CISO Headlines

This CISO Daily Update covers: 

00:06 US Charges Chinese Nationals With Cyber-Spying on Pretty Much Everyone for Beijing 

00:59 Hackers Poison Source Code From Largest Discord Bot Platform 

01:41 New Tycoon 2FA Phishing Kit Raises Cybersecurity Concerns

02:28 Fake Ozempic Deals on the Rise as Experts Warn of Phishing Scams 

03:12 Panera Bread experiencing nationwide IT outage since Saturday 

03:54 New GEOBOX Tool Hijacks Raspberry Pi, Lets Hackers Fake Location 

04:33 CISA Adds FortiClient EMS, Ivanti EPM CSA, Nice Linear eMerge E3-Series bugs to its Known Exploited Vulnerabilities Catalog 

05:26 MobSF Pen-Testing Tool Input Validation Flaw Leads to SSRF 

06:07 Scammers Exploit Tax Season Anxiety With AI Tools 

06:49 Strengthening Critical Infrastructure Cybersecurity is a Balancing Act 
 

Additional Resources: 

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers: 

00:06 Illinois County Government, Local College Affected by Ransomware Attacks

00:55 Jacksonville Beach and Other US Municipalities Report Data Breaches Following Cyberattacks

01:45 Over 100 US and EU Orgs Targeted in StrelaStealer Malware Attacks

02:28 German Police Seize 'Nemesis Market' in Major International Darknet Raid

03:21 N. Korea-linked Kimsuky Shifts to Compiled HTML Help Files in Ongoing Cyberattacks

04:28 New Sysrv Botnet Abuses Google Subdomain To Spread XMRig Miner

05:12 Apple M-Series Chip Vulnerability Puts Encryption Keys at Risk

05:58 Truck-to-Truck Worm Could Infect – and Disrupt – Entire US Commercial Fleet

06:38 Saflok Lock Vulnerability Can Be Exploited to Open Millions of Doors

07:21 Mozilla Fixed Firefox Zero-Days Exploited at PWN2OWN Vancouver 2024

08:09 AWS CISO: Pay Attention to How AI Uses Your Data

Additional Resources: 

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers: 

00:06 Greensboro College Data Breach: 52,000 Affected in Ransomware Attack, Lawsuit Filed

00:50 Vans Cyberattack: No Financial Info Breached, But Fraud Risk Remains

01:33 Yacht Dealer to the Stars Attacked by Rhysida Ransomware Gang

02:22 Two Russians Sanctioned by US for Alleged Disinformation Campaign

03:14 Over 800 npm Packages Found with Discrepancies, 18 Exploitable to 'Manifest Confusion'

04:01 Evasive Sign1 Malware Campaign Infects 39,000 WordPress Sites

04:55 AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials

05:51 Ivanti Releases Urgent Fix for Critical Sentry RCE Vulnerability

06:41 AWS Fixes 1-Click Apache Airflow Session Hijack Flaw

07:20 Exploit Released for Fortinet RCE Bug Used in Attacks, Patch Now

08:16 Unpatched Zephyr OS Expose Devices to DoS Attacks via IP Spoofing

09:07 Risk and Regulation: Preparing for the Era of Cybersecurity Compliance

10:05 Security Leaders Acknowledge API Security Gaps Despite Looming Threat

Additional Resources: 

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers: 

00:06 Hackers Posing as Law Firms Phish Global Orgs in Multiple Languages

00:57 Mintlify Confirms Data Breach Through Compromised GitHub Tokens

01:40 Critical Infrastructure Alert: CISA Releases Fact Sheet on Volt Typhoon Cyber Threats

02:25 Bunnyloader 3.0 Surfaces in the Threat Landscape

03:13 Crinetics Confirms Cyberattack: Third-Party Experts Engaged, Security Tightened

03:58 New 'Loop DoS' Attack Impacts Hundreds of Thousands of Systems

04:37 'Fluffy Wolf' Spreads Meta Stealer in Corporate Phishing Campaign

05:15 Chrome 123, Firefox 124 Patch Serious Vulnerabilities

06:10 Atlassian Patches Critical Vulnerability in Bamboo Data Center and Server

06:48 1 in 4 Organizations Shut Down OT Operations Due to Cyberattacks: Survey

07:48 Study Uncovers 27% Spike in Ransomware; 8% Yield to Demands

08:38 1% of Users Are Responsible for 88% of Data Loss Events

Additional Resources: 

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers: 

00:06 Cybercriminals Beta Test New Attack to Bypass AI Security 

00: 46 'PhantomBlu' Cyberattackers Backdoor Microsoft Office Users 

01:30 Cyberattack Knocks Out Pensacola City Government Phone Lines 

02:09 Nations Direct Mortgage Alerts 83,000 to Personal Data Leaks From December Cyberattack 

02:53 Hackers Exploiting Popular Document Publishing Sites for Phishing Attacks 

03:36 Unverified Claims: Russian Hackers Target US Defense Agency Website 

04:15 Don’t Be Like These 900+ Websites and Expose Millions of Passwords via Firebase 

05:07 133,000+ Vulnerable FortiOS/FortiProxy Instances: Exploitation Started 

05:58 40,000+ Sites Exposed: WordPress Plugin Update Critical – CVE-2024-27956 & CVE-2024-27954 

07:15 The New CISO: Rethinking the Role 

08:02 Preparing Society for AI-Driven Disinformation in the 2024 Election Cycle 

09:57 Research Shows IT and Construction Sectors Hardest Hit By Ransomware 

Additional Resources: 

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers: 

00:06 Fujitsu Found Malware on IT Systems, Confirms Data Breach

00:51 APT28 Hacker Group Targeting Europe, Americas, Asia in Widespread Phishing Scheme

01:41 Hackers Using Sneaky HTML Smuggling to Deliver Malware via Fake Google Sites

02:34 The Aviation and Aerospace Sectors Face Skyrocketing Cyber Threats

03:21 Apex Legends Players Worried About RCE Flaw After ALGS Hacks

04:11 Chinese Earth Krahang Hackers Breach 70 Orgs in 23 Countries

05:17 New DEEP#GOSU Malware Campaign Targets Windows Users with Advanced Tactics

06:35 New Attack Shows Risks of Browsers Giving Websites Access to GPU 

07:14 Fortra Patches Critical RCE Vulnerability in FileCatalyst Transfer Tool

08:01 Over 50,000 Vulnerabilities Discovered in DoD Systems Through Bug Bounty Program

08:58 Three New Critical Vulnerabilities Uncovered in Argo

10:07 Tracking Everything on the Dark Web Is Mission Critical

 Additional Resources: 

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers: 

00:06 Threat Actors Leaked 70,000,000+ Records Allegedly Stolen From AT&T

00:46 Hackers Claim Accessing 740GB of Data from Viber Messaging App

01:25 Pennsylvania’s Scranton School District Dealing With Ransomware Attack

02:15 New Acoustic Attack Determines Keystrokes From Typing Patterns

03:04 “Gitgub” Malware Campaign Targets GitHub Users With RisePro Info-Stealer

03:45 Lazarus Group Hackers Appear to Return to Tornado Cash for Money Laundering

04:27 ChatGPT Side-Channel Attack Has Easy Fix: Token Obfuscation

04:56 Hackers Exploit Aiohttp Bug to Find Vulnerable Networks

05:45 Discontinued Security Plugins Expose Many WordPress Sites to Takeover

06:29 6 CISO Takeaways From the NSA's Zero-Trust Guidance

07:15 The Future is Now: Enterprises Must Adapt Data Management and Security Strategies for the AI Revolution

 Additional Resources: 

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:06  SIM Swappers Now Stealing Phone Numbers From eSIMs

00:52 Meta Sues Former VP After Defection to AI Startup

01:42 RedLine Malware Top Credential Stealer of Last 6 Months

02:21 DarkGate Malware Exploited Recently Patched Microsoft Flaw in Zero-Day Attack

03:01 Tech Support Firms Restoro, Reimage Fined $26 Million for Scare Tactics

03:43 RedCurl Cybercrime Group Abuses Windows PCA Tool for Corporate Espionage

04:20 Ande Loader Malware Targets Manufacturing Sector in North America

05:14 Patch Now: Kubernetes RCE Flaw Allows Full Takeover of Windows Nodes

05:54 Cisco Fixed High-Severity Elevation of Privilege and DoS Bugs

06:55 Critical Vulnerabilities in Arcserve UDP Software Demand Urgent Action

07:33 CVE-2024-22259: Spring Framework Update Fixes High-Severity Flaw

08:14 Shadow AI – Should I be Worried?

09:23 CISA Launches 911 Cybersecurity Hub: Empowering Emergency Responders

10:11 New Report Suggests Surge in SaaS Assets, Employee Data Sharing

Additional Resources: 

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers: 

00:06 Duty Free Americas Claimed by Black Basta Ransom Group 

01:00  Billion-Dollar Boat Seller MarineMax Reports Cyberattack to SEC 

01:39 LockBit Ransomware Affiliate Gets Four Years in Jail, to Pay $860K 

02:20 Feds Seize $1.4 Million of Tech Support Scam Proceeds With the Help of Crypto Firm 

03:02 'PixPirate' RAT Invisibly Triggers Wire Transfers From Android Devices 

03:38 Anonymous Sudan Unleashes InfraShutdown: Alabama Government Agencies Targeted 

04:21 Investment Scams Grow, 13,000 Domains Detected in January 2024 

05:05 Researchers Highlight Google's Gemini AI Susceptibility to LLM Threats 

05:42 Fortinet Patches Critical Vulnerabilities Leading to Code Execution 

06:14 Chipmaker Patch Tuesday: Intel, AMD Address New Microarchitectural Vulnerabilities 

07:14 ChatGPT Plugin Vulnerabilities Exposed Data, Accounts 

08:11 Google Cloud CISO Spots Asymmetric Advantage for AI in Defense 

08:48 LastPass’ CIO Vision for Driving Business Strategy, Innovation 

09:25 IT Leaders Think Immutable Data Storage Is an Insurance Policy Against Ransomware 

Additional Resources: 

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers: 

 

00:06 JetBrains Is Still Mad at Rapid7 for the Ransomware Attacks on Its Customers 

00:47 US, Russia Accuse Each Other of Potential Election Cyberattacks 

01:34 R00TK1T Hacker Group Issues Warning to Nestle in Dark Web Post 

02:13 Over 12 Million Auth Secrets and Keys Leaked on GitHub in 2023 

03:09 Stanford Says Data From 27,000 People Leaked in September Ransomware Attack 

03:58 Three-Quarters of Cyber Incident Victims Are Small Businesses 

04:49 Watch Out: These PyPI Python Packages Can Drain Your Crypto Wallets 

05:33 ChatGPT-Next-Web SSRF Flaw Let Attackers Gain Unauthorized Access 

06:22 Adobe Patches Critical Flaws in Enterprise Products 

07:12 SAP Patches Critical Command Injection Vulnerabilities 

08:11 Study Reveals Top Vulnerabilities in Corporate Web Applications 

08:48 March 2024 Patch Tuesday: Microsoft Fixes Critical Bugs in Windows Hyper-V 

09:22 The CISO Role Is Changing. Can CISOs Themselves Keep Up? 

10:36 4 Security Tips From PCI DSS 4.0 Anyone Can Use 

Additional Resources: 

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter