

Cybersecurity Headlines
CISO Series
Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.
Episodes
Mentioned books

8 snips
Jun 19, 2025 • 8min
Episource Breach, Predatory Sparrow strikes again, Swiss banks data leak
Over 5 million individuals were impacted by a significant breach at Episource. The notorious Predatory Sparrow group has struck again, this time targeting Iran's crypto exchange. Additionally, there's a troubling data leak involving Swiss banks. The podcast also covers a major vulnerability found in Linux distributions and highlights federal efforts to recover cryptocurrencies linked to scams. Engaging insights into the evolving landscape of cybersecurity are woven throughout, emphasizing the need for proactive measures.

18 snips
Jun 18, 2025 • 9min
Hackers exploit Langflow flaw, TP-Link routers still vulnerable, Russia detects SuperCard malware attacks
A critical vulnerability in Langflow has led to the rise of the Flodrix botnet, putting organizations on high alert. Discontinued TP-Link routers remain a target for hackers, heightening security concerns. In a shocking twist, Russia identifies SuperCard malware attacks that skim bank data via NFC. Meanwhile, deepfake scams and AI-driven phishing are evolving, prompting a call for enhanced security measures. Experts also highlight the need for better security protocols to combat emerging threats.

7 snips
Jun 17, 2025 • 8min
2FA middleman, Archetyp seized, Zoomcar hacked
Explore the alarming world of SMS two-factor authentication breaches, where telecom intermediaries play a dangerous role. Discover the police crackdown on Archetyp Market and the massive Zoomcar hack impacting 8.4 million users. Delve into evolving threats like DeerStealer malware and new cybersecurity recommendations from NIST. The podcast also highlights the ongoing antitrust investigation into Google and the significance of tailored cybersecurity solutions. Stay aware and informed about these critical issues!

8 snips
Jun 16, 2025 • 8min
Washington Post hacked, WestJet suffers cyberattack, Texas DoT breach
A major hacking incident involving journalists' emails was investigated by the Washington Post. WestJet faced a significant cyberattack, prompting urgent responses. Meanwhile, the Texas Department of Transportation suffered a breach, exposing vulnerabilities in critical infrastructure. Evolving threats like deepfake scams and AI-driven phishing have become a growing concern, underlining the necessity for advanced cybersecurity measures and training. Solutions are emerging, including innovative tools to combat these sophisticated attacks.

21 snips
Jun 13, 2025 • 25min
Week in Review: Google and Cloudflare outages, Copilot Zero-Click, Cloudflare's Claude flair
Christina Shannon, CIO at Kik Consumer Products, shares her expertise on the intersection of IT and operational technology. She discusses recent Google and Cloudflare outages, emphasizing the importance of robust internet reliability. The conversation shifts to the security implications of emergent AI tools like Microsoft’s Copilot, advocating for businesses to adapt their security strategies. Furthermore, she highlights how AI is reshaping quality assurance roles in tech, underlining the need for thorough documentation amid budget cuts and rising cybersecurity threats.

6 snips
Jun 13, 2025 • 8min
Microsoft Entra attack, Thursday's Cloud outages, Mark Green retires
A significant hacking campaign is targeting Microsoft Entra ID accounts, raising concerns about cloud security. Recent outages at Google Cloud and Cloudflare add to the tension in the cybersecurity landscape. The retirement of House Homeland Chairman Mark Green could influence future cyber legislation. Additionally, a complex ransomware attack highlights vulnerabilities in employee monitoring software. Emerging threats also include spyware aimed at journalists and critical flaws in smart device security, underscoring the need for vigilance in our interconnected world.

Jun 12, 2025 • 8min
CoPilot zero-click, Operation Secure, FIN6 targets recruiters
Discover the latest on a zero-click vulnerability in Copilot and how it impacts data security. Dive into Operation Secure, aimed at dismantling global cybercrime, and learn about the sneaky tactics of the FIN6 group, which exploits job applications for phishing. Explore the recent cybersecurity challenges faced by retailers like Whole Foods and a new bipartisan healthcare bill designed to enhance security. Plus, get insights into malware attacks, including a troubling spam campaign leveraging AI-generated content.

15 snips
Jun 11, 2025 • 8min
40K IoT cameras stream secrets to browsers, Marks & Spencer taking online orders post-cyberattack, PoC Code escalates Roundcube Vuln threat
A shocking revelation as 40,000 IoT cameras are found streaming secrets accessible to anyone online. Major concerns arise from a Windows zero-day vulnerability targeting a significant Turkish defense organization. Marks & Spencer makes a comeback after a cyberattack sidelined their online orders for weeks. The episode also dives into webmail vulnerabilities and the troubling resurgence of stolen Ticketmaster data. This whirlwind of cyber threats highlights the pressing need for better security measures.

8 snips
Jun 10, 2025 • 8min
Cybersecurity News: Brute forcing Google accounts, Guardian's Secure Messaging, UNFI cyberattack
The discussion kicks off with vulnerabilities in Google's account recovery process, revealing alarming brute-force tactics. The Guardian launches a new secure messaging service, aiming to enhance safe communications. A significant cyberattack crippled United Natural Foods, underscoring threats to the food distribution sector. The rise of innovative cyber threats is explored, including Pathwiper malware targeting Ukrainian infrastructure and unique ransomware tactics against Russian firms. Plus, the challenges of striking a balance in security technology are highlighted with Cloudflare's new tools.

8 snips
Jun 9, 2025 • 9min
Cyber executive order, Neuberger's infrastructure warning, Mirai botnet warning
A new Presidential cyber executive order aims to bolster software security and internet routing. Neuberger highlights alarming vulnerabilities in U.S. infrastructure, raising awareness of cyberattack risks. Meanwhile, a fresh variant of the Mirai botnet is targeting TBK DVR devices. In the realm of AI, OpenAI is combating state-sponsored hacking activities linked to ChatGPT accounts. The danger continues with a supply chain malware attack affecting popular ecosystems, and a significant data breach has exposed billions of records.


