This CISO Daily Update covers: 00:06 City of Wichita Shuts Down IT Network After Ransomware Attack 00:38 Cyber Alliance Threatens Major U.S. Energy Firms: High Society and Cyber Army of Russia Collaborate 01:17 MedStar Health Breach: Hackers Accessed Emails & Files 02:02 CISA Says ‘No More’ to Decades-Old Directory Traversal Bugs 02:43 Beware Of Phishing Attacks Targeting AmericanExpress Card Users 03:26 APT42 Hackers Posing As Event Organizers To Hijack Victim Network 04:07 New 'Cuckoo' Per...
May 07, 2024•9 min•Ep. 42
This CISO Daily Update covers: 00:06 Microsoft Ties Executive Pay to Security Following Multiple Failures and Breaches 01:00 F Society Targets Rutgers University, Bitfinex in Latest Cyberattack 01:45 Ransomware Drama: Law Enforcement Seized Lockbit Group’s Website Again 02:32 Illinois’ Biometric Data Privacy Law Could Soon Be Less Costly for Violators 03:27 These Dangerous Scammers Don’t Even Bother to Hide Their Crimes 04:13 Four Critical Vulnerabilities Expose HPE Aruba Devices to RCE Attacks ...
May 06, 2024•10 min•Ep. 41
This CISO Daily Update covers: 00:06 Dropbox Says Attackers Accessed Customer and MFA Info, API Keys 00:49 Data Breach Hits Panda Restaurants 01:33 Cybersecurity Consultant Arrested After Allegedly Extorting IT Firm 02:14 Microsoft Graph API Emerges as a Top Attacker Tool to Plot Data Theft 02:56 DPRK's Kimsuky APT Abuses Weak DMARC Policies, Feds Warn 03:50 US and UK Warn of Disruptive Russian OT Attacks 04:47 REvil Ransomware Scum Sentenced to Almost 14 Years Inside, Ordered to Pay $16 Million...
May 03, 2024•11 min•Ep. 40
This CISO Daily Update covers: 00:06 More Than 450K Hit by JPMorgan Breach 00:48 Ex-NSA Employee Sentenced to 22 Years for Trying to Sell U.S. Secrets to Russia 01:25 US Charges 16 Over ‘Depraved’ Grandparent Scams 02:11 Carmakers Lying About Requiring Warrants Before Sharing Location Data, Senate Probe Finds 02:56 Bitcoin Forensic Analysis Uncovers Money Laundering Clusters and Criminal Proceeds 03:31 New Cuttlefish Malware Infects Routers to Monitor Traffic for Credentials 04:17 ZLoader Malwar...
May 02, 2024•10 min•Ep. 39
This CISO Daily Update covers: 00:06 Kansas City System Providing Roadside Weather, Traffic Info Taken Down by Cyberattack 00:42 Philadelphia Inquirer Struck by Cyberattack 01:19 Change Healthcare Hacked Using Stolen Citrix Account With No MFA 02:07 US Spy Agencies to Share Intelligence on Critical Infrastructure in Policy Revamp 02:53 Google Blocked 2.3M Apps From Play Store Last Year for Breaking the G Law 03:49 Millions of Malicious 'Imageless' Containers Planted on Docker Hub Over 5 Years 04...
May 01, 2024•9 min•Ep. 38
This CISO Daily Update covers: 00:06 FCC Fines Carriers $200 Million for Illegally Sharing User Location 00:46 Financial Business and Consumer Solutions (FBCS) Data Breach Impacted 2M Individuals 01:27 Voter Registration System Taken Offline in Coffee County Cyber-Incident 02:07 Agent Tesla and Taskun Malware Targeting US Education and Govt Entities 02:43 HookChain – A New Sophisticated Technique Evades EDR Detection 03:18 Sandbox Escape Vulnerabilities in Judge0 Expose Systems to Complete Takeo...
Apr 30, 2024•10 min•Ep. 37
This CISO Daily Update covers: 00:06 Okta Warns of Unprecedented Surge in Proxy-Driven Credential Stuffing Attacks 00:57 Hackers May Have Accessed Thousands of Accounts on the California State Welfare Platform 01:36 US Post Office Phishing Sites Get As Much Traffic As the Real One 02:24 FBI: Fraudsters Using Fake Online Dating Verification Apps to Scam Lovers 03:16 Bogus npm Packages Used to Trick Software Developers into Installing Malware 04:01 Kaiser’s Website Tracking Tools May Have Compromi...
Apr 29, 2024•10 min•Ep. 36
This CISO Daily Update covers: 00:00 Introduction 00:06 Central Power Systems & Services’ Website Down After Alleged Hunters Group Cyberattack 00:43 Plasma Donation Company Octapharma Slowly Reopening As BlackSuit Gang Claims Attack 01:20 Anti-Trump PAC Lincoln Project Scammed for $35,000 After Vendor Email Hack 02:09 State-Sponsored Hackers Exploit Two Cisco Zero-Day Vulnerabilities for Espionage 02:53 Autodesk Drive Abused in Phishing Attacks 03:29 DOJ Arrested the Founders of Crypto Mixer...
Apr 26, 2024•9 min•Ep. 35
This CISO Daily Update covers: 00:06 Russian Hackers Claim Cyberattack on Indiana Water Plant 00:50 Volkswagen Hacked – Hackers Stolen 19,000 Documents From VW Server 01:33 Ring Customers Get $5.6 Million in Privacy Breach Settlement 02:17 US Offers a $10 Million Reward for Information on Four Iranian Nationals 02:58 Threat Actor Uses Multiple Infostealers in Global Campaign 03:46 Seedworm Hackers Exploit RMM Tools to Deliver Malware 04:31 Siemens Working on Fix for Device Affected by Palo Alto ...
Apr 25, 2024•9 min•Ep. 34
This CISO Daily Update covers: 00:06 Nespresso Domain Serves Up Steamy Cup of Phish, No Cream or Sugar 00:44 UnitedHealth CEO to Testify About Ransomware Attack 01:22 CISA Releases Physical Security Checklist for Polling Locations to Safeguard U.S. Elections 02:04 This Website is Selling Billions of Private Messages of Discord Users 02:47 U.S. Imposes Visa Restrictions on 13 Linked to Commercial Spyware Misuse 03:18 HelloKitty Ransomware Rebranded and Back in Business, Looking for Employees 03:5...
Apr 24, 2024•8 min•Ep. 33
This CISO Daily Update covers: 00:06 Hackers Offering Admin Access to 3000 Fortinet SSL-VPN 00:50 Rural Texas Towns Report Cyberattacks That Caused One Water System to Overflow 01:30 Research Shows How Attackers Can Abuse EDR Security Products 02:16 Microsoft: APT28 Hackers Exploit Windows Flaw Reported by NSA 03:09 Alleged Cyberattack on Bureau van Dijk: US Consumer Data Compromised 03:50 ToddyCat APT Hackers Deploy Multiple Tools to Hijack Network Infrastructure 04:37 Family-Owned Music Store ...
Apr 23, 2024•10 min•Ep. 32
This CISO Daily Update covers: 00:06 MITRE Hit in Massive Supply Chain Attack: State-Backed Hackers Exploit Zero-Days 00:47 Cybercriminals Threaten to Leak All 5 Million Records From Stolen Database of High-Risk Individuals 01:32 Multiple LastPass Users Lose Master Passwords to Ultra-Convincing Scam 02:20 Researchers Find Dozens of Fake E-ZPass Toll Websites After FBI Warning 02:59 Malware Dev Lures Child Exploiters Into Honeytrap to Extort Them 03:43 GitHub Comments Abused to Push Malware via M...
Apr 22, 2024•9 min•Ep. 31
This CISO Daily Update covers: 00:06 Frontier Communications Shuts Down Systems After Cyberattack 00:37 Akira Ransomware Gang Made $42 Million From 250 Attacks Since March 2023: FBI 01:24 R00TK1T Claims that They have Acquired Confidential Data from Nestle 01:59 ‘Crude’ Ransomware Tools Proliferating on the Dark Web for Cheap, Researchers Find 02:56 Global Police Operation Disrupts 'LabHost' Phishing Service, Over 30 Arrested Worldwide 03:33 Malicious Google Ads Pushing Fake IP Scanner Software ...
Apr 19, 2024•9 min•Ep. 30
This CISO Daily Update covers: 00:06 OpenAI’s GPT-4 Can Exploit Real Vulnerabilities by Reading Security Advisories 00:56 HHS Scrambles to Patch Security Hole After $7.5 Million Cyberattack 01:32 Cherry Health Hit by Ransomware Attack 02:03 Patients Sue Ernest Health After Data Breach of 94,747 Exposed 02:41 Hackers Exploit Fortinet Flaw, Deploy ScreenConnect, Metasploit in New Campaign 03:25 Critical Atlassian Flaw Exploited to Deploy Linux Variant of Cerber Ransomware 04:02 Ivanti Patches Two ...
Apr 18, 2024•9 min•Ep. 29
This CISO Daily Update covers: 00:06 UnitedHealth: Change Healthcare Cyberattack Caused $872 Million Loss 00:57 SIM Swap Crooks Solicit T-Mobile US, Verizon Staff via Text to Do Their Dirty Work 01:39 FTC Fines Mental Health Startup Cerebral $7 Million for Major Privacy Violations 02:10 IntelBroker Claims Space-Eyes Breach, Targeting US National Security Data 02:48 Steganography Leveraged in New Global TA558 Attack Campaign 03:29 Blackjack Hackers Destroyed 87,000 Sensors Using Lethal ICS Malwar...
Apr 17, 2024•9 min•Ep. 28
This CISO Daily Update covers: 00:06 FBI Warns of Massive Toll Services Smishing Scam 00:45 Roku Makes 2FA Mandatory for All After Nearly 600K Accounts Pwned 01:19 Cisco Duo Warns Third-party Data Breach Exposed SMS MFA Logs 01:56 DAIXIN Ransomware Group Claims Data Breach at Omni Hotels, Threatens Leaks 02:28 Top Officials Again Push Back on Ransom Payment Ban 03:09 Earth Hundun’s Hackers Employ Waterbear And Deuterbear Tools For Advanced Cyber Attacks 03:50 Apache Kafka Flaw Let Attackers Gain...
Apr 16, 2024•7 min•Ep. 27
This CISO Daily Update covers: 00:06 Gmail And YouTube Hackers Bypass Google’s 2FA Account Security 00:56 CISA Issues Emergency Directive After Midnight Blizzard Microsoft Hits 01:35 US Sanctions Hamas ‘Cyber Influence’ Leader 02:21 Hackers Deploy Python Backdoor in Palo Alto Zero-Day Attack 03:18 Crooks Manipulate GitHub’s Search Results to Distribute Malware 03:52 FatalRAT Targets Cryptocurrency Users With DLL Side-loading Techniques 04:28 Firebird RAT Creator and Seller Arrested in the U.S. a...
Apr 15, 2024•8 min•Ep. 26
This CISO Daily Update covers: 00:06 Microsoft Security Lapse Exposed Sensitive Credentials and Internal Resources of Employees 00:42 Another Bank Hit: Wells Fargo Confirms Data Breach 01:13 Universities in New Mexico, Oklahoma Respond to Ransomware Attacks 01:53 Sisense Data Breach Triggers CISA Alert and Urgent Calls for Credential Resets 02:29 LastPass: Hackers Targeted Employee in Failed Deepfake CEO Call 03:03 Apple: Mercenary Spyware Attacks Target iPhone Users in 92 Countries 03:43 Intel ...
Apr 12, 2024•9 min•Ep. 25
This CISO Daily Update covers: 00:06 AT&T Now Says Data Breach Impacted 51 Million Customers 00:45 X Fixes URL Blunder That Could Enable Convincing Social Media Phishing Campaigns 01:20 Beware: GitHub's Fake Popularity Scam Tricking Developers into Downloading Malware 02:01 Malicious PowerShell Script Pushing Malware Looks AI-Written 02:35 Cagey Phishing Campaign Delivers Multiple RATs to Steal Windows Data 03:09 Telegram Dismisses Claims of ‘High-risk’ RCE Bug in its Desktop Application 03:...
Apr 11, 2024•9 min•Ep. 24
This CISO Daily Update covers: 00:06 DOJ Data on 340,000 Individuals Stolen in Consulting Firm Hack 00:41 Group Health Cooperative Falls Victim to Ransomware Attack, 500K People Affected 01:22 Medusa Cybercrime Gang Takes Credit for Another Attack on US Municipality 01:58 Hackers Using Malware-Driven Scanning Attacks To Pinpoint Vulnerabilities 02:54 10-Year-Old 'RUBYCARP' Romanian Hacker Group Surfaces with Botnet 03:50 Microsoft Plugs Gaping Hole in Azure Kubernetes Service Confidential Contai...
Apr 10, 2024•10 min•Ep. 23
This CISO Daily Update covers: 00:06 Change Healthcare Faces Second Ransomware Dilemma Weeks After Alphv Attack 00:47 Targus Discloses Cyberattack After Hackers Detected on File Servers 01:28 Cybercriminals Targeting Latin America with Sophisticated Phishing Scheme 02:10 Hackers Deploy Crypto Drainers on Thousands of WordPress Sites 02:49 New Malware “Latrodectus” Linked to IcedID 03:40 Multiple CData Vulnerabilities Let Attackers Bypass Security Restrictions 04:17 AI-As-A-Service Providers Vuln...
Apr 09, 2024•8 min•Ep. 22
This CISO Daily Update covers: 00:06 US Health Dept Warns Hospitals of Hackers Targeting IT Help Desks 00:50 US Environmental Protection Agency Allegedly Hacked, 8.5M User Data Leaked 01:31 Attempted Hack on NYC Continues Wave of Cyberattacks Against Municipal Governments 02:06 Home Depot Confirms Third-party Data Breach Exposed Employee Info 02:33 Pacific Guardian Life Insurance Says 165,000 Had Financial Info Stolen in 2023 Attack 03:06 Hackers Exploit Magento Bug to Steal Payment Data from E-...
Apr 08, 2024•7 min•Ep. 21
This CISO Daily Update covers: 00:06 US Cancer Center Data Breach Exposes Info of 827,000 Patients 00:45 Another Insider in OneCoin Cryptocurrency Scam Gets Prison Sentence 01:36 Cybercriminals Are Spreading Malware Through Facebook Pages Impersonating AI Brands 02:19 Hosting Provider VMware ESXi Servers Hit By New SEXi Ransomware 02:53 New Phishing Campaign Targets Oil & Gas with Evolved Data-Stealing Malwar e 03:21 Hackers Hijacked Notepad++ Plugin To Execute Malicious Code 03:58 Visa Warn...
Apr 05, 2024•10 min•Ep. 20
This CISO Daily Update covers: 00:06 U.S. Cyber Safety Board Slams Microsoft Over Breach by China-Based Hackers 00:51 US Federal Employee Data Leaked, Claimed by Hacker Trio 01:35 Cyberattack Cripples NorthBay VacaValley Hospital, Patients Left in Limbo 02:14 Omni Hotels Confirms Cyberattack Behind Ongoing IT Outage 02:49 Missouri County Home to Kansas City Says Suspected Ransomware Attack Affecting Tax Payments 03:33 Halo Hacked, Private Data Stolen 04:14 YouTube Channels Found Using Pirated Vi...
Apr 04, 2024•10 min•Ep. 19
This CISO Daily Update covers: 00:06 Google to Delete Billions of Browsing Records in 'Incognito Mode' Privacy Lawsuit Settlement 00:43 Feds Finally Decide to Do Something About Years-Old SS7 Spy Holes in Phone Networks 01:24 Prudential Insurance Says Data of 36,000 Exposed During February Cyberattack 02:06 Vulnerability Database Backlog Due to Increased Volume, Changes in ‘Support,’ NIST Says 02:43 Trusted Contributor Plants Sophisticated Backdoor in Critical Open-Source Library 03:27 Massive P...
Apr 03, 2024•10 min•Ep. 18
This CISO Daily Update covers: 00:06 OWASP Discloses a Data Breach 00:41 Data Security Fears: Congress Bans Staff Use of Microsoft’s AI Copilot 01:19 Hackers Exploit Google Ads Tracking Feature To Deliver Malware 01:55 Shopping Platform PandaBuy Data Leak Impacts 1.3 Million Users 02:32 Yacht Retailer MarineMax Discloses Data Breach After Cyberattack 03:09 Malicious Apps Caught Secretly Turning Android Phones into Proxies for Cybercriminals 03:49 Imperva Web Application Firewall Flaw Let Attacke...
Apr 02, 2024•8 min•Ep. 17
This CISO Daily Update covers: 00:06 AT&T Confirmed That a Data Breach Impacted 73 Million Customers 00:40 Hackers Target macOS Users with Malicious Ads Spreading Stealer Malware 01:27 American Fast-Fashion Firm Hot Topic Hit by Credential Stuffing Attacks 02:03 Vultur Banking Malware for Android Poses As McAfee Security App 02:46 Prisma Finance Crypto Theft Caps Strange Week of Platform Breaches 03:29 DinodasRAT Linux Variant Targets Users Worldwide 04:10 Urgent: Secret Backdoor Found in XZ...
Apr 01, 2024•9 min•Ep. 16
This CISO Daily Update covers: 00:06 US Puts Up $10M Bounty on BlackCat Ransomware Gang Members 00:45 UnitedHealth Group Disburses $3.3 Billion to Providers Affected by Change Healthcare Cyberattack 01:25 Municipalities in Texas, Georgia See Services Disrupted Following Ransomware Attacks 02:06 Cisco Warns of Password-Spraying Attacks Targeting VPN Services 02:55 PyPI Suspends New User Registration to Block Malware Campaign 03:41 Shopify Plugins Leaked Data From Nearly 2K Stores 04:18 The Comeba...
Mar 29, 2024•11 min•Ep. 15
This CISO Daily Update covers: 00:06 Facebook May Have Exploited User Devices to Spy on Competitors, Documents Show 00:54 Alert: New Phishing Attack Delivers Keylogger Disguised as Bank Payment Notice 01:37 Apple ID ‘Push Bombing’ Scam Campaign Hits Cyber Startup Founders 02:31 New Darcula Phishing Service Targets iPhone Users via iMessage 03:37 Hackers Developing Malicious LLMs After WormGPT Falls Flat 04:21 Worldwide Agenda Ransomware Wave Targets VMware ESXi Servers 05:03 CISA Adds Microsoft ...
Mar 28, 2024•10 min•Ep. 14
This CISO Daily Update covers: 00:06 AI Generated Fake Obituary Websites Target Grieving Users 00:51 St. Cloud Most Recent in String of Florida Cities Hit With Ransomware 01:26 TheMoon Malware Infects 6,000 Asus Routers in 72 Hours for Proxy Service 02:32 Linux Admins Beware! Fake PuTTY Client is Rhadamanthys Stealer 03:06 New ShadowRay Campaign Targets Ray AI Framework in Global Attack 03:45 Fortinet SSL VPN Exploit Up for Sale on Dark Web 04:28 Apple Patches Code Execution Vulnerability in iOS...
Mar 27, 2024•8 min•Ep. 13
