EPA warns of critical risks in drinking water infrastructure Four million WordPress sites exposed Sextortion scams bypass Microsoft security filters Thanks to today’s episode sponsor, ThreatLocker
Category: Cyber Security Headlines
T-Mobile confirms breach, AnnieMac data stolen, NewGlove malware threat
T-Mobile confirms telecom breach hack Customer data stolen from AnnieMac New Glove infostealer malware bypasses Chrome’s cookie encryption Thanks to today’s episode sponsor, ThreatLocker Do zero-day exploits and supply chain attacks keep you up at night? Worry no more; you…
Week in Review: Most common passwords, Secure-by-design, DNA firm vanishes
Link to episode page This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Brett Conlon, CISO, American Century Investments Thanks to our show sponsor, ThreatLocker
NordPass popular passwords, Healthcare extortion sentence, China breached telecoms
China threat actors breached U.S. broadband providers to spy on U.S. government officials 123456 tops the list of most popular passwords again Hacker gets 10 years in prison for U.S. healthcare extortion scheme Thanks to today’s episode sponsor, ThreatLocker Do…
Volt Typhoon’s new botnet, China APT hits Tibet, DoD leaker sentenced
Volt Typhoon rebuilding botnet Chinese group targets Tibetan media DoD leaker sentenced Thanks to today’s episode sponsor, ThreatLocker Do zero-day exploits and supply chain attacks keep you up at night? Worry no more; you can harden your security with ThreatLocker.…
Giant Food cyberattack, Snowflake suspects indicted, zero-day vulnerability surge
Dutch cybersecurity incident affects Giant Food and Hannaford Indictment against Snowflake breach suspects is released Surge in zero-day vulnerability exploits is new normal, says Five Eyes Thanks to today’s episode sponsor, ThreatLocker Do zero-day exploits and supply chain attacks keep…
Halliburton cyberattack costs, Israel credit card DDoS, Forth announces breach
Cyberattack cost Halliburton $35 million thus far DDoS attack makes credit card readers malfunction in Israel Debt relief firm Forth announces data breach for customers and non-customers Thanks to today’s episode sponsor, ThreatLocker Do zero-day exploits and supply chain attacks…
Regulator limits phone use, Hacked police emails, UK seniors scammed
U.S. financial regulator calls for reduced cell phone use at FBI warns of spike in hacked police emails and fake subpoenas Cyberscoundrels target UK senior citizens with Winter Fuel Payment texts Thanks to today’s episode sponsor, ThreatLocker Do zero-day exploits…
Week in Review: Sophos Chinese hacker warning, AI flaws and vulnerabilities
Link to episode page This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Ken Athanasiou, CISO, VF Corporation Thanks to our show sponsor, Vanta As third-party breaches continue to rise, companies are increasingly…
Interlock targets healthcare, Canada dissolves TikTok, HP critical flaws
Interlock ransomware gang aims at U.S. healthcare, IT and government Canada tells TikTok to dissolve its Canadian business Hewlett Packard warns of critical RCE flaws in Aruba Networking software Thanks to today’s episode sponsor, Vanta As third-party breaches continue to…
Nokia investigates breach claims, Nigerian cybercrime bust, SelectBlinds e-skimmer breach
Nokia says it has no evidence that hackers breached company data Nigerian cybercrime bust arrests 130 people 200,000 SelectBlinds customers impacted by e-skimmer Thanks to today’s episode sponsor, Vanta As third-party breaches continue to rise, companies are increasingly vigilant, which…
ElizaRAT hits India, Washington court outage, Snowflake hacker arrested
ElizaRAT hits India IT outage impacts Washington courts Alleged Snowflake hacker arrested Thanks to today’s episode sponsor, Vanta As third-party breaches continue to rise, companies are increasingly vigilant, which means more time spent on manual security reviews. With Vanta Questionnaire…
Schneider Electric breached again, Russia behind fake video, Ohio’s ransomware lawsuits
Schneider Electric breached for second time this year U.S. says Russia behind fake Haitian voter video Ohio’s capital city faces lawsuits for handling of ransomware attack Thanks to today’s episode sponsor, Vanta As third-party breaches continue to rise, companies are…
Entra MFA mandatory, German pharma cyberattack, LightSpy iPhone enhancements
Microsoft Entra “security defaults” to make MFA setup mandatory Ransomware attack hits German pharmaceutical wholesaler AEP Upgraded LightSpy spyware targets iPhones with more destructive power Thanks to today’s episode sponsor, Vanta As third-party breaches continue to rise, companies are increasingly…
Week in Review: Deepfake targets Wiz, Black Basta leverages Teams, Russia’s Linux plans
Link to episode page This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest David Cross, SVP/CISO, Oracle. Also check out David’s travel blog and recent “Secure by Default” white paper at IT ISAC.…
Peruvian bank heist, Task Manager error, CyberPanel vulnerabilities exploited
Peruvian bank warns of data theft after dark web revelations Windows 11 Task Manager displays wrong number of running processes CyberPanel sees vulnerabilities exploited soon after disclosure Thanks to today’s episode sponsor, Dropzone AI Security operations are evolving, and AI…
CISA’s plan, North Korea comes to Play, FakeCall’s new tricks
CISA launches International Cybersecurity Plan North Korean hackers tied to Play ransomware FakeCall learns new tricks Thanks to today’s episode sponsor, Dropzone AI Tired of false positives slowing your SOC down? Dropzone AI uses advanced AI to filter out the…
Five Eyes program, Chinese activity, Russian Linux
Five Eyes launches startup security program Canada and the Netherlands seeing increased Chinese activity Russia might fork the Linux community Thanks to today’s episode sponsor, Dropzone AI Facing alert overload? Dropzone AI autonomously investigates every alert, reducing noise and providing…
RedLine and Meta infostealer takedown, Russian-backed malware, French telecom breach
Global law enforcement gains access to RedLine and Meta infostealer networks Russian-backed malware poses as Ukrainian anti-recruitment tool Massive breach impacts French telecom giant Thanks to today’s episode sponsor, Dropzone AI Imagine an AI analyst that never sleeps. Dropzone…
Historic Change Healthcare breach, Telcom hacks investigation, Delta sues CrowdStrike
Change Healthcare data breach confirmed as largest-ever in U.S. healthcare history Authorities investigate telecom hacks following reports of campaign intrusions Delta sues CrowdStrike over sensor update that prompted mass flight disruptions Thanks to today’s episode sponsor, Dropzone AI Is your…
Week in Review: Solar Winds fines, Microsoft loses security logs, employee security awareness lacking
Link to episode page This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Dmitriy Sokolovskiy, senior vice president, information security, Semrush Thanks to our show sponsor, SpyCloud SpyCloud disrupts cybercrime by telling you…
Qiliin ransomware upgrade, Sharepoint KEV flaw, Rhysida ransoms Easterseals
Researchers reveal upgraded Qilin ransomware-as-a-service CISA adds Microsoft SharePoint flaw to its KEV catalog Rhysida ransoms Easterseals Thanks to today’s episode sponsor, SpyCloud Ransomware continues to impact organizations. A new report released by SpyCloud shares insights from your peers in…
CISA data rules, Fortinet zero-day, UK Cyber Essentials
CISA proposes new security requirements for personal data Fortinet patches actively exploited zero-day UK report on Cyber Essentials certification Thanks to today’s episode sponsor, SpyCloud Stolen data is a hot commodity for cybercriminals. Using infostealer malware, bad actors can siphon…
SolarWinds disclosure fines, Zendesk helps Internet Archive, Samsung zero-day
Four cyber companies fined for SolarWinds disclosure failures Zendesk helps Internet Archive after hacker breached email system Samsung zero-day under active exploit Thanks to today’s episode sponsor, SpyCloud Researchers at SpyCloud recently found that one in five individuals was infected…
U.S. rule on selling sensitive data, Cisco data stolen, Nidec breach
Proposed rules ban U.S. companies from selling sensitive data Cisco data stolen by IntelBroker Nidec breach exposes 50,000+ documents Thanks to today’s episode sponsor, SpyCloud Did you know that infostealer malware can be a precursor to ransomware? Infostealers are a…
Microsoft logs lost, Omni Family breach, Internet Archive Zendesk breach
Microsoft warns it lost some customers’ security logs for a month Omni Family Health data breach impacts almost half a million individuals Internet Archive breached again through stolen access tokens Thanks to today’s episode sponsor, SpyCloud It turns out infostealer…
Week in Review: Amazon passkeys usage, healthcare ransomware stats, major cybercrime takedowns
Link to blog post This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Steve Person, CISO, Cambia Health Thanks to our show sponsor, Conveyor It’s spooky season, and nothing’s scarier than all of…
Globe Life extortion, hacker USDoD arrested, Anonymous Sudan indicted
Insurance giant Globe Life facing extortion attempts after data theft from subsidiary Infamous hacker USDoD possibly arrested in Brazil Anonymous Sudan masterminds indicted Thanks to today’s episode sponsor, Conveyor It’s spooky season, and nothing’s scarier than all of your account…
AI models tested, breaking encryption, Intel security review
Putting AI models to the EU test Chinese researchers don’t break classical encryption… yet Chinese group calls for security reviews on all Intel products Thanks to today’s episode sponsor, Conveyor There’s so many reasons why infosec and presales teams choose…
Pokémon game developer breached, TrickMo’s new variants, Ivanti zero-days exploited
Pokémon game developer breached TrickMo hits with 40 new trojan variants Nation-state actor exploits Ivanti zero-days Thanks to today’s episode sponsor, Conveyor It’s spooky season, and nothing’s scarier than all of your account execs asking if you’re done with their…
VW alleged data theft, Finland seizes Sipultie, Calgary library cyberattack
VW says IT infrastructure unaffected after alleged data theft Finland seizes servers of ‘Sipultie’ dark web market Calgary Public Library services limited after cyberattack Thanks to today’s episode sponsor, Conveyor Does the thought of a whopper 300 question security questionnaire…