Cybersecurity Today

Massive Data Breach, Outlook's Phishing Risk, and Windows Downgrade Attack Vulnerabilities

In this episode of Cybersecurity Today, host Jim Love delves into one of the largest data breaches in history involving 2.9 billion records leaked without user consent by National Public Data. He also covers the backlash against Microsoft Outlook's email interface, which has inadvertently facilitated phishing attacks, and discusses a Black Hat presentation revealing vulnerabilities that allow attackers to unpatch fully updated Windows systems. Join us for insights and the latest updates in the world of cybersecurity.

00:00 Introduction and Major Data Breach Overview 00:31 Details of the National Public Data Breach 01:07 Implications and Legal Actions 02:42 Microsoft Outlook Phishing Vulnerability 04:08 Windows Security Vulnerability Exposed at Black Hat 05:57 Conclusion and Upcoming Content

Cyber Security Pros: Awareness vs. Action & The CrowdStrike Controversy Explained

Join host Jim Love in this episode of 'Cyber Security Today' as he delves into a recent survey revealing a disconnect between awareness and action among global security professionals regarding unauthorized software use. Learn about the risks of shadow IT and AI applications, and the startling admittance of security pros themselves using unapproved SaaS. Additionally, explore the two latest stories from the CrowdStrike disaster, including the fallout between CrowdStrike and Delta Airlines, and the surprising involvement of Microsoft. Finally, hear about the importance of having a solid resiliency and recovery plan amidst these challenges. Tune in for these insights and more.

00:00 Introduction and Survey Findings 00:45 Shadow IT Risks and AI Concerns 02:17 CrowdStrike Controversy: Delta Airlines Incident 04:36 Microsoft's Response to Delta's Criticism 05:43 Lessons for IT Leaders 06:23 Show Conclusion and Host Announcement

In this episode of 'Cybersecurity Today: The Week in Review,' host Jim Love discusses critical cybersecurity incidents with guests Terry Cutler, CEO of Cyology Labs, and David Shipley from Beauceron Security. The panel delves into the devastating effects of a ransomware attack on the blood donation nonprofit OneBlood, emphasizing the broader implications for healthcare and emergency services. They also address the Canadian investigation into Ticketmaster's security practices and Microsoft's recent global outage, highlighting the significant challenges and necessary responses in safeguarding IT infrastructure. The discussion underscores the urgency of improving cybersecurity measures, particularly in healthcare, and the complexities of implementing effective regulations.

00:00 Introduction and Panel Introduction 00:19 Ransomware Attack on OneBlood 01:46 Healthcare System Vulnerabilities 04:05 Challenges in Cybersecurity for Healthcare 13:03 Ticketmaster Investigation and Government Inaction 20:03 Delta Airlines Lawsuit and Insurance Implications 28:38 Microsoft Global Service Interruption 35:12 Conclusion and Final Thoughts

In this episode of Cybersecurity Today, host Jim Love explores the aftermath of Microsoft's 10-hour global outage due to a DDoS attack, the Canadian Privacy Commissioner's investigation into Ticketmaster, the severe impact of a ransomware attack on U.S. blood bank OneBlood, and the cascading legal ramifications CrowdStrike faces after a disastrous software update. The episode delves into the broader implications of these cyber incidents and stresses the urgent need for robust cybersecurity measures.

00:00 Introduction and Major Headlines 00:29 Microsoft's 10-Hour Outage: Causes and Consequences 02:39 Ticketmaster Under Investigation: Privacy Concerns 03:45 OneBlood Ransomware Attack: Impact on Blood Supply 05:13 CrowdStrike Legal Battles: Fallout from Software Update 07:21 Conclusion and Upcoming Shows

Microsoft Cloud Outage, WhatsApp Vulnerability, and AI-Powered Screen Reading

In today's episode of Cyber Security Today, host Jim Love covers a significant global outage affecting Microsoft's cloud services, a vulnerability in WhatsApp that allows malicious scripts to run without warning, and a new AI-powered method that can read your screen by intercepting HDMI signals. Stay informed about these pressing cybersecurity issues and learn how to protect yourself.

00:00 Microsoft Service Takes a Nosedive 00:16 Global Impact and Response 02:12 WhatsApp Vulnerability Warning 04:02 AI Decoding Screens from Afar 05:12 Show Wrap-Up and Future Episodes

Google's Password Bug Hits Millions & French Police Battle Malware - Cybersecurity Today

In this episode of Cybersecurity Today, Jim Love covers Google's recent apology after a bug caused the passwords of 15 million Chrome users to vanish. The episode also dives into the French authorities' unique approach to combating the PlugX malware by deploying a disinfection solution. Lastly, it sheds light on the ongoing struggles with patch management in many organizations, particularly following the CrowdStrike disruption. Tune in for these stories and more, along with the challenges and solutions in today's cybersecurity landscape.

00:00 Google Apologizes for Password Vanishing Bug 01:55 French Authorities Combat PlugX Malware 03:44 The Unsexy Challenge of Patch Management 05:41 Conclusion and Show Notes

Cybersecurity Weekly Review: CrowdStrike, Malware, and Major IT Outages

Join Jim Love and a panel of experts as they delve into the top cybersecurity stories of the week. This episode covers the major CrowdStrike incident, AT&T's February outage affecting millions of calls, a new strain of malware in Ukraine targeting industrial control systems, and much more. Listen in as experts Terry Cutler, David Shipley, and Mike Walters discuss the implications, lessons learned, and future strategies needed to tackle these cybersecurity challenges.

00:00 Introduction and Overview 00:18 CrowdStrike Dominates the Headlines 00:27 AT&T's Major Outage 01:14 New Malware in Ukraine 01:51 Whiz Startup's Bold Move 02:33 Panel Discussion Begins 02:55 Introduction of Mike Walters 03:31 Whiz's Market Valuation Debate 06:59 Modbus Protocol Vulnerabilities 07:35 Penetration Testing Insights 12:50 CrowdStrike Incident Analysis 22:24 Media Focus on Airport Chaos 22:36 The Real Impact on Patient Care 23:53 Who Pays for the Outage? 25:40 CrowdStrike's Quick Response 26:27 Future Prevention Strategies 28:27 Challenges in Cybersecurity Updates 38:14 Lessons Learned and Moving Forward 42:17 Conclusion and Acknowledgements

North Korean State Actor Infiltrates US Security Firm | Cybersecurity Today

In this episode of Cybersecurity Today, host Jim Love covers two major incidents. The first is an American firm, KnowBe4, inadvertently hiring a North Korean state actor posing as a software engineer, leading to an attempted malware installation. He discusses the techniques used by the threat actor and the broader implications for cybersecurity. The second story involves CrowdStrike's post-incident review of a system crash, detailing the causes, the company's response, and criticisms of their crisis communication strategy. Tune in to learn about these pressing cybersecurity challenges and how companies are handling them.

00:00 A Shocking Cybersecurity Incident 00:20 North Korean State Actor Infiltration 01:59 CrowdStrike's Post Incident Review 05:07 CrowdStrike's Crisis Communication Failure 06:31 Conclusion and Upcoming Shows

In this episode of Cybersecurity Today, guest host Jim Love covers major events impacting the cybersecurity world, including CrowdStrike CEO George Kurtz's summons to testify before a U.S. House Committee on Homeland Security following a massive IT outage and a new malware strain, Frosty Goop, attacking critical infrastructure in Ukraine. The episode also discusses cybersecurity firm Wiz's surprising decision to decline a $23 billion acquisition offer from Google's parent company, Alphabet, opting instead to aim for an IPO. Stay informed about the latest in cybersecurity, and what these developments mean for the industry.

00:00 Introduction and Headlines 00:24 CrowdStrike CEO Summoned by U.S. House Committee 00:38 Impact and Response to the IT Outage 01:41 Frosty Goop: New Malware Threat 03:09 Wiz Rejects Alphabet's Acquisition Offer 04:45 Conclusion and Show Notes

Join Jim Love on a special edition of Cybersecurity Today and Hashtag Trending as he delves into the recent CrowdStrike incident that led to a global IT meltdown. With over 8.5 million Windows devices affected by a faulty CrowdStrike Falcon update, this event is being compared to Y2K and WannaCry. Discover the widespread impacts across key industries, the technical details behind the kernel-crashing error, and the fallout for companies and IT professionals. Learn why this disaster has created such frustration and anger in the cybersecurity community and what steps are being taken to recover. Tune in to understand the broader economic and societal implications of what is being called the 'worst cyber event in history.'

00:00 Introduction and Host Introduction 00:19 CrowdStrike Incident Overview 00:46 Community Reactions and Frustrations 02:29 Understanding CrowdStrike's Role 04:49 Technical Breakdown of the Issue 07:59 Impact and Consequences 09:04 Response and Fixes 12:33 Lessons and Future Precautions 13:20 Final Thoughts and Warnings 13:58 Conclusion