CISO Headlines

This CISO Daily Update covers:

00:06 Hackers Offering Admin Access to 3000 Fortinet SSL-VPN

00:50 Rural Texas Towns Report Cyberattacks That Caused One Water System to Overflow

01:30 Research Shows How Attackers Can Abuse EDR Security Products

02:16 Microsoft: APT28 Hackers Exploit Windows Flaw Reported by NSA

03:09 Alleged Cyberattack on Bureau van Dijk: US Consumer Data Compromised

03:50 ToddyCat APT Hackers Deploy Multiple Tools to Hijack Network Infrastructure

04:37 Family-Owned Music Store Targeted: MEDUSA Ransomware Strikes Ted Brown Music

05:14 Fraudsters Exploit Telegram’s Popularity For Toncoin Scam

05:52 Dependency Confusion Vulnerability Found in Apache Project

06:28 Researchers Uncover Windows Flaws Granting Hackers Rootkit-Like Powers

07:10 GitLab Affected by GitHub-Style CDN Flaw Allowing Malware Hosting

07:54 NSA Launches Guidance for Secure AI Deployment

08:35 Zero-Trust Takes Over: 63% of Orgs Implementing Globally

09:12 People Doubt Their Own Ability to Spot AI-Generated Deepfakes

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 MITRE Hit in Massive Supply Chain Attack: State-Backed Hackers Exploit Zero-Days

00:47 Cybercriminals Threaten to Leak All 5 Million Records From Stolen Database of High-Risk Individuals

01:32 Multiple LastPass Users Lose Master Passwords to Ultra-Convincing Scam

02:20 Researchers Find Dozens of Fake E-ZPass Toll Websites After FBI Warning

02:59 Malware Dev Lures Child Exploiters Into Honeytrap to Extort Them

03:43 GitHub Comments Abused to Push Malware via Microsoft Repo URLs

04:33 Androxgh0st Malware Compromises Servers Worldwide for Botnet Attack

05:24 Critical Update: CrushFTP Zero-Day Flaw Exploited in Targeted Attacks

06:12 Critical Forminator Plugin Flaw Impacts Over 300k WordPress Sites

07:05 Ransomware Payments Drop to Record Low of 28% in Q1 2024

07:57 Beyond 24/7: How Smart CISOs are Rethinking Threat Hunting

Additional Resources: 

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 Frontier Communications Shuts Down Systems After Cyberattack

00:37 Akira Ransomware Gang Made $42 Million From 250 Attacks Since March 2023: FBI

01:24 R00TK1T Claims that They have Acquired Confidential Data from Nestle

01:59 ‘Crude’ Ransomware Tools Proliferating on the Dark Web for Cheap, Researchers Find

02:56 Global Police Operation Disrupts 'LabHost' Phishing Service, Over 30 Arrested Worldwide

03:33 Malicious Google Ads Pushing Fake IP Scanner Software with Hidden Backdoor

04:23 Active Kubernetes RCE Attack Relies on Known OpenMetadata Vulns

05:02 Cisco Warns of a Command Injection Escalation Flaw in Its IMC. PoC Publicly Available

05:42 Sneaky Shellcode: Windows Fibers Offer EDR-Proof Code Execution

06:20 92% of Enterprises Unprepared for AI Security Challenges

07:10 Unpacking the NIST Cybersecurity Framework 2.0

07:44 SAP Applications Increasingly in Attacker Crosshairs, Report Shows

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 OpenAI’s GPT-4 Can Exploit Real Vulnerabilities by Reading Security Advisories

00:56 HHS Scrambles to Patch Security Hole After $7.5 Million Cyberattack

01:32 Cherry Health Hit by Ransomware Attack

02:03 Patients Sue Ernest Health After Data Breach of 94,747 Exposed

02:41 Hackers Exploit Fortinet Flaw, Deploy ScreenConnect, Metasploit in New Campaign

03:25 Critical Atlassian Flaw Exploited to Deploy Linux Variant of Cerber Ransomware

04:02 Ivanti Patches Two Critical Avalanche Flaws in Major Update

04:48 Researchers Released Exploit Code for Actively Exploited Palo Alto Pan-OS Bug

05:39 Chrome 124, Firefox 125 Patch High-Severity Vulnerabilities

06:18 Oracle Patches 230 Vulnerabilities With April 2024 CPU

07:01 Various Botnets Pummel Year-Old TP-Link Flaw in IoT Attacks

07:44 How Boards Can Prepare for Quantum Computers

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 UnitedHealth: Change Healthcare Cyberattack Caused $872 Million Loss

00:57 SIM Swap Crooks Solicit T-Mobile US, Verizon Staff via Text to Do Their Dirty Work

01:39 FTC Fines Mental Health Startup Cerebral $7 Million for Major Privacy Violations

02:10 IntelBroker Claims Space-Eyes Breach, Targeting US National Security Data

02:48 Steganography Leveraged in New Global TA558 Attack Campaign

03:29 Blackjack Hackers Destroyed 87,000 Sensors Using Lethal ICS Malware

03:57 AWS, Google, and Azure CLI Tools Could Leak Credentials in Build Logs

04:43 PuTTY SSH Client Flaw Allows Recovery of Cryptographic Private Keys

05:32 Delinea Scrambles to Patch Critical Flaw After Failed Responsible Disclosure Attempt

06:16 Popular VPN Software Flaw Let Attackers Crash the Systems

07:02 Microsoft Most Impersonated Brand in Phishing Scams

07:47 Report Suggests 93% of Breaches Lead to Downtime and Data Loss

08:24 Bad Bots Drive 10% Annual Surge in Account Takeover Attacks

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 FBI Warns of Massive Toll Services Smishing Scam

00:45 Roku Makes 2FA Mandatory for All After Nearly 600K Accounts Pwned

01:19 Cisco Duo Warns Third-party Data Breach Exposed SMS MFA Logs

01:56  DAIXIN Ransomware Group Claims Data Breach at Omni Hotels, Threatens Leaks

02:28 Top Officials Again Push Back on Ransom Payment Ban

03:09 Earth Hundun’s Hackers Employ Waterbear And Deuterbear Tools For Advanced Cyber Attacks

03:50 Apache Kafka Flaw Let Attackers Gain Access To Sensitive Data

04:29 PoC Released For Critical Zero-Click Windows Vulnerability

05:14 Invision Community Vulnerabilities Risk E-Commerce Websites

05:56 Ransomware Tracker: The Latest Figures [April 2024]

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 Gmail And YouTube Hackers Bypass Google’s 2FA Account Security

00:56 CISA Issues Emergency Directive After Midnight Blizzard Microsoft Hits

01:35 US Sanctions Hamas ‘Cyber Influence’ Leader

02:21 Hackers Deploy Python Backdoor in Palo Alto Zero-Day Attack

03:18 Crooks Manipulate GitHub’s Search Results to Distribute Malware

03:52 FatalRAT Targets Cryptocurrency Users With DLL Side-loading Techniques

04:28 Firebird RAT Creator and Seller Arrested in the U.S. and Australia

05:12 Exploitation of Unpatched D-Link NAS Device Vulnerabilities Soars

06:12 Telegram Fixes Windows App Zero-Day Used to Launch Python Scripts

06:48 Top 10 Most Common WordPress Vulnerabilities to Look Out For in 2024

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 Microsoft Security Lapse Exposed Sensitive Credentials and Internal Resources of Employees

00:42 Another Bank Hit: Wells Fargo Confirms Data Breach

01:13 Universities in New Mexico, Oklahoma Respond to Ransomware Attacks

01:53 Sisense Data Breach Triggers CISA Alert and Urgent Calls for Credential Resets

02:29 LastPass: Hackers Targeted Employee in Failed Deepfake CEO Call

03:03 Apple: Mercenary Spyware Attacks Target iPhone Users in 92 Countries

03:43 Intel and Lenovo Servers Impacted by 6-Year-Old BMC Flaw

04:25 Palo Alto Networks Fixed Multiple DoS Bugs in Its Firewalls

05:15 Critical Node.js Flaw Lets Attackers Execute Malicious Code on Windows Machines

05:59 US Data Breach Reports Surge 90% Annually in Q1

07:00 Financial Sectors Lost $20 Billion Over the Past 20 Years

07:34 96% of US Hospital Websites Share Visitor Info With Meta, Google, Data Brokers

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 AT&T Now Says Data Breach Impacted 51 Million Customers

00:45 X Fixes URL Blunder That Could Enable Convincing Social Media Phishing Campaigns

01:20 Beware: GitHub's Fake Popularity Scam Tricking Developers into Downloading Malware

02:01 Malicious PowerShell Script Pushing Malware Looks AI-Written

02:35 Cagey Phishing Campaign Delivers Multiple RATs to Steal Windows Data

03:09 Telegram Dismisses Claims of ‘High-risk’ RCE Bug in its Desktop Application

03:43 Raspberry Robin Returns: New Malware Campaign Spreading Through WSF Files

04:19 Researchers Resurrect Spectre v2 Attack Against Intel CPUs

05:07 Multiple Fortinet Vulnerabilities Let Attackers Execute Arbitrary Code

05:43 Critical 'BatBadBut' Rust Vulnerability Exposes Windows Systems to Attacks

06:28 Top MITRE ATT&CK Techniques and How to Defend Against Them

07:10 Women Experience Exclusion Twice as Often as Men in Cybersecurity

07:57 What’s Going On With the National Vulnerability Database?

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 DOJ Data on 340,000 Individuals Stolen in Consulting Firm Hack

00:41 Group Health Cooperative Falls Victim to Ransomware Attack, 500K People Affected

01:22 Medusa Cybercrime Gang Takes Credit for Another Attack on US Municipality

01:58 Hackers Using Malware-Driven Scanning Attacks To Pinpoint Vulnerabilities

02:54 10-Year-Old 'RUBYCARP' Romanian Hacker Group Surfaces with Botnet

03:50 Microsoft Plugs Gaping Hole in Azure Kubernetes Service Confidential Containers

04:36 New SharePoint Flaws Help Hackers Evade Detection When Stealing Files

05:24 Bug in IBM’s Enterprise Terminal Could Allow Attackers Fully Privileged Access

06:05 SAP’s April 2024 Updates Patch High-Severity Vulnerabilities

06:36 Patch Tuesday: Code Execution Flaws in Multiple Adobe Software Products

07:05 91,000 Smart LG TV Devices Vulnerable to Remote Takeover

07:50 Why Identity Management is Key in a Cyber Resilience Strategy

08:40 How Exposure Management Elevates Cyber Resilience

09:13 Foreign Interference Drives Record Surge in IP Theft

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter