CISO Headlines

This CISO Daily Update covers:

00:00 Introduction

00:06 MoneyGram Says Cyber Incident Causing Network Outages

00:31 Ransomware Attack on Kansas County Exposed Sensitive Info of Nearly 30,000 Residents

01:06 Cybersecurity Incident Affects Arkansas City Water Treatment Facility

01:43 Twilio Purportedly Breached, Nearly 12K Call Records Compromised

02:13 Kaspersky Users Shocked by Automatic Antivirus Replacement Without Explicit Permission

02:54 AI-Generated Malware Found in the Wild

03:31 Telegram Will Provide User Data to Law Enforcement in Response to Legal Requests

04:08 Cyberthreats to Railroads Loom as Industry and TSA Grow an Uneasy Partnership

04:45 Apache Tomcat Vulnerability Lets Attackers Trigger Dos Attack

05:16 Critical Unauthenticated RCE Flaw Impacts all GNU/Linux systems

05:52 Researcher Details Cisco Smart Licensing that Lets Attacker Control Device

06:28 10 Nasty Software Bugs Put Thousands of Fuel Storage Tanks at Risk of Cyberattacks

07:10 MFA Bypass Becomes a Critical Security Issue as Ransomware Tactics Advance

07:53 65% of Websites Are Unprotected Against Simple Bot Attacks

08:35 14 Million Patients Impacted by US Healthcare Data Breaches in 2024

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Hackers Posed as Google Support to Steal $243 Million in Crypto

00:41 Man Scams $4M From Mostly Elderly Victims

01:19 Android Malware ‘Necro’ Infects 11 Million Devices via Google Play

01:56 Fragmented Cybersecurity Standards Leave Ohio Cities Exposed

02:37 Critical Flaw in Microchip ASF Exposes IoT Devices to Remote Code Execution Risk

03:12 ESET Patches Privilege Escalation Vulnerabilities in Windows, macOS Products

03:59 Versa Networks Patches Vulnerability Exposing Authentication Tokens

04:41 Paid Open-Source Maintainers Spend More Time on Security

05:17 Microsoft Names Deputy CISOs, Flushes Dead Accounts as Part of Internal Security Overhaul

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 One-Third of the US Population’s Background Info Is Now Public

00:38 Dell Investigates Data Breach Claims After Hacker Leaks Employee Info

01:17 Disney Ditching Slack After Massive July Data Breach

01:52 Ascension’s Financial Comeback Stalled by Costly Cyberattack, Resulting in $1.8 Billion Loss

02:43 Threat Actor IntelBroker Allegedly Claims Leak of Deloitte Internal Communications

03:10 Hertz Car Rental Platform Leaks 60,000 Insurance Claim Reports

03:49 Walmart Customers Accused of Drug Trafficking in a Google Ads Scam

04:22 1 PoC Exploit for Critical RCE Flaw, but 2 Patches From Veeam

05:00 0-Click RCE Vulnerability in MediaTek Wi-Fi Chipsets Allows Remote Exploitation

05:41 CISA Releases Six Advisories for Industrial Control Systems

06:31 US Cyberspace Solarium Commission Outlines Ten New Cyber Policy Priorities

07:17 Cybersecurity Skills Gap Leaves Cloud Environments Vulnerable

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 U.S. Taxpayer Data at Risk? LockBit Ransomware Claims Attack on IRS-Authorized eFile

00:35 Hackers Demand $6 Million for Files Stolen From Seattle Airport Operator in Cyberattack

01:10 Attention Travelers! Beware of Booking.com Themed Phishing Attacks

01:50 Microsoft: Vanilla Tempest Hackers Hit Healthcare With INC Ransomware

02:24 Suspects Behind $230 Million Cryptocurrency Theft Arrested in Miami

03:00 Patch This Critical Auth Bypass Flaw (CVE-2024-45488)

03:42 GitLab Patches Critical SAML Authentication Bypass Flaw in CE and EE Editions

04:20 Atlassian Patches Vulnerabilities in Bamboo, Bitbucket, Confluence, Crowd

04:57 CISA Adds Microsoft Windows, Apache HugeGraph-Server, Oracle JDeveloper, Oracle WebLogic Server, and Microsoft SQL Server Bugs to Its Known Exploited Vulnerabilities Catalog

05:43 Ivanti Warns of Another Critical CSA Flaw Exploited in Attacks

06:24 Security Leaders Consider Banning AI Coding Due to Security Risks

06:57 DOJ, FBI Need Better Metrics for Tracking Ransomware Disruption Efforts, Audit Finds

07:47 Insecure APIs and Bot Attacks Cost Global Firms $186bn

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Hackers Breaching Construction Firms via Specialized Accounting Software

00:59 New "Raptor Train" IoT Botnet Compromises Over 200,000 Devices Worldwide

01:33 Chrome Extension Hides Malware to Steal Crypto: New Operation Uncovered

02:06 Think Twice Before You Click: This Captcha Might Steal Your Money  

02:34 Google Street View Images Used For Extortion Scams

03:10 AT&T Reaches $13 Million FCC Settlement Over Massive 2023 Data Breach

03:46 California Enacts Laws Regulating Use of Deepfakes in Election Ads

04:24 Suffolk County Ransomware Attack Linked to Lack of Planning, Ignored Warnings

05:03 Patch Issued for Critical VMware vCenter Flaw Allowing Remote Code Execution

05:49 Chrome 129 Patches High-Severity Vulnerability in V8 Engine

06:23 Microsoft Warns Of Windows Kernel Vulnerability Exploitation

06:53 0.0.0.0 Day Vulnerability Puts Millions of Local Networks at Risk

07:30 Windows MiniFilter Hack: Easily Bypass EDR Security

08:07 The Proliferation of Non-Human Identities

08:41 Critical Infrastructure at Risk From Email Security Breaches

09:19 Infostealers: An Early Warning for Ransomware Attacks

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Owner of Only US Platinum Mine Confirms Data Breach After Ransomware Claims

00:48 1,000+ ServiceNow Instances Leaking Corporate Data Via Knowledge Bases

01:26 Chinese Hacker Targeted NASA, U.S. Military to Steal Critical Software

02:01 Ransomware Gangs Now Abuse Microsoft Azure Tool for Data Theft

02:41 CISA Urges Software Devs to Weed Out XSS Vulnerabilities

03:21 Apple iOS 18 Released with Fixes for 32 Security Vulnerabilities

03:54 U.S. CISA Adds Microsoft Windows MSHTML Platform and Progress WhatsUp Gold to Its Known Exploited Vulnerabilities Catalog

04:46 PKfail Secure Boot Bypass Remains a Significant Risk Two Months Later

05:30 Hospitals Need “Tribal Approach” to Protect Against Hackers, Says Expert

06:10 CVE Backlog Update: The NVD Struggles as Attackers Change Tactics

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 88,000 Impacted by Access Sports Data Breach Resulting From Ransomware Attack

00:36 DeltaPrime Suffers $5.98M Loss as Hacker Exploits Admin Key on Arbitrum

01:13 Advanced Phishing Attacks Put X Accounts at Risk

01:49 US Cracks Down on Spyware Vendor Intellexa With More Sanctions

02:25 Prison Just Got Rougher as Band of Heinously Violent Cybercrims Sentenced to Lengthy Stints

03:07 Medusa Ransomware Exploiting Fortinet Flaw For Sophisticated Attacks

03:50 Azure API Management Vulnerability Let Users Escalate Privileges

04:27 Google Fixes GCP Composer Flaw That Could've Led to Remote Code Execution

05:04 Microsoft Confirms Second 0-Day Exploited by Void Banshee Apt (CVE-2024-43461)

05:45 SolarWinds Fixed Critical RCE CVE-2024-28991 in Access Rights Manager

06:22 D-Link Fixes Critical RCE, Hardcoded Password Flaws in WiFi 6 Routers

06:57 Trends and Dangers in Open-Source Software Dependencies

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Tennessee School District Loses $3.4 Million to a Fake Curriculum Vendor

00:47 Port of Seattle Confirms August Cyberattack by Rhysida Ransomware

01:25 Microsoft Vows to Prevent Future CrowdStrike-Like Outages

02:02 FBI Tells Public to Ignore False Claims of Hacked Voter Data

02:39 23andMe Pledges $30 Million to the 6.4 Million People Affected by Data Breach

03:20 Apple Suddenly Drops NSO Group Spyware Lawsuit

03:58 Ivanti Cloud Service Appliance Flaw Is Being Actively Exploited in the Wild

04:37 Citrix Workspace App Vulnerabilities Allow Privilege Escalation Attacks

05:23 Apple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers

06:05 Progress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw

06:46 Stolen Account Info Still Chief Risk for Federal Agencies, Annual CISA Audit Finds

07:30 Organizations Still Don’t Know How to Handle Non-Human Identities

08:12 Cyber Insurance Set for Explosive Growth

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Fortinet Confirms Data Breach After Hacker Claims to Steal 440GB of Files

00:46 Chinese-Made Port Cranes in US Included ‘Backdoor’ Modems, House Report Says

01:23 Beware: New Vo1d Malware Infects 1.3 Million Android TV Boxes Worldwide

02:01 Healthcare Giant to Pay $65M Settlement After Crooks Stole and Leaked Nude Patient Pics

02:43 Hacker Tricks ChatGPT Into Giving Out Detailed Instructions for Making Homemade Bombs

03:19 Feds Seize 350 Websites Trafficking Counterfeit Glock Silencers From China

04:01 GitLab Warns of Critical Pipeline Execution Vulnerability

04:47 Palo Alto Networks Patches Dozens of Vulnerabilities

05:28 Cisco Patches High-Severity Vulnerabilities in Network Operating System

06:12 Schools Face Million-Dollar Bills as Ransomware Rises

06:52 US Utilities Facing Escalating Cyberattacks

07:32 Open Source Updates Have 75% Chance of Breaking Apps

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Columbus City Cyberattack: Feds Lead Probe as Council Vows Transparency

00:43 Data Breach at Golf Course Management Firm KemperSports Impacts 62,000

01:24 Developers Beware: Lazarus Group Uses Fake Coding Tests to Spread Malware

02:11 Hackers Use Fake Domains to Trick Trump Supporters in Trading Card Scam

02:52 Intel Informs Customers About Over a Dozen Processor Vulnerabilities

03:33 Chrome 128 Update Resolves High-Severity Vulnerabilities

04:16 ICS Patch Tuesday: Advisories Published by Siemens, Schneider, ABB, CISA

05:00 Researchers Hacked EV Car Chargers To Execute Arbitrary Code

05:45 Rogue WHOIS Server Gives Researcher Superpowers No One Should Ever Have

06:24 Cybernews Business Digital Index Reveals Major Shortcomings in Corporate Customer Data Security

07:07 So You Paid a Ransom Demand … and Now the Decryptor Doesn’t Work

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter