Cybersecurity Headlines

FBI Director warns of Chinese hacker threat to U.S. critical infrastructure, CISA warns of exploited Apple flaw, Pentagon Intelligence supplier allegedly hacked

FBI takes down Chinese hacking group Volt Typhoon, companies refusing to pay ransoms, Binance's data exposed. Also discussed: Nightshade tool, Defiance Act, sim swapping ring, EU cybersecurity certification, Yvonte Zero Days, ARS Technica, compliance in cybersecurity

Mercedes-Benz exposes sensitive data, Juniper Networks issues out-of-band fix for high severity flaws, new variant of ZLoader malware emerges. Also, the development of 3D-scaled chips by Semron. Announcement of a cybersecurity gameshow and social media accounts to follow.

Microsoft takes another hit, Energy giant hit by ransomware, the NSA is secretly buying your data

Jenkins patch alert and Cisco flaw in Unified Comms systems. Pro-Ukraine hackers wipe 2 petabytes of data from Russian intel center. Vanta is a Trust Management Platform for compliance and security. Microsoft Teams outage and Russian hackers breach senior Microsoft executives. Ransomware attack on Kansas City Public Transit Agency by Medusa gang.

Guest Mike Kelley, vp, CISO, The E.W. Scripps Company and partner, OTAWireless.com, discusses the hidden costs of ransomware attacks and the increasing acceptance of passkeys for security. The chapter also explores the impact of AI on cybersecurity and the positive effects of sanctions on cybersecurity.

Hewlett Packard Enterprise attacked through email system. Study reveals 18,000 exposed API secrets. Ukrainian energy, postal, and transportation services hit by cyberattacks. Parcel delivery company disables chatbot after viral backlash.

EquiLend is offline due to a cyberattack. Brits warn about the impact of AI on ransomware. A data leak claims to hold over 26 billion records.

CISA boss targeted in swatting attack, Subway investigates LockBit, Australia sanctions REvil hacker. Apple releases Stolen Device Protection feature, X adopts passkeys for login.

Topics discussed include Thailand's data leak, CISA's Ivanti order, decline in cybersecurity startup funding, DDoS attack on a Ukrainian bank, data breach at Trezor, Electronic Frontier Foundation's surveillance systems resource hub, and a new attack method targeting abandoned libraries in Java and Android apps.