CISO Series
Cybersecurity Headlines
Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.
Where to listen?
Podcasts in the app Replaio Radio Coming soonPodcasts are coming to the app soon. Install now and be the first to see a whole new take on podcasts
Episodes
Russian cybercriminal arrests, Irish police fined, Rackspace blame game 03.10.2024 7:53
Russian authorities arrest nearly 100 cybercriminals in raid Northern Ireland police fined for exposing officer identities Rackspace breach sparks vendor blame game Huge thanks to our sponsor, SpyCloud Stolen data is a hot commodity for cybercriminals. Using infostealer malware, bad actors can siphon valid session cookies from employee devices, scoring the keys to access your networks and systems....
LockBit ties to Evil Corp, public records flaws, ransomware hits Texas hospital 02.10.2024 7:47
UK ties LockBit affiliate to Evil Corp Public records systems riddled with security flaws Ransomware disrupts emergency services at Texas hospital Huge thanks to our sponsor, SpyCloud Researchers at SpyCloud recently found that one in five individuals was infected with infostealer malware in the last year. Unfortunately, research now confirms that infostealer infections open the door to ransomware...
T-mobile data breach fines, Iranian hackers charged, Deepfake scam hits U.S. senate 01.10.2024 8:26
T-Mobile data breaches cost company $31.5 million Iranian hackers charged for targeting 2024 U.S. election Deepfake scam hits U.S. senate Huge thanks to our sponsor, SpyCloud Did you know that infostealer malware can be a precursor to ransomware? Infostealers are a trending tactic used by cybercriminals to exfiltrate valuable identity data like credentials, PII, and session cookies. According to r...
Recall redesigned again, Embargo attacks cloud, Dallas suburb cyberattack 30.09.2024 6:57
Recall redesign: reinforced and removable Embargo moves ransomware attacks to cloud environments Dallas suburb deals with ransomware attack Huge thanks to our sponsor, SpyCloud It turns out infostealer infections are a major contributing factor to a company's ransomware risk, with some industries faring better than others. Get the new research from our sponsor, SpyCloud, and see if your ransomware...
Week in Review: CrowdStrike exec apologizes, NIST changes password rules, corporate hack-for-hire practices 27.09.2024 31:44
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Jason Elrod , CISO, Multicare Health System Missed the live show? Watch it on YouTube . And make sure to check out Jason's book (coming soon) at CyberCISOmarksmanship.com , as well as his newsletter at LimitlessCyber.com . And huge thanks to our sponsor – Vanta As third-party breaches c...
Train station WiFi hack, Mozilla tracking complaint, NIST password changes 27.09.2024 8:30
Public Wi-Fi hacked at some of the UK's busiest train stations Data privacy watchdog files complaint against Mozilla for ad tracking feature NIST drops password complexity, mandatory reset rules Thanks to today's episode sponsor, Vanta As third-party breaches continue to rise, companies are increasingly vigilant, which means more time spent on manual security reviews. With Vanta Questionnaire Au...
DragonForce ransomware, Salt Typhoon hits ISPs, ChatGPT SpAIware 26.09.2024 7:47
DragonForce uses ransomware's greatest hits Salt Typhoon strikes US ISPs Finding SpAIware on the ChatGPT Mac app Thanks to today's episode sponsor, Vanta As third-party breaches continue to rise, companies are increasingly vigilant, which means more time spent on manual security reviews. With Vanta Questionnaire Automation, security & compliance teams can complete security reviews up to 5 times...
Kansas water targeted, CrowdStrike apology, MoneyGram goes dark 25.09.2024 8:16
Kansas water plant pivots to analog after cyber event CrowdStrike exec apologizes in Congress for global IT outage MoneyGram goes offline after cyber incident Thanks to today's episode sponsor, Vanta As third-party breaches continue to rise, companies are increasingly vigilant, which means more time spent on manual security reviews. With Vanta Questionnaire Automation, security & compliance team...
Proposed ban on autonomous vehicles, updated Telegram policy, Necro infects Android devices 24.09.2024 9:01
U.S. proposes ban on Chinese, Russian tech in autonomous vehicles Telegram updates policies to expose 'bad actors' Necro Trojan infects 11 million android devices through Google Play apps Thanks to today's episode sponsor, Vanta As third-party breaches continue to rise, companies are increasingly vigilant, which means more time spent on manual security reviews. With Vanta Questionnaire Automatio...
LinkedIn halts AI training, Ukraine bans Telegram, hack-for-hire lawsuit 23.09.2024 8:24
LinkedIn halts AI data processing in UK due to privacy concerns, Ukraine bans Telegram Use for government and military, Dismissed German cyber chief falsely accused of associating with Russian spies Thanks to today's episode sponsor, Vanta As third-party breaches continue to rise, companies are increasingly vigilant, which means more time spent on manual security reviews. With Vanta Questionnair...
Week in Review: LinkedIn's AI chicanery, AT&T FCC settlement, Craigslist defense network 20.09.2024 23:04
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Mike Rosen , CISO, ZwillGen , advisor to NightDragon and Villager at Team8, whose favorite story of the week was Starlink's ability to detect stealth aircraft. Check it out . Thanks to our show sponsor, Conveyor Why do teams choose Conveyor over the competition for customer security rev...
INC targets healthcare, Providence schools cyberattack, Apple iPads bricked 20.09.2024 7:55
New INC ransomware targets U.S. healthcare sector Providence public schools deal with irregular internet activity Apple pulls iPadOS 18 update that was bricking M4 iPad Pro devices Thanks to today's episode sponsor, Conveyor It's Friday and Conveyor hopes you don't have a meaty security questionnaire waiting for you on the other side of this podcast. If you do, you should check them out. As the...
Derailing Raptor Train, Volunteer Civil Cyber Defense, US AI safety summit 19.09.2024 7:10
Feds derail Raptor Train Newmark creates Volunteer Network for Civil Cyber Defense US to host global AI safety summit Thanks to today's episode sponsor, Conveyor Does the next security questionnaire that hits your inbox make you want to throw your laptop out the window? If so, don't do it. You should check out Conveyor first. Conveyor is the market-leader in instant, generative AI answers to en...
Exploding pager analysis, construction company vulnerability, cyberattack job loss 18.09.2024 7:00
Exploding pager tragedy experts look towards supply chain sabotage Construction companies potentially vulnerable through accounting software Cyberattacks result in job losses Thanks to today's episode sponsor, Conveyor Are customer security reviews constantly interrupting your day? You should check out Conveyor. With an enterprise-grade trust center to securely share your security posture, SOC 2...
Intellexa faces new sanctions, London hospitals impact, Apple releases update 17.09.2024 8:15
Spyware giant Intellexa faces new U.S. sanctions Nearly 1 million impacted by ransomware attack on London hospitals Apple releases long-awaited update Thanks to today's episode sponsor, Conveyor Why do teams choose Conveyor over the competition for customer security reviews? A few reasons. One. Market-leading AI accuracy for any format of security questionnaire with limited knowledge base mainte...
Fortinet confirms breach, RansomHub extorts Kawasaki, Update: TfL password resets 16.09.2024 7:55
Fortinet confirms customer data breach RansomHub threatens to leak stolen Kawasaki data Update: Transport for London requires in-person password resets after hack Thanks to today's episode sponsor, Conveyor Ever feel like completing security questionnaires has become your full time side hustle you're not even getting paid extra for? If so, you should check out Conveyor. Conveyor is the market-lead...
Week in Review: Wisconsin Medicare MOVEit, cop sues data broker, WHOIS vulnerability 13.09.2024 28:09
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by David Spark with guest Patrick Heim , co-founder and partner, SYN Ventures Huge thanks to our sponsor, Vanta Whether you're starting or scaling your security program, Vanta helps you automate compliance across frameworks like SOC 2, ISO 27001, and more. With Vanta, you can streamline security reviews by automating...
Lazarus spoofs CapitalOne, Mastercard buys RecordedFuture, WordPress imposes 2FA 13.09.2024 8:10
Lazarus Group's VMConnect campaign spoofs CapitalOne Mastercard buys security firm Recorded Future WordPress to require two-factor authentication for plugin developers Huge thanks to our sponsor, Vanta Whether you're starting or scaling your security program, Vanta helps you automate compliance across frameworks like SOC 2, ISO 27001, and more. With Vanta, you can streamline security reviews by au...
$20 WHOIS vulnerability, India's Cyber Commandos, Word hits drone makers 12.09.2024 7:25
The $20 WHOIS vulnerability India training thousands of "cyber commandos" A Word of warnings for Taiwanese drone makers Huge thanks to our sponsor, Vanta When it comes to ensuring your company has top-notch security practices, things can get complicated, fast. Vanta automates compliance for SOC 2, ISO 27001, and more, saving you time and money. With Vanta , you can unify your security program mana...
Slim CD data breach, International sextortion bust, TfL mixed messages 11.09.2024 8:13
Slim CD notifies 1.7M customers of data breach Delaware men charged in international sextortion scheme London transit agency drops claim it has 'no evidence' of customer data theft Huge thanks to our sponsor, Vanta Whether you're starting or scaling your security program, Vanta helps you automate compliance across frameworks like SOC 2, ISO 27001, and more. With Vanta, you can streamline security...
Payment processing breach, dark web admins charged, Predator spyware resurges 10.09.2024 7:41
1.7 million impacted in payment processing breach Dark web administrators charged in U.S. Resurgence of Predator Spyware sparks privacy concerns Huge thanks to our sponsor, Vanta When it comes to ensuring your company has top-notch security practices, things can get complicated, fast. Vanta automates compliance for SOC 2, ISO 27001, and more, saving you time and money. With Vanta , you can unify y...
Avis rentals breach, Microsoft disables ActiveX, Wisconsin Medicare breach 09.09.2024 7:32
Car rental company Avis discloses data breach Microsoft Office 2024 to disable ActiveX controls by default Wisconsin Medicare users had information leaked in MOVEit breach Huge thanks to our sponsor, Vanta Whether you're starting or scaling your security program, Vanta helps you automate compliance across frameworks like SOC 2, ISO 27001, and more. With Vanta, you can streamline security reviews b...
Week in Review: MFA bypass bust, Airport security SQL, GitHub help malware 06.09.2024 24:53
Link to blog post This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Justin Somaini , partner, YL Ventures Thanks to our show sponsor, Scrut Automation Scrut Automation allows compliance and risk teams of any size to establish enterprise-grade security programs. Their best-in-class features like process automation, AI, and over 75 native integrations rev...
Planned Parenthood cyberattack, DoJ propaganda takedown, Microchip Technology theft 06.09.2024 7:44
Planned Parenthood suffers cyberattack DoJ propaganda domains takedown Microchip Technology confirms data theft Thanks to today's episode sponsor, Scrut Automation Scrut Automation allows compliance and risk teams of any size to establish enterprise-grade security programs. Their best-in-class features like process automation, AI, and over 75 native integrations reverse compliance debt and help ma...
Spyware research, Cicada rebrand, MacroPack malware 05.09.2024 7:05
Spyware research report They found a way to make Cicadas more annoying MacroPack red teaming tool used for malware Thanks to today's episode sponsor, Scrut Automation Scrut Automation allows compliance and risk teams of any size to establish enterprise-grade security programs. Their best-in-class features like process automation, AI, and over 75 native integrations reverse compliance debt and help...
Similar podcasts
Replaio is not a podcast publisher; show names, artwork and audio belong to their authors and are distributed through public RSS feeds.