CISO Headlines

This CISO Daily Update covers:

00:06 Change Healthcare Faces Second Ransomware Dilemma Weeks After Alphv Attack

00:47 Targus Discloses Cyberattack After Hackers Detected on File Servers

01:28 Cybercriminals Targeting Latin America with Sophisticated Phishing Scheme

02:10 Hackers Deploy Crypto Drainers on Thousands of WordPress Sites

02:49 New Malware “Latrodectus” Linked to IcedID

03:40 Multiple CData Vulnerabilities Let Attackers Bypass Security Restrictions

04:17 AI-As-A-Service Providers Vulnerability Let Attackers Perform Cross-Tenant Attacks

04:47 Canon Printers: Critical CVE-2024-2184 (CVSS 9.8) Flaw Requires Immediate Firmware Update

05:27 Confidential VMs Hacked via New Ahoi Attacks

06:10 US Federal Data Privacy Law Introduced by Legislators

06:53 The Drop in Ransomware Attacks in 2024 and What it Means

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 US Health Dept Warns Hospitals of Hackers Targeting IT Help Desks

00:50 US Environmental Protection Agency Allegedly Hacked, 8.5M User Data Leaked

01:31 Attempted Hack on NYC Continues Wave of Cyberattacks Against Municipal Governments

02:06 Home Depot Confirms Third-party Data Breach Exposed Employee Info

02:33 Pacific Guardian Life Insurance Says 165,000 Had Financial Info Stolen in 2023 Attack

03:06 Hackers Exploit Magento Bug to Steal Payment Data from E-commerce Websites

03:45 More Than 16,000 Ivanti VPN Gateways Still Vulnerable to RCE CVE-2024-21894

04:25 Cisco Warns of XSS Flaw in End-of-Life Small Business Routers

05:14 Critical Bugs Put Hugging Face AI Platform in a 'Pickle'

05:45 Inclusivity Matters: CISO Saloni Vijay’s Insights on Women in Cybersecurity and Leadership

06:31 Industrial Sectors Embrace Zero Trust for Enhanced Security

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 US Cancer Center Data Breach Exposes Info of 827,000 Patients

00:45 Another Insider in OneCoin Cryptocurrency Scam Gets Prison Sentence

01:36 Cybercriminals Are Spreading Malware Through Facebook Pages Impersonating AI Brands

02:19 Hosting Provider VMware ESXi Servers Hit By New SEXi Ransomware

02:53 New Phishing Campaign Targets Oil & Gas with Evolved Data-Stealing Malware

03:21 Hackers Hijacked Notepad++ Plugin To Execute Malicious Code

03:58 Visa Warns of New JSOutProx Malware Variant Targeting Financial Orgs

04:51 Apache HTTP Server Hit by Triple Vulnerabilities – Users Urged to Update

05:33 New HTTP/2 Vulnerability Exposes Web Servers to DoS Attacks

06:08 D-Link NAS Command Injection Flaw: 92,000 Devices Affected

06:42 How CISOs Can Make Cybersecurity a Long-Term Priority for Boards

07:24 LockBit Scrambles After Takedown, Repopulates Leak Site with Old Breaches

08:07 Sophos Reveals Ransomware Attacks Are Now Targeting Backups

08:50 Security Pros Are Cautiously Optimistic About AI

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 U.S. Cyber Safety Board Slams Microsoft Over Breach by China-Based Hackers

00:51 US Federal Employee Data Leaked, Claimed by Hacker Trio

01:35 Cyberattack Cripples NorthBay VacaValley Hospital, Patients Left in Limbo

02:14 Omni Hotels Confirms Cyberattack Behind Ongoing IT Outage

02:49 Missouri County Home to Kansas City Says Suspected Ransomware Attack Affecting Tax Payments

03:33 Halo Hacked, Private Data Stolen

04:14 YouTube Channels Found Using Pirated Video Games As Bait for Malware Campaign

04:55 Google Fixes Two Pixel Zero-Day Flaws Exploited by Forensics Firms

05:42 Ivanti Fixes VPN Gateway Vulnerability Allowing RCE, DoS Attacks

06:33 GenAI: The Next Frontier in AI Security Threats

07:12 Infostealers Prevalent in Retail Sector Cybercrime Trends

07:59 Cyber Attacks on Critical Infrastructure Show Advanced Tactics and New Capabilities

08:45 CVE and NVD – A Weak and Fractured Source of Vulnerability Truth

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers: 

00:06 Google to Delete Billions of Browsing Records in 'Incognito Mode' Privacy Lawsuit Settlement 

00:43 Feds Finally Decide to Do Something About Years-Old SS7 Spy Holes in Phone Networks 

01:24 Prudential Insurance Says Data of 36,000 Exposed During February Cyberattack 

02:06 Vulnerability Database Backlog Due to Increased Volume, Changes in ‘Support,’ NIST Says 

02:43 Trusted Contributor Plants Sophisticated Backdoor in Critical Open-Source Library 

03:27 Massive Phishing Campaign Strikes Latin America: Venom RAT Targeting Multiple Sectors 

04:08 China-linked Hackers Deploy New 'UNAPIMON' Malware for Stealthy Operations 

04:43 Octopus Server Flaw Let Attackers Escalate Privilege 

05:23 Qualcomm Security Flaws Let Attackers Takeover Devices 

05:57 Security Flaw in WP-Members Plugin Leads to Script Injection 

06:39 73% Brace for Cybersecurity Impact on Business in the Next Year or Two 

07:25 Cyberattacks Wreaking Physical Disruption on the Rise 

08:06 Researchers Report Sevenfold Increase in Data Theft Cases 

08:50 The Evolution of a CISO: How the Role Has Changed 

Additional Resources: 

• Subscribe for daily updates 
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers: 

00:06 OWASP Discloses a Data Breach 

00:41 Data Security Fears: Congress Bans Staff Use of Microsoft’s AI Copilot 

01:19 Hackers Exploit Google Ads Tracking Feature To Deliver Malware 

01:55 Shopping Platform PandaBuy Data Leak Impacts 1.3 Million Users 

02:32 Yacht Retailer MarineMax Discloses Data Breach After Cyberattack 

03:09 Malicious Apps Caught Secretly Turning Android Phones into Proxies for Cybercriminals 

03:49 Imperva Web Application Firewall Flaw Let Attackers Bypass WAF Rules 

04:26 Bitdefender CVE-2023-6154 Flaw Alert: Update Now to Prevent Potential Privilege Escalation

05:11 CVE-2024-29201 & CVE-2024-29202 Flaws Expose JumpServer Users to RCE Attacks 

05:57 FTC: Americans Lost $1.1 Billion to Impersonation Scams in 2023 

06:42 AI Hallucinated Packages Fool Unsuspecting Developers 

Additional Resources: 

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified! 
   

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers: 

00:06 AT&T Confirmed That a Data Breach Impacted 73 Million Customers 

00:40 Hackers Target macOS Users with Malicious Ads Spreading Stealer Malware 

01:27 American Fast-Fashion Firm Hot Topic Hit by Credential Stuffing Attacks 

02:03 Vultur Banking Malware for Android Poses As McAfee Security App 

02:46 Prisma Finance Crypto Theft Caps Strange Week of Platform Breaches 

03:29 DinodasRAT Linux Variant Targets Users Worldwide 

04:10 Urgent: Secret Backdoor Found in XZ Utils Library, Impacts Major Linux Distros 

04:59 New Linux Bug Could Lead to User Password Leaks and Clipboard Hijacking 

05:49 Dormakaba Locks Used in Millions of Hotel Rooms Could Be Cracked in Seconds 

06:47 CISA Launches New Cyber Incident Reporting Rules for US Defense Contractors 

07:29 Advanced Cybersecurity Strategies Boost Shareholder Returns 

Additional Resources: 

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 US Puts Up $10M Bounty on BlackCat Ransomware Gang Members

00:45 UnitedHealth Group Disburses $3.3 Billion to Providers Affected by Change Healthcare Cyberattack

01:25 Municipalities in Texas, Georgia See Services Disrupted Following Ransomware Attacks

02:06 Cisco Warns of Password-Spraying Attacks Targeting VPN Services

02:55 PyPI Suspends New User Registration to Block Malware Campaign

03:41 Shopify Plugins Leaked Data From Nearly 2K Stores

04:18 The Comeback of WarzoneRAT: Analyzing the Latest Multi-Stage Attacks

05:01 Hackers Using Weaponized Virtual Hard Disk Files to Deliver Remcos RAT

05:50 Patchless Apple M-Chip Vulnerability Allows Cryptography Bypass

06:33 Splunk Patches Vulnerabilities in Enterprise Product

07:14 Millions of WordPress Sites at Risk Due to Essential Addons for Elementor Vulnerability

08:01 JetBrains Keeps Mum on 26 ‘Security Problems’ Fixed After Rapid7 Spat

08:58 17 Billion Personal Records Exposed in Data Breaches in 2023

09:50 NIST Unveils New Consortium to Operate its National Vulnerability Database

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06 Facebook May Have Exploited User Devices to Spy on Competitors, Documents Show

00:54 Alert: New Phishing Attack Delivers Keylogger Disguised as Bank Payment Notice

01:37 Apple ID ‘Push Bombing’ Scam Campaign Hits Cyber Startup Founders

02:31 New Darcula Phishing Service Targets iPhone Users via iMessage

03:37 Hackers Developing Malicious LLMs After WormGPT Falls Flat

04:21 Worldwide Agenda Ransomware Wave Targets VMware ESXi Servers

05:03 CISA Adds Microsoft SharePoint Bug Disclosed at Pwn2Own to Its Known Exploited Vulnerabilities Catalog

05:45 Organizations Informed of 10 Vulnerabilities in Rockwell Automation Products

06:22 Microsoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions

07:12 Code Execution Flaws Haunt NVIDIA ChatRTX for Windows

07:47 BlueDucky: A New Tool Exploits Bluetooth Vulnerability With 0-Click Code Execution

08:23 Only 3% of Businesses Resilient Against Modern Cyber Threats

09:00 Zero-Day Vulnerabilities Surged by Over 50% Annually, Says Google

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers: 

00:06 AI Generated Fake Obituary Websites Target Grieving Users 

00:51 St. Cloud Most Recent in String of Florida Cities Hit With Ransomware 

01:26 TheMoon Malware Infects 6,000 Asus Routers in 72 Hours for Proxy Service 

02:32 Linux Admins Beware! Fake PuTTY Client is Rhadamanthys Stealer 

03:06 New ShadowRay Campaign Targets Ray AI Framework in Global Attack 

03:45 Fortinet SSL VPN Exploit Up for Sale on Dark Web 

04:28 Apple Patches Code Execution Vulnerability in iOS, macOS 

05:09 Rank Math SEO Plugin Vulnerability Exposes 2 Million WordPress Sites 

05:45 ICS CERT Predictions for 2024: What You Need to Know 

06:30 Only 5% of Boards Have Cybersecurity Expertise, Despite Financial Benefits 

07:13 Essential Elements of a Strong Data Protection Strategy 

Additional Resources: 

• • Subscribe for daily updates
• • Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter