Cybersecurity Headlines

Unhappy #DataPrivacyDay to us all

WhatsApp adds biometric authentication to web, desktop versions

Sources: Facebook preps suit against Apple over App Store rules

And now our sponsor Nucleus Security brings you "The Top 5 Antipatterns in Vulnerability Management":

Antipattern #4: "Homegrown Vulnerability Management Tools": Large enterprises are full of homegrown vulnerability management tools that were abandoned due to complexity or cumbersome builds. See how Nucleus automates your vulnerability management workflows, replacing the need for custom tools completely, at nucleussec.com/demo

Link to Blog Post

This week's Cyber Security Headlines Week in Review, January 25-29, 2021, is hosted by Steve Prentice @stevenprentice with our guest, Steve Zalewski, Deputy CISO, Levi Strauss.

Thanks to our sponsor, Nucleus Security

All this week on our daily news podcast, Nucleus Security has been sharing some antipatterns in vulnerability management, such as relying on spreadsheets to track risks, relying on homegrown vulnerability management tools that were abandoned due to complexity or cumbersome builds, and the challenge of hiring enough vulnerability analysts to do triage. Learn how Nucleus can rescue you from these types of challenges and provide the data insights you need with a demo-on-demand at nucleussec.com/demo.

All links and the video of this episode can be found on CISO Series.com

10-year old sudo bug patched

Mass Emotet uninstall planned for March 25th

Microsoft's security business exceeds $10 billion in revenue

And now our sponsor Nucleus Security brings you "The Top 5 Antipatterns in Vulnerability Management":

Antipattern #4: "Homegrown Vulnerability Management Tools": Large enterprises are full of homegrown vulnerability management tools that were abandoned due to complexity or cumbersome builds. See how Nucleus automates your vulnerability management workflows, replacing the need for custom tools completely, at nucleussec.com/demo

Google's Threat Analysis Group warns of social engineering hack aimed at security researchers

Verizon outage started in Brooklyn

TikTok fixes flaws allowing theft of private user information

And now our sponsor Nucleus Security brings you "The Top 5 Antipatterns in Vulnerability Management":

Antipattern #3: "The Army of Analysts": Manual vulnerability analysis doesn't scale. In large enterprises, it's impossible to hire enough vulnerability analysts to manually analyze and triage vulnerability scan results fast enough. Learn how Nucleus automates vulnerability analysis and triage with a demo-on-demand at nucleussec.com/demo.

For the stories behind the headlines, head to CISOseries.com.

Google's cookie replacement performs well in tests

Twitter Birdwatch pilot launches

WhatsApp wormable malware found on Android

And now our sponsor Nucleus Security brings you "The Top 5 Antipatterns in Vulnerability Management":

Antipattern #2: "CVSS prioritization": CVSS scores are useful, but you need much more than scores to determine what to fix and when to fix it; Business context and vulnerability intelligence are key to prioritizing vulnerabilities in large enterprises. Learn how Nucleus can help with intelligent vulnerability prioritization at nucleussec.com/demo

President Biden takes on cybersecurity on day one

SonicWall firewall maker hacked using zero-day in its VPN device

Intel probes reports of quarterly earnings hack

And now our sponsor Nucleus Security brings you "The Top 5 Antipatterns in Vulnerability Management":

Antipattern No. 1: "Spreadsheet Hell": Relying on Microsoft Excel to track risks and answer questions about your vulnerability data is inefficient and insecure. Learn how Nucleus can rescue you from spreadsheet hell and provide the data insights you need with a demo-on-demand at nucleussec.com/demo.

Technologists comb through Parler videos with facial recognition

EU privacy watchdogs go after employers who spy on workers

Google investigates top AI ethicist's exfiltration of thousands of files

Thanks to our episode sponsor Armis

Armis research shows that on average, companies are blind to 40% of the devices in their environment. This blind spot includes traditional desktops, laptops, cloud and virtual instances, BYOD, and IoT and more. Without a real-time, comprehensive view of all these assets —or the risks associated with them, businesses are vulnerable. Armis Asset Management can help by providing 5x more visibility over exciting solutions.

Link to Blog Post

This week's Cyber Security Headlines Week in Review, January 18-22, 2021 is hosted by Steve Prentice @stevenprentice with our guest Joshua Scott, Head of Information Security at Postman.

All links and the video of this episode can be found on CISO Series.com

Malwarebytes breached by the group that attacked Solarwinds

Google researcher finds security flaws impacting popular chat apps

Executive Order addresses malicious use of public clouds

Thanks to our episode sponsor Armis

Armis research shows that on average, companies are blind to 40% of the devices in their environment. This blind spot includes traditional desktops, laptops, cloud and virtual instances, BYOD, and IoT and more. Without a real-time, comprehensive view of all these assets —or the risks associated with them, businesses are vulnerable. Armis Asset Management can help by providing 5x more visibility over exciting solutions.

For more on any of these stories, head to cisoseries.com

FireEye releases report and network auditing tool for SolarWinds-type hacks

SolarWinds malware arsenal widens with Raindrop

DNSpooq bugs let attackers hijack DNS on millions of devices

Thanks to our episode sponsor Armis

One of the biggest challenges security teams face is they do not have a clear picture of all assets in their environment. The resulting 'blind spot' means they have no way to efficiently, credibly, and automatically manage security. Armis Asset Management eliminates this blind spot providing 5X more visibility than other solutions. Head over to armis.com to learn more.

For more on any of these stories, head to cisoseries.com