Cyber Security Headlines

Cyber Security Headlines episodes:

• 04.17.2024

  Cisco MFA breach, Bad Bots surge, LockBit 3.0 propagates

  Cisco announces breach of multifactor authentication message provider Bad bots drive 10% annual surge in account takeover attacks LockBit 3.0 variant generates custom, self-propagating malware Thanks to today's episode sponsor, Conveyor Conveyor is the AI security review...

  
• 04.16.2024

  Threads out in Turkey, Palo Alto backdoor, Microsoft' security overhaul

  Meta to close Threads in Turkey Palo Alto fixes backdoor zero-day Details on Microsoft’s security overhaul  Thanks to today's episode sponsor, Conveyor  What are infosec teams measuring these days? More often than not, their impact on sales. ...

  
• 04.15.2024

  U.S. surveillance reauthorization, Roku breach update, Microsoft breach exposed agencies

  House passes reauthorization of U.S. surveillance program Roku says 576,000 accounts compromised in latest security breach Microsoft breach exposed federal agencies Thanks to today's episode sponsor, Conveyor  It’s Conveyor again, the market-leading AI software for answering security questionnaires...

  
• 04.12.2024

  Week in Review: Government hospital warning, Sisence breach, Financial firms lose $12b

  Link to blog post This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Mike Levin, deputy CISO, 3M Thanks to our show sponsor, Vanta When it comes to ensuring your company has top-notch security practices, things can...

  
• 04.12.2024

  Palo Alto patches, CISA’s Sisense warning, GitHub repos gamed

  Palo Alto Networks fixes several DoS vulnerabilities in PAN-OS operating system Sisense breach exposes customers to potential supply chain attack Threat actors gaming GitHub Search Thanks to today's episode sponsor, Vanta The average security pro spends nearly a full...

  
• 04.11.2024

  CISA malware analysis, "hunt forward" missions, Spectre v2

  CISA expands automated malware analysis US Cyber Command launched “hunt forward” missions Spectre v2: Linux Boogaloo  CHECK OUT Capture the CISO season 2 here. Thanks to today's episode sponsor, Vanta The average security pro spends nearly a full workday...

  
• 04.10.2024

  Ukraine cyber head suspended, LG TV vulns, Microsoft exposed passwords

  Ukraine's head of cybersecurity suspended and assigned to combat zone Over 90,000 LG Smart TVs exposed to remote attack Microsoft exposed internal passwords in security lapse Thanks to today's episode sponsor, Vanta The average security pro spends nearly a...

  
• 04.09.2024

  Cyberattack impacts vet firm, data privacy bill movement, DOJ hack exposes thousands

  Cyberattack causes major disruptions for UK vet firm Data privacy bill pushes forward with bipartisan support Department of Justice hack exposes hundreds of thousands Thanks to today's episode sponsor, Vanta The average security pro spends nearly a full workday...

  
• 04.08.2024

  Hospital hack warning, Five Eyes follow-up, NYC municipal hack

  Government warns hospitals of hackers targeting IT help desks U.S. government contractor Acuity responds to alleged Five Eyes breach New York City becomes latest in municipal government hack attempts Thanks to today's episode sponsor, Vanta The average security pro...

  
• 04.05.2024

  Week in Review: Five Eyes breach, Microsoft’s Chinese hack response, AT&T customer breach

  Link to blog post This week’s Cyber Security Headlines – Week in Review is hosted by David Spark with guest Steve Gentry, Advisor, Clari Thanks to our show sponsor, Vanta The average security pro spends nearly a full workday every week just on compliance....

  
• 04.05.2024

  Five Eyes breach, cancer center breach, Pixel zero-day flaw

  Classified Five Eyes data theft announced Cancer center data breach affects 800,000 Android Pixel phone zero-day flaws being exploited by forensic companies Thanks to today's episode sponsor, Vanta The average security pro spends nearly a full workday every week...

  
• 04.04.2024

  Microsoft security failings, NIST NVD backlog, Chrome DBSC beta

  Report criticizes Microsoft’s Chinese hack response NIST needs help with vulnerability backlog Chrome tests feature to prevent session hijacking  Thanks to today's episode sponsor, Vanta The average security pro spends nearly a full workday every week just on compliance....

  
• 04.03.2024

  Cyber incident reporting rule, Google blocks spoofed emails, PandaBuy breach

  CISA releases draft rule for cyber incident reporting Google now blocks spoofed emails for better phishing protection Breach at online shopping platform PandaBuy affects 1.3 million customers Thanks to today's episode sponsor, Vanta The average security pro spends nearly...

  
• 04.02.2024

  Incognito settlement, hallucinated software, phone protocols vulnerable

  Google to delete Incognito tracking data Hallucinated software packages as a security vulnerability FCC investigating phone infrastructure security Thanks to today's episode sponsor, Vanta The average security pro spends nearly a full workday every week just on compliance. With...

  
• 04.01.2024

  AT&T data leak, Linux backdoor discovery, DHS phone data policy

  Data of 73 million AT&T; customers leaked on dark web Accidental Linux backdoor discovery likely prevented thousands of infections DHS expected to stop buying access to your phone info Thanks to today's episode sponsor, Vanta The average security pro...

  
• 03.29.2024

  Week in Review: Spyware boosts zero-days, MFA bombing targets Apple, Facebook snooped Snapchat

  Link to blog post This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Yaron Levi, CISO, Dolby, and sageinsights.io Thanks to our show sponsor, Varonis Ready to reduce your risk without taking any? Try Varonis’ free data...

  
• 03.29.2024

  17 billion records exposed, Treasury FinSec warning, Hot Topic attacks

  17 billion personal records exposed in data breaches in 2023 U.S. Treasury warns financial sector about AI cybersecurity threats Retail chain Hot Topic hit by new credential stuffing attacks Thanks to today's episode sponsor, Varonis Ready to reduce your...

  
• 03.28.2024

  Zero-day rise, SharePoint vulnerability, Facebook sniffs app traffic

  Spyware fuels rise in zero-day exploits CISA warns about Microsoft SharePoint vulnerability  Facebook snooped on encrypted Snapchat traffic Thanks to today's episode sponsor, Varonis Ready to reduce your risk without taking any? Try Varonis’ free data risk assessment. It...

  
• 03.27.2024

  APT31 targets families, UK newspaper attacked, Apple MFA bombing

  APT31 targeting family members to surveil targets Ransomware gang attacks UK newspaper supporting the homeless MFA bombing attacks target Apple users Thanks to today's episode sponsor, Varonis Ready to reduce your risk without taking any? Try...

  
• 03.26.2024

  EU targets tech giants, China bans US tech, US cyber force

  EU targets tech giants with DMA China starts US tech ban in government Think tank calls for US military cyber service Thanks to today's episode sponsor, Varonis Ready to reduce your risk without taking any? Try Varonis’ free data...

  
• 03.25.2024

  New Kimsuky technique, KDE Linux warning, Atlassian critical flaws

  Kimsuky turns to compiled HTML Help files for cyberattacks KDE issues warning after theme wipes Linux user’s files Critical flaw in Atlassian Bamboo data center and server must be fixed immediately Thanks to today's episode sponsor, Varonis Ready to...

  
• 03.22.2024

  Week in Review: McDonald’s outage explained, SIM swap fraud, spyware agreement support

  Link to blog post This week’s Cyber Security Headlines – Week in Review, is hosted by Rich Stroffolino with guest Gerald Auger Ph.D., Chief Content Creator, Simply Cyber Thanks to our show sponsor, Vanta Managing the requirements for modern security programs is...

  
• 03.22.2024

  Microsoft Server crashes, npm package discrepancies, Nemesis marketplace raided

  Microsoft confirms Windows Server issue behind domain controller crashes Over 800 npm packages found with discrepancies Nemesis darknet marketplace raided in Germany-led operation Thanks to today's episode sponsor, Vanta From dozens of spreadsheets and screenshots to fragmented tools and...

  
• 03.21.2024

  Water task force, Loop DoS attacks, GitHub vulnerability fixer

  US plans Water Sector Cybersecurity Task Force Loop DoS attack exploits the infinite regress of UDP GitHub tool uses AI to fix vulnerabilities Thanks to today's episode sponsor, Vanta From dozens of spreadsheets and screenshots to fragmented tools and...

  
• 03.20.2024

  Mid-stream ESports hack, System glitch costs millions, LockBit reemerges with vengeance

  Mid-stream hack postpones ESports league Bank loses $40 million after “systems glitch” LockBit reemerges with vengeance Thanks to today's episode sponsor, Vanta From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for...

  
• 03.19.2024

  Change Healthcare payout, FTC probe into Reddit, Japanese tech giant breached

  UnitedHealth fronts over $2 billion in recovery efforts Spyware agreement gains more international support FTC probes Reddit's AI data licensing ahead of IPO Thanks to today's episode sponsor, Vanta From dozens of spreadsheets and screenshots to fragmented tools and...

  
• 03.18.2024

  McDonald’s outage update, Chrome URL protection, Birmingham Alabama outage

  Global McDonald’s outage blamed on third-party vendor, not cyberattack Google adds real-Time URL protection for Chrome Network outages hit Birmingham Alabama Thanks to today's episode sponsor, Vanta From dozens of spreadsheets and screenshots to fragmented tools and manual security...

  
• 03.15.2024

  Week in Review: Russian Microsoft exfiltration, JetBrains Rapid7 feud, Change Healthcare fallout

  Link to blog post This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Alexandra Landegger, Executive Director and CISO Collins Aerospace Thanks to our show sponsor, Vanta From dozens of spreadsheets and screenshots to fragmented tools and...

  
• 03.15.2024

  Change Healthcare fallout, Fortinet SQL warning, Yacht company breach

  Change Healthcare - AHA asks for aid, HHS questions HIPAA compliance Fortinet warns of severe SQLi vulnerability in FortiClientEMS software Yacht company MarineMax announces cyberattack Thanks to today's episode sponsor, Vanta From dozens of spreadsheets and screenshots to fragmented...

  
• 03.14.2024

  Gemini vulnerabilities, NYT-OpenAI drama, GitHub leak report

  Researchers find vulnerabilities in Gemini New York Times denies it “hacked” OpenAI for lawsuit Leaked GitHub secrets up 28% Thanks to today's episode sponsor, Vanta From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing...

  
• 03.13.2024

  LockBit claims hack, CISA understaffed, US and Russia election concerns

  LockBit takes credit for hacking South African pension fund CISA’s OT attack response team understaffed US and Russia accuse each other of potential election cyberattacks Thanks to today's episode sponsor, Vanta From dozens of...

  
• 03.12.2024

  Roku forces reset, French agencies targeted, Fintech firm taken offline

  Roku forces reset after 15,000 accounts compromised French government agencies targeted in “unprecedented” attacks Fintech firm taken offline by ransomware attack Thanks to today's episode sponsor, Vanta From dozens of spreadsheets and screenshots to fragmented tools and manual security...

  
• 03.11.2024

  Microsoft breach update, CISA flags JetBrains, ChatGPT creds sale

  Microsoft says Russian hackers breached its systems, accessed source code CISA adds JetBrains TeamCity bug to its KEV catalog Over 225,000 compromised ChatGPT credentials for sale Thanks to today's episode sponsor, Vanta From dozens of spreadsheets and screenshots to...

  
• 03.08.2024

  Week in Review: German Webex gaffe, Google engineer indicted, Cloudflare’s AI firewall

  Link to blog post This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest David Cross, SVP/CISO, Oracle. Also check out David’s travel blog, DavidCrossTravels.com Thanks to our show sponsor, Conveyor Conveyor is the AI security review...

  
• 03.08.2024

  FlipperZero attacks Teslas, Google engineer indicted, PetSmart attack warning

  Flipper Zero WiFi attack can unlock and steal Tesla cars Former Google engineer indicted for stealing AI secrets for Chinese companies PetSmart warns customers of credential stuffing attack Thanks to today's episode sponsor, Conveyor Conveyor is the...

  
• 03.07.2024

  Online fraud hits record losses, states urge Meta to crack down on scammers, Apple issues update for zero-day flaw

  Online fraud hits record losses States urge Meta to crack down on scammers Apple issues update for zero-day flaw Thanks to today's episode sponsor, Conveyor Happy Thursday. Are you tired of us talking about how Conveyor’s AI...

  
• 03.06.2024

  US cyber strategy update, spyware sanctions, ALPHV exits

  US cybersecurity strategy update on the way US Treasury issues first spyware sanctions UK denies responsibility for ALPHV takedown Thanks to today's episode sponsor, Conveyor Conveyor is the only GPT-powered customer trust portal that automates the entire...

  
• 03.05.2024

  North Korea semiconductor hacks, ALPHV goes dark, China AI vouchers

  North Korea targets semiconductor industry ALPHV infrastructure goes dark China to offer computing vouchers to AI startups Thanks to today's episode sponsor, Conveyor AI is getting pretty smart so you shouldn’t settle for mediocre security questionnaire automation software...

  
• 03.04.2024

  NSO code verdict, Change Healthcare fallout, law firm breach

  NSO Group to ordered to give Pegasus code to WhatsApp Change Healthcare confirms BlackCat, Schumer asks for aid Law firm announces data breach affecting 325,000 people Thanks to today's episode sponsor, Conveyor We’ve got a returning sponsor this...

  
• 03.01.2024

  Week in Review: GenAI BEC explodes, NIST updates framework, vending machine gaffe

  Link to blog post This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Russ Ayres, SVP of Cyber & Deputy CISO, Equifax Thanks to our show sponsor, Egress People are the biggest risk to your organization’s...

  
• 03.01.2024

  Cencora pharma breach, Gen-AI explodes BEC, Chinese doorbell warning

  Pharma giant Cencora announces data breach GenAI drives surge in BEC attacks Popular video doorbell easy hijacked Thanks to today's episode sponsor, Egress People are the biggest risk to your organizations' security and they are most vulnerable when...

  
• 02.29.2024

  EO limits PII, Australia's espionage struggle, Lazarus zero-day

  Biden signs order limiting the sale of personal data Australia claims its seeing unprecedented “foreign interference” Lazarus Group targeting Windows and PyPi Thanks to today's episode sponsor, Egress People are the biggest risk to your organizations' security and...

  
• 02.28.2024

  NIST framework 2.0, Optum linked to BlackCat, ScreenConnect exploitations continue

  NIST releases cybersecurity framework 2.0 Optum attack linked to BlackCat ransomware ScreenConnect exploitations continue Thanks to today's episode sponsor, Egress People are the biggest risk to your organizations' security and they are most vulnerable when using email. ...

  
• 02.27.2024

  Cyber Security Headlines: SVR tactics, brand spamming, steel giant cyberattack

  SolarWinds attackers changing tactics Brand domains used in spam operation Steel giant hit with cyberattack Thanks to today's episode sponsor, Egress People are the biggest risk to your organizations' security and they are most vulnerable when using email....

  
• 02.26.2024

  Police taunt LockBit, PayPal’s cookie patent, vending machine controversy

  British police taunt LockBit administrator PayPal files patent for new stolen cookies detector Vending machine crash reveals face recognition tech  Thanks to today's episode sponsor, Egress People are the biggest risk to your organizations' security and they are...

  
• 02.23.2024

  Week in Review: LockBit gets bitten, airline bot gaffe, exploding car keys

  Link to blog post This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Thom Langford, CISO, Velonetic Thanks to our show sponsor, Conveyor Conveyor AI is so good, it can now autofill OneTrust portal questionnaires...

  
• 02.23.2024

  LockBit’s thwarted upgrade, AT&T’s massive outage, Change Healthcare cyberattack

  LockBit was building next gen encryptor before takedown Thousands of wireless customers suffer outage Prescription delays due to Change Healthcare cyberattack Thanks to today's episode sponsor, Conveyor Conveyor, the security questionnaire automation software one of their customers...

  
• 02.22.2024

  LockBit gang doesn’t keep its word, the LockBit bounty, White House tackles U.S. maritime threats

    Thanks to today's episode sponsor, Conveyor Happy Thursday. Are you tired of us talking about how Conveyor’s AI can now autofill OneTrust security questionnaires in one-click? Well, we’ll stop talking about it if you come talk to...

  
• 02.21.2024

  LockBit update, Signal usernames, NSA Cyber Director retires

  LockBit takedown update Signal now lets users keep phone numbers private NSA Cybersecurity Director Rob Joyce to retire Thanks to today's episode sponsor, Conveyor No more portal scaries. Conveyor just launched AI autofill of...

  
• 02.20.2024

  LockBit disrupted, Cactus leaks Schneider data, ALPHV claims financial attacks

  LockBit disrupted by global police operation Cactus leaks Schneider Electric data on dark web ALPHV gang takes credit for LoanDepot, Prudential attacks Thanks to today's episode sponsor, Conveyor Conveyor, the security questionnaire...