

Cybersecurity Headlines
CISO Series
Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.
Episodes
Mentioned books

Dec 1, 2023 • 8min
Manufacturing tops extortion, RETVec battles spam, new Zyxel warnings
Manufacturing industry tops cyber extortion trend, Google's RETVec battles spam, Zyxel warns of NAS vulnerabilities. SpyCloud's research reveals infostealer malware as a precursor to ransomware attacks. Discussion on cybersecurity incidents, malware evasion, phishing scam, and upcoming events.

Nov 30, 2023 • 6min
Okta breach expands, JAXA cyberattack, leaky GPTs
Discusses cybersecurity events including breaches at Okta and JAXA, leaked secrets from OpenAI's chatbots, and Bluetooth vulnerabilities.

Nov 29, 2023 • 8min
Ransomware gang busted in Ukraine, North Texas water utility cyberattack, Former Uber CISO breaks 6-year silence
International operation arrests ransomware gang in Ukraine, cyber attack on Texas water utility, former Uber CISO breaks silence. Keynote addresses, ransomware attack on National Aerospace Lab, link between infostealer malware and ransomware, ownCloud vulnerability, Google Workspace design flaw. Privilege management, background report service, malicious bots, upcoming cybersecurity live stream content.

Nov 28, 2023 • 7min
International AI agreement, water utility attack, Ukraine cyberattack on Russian aviation
Topics include an international AI agreement, a cyber attack on a water utility, and Ukraine's claim of a cyber attack on Russian aviation. Also covered are ransomware attacks, infostealer malware, a ransomware attack on a Slovenian power company, the use of Tron blockchain for funding militant groups, and Amazon's new thin client for enterprise customers.

Nov 27, 2023 • 8min
London & Zurich, Fidelity National Financial attacks, Royal Family's hospital, Vanderbilt University Med Center attacks, US Nuclear lab and Gulf Air breaches
Podcast discusses cyber attacks targeting London & Zurich, Fidelity National Financial, Royal Family’s hospital, Vanderbilt University Med Center, US Nuclear lab, and Gulf Air. Also covers data breaches at Gulf Air, US nuclear lab, and Canadian military. Law firm services disrupted, atomic stealer malware, vulnerabilities in ownCloud and the re-emergence of the Mirai Botnet.

Nov 22, 2023 • 8min
Cyber exec hacked hospital, 'Citrix Bleed' vuln targeted, Binance CEO steps down in $4 billion settlement
A cyber executive admits hacking a hospital, Citrix Bleed vulnerability targeted by nation-state hackers, and Binance CEO steps down in a $4 billion settlement. The podcast also covers charges against Binance, a zero-day vulnerability in Windows Defender, malware, a breach on a nuclear research lab, hacktivist groups, and upcoming cybersecurity events.

Nov 21, 2023 • 7min
Healthcare hit with MOVEit, malware uses trig, OpenAI shakeup
MOVEit threat actors impact healthcare platform. OpenAI undergoes a shakeup with CEO Sam Altman fired and a new CEO appointed. Collaboration between OpenAI and Microsoft discussed. CISA's pilot program for cybersecurity services in healthcare, water, and education sectors mentioned. Google plans to phase out third-party cookies. Ongoing issues with third-party cookies in Chrome. Dismissal of Ukrainian cyber officials. Cyber attack on Canadian government. Questionable sales tactics used after a cyber attack.

Nov 20, 2023 • 7min
Clorox CISO departure, BlackCat's SEC complaint, Dudley interim NCD
Clorox CISO departure, BlackCat's SEC complaint, Dudley interim NCD, risks of people in security, email threats, Medicare breach, and ransomware attacks.

Nov 17, 2023 • 27min
Week in Review: UK Health data shared, SSH keys vulnerable
Controversy over UK bio bank sharing health data with insurance companies, ethical concerns in selling health data, skepticism towards reported decrease in vulnerabilities, complexity of cybersecurity regulations, software vulnerabilities decline and individual risk

Nov 17, 2023 • 8min
Fortinet Injection bug, Another Samsung breach, government Rhysida warning
Fortinet warns of command injection bug in FortiSIEM, Samsung experiences another data breach, FBI and CISA issue Rhysida warning, cybersecurity topics and events discussed including authentication creds in public software code, Ali Baba cloud spinoff scrapped, Zimbra zero-day exploitation in government orgs.


