Cybersecurity Headlines

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, May 16-20, is hosted by Rich Stroffolino with our guest, Jerich Beason, CISO, Commercial Bank, CapitalOne

Thanks to today's episode sponsor, Torq

All links and the video of this episode can be found on CISO Series.com

Greenland health services limited from cyberattacks

Phishing attacks surge in Q1

Google details 2021 zero-days

And now let's thank today's sponsor, Torq

Myth 5: You Should Automate All Security Processes False. You should automate routine, repetitive tasks that are not subject to much conditional variance. But workflows that can't be reliably managed by automation tools, such as assessing the financial consequences of a breach or determining whether a security incident should trigger an application rollback, should remain the domain of humans. To learn more about the realities of automation, head to torq.io.

VMware bugs abused to deliver Mirai malware

Microsoft to debut of zero trust GDAP tool

Bank of Zambia refuses to pay ransom to cyberattack group Hive

And now let's thank today's sponsor, Torq

Myth 4: Automation Will Replace Skilled Security Professionals Not true. Any business that attempts to automate security will quickly find that most high-stakes security issues are far too complex to be detected and remediated by automation tools alone. Human security professionals need to take the lead delivering nuanced insight about the business impact of a large-scale breach. To learn more about the realities of automation, head to torq.io.

For the stories behind the headlines, head to CISOseries.com.

Buffalo massacre suspect signaled plans on Discord for months

Google faces litigation for unauthorised use of medical records

Venezuelan doctor accused of developing and distributing ransomware

And now let's thank today's sponsor, Torq

Myth 3: Only Enterprises Need Security Automation Debunked. While enterprises with thousands of endpoints and sprawling teams certainly need automation, businesses of all sizes face challenges related to other forms of scale when it comes to security. For instance, there are about 1 billion known types of malware in existence, and they imperil businesses of all sizes equally. To learn more about the realities of automation, head to torq.io.

For the stories behind the headlines, head to CISOseries.com

Costa Rican ransomware rhetoric somehow gets uglier

DOJ files its first criminal cryptocurrency sanctions case

Trying to fix open source supply chain security

And now let's thank today's sponsor, Torq

Myth 2: Security Automation Is Just a New Term for Automated Security Testing Wrong. While scanning and testing may be one example of a security automation use case, it's hardly the only one. Automation can be used to do things like help manage complex security workflows and optimize collaboration between different stakeholders. These are tasks that were not traditionally automated. To learn more about the realities of automation, head to torq.io.

Ukraine CERT-UA warns of new attacks launched by Russia-linked Armageddon APT

Microsoft fixes new PetitPotam Windows NTLM relay attack vector

Hackers are exploiting critical bug in Zyxel firewalls and VPNs

And now let's thank today's sponsor, Torq

Myth 1: Automation Is Only a Reactive Part of SecOps Incorrect. Proactive management of security incidents is just as important, like automatically scanning IaC configurations to detect vulnerabilities, automating collaboration between devs, IT ops and SecOps to prevent risks before they're threats. To learn more about the realities of automation, head to torq.io.

For the stories behind the headlines, head to CISOseries.com.

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, May 9-13, is hosted by Rich Stroffolino with our guest, Rich Lindberg, CISO, JAMS

Thanks to our sponsor, Datadog

Break down silos between DevOps and Security teams to enable collaboration and strengthen the security of your environment. In this on-demand webinar, hear from one of Datadog's engineers on how teams can speed up investigations by assessing security and observability data using Datadog's unified platform to reduce security threats by detecting vulnerabilities. Watch the on-demand webinar now to learn how to get full-stack security for your production environment at datadoghq.com/ciso/

All links and the video of this episode can be found on CISO Series.com

Google will use mobile devices to thwart phishing attacks

CISA urges organizations to patch actively exploited F5 BIG-IP vulnerability

Kick China off social media, says tech governance expert

Thanks to our episode sponsor, Datadog

Break down silos between DevOps and Security teams to enable collaboration and strengthen the security of your environment. In this on-demand webinar, hear from one of Datadog's engineers on how teams can speed up investigations by assessing security and observability data using Datadog's unified platform to reduce security threats by detecting vulnerabilities. Watch the on-demand webinar now to learn how to get full-stack security for your production environment at datadoghq.com/ciso/

For the stories behind the headlines, head to CISOseries.com.

Old botnets are new again

Meta withdraws Oversight Board guidance request

EU proposes new CSAM rules

Thanks to our episode sponsor, Datadog

In this on-demand webinar, you'll learn how to best utilize the suite of Datadog Cloud Security products to identify the root cause of an attack and how a unified platform provides real-time threat-detection and continuous configuration audits across applications, hosts, containers and cloud infrastructure. Built on top of the observability platform, Datadog brings unprecedented integration between security and devops aligned to shared organizational goals. Watch the on-demand webinar now to learn how to get full-stack security for your production environment at datadoghq.com/ciso/

Russian TV hacked on Victory Day

US pledges to help Ukraine keep internet and lights running

Pentagon's concerns China may prompt vetting startups

Thanks to our episode sponsor, Datadog

In this on-demand webinar, you'll learn how to best utilize the suite of Datadog Cloud Security products to identify the root cause of an attack and how a unified platform provides real-time threat-detection and continuous configuration audits across applications, hosts, containers and cloud infrastructure. Built on top of the observability platform, Datadog brings unprecedented integration between security and devops aligned to shared organizational goals. Watch the on-demand webinar now to learn how to get full-stack security for your production environment at datadoghq.com/ciso/