Cybersecurity Headlines

Polonium APT targets Israel with a new custom backdoor dubbed PapaCreep

RSA Conference reveals CISO-Board relationships

UK government urges action to enhance supply chain security

Thanks to today's episode sponsor, Noname Security

Prevent API attacks in real-time with automated AI and ML-based detection from Noname Security. Monitor API traffic for data leakage, data tampering, data policy violations, suspicious behavior, and API security attacks. Integrate with your existing IT workflow management system like Jira, ServiceNow, or Slack for seamless remediation. Learn more at nonamesecurity.com/runtime-protection

For the stories behind the headlines, head to CISOseries.com.

Npm timing attack could impact supply chain

Legit software used to spread malicious WhatsApp mod

Mango Markets hit by $100 million hack

Thanks to today's episode sponsor, Noname Security

Are you sure your APIs are secure? Noname Security discovers all the APIs running on your network and analyzes them to spot design flaws, misconfigurations, and vulnerabilities. You can even catalog sensitive data and quickly see how many APIs are able to access credit card data, phone numbers, SSNs, and other sensitive PII data. Learn more at nonamesecurity.com/posture-management

UK warns of Chinese global security threat

Toyota data leak impacts 300,000 customers

CISOs at risk of being overworked

Thanks to today's episode sponsor, Noname Security

Stop API vulnerabilities before production with Noname Security. Automatically run over 100 dynamic tests that simulate malicious traffic, including the OWASP API Top Ten. Integrate with your existing CI/CD pipelines and tools, such as Jenkins and Postman, as well as all your ticketing and workflow tools such as ServiceNow, Slack, and Jira. Learn more at nonamesecurity.com/active-testing

For the stories behind the headlines, head to CISOseries.com

Finger heat can leak your password

US airport sites targeted by KillNet

Intel confirms UEFI leak

Thanks to today's episode sponsor, Noname Security

Prevent API attacks in real-time with automated AI and ML-based detection from Noname Security. Monitor API traffic for data leakage, data tampering, data policy violations, suspicious behavior, and API security attacks. Integrate with your existing IT workflow management system like Jira, ServiceNow, or Slack for seamless remediation. Learn more at nonamesecurity.com/runtime-protection

Fortinet warns admins to patch critical auth bypass bug immediately

Windows 11 22H2 errors break provisioning

Security chiefs fear 'CISO scapegoating' following Uber-Sullivan verdict

Thanks to today's episode sponsor, Noname Security

Are you sure your APIs are secure? Noname Security discovers all the APIs running on your network and analyzes them to spot design flaws, misconfigurations, and vulnerabilities. You can even catalog sensitive data and quickly see how many APIs are able to access credit card data, phone numbers, SSNs, and other sensitive PII data. Learn more at nonamesecurity.com/posture-management

For the stories behind the headlines, head to CISOseries.com.

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, October 3-7, is hosted by Sean Kelly, with our guest, Patrick Benoit, VP, Global Cyber, GRC/BISO, CBRE

Thanks to this week's episode sponsor, Hunters

Hunters is a SaaS platform, purpose built for Security Operation teams. Providing unlimited data ingestion and normalization at a predictable cost, Hunters helps SOC teams mitigate real threats faster and more reliably than SIEM. Visit Hunters.ai to learn more.

All links and the video of this episode can be found on CISO Series.com

Former Uber security chief found guilty of data breach coverup

Optus confirms 2.1 million ID numbers exposed in data breach

Retailer Easylife fined £1.5m for data protection breaches

Thanks to today's episode sponsor, Hunters

Hunters is a SaaS platform, purpose built for Security Operation teams. Providing unlimited dataingestion and normalization at a predictable cost, Hunters helps SOC teams mitigate real threats faster and more reliably than SIEM. Visit Hunters.ai to learn more.

For the stories behind the headlines, head to CISOseries.com.

CommonSpirit Health hit with "IT security issue"

MySQL servers backdoored

Fraud hitting P2P payment apps

Thanks to today's episode sponsor, Hunters

Hunters is a SaaS platform, purpose built for Security Operation teams. Providing unlimited dataingestion and normalization at a predictable cost, Hunters helps SOC teams mitigate real threats faster and more reliably than SIEM. Visit Hunters.ai to learn more.

Musk offers to proceed with Twitter deal

TikTok security deal becomes a political pawn

Netwalker ransomware affiliate sentenced to 20 years in prison

Thanks to today's episode sponsor, Hunters

Hunters is a SaaS platform, purpose built for your Security Operation team. Cimpress, theparent company of VistaPrint, implemented Hunters SOC Platform to replace its SIEM. Thanks to Hunters, Cimpress no longer needs to babysit alerts and detection logic – they've improved their SOC's efficiency, and optimized costs. Visit Hunters.ai to learn more.

For the stories behind the headlines, visit CISOseries.com

LA school data published on leak site

Exchange zero-day mitigations bypassed

Supreme Court will look legal protections for apps and sites

Thanks to today's episode sponsor, Hunters

Hunters helps your security team overcome data volume and complexity – while significantlyreducing false positives. Upwork uses Hunters SOC Platform to "remain threat focused". Because of Hunters, Upwork has been able to stop going through the daily repetitive task of looking at alerts, and doing repetitive, manual investigations. Learn more at: Hunters.ai