Cybersecurity Headlines

EU weighs regulations on "high-risk" AI

DOJ forms ransomware task force

Facebook disrupts two state-sponsored hacking groups

Thanks to our episode sponsor, Palo Alto Networks

Ralph Waldo Emerson famously wrote that "It's not the destination, it's the journey." For your cloud security journey, you need a reliable partner. On April 27th, Prisma Cloud by Palo Alto Networks will be hosting Spectrum, a virtual event with sessions to help you create a comprehensive cloud security strategy. Learn more at go.paloaltonetworks.com/spectrum

Hundreds of networks reportedly hacked in Codecov supply-chain attack

Remote code execution vulnerabilities uncovered in smart air fryer

Biden administration unveils plan to defend electric sector from cyberattacks

Thanks to our episode sponsor, Palo Alto Networks

In Latin, the word "spectrum" means "image". Spectrum also happens to be a cloud security event that's all about container images…and CI/CD pipeline security, cloud transformation strategies, and much more. Join Prisma Cloud by Palo Alto Networks on April 27 for a virtual event covering all things cloud security. Learn more at go.paloaltonetworks.com/spectrum

For the stories behind the headlines, head to CISOseries.com.

Security conferences set for in-person return

Apple approves Parler's return to the App Store

Geico exposed driver's license numbers for months

Thanks to our episode sponsor, Palo Alto Networks

In 1666, Sir Isaac Newton famously used a prism to disperse white light into colors. Today, cloud security professionals use Prisma Cloud from Palo Alto Networks to disperse full lifecycle security and full stack protection across their multi- and hybrid-cloud environments. We think Sir Isaac would approve. Learn more about Prisma Cloud at paltoaltonetworks.com/Prisma

Codecov discloses 2.5-month-long supply chain attack

BazarLoader malware aims at Slack and BaseCamp users

Windows 10 update causing DNS and shared folder issues

Thanks to our episode sponsor, Palo Alto Networks

Ralph Waldo Emerson famously wrote that "It's not the destination, it's the journey." For your cloud security journey, you need a reliable partner. On April 27th, Prisma Cloud by Palo Alto Networks will be hosting Spectrum, a virtual event with sessions to help you create a comprehensive cloud security strategy. Learn more at go.paloaltonetworks.com/spectrum

For the stories behind the headlines, head to CISOseries.com.

US pins SolarWinds attack on Cozy Bear, boots 10 Russian diplomats

Second Google Chromium zero-day released on Twitter this week

Google rolls out Chrome 90 with HTTPS by default

Thanks to our episode sponsor, Sonatype

With security concerns around software supply chains ushered to center stage in recent months, organizations around the world are turning to Sonatype as trusted advisors. The company's Nexus platform offers the only full-spectrum control of the cloud-native software development lifecycle including third-party open source code, first-party source code, infrastructure as code, and containerized code.

Link to Blog Post

https://cisoseries.com/cyber-security-headlines-week-in-review-april-12-16-2021

This week's Cyber Security Headlines - Week in Review, April 12-16, 2021, is hosted by Steve Prentice (@stevenprentice) with our guest, Davi Ottenheimer, vp, trust and digital ethics, Inrupt.

Thanks to our episode sponsor, Sonatype

With security concerns around software supply chains ushered to center stage in recent months, organizations around the world are turning to Sonatype as trusted advisors. The company's Nexus platform offers the only full-spectrum control of the cloud-native software development lifecycle including third-party open source code, first-party source code, infrastructure as code, and containerized code.

All links and the video of this episode can be found on CISO Series.com

FBI patches Exchange server backdoors

IcedID looks to fill the Emotet malware void

Draft plan to improve US power grid security

Thanks to our episode sponsor, Sonatype

Ask any software developer, and they'll tell you the truth about two things: 1. Conventional code analysis and appsec tools are noisy and not well integrated into the dev workflow. 2: Tools that don't actually make life easier for them just add friction and are ignored. Rather than slowing devs down with process-heavy security gates or circuitous quality alerts, Sonatype believes developers are better served by gentle, timely, and effective nudges that actually help them improve the quality, and security of the applications they are building.

Chrome Zero-Day exploit posted on Twitter

April Patch Tuesday patches 114 bugs including NSA's two at 9.8 severity

Cyberattacks are the number-one threat to the global financial system, Fed chair says

Thanks to our episode sponsor, Sonatype

With security concerns around software supply chains ushered to center stage in recent months, organizations around the world are turning to Sonatype as trusted advisors. The company's Nexus platform offers the only full-spectrum control of the cloud-native software development lifecycle including third-party open source code, first-party source code, infrastructure as code, and containerized code.

For the stories behind the headlines, head to CISOseries.com.

Nvidia announces AI-powered tools for cybersecurity

Biden announces nominations for cybersecurity positions

Apple updates chip security mid-production

Thanks to our episode sponsor, Sonatype

Ask any software developer, and they'll tell you the truth about two things: 1. Conventional code analysis and appsec tools are noisy and not well integrated into the dev workflow. 2: Tools that don't actually make life easier for them just add friction and are ignored. Rather than slowing devs down with process-heavy security gates or circuitous quality alerts, Sonatype believes developers are better served by gentle, timely, and effective nudges that actually help them improve the quality, and security of the applications they are building.

Israel carries out cyberattack on Iran nuclear facility

Joker malware infects over 500,000 Huawei Android devices

Critical cloud bug in VMWare Carbon Black allows takeover

Thanks to our episode sponsor, Sonatype

With security concerns around software supply chains ushered to center stage in recent months, organizations around the world are turning to Sonatype as trusted advisors. The company's Nexus platform offers the only full-spectrum control of the cloud-native software development lifecycle including third-party open source code, first-party source code, infrastructure as code, and containerized code.

For the stories behind the headlines, head to CISOseries.com.