Link to episode page

This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Nick Espinosa, host, The Deep Dive Radio Show

Thanks to our show sponsor, Nudge Security

Nudge Security discovers new apps, accounts, and data-sharing in real-time and helps guide employees toward secure behaviors. Instead of trying to control everything, we give IT and security teams the visibility and automation they need to secure the Workforce Edge.

All links and the video of this episode can be found on CISO Series.com

 

 

 

 

 

SonicWall announces SMA 100 patches

FBI warns about The Com

Compromised Amazon Q extension deletes everything

Huge thanks to our sponsor, Nudge Security

Nudge Security discovers new apps, accounts, and data-sharing in real-time and helps guide employees toward secure behaviors. Instead of trying to control everything, we give IT and security teams the visibility and automation they need to secure the Workforce Edge.

Find the stories behind the headlines at CISOseries.com.

Goodbye toha, or as they say in Russian, Прощай “Trust the AI," they said. “What could go wrong?” they said Adobe apps advisory activated

Huge thanks to our sponsor, Nudge Security

Trying to squeeze a few more items into your budget? Nudge Security can help by discovering up to TWO YEARS of historical SaaS spend along with usage insights so you can eliminate wasted spend. In fact, Nudge Security customer KarmaCheck was able to recoup 150% of their investment in Nudge within the first 6 months. See where you can save money by starting a free trial at nudgesecurity.com/spend.

Microsoft links Sharepoint ToolShell attacks to Chinese hackers

Russian threat actors target NGOs with new OAuth phishing tactics

Silicon Valley engineer admits theft of US missile tech secrets

Huge thanks to our sponsor, Nudge Security

Nudge Security discovers every SaaS app used in your org, secures configurations, enforces MFA, and manages app-to-app access so you can prevent identity based attacks. Start a free 14-day trial today at NudgeSecurity.com

SharePoint RCE flaws patched and exploited from China

Dell acknowledges World Leaks data breach

$44 million stolen from crypto exchange 

Huge thanks to our sponsor, Nudge Security

Nudge Security discovers every GenAI tool ever used in your org, even those you’ve never heard of. For each tool, you’ll see who introduced it, who else is using it, where it’s integrated into other tools, and a vendor security profile. Get your free GenAI inventory today at NudgeSecurity.com. 

Hewlett Packard warns of hardcoded passwords in Aruba access points

SharePoint zero-day exploited via RCE, no patch available

Russian vodka producer suffers ransomware attack

Huge thanks to our sponsor, Nudge Security

Discover every SaaS account ever created by anyone in your org within minutes of starting a free trial. Harden configs, enforce MFA, revoke risky app-to-app access, and more. Learn more at NudgeSecurity.com

Find the stories behind the headlines at CISOseries.com.

 

Link to episode page

This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Cyrus Tibbs, CISO, PennyMac

Thanks to our show sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

All links and the video of this episode can be found on CISO Series.com

Chinese hackers use Cobalt Strike on Taiwan’s semiconductor sector

Salt Typhoon breaches National Guard and steals network configurations

Congress considers Stuxnet to manage OT threats

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

Find the stories behind the headlines at CISOseries.com.

Google says ‘Big Sleep’ AI tool found bug hackers planned to use Google fixes actively exploited sandbox escape zero day in Chrome China’s cyber sector amplifies Beijing’s hacking of U.S. targets

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

Pentagon welcomes Chinese engineers into its environment

HazyBeacon: It’s not a beer, but it leaves a bitter aftertaste

What the world needs now is another framework

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.