The CISO Signal: True Cybercrime Podcast

The Panama Papers | The Business of Hiding Wealth - The CISO Signal Episode 17 🎙 With Jeremy Ladner and guest co-host Michael Darling, CEO of Solstice Security For decades, the offshore financial system operated in near-total obscurity. Behind shell corporations, nominee directors, and offshore entities, fortunes moved quietly across borders through legal structures designed to conceal ownership,...

The Change Healthcare Breach | Healthcare Hijacked 🎙 With guest co-hosts Thomas Schwab and Scott Kisser   For most people, healthcare feels immediate. A doctor. A prescription. A moment of care. What they don’t see… is everything that has to happen before any of that is allowed to move. Claims must be approved. Payments must clear. Authorizations must pass through systems no patient has ever heard...

The Equifax Breach | One of the Largest Data Exposures in History   🎙 With Jeremy Ladner and guest co-hosts Kavitha Mariappan and Mark Dorsi   For months, the warning was sitting in plain sight. A critical vulnerability. Publicly disclosed. Actively exploited. A patch was available. Inside one of the largest credit reporting agencies in the world, the system remained exposed. No zero-day. No advan...

The Age of Agentic Attacks The GTG-1002 Campaign and the Birth of AI-Directed Cyber Operations 🎙 With guest co-hosts Ev Kontsevoy, CEO and Co-founder of Teleport, and Marius Poskus Global VP of Cyber Security at Glow Financial Services For years, attackers have used artificial intelligence. It helped them write malware faster. Scan networks more efficiently. Refine phishing campaigns. Automate rec...

The AT&T Beijing Breach | Metadata Maps That Intelligence Services Want With guest co-host John Carse, Field CISO at SquareX In 2024, attackers did not steal call recordings. They did not intercept encrypted text messages. They went after something quieter. Call detail records. The outlines of conversations. Phone numbers. Timestamps. Durations. Cell tower connections. Metadata that, on its ow...

Accellion FTA | How a Legacy File Transfer Tool Fueled a Global Extortion Campaign With guest co-hosts Christopher Russell, CISO at tZERO Group and Benjamin Lipczynski, Director of Cyber Security & Regulatory Services at Origina In late 2020, attackers did not target the cloud. They did not exploit a modern SaaS platform. They went after a quiet, aging file transfer appliance that had been sit...

Midnight Blizzard | How Russian Intelligence Breached Microsoft With guest CISO Co-Host Alyssa Robinson, CISO at HubSpot In late 2023, a Russian state-sponsored threat actor known as Midnight Blizzard (also called NOBELIUM and widely associated with APT29) began probing Microsoft the old-fashioned way: password spraying. No zero-day. No smash-and-grab. Just patience, repetition, and one legacy gap...

The HubSpot Hack | The SaaS Backdoor to Bitcoin - ft. Scott Kisser (CISO, Swan Bitcoin) When attackers breached HubSpot in March 2022, they weren’t after HubSpot at all. They were after the customers of its customers. Crypto firms like Trezor, BlockFi, and Swan Bitcoin suddenly saw their users targeted by near-perfect phishing emails designed to steal recovery seeds and drain wallets. And just wee...

In late 2023, the world’s most trusted identity provider experienced the kind of breach it was designed to prevent. Attackers quietly infiltrated Okta’s customer support system, stole session tokens hidden inside HAR files and used them to impersonate users across some of the most secure organizations on earth. For two full weeks, the intruders operated in silence. No alerts. No red flags. No dete...

The $610 Million Poly Network Hack: The Greatest Heist That Never Was In one of the most shocking moments in crypto history, a lone hacker exploited a vulnerability in Poly Network’s cross-chain protocol—draining over $610 million in digital assets across Ethereum, Binance Smart Chain, and Polygon. Then, in a twist no one saw coming… they gave it all back. Was it a white-hat test gone wrong? A hac...

The $25 Million Arup Deepfake: AI's Most Convincing Con In a world where AI can mimic voices and faces perfectly, even the most secure companies can fall victim. The Arup Deepfake Hack shocked the corporate world when attackers used AI-generated video of the company’s CFO to trick an employee into wiring $25 million to a fraudulent account. This was not just another phishing attempt, it was a soph...

THE SONY HACK: HOLLYWOOD, NORTH KOREA & THE CYBER WAR THAT CHANGED EVERYTHING In 2014, Sony Pictures became ground zero for the first major nation-state cyberattack on a global corporation. The “Guardians of Peace,” linked to North Korea, crippled Sony’s networks, leaked unreleased films, and exposed troves of executive emails that forced high-level resignations. At the center of it all: The I...

SIN CITY CYBERATTACK: INSIDE THE MGM & CAESARS CASINO BREACHES In September 2023, Las Vegas turned into ground zero for one of the most disruptive cyberattacks in U.S. history. MGM Resorts, owner of iconic casinos on the Strip, saw slot machines go dark, hotel check-ins grind to a halt, and operations paralyzed for days. At the same time, Caesars Entertainment quietly faced its own breach, but...

The CISO Signal | INSIDE CNA's $40M BITCOIN RANSOM | The Hack That Changed Cybersecurity - EP 4 In this episode of The CISO Signal, we go deep inside the cyberattack that shook the financial world. Join us as we unravel the haunting details of the 2021 ransomware attack on CNA Financial, which resulted in a record-breaking $40 million ransom payment in Bitcoin. This wasn't just another breach. Thi...

THE UBER BREACH: HOW A 17-YEAR-OLD HACKED A FORTUNE 500 COMPANY A 17-year-old hacker. A simple social engineering tactic. A taunting message posted to Uber’s internal Slack channel. In one of the most audacious breaches in recent memory, a teenager allegedly affiliated with the Lapsus$ group compromised a Fortune 500 company, exposing critical vulnerabilities in even the most sophisticated securit...

🎙️ The CISO Signal | S1E2 — The SolarWinds Hack: How 18,000 Orgs Were Compromised One trusted software update. Thousands of victims. A breach that changed the cybersecurity landscape forever. In this episode, we investigate the SolarWinds supply chain attack , a nation-state cyber operation that exposed the deep fragility of the modern software ecosystem. What made this breach so dangerous wasn’t...

The CISO Signal | S1E1: DEAD IN THE WATER | How Sandworm Crippled Maersk — The $10 Billion Breach In this premiere episode of The CISO Signal, we uncover the chilling true cybercrime story of the NotPetya attack — a weaponized piece of malware launched by the Russian state-backed hacking group Sandworm, which brought Maersk, the world’s largest shipping company, to its knees. What began as an atta...