CISO Headlines

This CISO Daily Update covers:

00:00 Introduction

00:06 Data Leak Exposes 14,000 US Medical Professionals: What We Know So Far

00:50 Threat Actors Allegedly Claiming Leak of Capgemini Data

01:17 DoJ Distributes $18.5m to Western Union Fraud Victims

01:56 New PIXHELL Attack Exploits Screen Noise to Exfiltrates Data from Air-Gapped Computers

02:38 NoName Ransomware Gang Deploying RansomHub Malware in Recent Attacks

03:18 Ivanti Fixes Maximum Severity RCE Bug in Endpoint Management Software

03:58 U.S. CISA Adds SonicWall SonicOS, ImageMagick and Linux Kernel Bugs to Its Known Exploited Vulnerabilities Catalog

04:41 Gallup Poll Bugs Open Door to Election Misinformation

05:24 SAP Releases 16 New Security Notes on September 2024 Patch Day

06:14 Adobe Patches Critical, Code Execution Flaws in Multiple Products

06:57 Microsoft September 2024 Patch Tuesday Fixes 79 Flaws, Including 4 Zero-Days

07:43 Massive Spike in Crypto Fraud: FBI Reports Over $5.6 Billion Losses in 2023

08:28 Study Finds Excessive Use of Remote Access Tools in OT Environments

09:14 2024 U.S. Election: CISA Releases Cyber and Physical Security Guidelines for Officials

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Cyber-Attack on Payment Gateway Exposes 1.7 Million Credit Card Details

00:39 Highline Public Schools Hit by Cyberattack, Classes Canceled

01:13 Nearly 1 Million Wisconsin Medicare Users Had Information Leaked in MOVEit Breach

01:48 In Latest Check-In, Spy Agencies Describe ‘Ramp Up’ in Election Influence

02:30 Two Arrested by FBI for Credit Card Fraud Could Face 20 Years in Prison

03:07 U.S. Offers $10 Million for Info on Russian Cadet Blizzard Hackers Behind Major Attacks

03:44 Progress Software Fixed a Maximum Severity Flaw in LoadMaster

04:26 Critical Vulnerabilities Disclosed in IBM webMethods Integration Server

05:02 Kibana Vulnerabilities Let Attackers Execute Arbitrary Code

05:34 Akira Ransomware Actively Exploiting SonicWall Firewall RCE Vulnerability

06:19 End of an Era: Security Budget Growth Slows Down

06:58 DDoS Attacks Double With Governments Most Targeted

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Car Rental Company Avis Discloses a Data Breach

00:43 Exposed: Russian Military Unit 29155 Does Digital Sabotage, Espionage

01:24 Lowe’s Home Warehouse Employees Targeted in Google Ad Phish

02:01 Sextortion Scam Now Use Your “Cheating” Spouse’s Name as a Lure

02:39 New Rambo Attack Steals Data Using RAM in Air-Gapped Computers

03:20 New Malware Shakes macOS Security Paradigm – Hackers Eying iPhones Next

03:57 West Virginia Law Enforcement Sues Data Broker for Publishing Personal Information Online

04:39 U.S. CISA Adds Draytek VigorConnect and Kingsoft WPS Office Bugs to Its Known Exploited Vulnerabilities Catalog

05:25 A Flaw in WordPress LiteSpeed Cache Plugin Allows Account Takeover

06:09 SonicWall Warns That SonicOS Bug Exploited in Attacks

06:48 CISA Flags ICS Bugs in Baxter, Mitsubishi Products

07:34 Apache OFBiz Team Patches Critical RCE Vulnerability (CVE-2024-45195)

08:16 Veeam Security Bulletin Fixes Critical Vulnerabilities for Backup & Replication, Veeam ONE and More

08:59 GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware

09:44 83% of Organizations Experienced at Least One Ransomware Attack in the Last Year

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Microchip Technology Confirms Theft of Employee Data

00:44 Planned Parenthood May Have Been Breached By RansomHub Group

01:14 North Carolina Man Swindles $10M in AI Music Scheme

01:48 Two Nigerians Sentenced to Prison in US for BEC Fraud

02:22 US Indicts Two RT Employees for Alleged Russian Disinformation Effort

03:09 US Targets Russian Election Influence Operation With Charges, Sanctions, Domain Seizures

03:50 Cisco Warns of Critical Vulnerabilities in Smart Licensing Utility

04:26 DrayTek Vulnerabilities Added to CISA KEV Catalog Exploited in Global Campaign

05:06 Cisco Systems Manager for Windows Vulnerability Let Attackers Escalate Privilege

05:45 Veeam Releases Security Updates to Fix 18 Flaws, Including 5 Critical Issues

06:26 LiteSpeed Cache Bug Exposes 6 Million WordPress Sites to Takeover Attacks

07:05 Security Budgets Come Under Pressure as “Hypergrowth” Ends

07:42 The AI Wild West: Unraveling the Security and Privacy Risks of GenAI Apps

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 FBI: North Korea Aggressively Hacking Cryptocurrency Firms

00:49 The Government Isn’t Ready for Cyber Chaos in the Food and Agriculture Sector

01:29 Indicted Pair of Foreign Nationals Were Behind Swatting Attack on CISA Director

01:58 CEO's Arrest Will Likely Not Dampen Cybercriminal Interest in Telegram

02:36 Spamouflage Trolls Pretend to Be American Patriots on X, TikTok Ahead of US Presidential Election

03:13 Revival Hijack Supply-Chain Attack Threatens 22,000 PyPI Packages

03:53 Cicada Ransomware May Be a BlackCat/ALPHV Rebrand and Upgrade

04:35 Vulnerability Allows Yubico Security Keys to Be Cloned

05:13 Android’s September 2024 Update Patches Exploited Vulnerability

05:53 PoC Exploit Released for 0-Day Windows Kernel Privilege Escalation Vulnerability

06:28 RomCom Hackers Exploit Microsoft Office Zero-Day to Spread Ransomware

07:04 Initial Access Brokers Target $2bn Revenue Companies

07:25 White House Addresses BGP Vulnerabilities in New Internet Routing Security Roadmap

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Cyberattack Hits Shoshone-Bannock Tribes: Key Services Unaffected, Recovery in Progress

00:49 Leaked Docs Expose Media Giant’s Secret Listening Software

01:29 Oil Titan Halliburton Confirms Data Was Stolen in Cyberattack

02:04 Ex-Engineer Charged in Missouri for Failed $750,000 Bitcoin Extortion Attempt

02:49 New Cyberattack Targets Industrial Automation Sector with Malware

03:35 Beware of New Phishing Attack That Mimics ScreenConnect and Zoom  Chrome 128 Updates Patch High-Severity Vulnerabilities

04:15 Chrome 128 Updates Patch High-Severity Vulnerabilities

04:57 VMware Patches High-Severity Code Execution Flaw in Fusion

05:41 D-Link Says It Is Not Fixing Four RCE Flaws in DIR-846W Routers

06:20 Canonical Addresses Critical Linux Kernel AWS Vulnerabilities with New Patches

06:56 Vulnerabilities in Microsoft Apps for macOS Allow Stealing Permissions

07:44 A Third of Organizations Suffered a SaaS Data Breach This Year

08:16 Active Ransomware Groups Surge by 56% in 2024

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Freight Forwarder JAS Worldwide Restores Operations After Cyberattack

00:34 Business Services Giant CBIZ Discloses Customer Data Breach

01:06 Tracelo Location Tracker Data Breach: 1.4 Million Users’ Data Dumped Online

01:36 Verkada Facing $3m Penalty After Hackers Viewed Sensitive Video Footage

02:28  Hackers Poison Google Search Results by Spreading Malware as Spoofed VPN Solution

03:06 CrowdStrike Faces Onslaught of Legal Action From Faulty Software Update

03:44 New ManticoraLoader Malware Targeting Citrix Users to Steal Data

04:25 Hacktivist Group Exploit WinRAR Vulnerability to Encrypt Windows & Linux

05:07 Godzilla Fileless Backdoor Exploits Atlassian Confluence Vulnerability CVE-2023-22527

05:51 Keeping Up With Automated Threats Is Becoming Harder

06:32 Ransomware Crisis Deepens as Attacks and Payouts Rise

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 US Agencies Warn Against Ransomware Group Behind Hundreds of Attacks in Recent Months

00:54 GitHub Comments Abused to Push Password Stealing Malware Masked as Fixes

01:34 Researcher Sued for Sharing Data With Media That Ransomware Stole

02:15 New Voldemort Malware Uses Google Sheets to Target Key Sectors Globally

02:48 Intel Claps Back at Report of SGX Key Theft

03:24 Chase Bank “Glitch” Leaves Customers with Negative Balances

04:02 North Korean Hackers Deploy FudModule Rootkit via Chrome Zero-Day Exploit

04:46 Critical Vulnerabilities in Progress Software’s WhatsUp Gold Expose Systems to Severe Risks

05:31 Fortra Patches Critical Vulnerability in FileCatalyst Workflow

06:14 An Air Transport Security System Flaw Allowed Bypass of Airport Security Screenings

06:59 Published Vulnerabilities Surge by 43%

07:35 Cyber Threats That Shaped the First Half of 2024

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 IT Engineer Charged For Attempting to Extort Former Employer

00:54 Hackers Calling Employees to Steal VPN Credentials from US Firms

01:34 Intel Officials Say They Anticipate More Hacking Attempts as US Election Nears

02:08 Telegram CEO Pavel Durov Charged in France for Facilitating Criminal Activities

03:05 California Passes Landmark Bill Requiring Easier Data Sharing Opt Outs for Consumers

03:48 Unpatched CCTV Cameras Exploited to Spread Mirai Variant

04:28 Russian Hackers Exploit Safari and Chrome Flaws in High-Profile Cyberattack

05:18 Proof-of-Concept Code Released for Zero-Click Critical Windows Vuln

05:58 Cisco NX-OS Software Vulnerability Let Attackers Trigger DoS Condition

06:45 Attackers Exploit Critical Atlassian Confluence Flaw for Cryptojacking

07:32 Surge in New Scams as Pig Butchering Dominates

08:10 Cybersecurity Spending to Surge by 15% to $212 Bn in 2025

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 DICK’s Sporting Goods Says Confidential Data Exposed in Cyberattack

00:45 Play Ransomware Hackers Claim Attack on US Manufacturer Microchip Technology

01:28 Almost a Million Affected by Young Consulting Breach, BlackSuit Ransomware Claims Responsibility

02:13 Seattle-Tacoma Intl Airport Cyberattack Triggers Handwritten Boarding Passes

02:47 Muted Applause: Leading Software Testing Firm Leaves Credentials Vulnerable

03:28 US Marshals Say Data Posted by Ransomware Gang Not From ‘New or Undisclosed Incident’

04:09 Woman Uses AirTags to Nab Alleged Parcel-Pinching Scum

04:43 US Offers $2.5M Reward for Belarusian Man Involved in Mass Malware Distribution

05:31 U.S. CISA Adds Apache OFBiz Bug to Its Known Exploited Vulnerabilities Catalog

06:15 Fortra Issues Patch for High-Risk FileCatalyst Workflow Security Vulnerability

07:05 BlackByte Ransomware Exploits VMware ESXi Flaw in Latest Attack Wave

07:46 Apple, TikTok, Google, and Facebook Give Your Data to Law Enforcement Up to 80% of the Time

08:32 Cybercriminals Capitalize on Travel Industry’s Peak Season

09:12 Old Methods, New Technologies Drive Fraud Losses

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter