian Nationals

02:58 Threat Actor Uses Multiple Infostealers in Global Campaign

03:46 Seedworm Hackers Exploit RMM Tools to Deliver Malware

04:31 Siemens Working on Fix for Device Affected by Palo Alto Firewall Bug

05:15 Google Patches Critical Chrome Vulnerability

05:46 IBM QRadar XSS Flaw Let Attackers Execute Arbitrary JavaScript Code

06:30 CISA Warns of Windows Print Spooler Flaw After Microsoft Sees Russian Exploitation

07:06 5 Hard Truths About the State of Cloud Security 2024

07:45 New Password Cracking Analysis Targets Bcrypt

08:27 Phishing Attacks Rise By 58% As The Attackers Leverage AI Tools

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 Nespresso Domain Serves Up Steamy Cup of Phish, No Cream or Sugar

00:44 UnitedHealth CEO to Testify About Ransomware Attack

01:22 CISA Releases Physical Security Checklist for Polling Locations to Safeguard U.S. Elections

02:04 This Website is Selling Billions of Private Messages of Discord Users

02:47 U.S. Imposes Visa Restrictions on 13 Linked to Commercial Spyware Misuse

03:18 HelloKitty Ransomware Rebranded and Back in Business, Looking for Employees

03:56 Microsoft DRM Hack Could Allow Movie Downloads From Popular Streaming Services

04:32 Major Security Flaw in Popular Keyboard Apps Puts Millions at Risk

05:11 PoC Exploit Released For Critical Oracle VirtualBox Vulnerability

05:47 Critical Flaw With Popular API Portal Let Attackers Launch SSRF Attacks

06:16 Vulnerability Exploitation on the Rise as Attackers Ditch Phishing

07:09 The Rising Influence of AI on the 2024 US Election

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter