CISO Headlines

This CISO Daily Update covers:

00:00 Introduction

00:06 Illinois County Leaked Over 470K Critical Voter Documents

00:42 Microsoft Sway Abused in Massive QR Code Phishing Campaign

01:26 Chinese Government Hackers Targeted US Internet Providers With Zero-Day Exploit, Researchers Say

02:13 Cybercriminals Tap Greasy Opal to Create 750M Fake Microsoft Accounts

02:49 Identity of Notorious Hacker USDoD Revealed

03:34 Microsoft Fixes ASCII Smuggling Flaw That Enabled Data Theft from Microsoft 365 Copilot

04:08 Code Execution Vulnerability Found in WPML Plugin Installed on 1M WordPress Sites

04:48 Apache Vulnerability Let Attackers Steal Sensitive Data from Unix Systems

05:35 When Convenience Costs: CISOs Struggle With SaaS Security Oversight

06:20 Lateral Movement: Clearest Sign of Unfolding Ransomware Attack

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Seattle-Tacoma Airport It Systems Down Due to a Cyberattack

00:40 2 TB of Sensitive “ServiceBridge” Records Exposed in Cloud Misconfiguration

01:22 Patelco Credit Union Says Breach Impacts 726k After Ransomware Gang Auctions Data

02:01 500k Impacted by Texas Dow Employees Credit Union Data Breach

02:37 AMD Internal Data Reportedly Offered for Sale

03:15 Researchers Warn of Text Scams That Send Drivers Fake Bills for Highway Tolls

03:59 SonicWall Warns of Critical Access Control Flaw in SonicOS

04:37 Hillstone WAF Flaw Allows Dangerous Command Injection Attacks

05:02 Critical Flaws in Traccar GPS System Expose Users to Remote Attack

05:50 Google Tags a Tenth Chrome Zero-Day as Exploited This Year

06:31 NSA Releases Guide to Combat Living Off the Land Attacks

07:13 Adversaries Love Bots, Short-Lived IP Addresses, Out-of-Band Domains

07:47 GenAI Buzz Fading Among Senior Executives

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Halliburton Forced to Take Systems Offline to Contain Cyberattack

00:42 U.S. Department of Justice Alleges Cybersecurity Failings By Georgia Tech

01:13 Audit Finds Notable Security Gaps in FBI’s Storage Media Management

01:52 Qilin Ransomware Upgrades and Now Steals Google Chrome Credentials

02:21 Microsoft to Host Security Summit After CrowdStrike Disaster

03:01 American Radio Relay League Confirms $1 Million Ransom Payment

03:36 Telegram Founder Pavel Durov Arrested in France for Content Moderation Failures

04:03 U.S. CISA Adds Versa Director Bug to Its Known Exploited Vulnerabilities Catalog

04:43 Dell Power Manager Vulnerability Allow Attackers Gain Unauthorized Access – Patch Now!

05:21 Fraud Tactics and the Growing Prevalence of AI Scams

05:58 The Changing Dynamics of Ransomware as Law Enforcement Strikes

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Oil Industry Giant Halliburton Confirms ‘Issue’ Following Reported Cyberattack

00:46 Google Cloud Leak Linked to Shark Tank Contestant Exposes 83,000

01:27 Financial Firm Fined $850K for Violating SEC Cyber Rules

02:16 U.S. Charges Karakurt Extortion Gang’s “Cold Case” Negotiator

03:00 This Uni Thought It Would Be a Good Idea to Do a Phishing Test With a Fake Ebola Scare

03:37 SolarWinds Fixes Hardcoded Credentials Flaw in Web Help Desk

04:20 Microsoft Confirms August Updates Break Linux Boot in Dual-Boot Systems

05:01 Security Flaws in Dahua Cameras Being Actively Exploited, CISA Warns

05:34 Google Addressed the Ninth Actively Exploited Chrome Zero-Day This Year

06:23 Slack Patches AI Bug That Let Attackers Steal Data From Private Channels

07:03 Hardware Backdoor Discovered in RFID Cards Used in Hotels and Offices Worldwide

07:40 Cisco Patches High-Severity Vulnerability Reported by NSA

08:17 Atlassian Patches Vulnerabilities in Bamboo, Confluence, Crowd, Jira

08:58 Over 3400 High and Critical Cyber Alerts Recorded in First Half of 2024

09:41 GenAI Models Are Easily Compromised

10:24 Ransomware Batters Critical Industries, but Takedowns Hint at Relief

Additional Resources: 

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 CannonDesign Hit by Data Breach: Client and Employee Information Compromised

00:50 Microchip Technology Says IT Incident Impacted Operations

01:27 Arden Claims Service Reports Data Breach, 139,000 Affected

02:16 Thousands of Apps Using AWS ALB Exposed to Attacks Due to Configuration Issue

02:46 Styx Stealer Creator's OPSEC Fail Leaks Client List and Profit Details

03:26 Man Who Hacked Hawaii State Registry to Forge His Own Death Certificate Sentenced to 81 Months

03:58 Microsoft Copilot Studio Vulnerability Led to Information Disclosure

04:39 GitHub Enterprise Server Vulnerable to Critical Auth Bypass Flaw

05:26 LiteSpeed Cache Used in 5 Million Sites Allows Unauthenticated Admin Access

06:11 Critical Vulnerability In OpenBMCs For Servers, Leads To Full Compromise

06:52 Most Ransomware Attacks Now Happen at Night

07:27 Healthcare Hit by a Fifth of Ransomware Incidents

08:13 Average DDoS Attack Costs $6,000 Per Minute

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Cybercriminals Siphon Credit Card Numbers From Oregon Zoo Website

00:46 Columbus Officials Warn Victims, Witnesses After Ransomware Leak of Prosecutor Files

01:21 Carespring Data Breach Exposes Personal and Medical Information of Nearly 77,000 Patients

01:54 Jewish Home Lifecare Notifies 100,000 Victims of Ransomware Breach

02:35 FBI Investigation Confirms that Iran Hackers Behind Trump Campaign Hack

03:17 Digital Wallets Can Allow Purchases With Stolen Credit Cards

03:55 Critical WordPress Plugin RCE Vulnerability Impacts 100k+ Sites

04:37 CISA Warns of Critical Jenkins Vulnerability Exploited in Ransomware Attacks

05:24 F5 Patches High-Severity Vulnerabilities in BIG-IP, NGINX Plus

06:10 Oracle Netsuite Misconfiguration Could Lead to Data Exposure

06:52 Organizations Turn to Biometrics to Counter Deepfakes

07:29 Cybercriminals Exploit File Sharing Services to Advance Phishing Attacks

08:11 Data for Sale: 75% of US House Members Exposed by People Search Sites

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Toyota Allegedly Breached – 240 GB of Data Leaked Online

00:37 Unicoin Staff Locked Out of G-Suite in Mystery Attack

01:21 Computer Engineer Hacks Own Employer, Demands $750K Ransom

02:04 FlightAware Configuration Error Leaked User Data for Years

02:39 National Public Data Tells Officials ‘Only’ 1.3M People Affected by Intrusion

03:16 Microsoft Patches Zero-Day Flaw Exploited by North Korea's Lazarus Group

03:59 Vulnerabilities in Microsoft’s macOS Apps Could Help Hackers Access Microphones and Cameras

04:41 Experts Warn of Exploit Attempt for Ivanti vTM Bug

05:15 New Kubernetes Vulnerability Allows Attackers to Access Clusters Remotely

05:49 Ransomware Rakes In Record-Breaking $450 Million in First Half of 2024

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Ransomware Attack on Flint Affecting City Services as FBI Investigates Incident

00:50 US Bipartisan Committee Urges Investigation Into Chinese Wi-Fi Routers

01:21 Large-Scale Extortion Campaign Targets Publicly Accessible Environment Variable Files (.Env)

02:11 OpenAI Blocks Iranian Influence Operation Using ChatGPT for U.S. Election Propaganda

02:49 National Public Data Confirms a Data Breach

03:22 T-Mobile Fined $60 Million for Breaches of National Security Agreement

03:53 7-Year-Old Pre-Installed Google Pixel App Flaw Puts Millions at Risk

04:29 ArtiPACKED Flaw Exposed GitHub Actions to Token Leaks

05:09 CISA Adds SolarWinds Web Help Desk Bug to Its Known Exploited Vulnerabilities Catalog

05:51 Business and Tech Consolidation Opens Doors for Cybercriminals

06:30 Are 2024 US Political Campaigns Prepared for the Coming Cyber Threats?

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 TD Bank Employee ‘Improperly’ Accessed Customer Data

00:33 The Washington Times Newspaper Claimed by Rhysida Ransomware Cartel

01:10 EFG Companies Breached Through Third-Party VPN

01:54 5,000 AI-Controlled Fake X Accounts Linked to China Disinformation Campaign

02:37 Black Basta Ransomware Gang Linked to a SystemBC Malware Campaign

03:13 A Group Linked to Ransomhub Operation Employs EDR-Killing Tool EDRkillshifter

03:49 Critical Vulnerabilities in IBM QRadar Lets Attackers Trigger Arbitrary Code Remotely

04:22 Vulnerability in Palo Alto Networks Prisma Access Browser Let Attackers Trigger RCE

05:02 Microsoft Disables BitLocker Security Fix, Advises Manual Mitigation

05:36 Thousands of Oracle NetSuite Sites Said to Be Exposing Customer Data

06:09 74% of IT Professionals Worry AI Tools Will Replace Them

06:53 Cyber-criminals Exploited Paris Olympics With Fake Domains

07:30 Ransomware Gangs Rake In More Than $450 Million in First Half of 2024

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter

This CISO Daily Update covers:

00:00 Introduction

00:06 Enzo Biochem Ordered to Cough Up $4.5 Million Over Lousy Security That Led to Ransomware Disaster

00:49 More Hackers Want to Bite Apple: New Malware in High Demand

01:28 DNC Credentials Compromised by 'IntelFetch' Telegram Bot

02:06 Media, Activists, Former USDiplomat Were on Russia-Aligned Phishing Campaigns’ Hit Lists

02:45 Malware Payloads, Tactics Identified in Active AnyDesk and Microsoft Teams Social Engineering Campaign

03:23 Texas Sues GM for Selling Driver Data to Analytics, Insurance Companies

04:01 Russian Who Sold 300,000 Stolen Credentials Gets 40 Months in Prison

04:42 Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero-Days

05:19 SolarWinds Fixes Critical RCE Bug Affecting All Web Help Desk Versions

05:56 Adobe Patches 72 Security Vulnerabilities Across Multiple Products

06:19 Fortinet, Zoom Patch Multiple Vulnerabilities

06:48 ICS Patch Tuesday: Advisories Released by Siemens, Schneider, Rockwell, Aveva

07:26 DDoS Attacks Surge 46% in First Half of 2024, Gcore Report Reveals

Additional Resources:

• Subscribe for daily updates
• Check out our daily newsletter at CISOHeadlines.com and subscribe to get notified!

LINKS

Be sure to check out and subscribe to our other channels to stay updated! 💡

Spotify

YouTube

Apple Podcasts

LinkedIn Newsletter