Cybersecurity Headlines

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Carla Sweeney, SVP, InfoSec, Red Ventures

Thanks to our show sponsor, Nudge Security

Are you struggling to secure your exploding SaaS footprint? With Nudge Security, you can discover all SaaS apps and accounts, manage access, ensure secure configurations, vet unfamiliar tools, and automate daily identity security tasks. Start a free 14-day trial

All links and the video of this episode can be found on CISO Series.com

President orders probe of former CISA Director Chris Krebs

Nissan Leaf cars can be hacked for remote spying and physical takeover

Infosec experts warn of China Typhoon retaliation against tariffs

Thanks to our episode sponsor, Nudge Security

Are you struggling to secure your exploding SaaS footprint? With Nudge Security, you can discover all SaaS apps and accounts, manage access, ensure secure configurations, vet unfamiliar tools, and automate daily identity security tasks. Start a free 14-day trial

Find the stories behind the headlines at CISOseries.com.

U.S. Comptroller suffers 'major incident'

Oracle confirms "obsolete servers" hacked

Police seize Smokeloader malware servers and detain customers

Thanks to our episode sponsor, Nudge Security

Nudge Security is the only solution for SaaS security and governance that can discover up to two years of historical SaaS spend along with usage insights so you can uncover wasted spend and sources of unnecessary risk. Start a free 14-day trial today

For the stories behind the headlines, visit CISOseries.com.

Thanks to our episode sponsor, Nudge Security

Nudge Security provides advanced security posture management for Okta, Microsoft 365, Google Workspace, and other critical apps. With Nudge, you'll be alerted of risks like weak or missing MFA, inactive admin accounts, and risky integrations, plus you can automate remediation tasks and on-going identity governance. Start a free 14-day trial today

Apple appeals UK encryption back door order

Researchers warn about AI-driven hacking tool

PoisonSeed campaign weaponizes CRM system

Thanks to our episode sponsor, Nudge Security

Nudge Security discovers every GenAI tool ever used in your org, even those you've never heard of. For each tool, you'll see who introduced it, who else is using it, where it's integrated into other tools, and a vendor security profile. Get your free GenAI inventory today.

Haugh fired from leadership of NSA and Cyber Command

WinRAR flaw bypasses Windows Mark of the Web security alerts

Researcher creates fake passport using ChatGPT

Thanks to our episode sponsor, Nudge Security

Nudge Security helps you mitigate security risks stemming from SaaS sprawl by discovering every SaaS account ever created by anyone in your org within minutes of starting a free trial. And, you can automate on-going governance tasks like security posture checks, user access reviews, employee offboarding, and more.

Start a free 14-day trial

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Howard Holton, COO and industry analyst, GigaOm

Thanks to our show sponsor, Qualys

Overwhelmed by noise in your cybersecurity processes? Cut through the clutter with Qualys Enterprise TruRisk Management. Quantify your cyber risk in clear financial terms and focus on what matters most. Actionable insights help you prioritize critical threats, streamline remediation, and accelerate risk reduction— while effectively communicating impact to stakeholders. Empower your cybersecurity strategy with tools that drive faster, smarter, and more efficient risk management. Your secure future starts today with Qualys Enterprise TruRisk Management. Visit qualys.com/etm for more information.

All links and the video of this episode can be found on CISO Series.com

Google patches Quick Share vulnerability

ChatGPT suffered brief outage Wednesday

UK's Royal Mail investigates data leak claims

Thanks to today's episode sponsor, Qualys

"Overwhelmed by noise in your cybersecurity processes? Cut through the clutter with Qualys Enterprise TruRisk Management. Quantify your cyber risk in clear financial terms and focus on what matters most. Actionable insights help you prioritize critical threats, streamline remediation, and accelerate risk reduction— while effectively communicating impact to stakeholders. Empower your cybersecurity strategy with tools that drive faster, smarter, and more efficient risk management. Your secure future starts today with Qualys Enterprise TruRisk Management. Visit qualys.com/etm for more information."

Find the stories behind the headlines at CISOseries.com.

North Korean IT worker army expands operations in Europe

Thanks to today's episode sponsor, Qualys

"Overwhelmed by noise in your cybersecurity processes? Cut through the clutter with Qualys Enterprise TruRisk Management. Quantify your cyber risk in clear financial terms and focus on what matters most. Actionable insights help you prioritize critical threats, streamline remediation, and accelerate risk reduction— while effectively communicating impact to stakeholders. Empower your cybersecurity strategy with tools that drive faster, smarter, and more efficient risk management. Your secure future starts today with Qualys Enterprise TruRisk Management. Visit qualys.com/etm for more information."

Thanks to today's episode sponsor, Qualys

"Overwhelmed by noise in your cybersecurity processes? Cut through the clutter with Qualys Enterprise TruRisk Management. Quantify your cyber risk in clear financial terms and focus on what matters most. Actionable insights help you prioritize critical threats, streamline remediation, and accelerate risk reduction— while effectively communicating impact to stakeholders. Empower your cybersecurity strategy with tools that drive faster, smarter, and more efficient risk management. Your secure future starts today with Qualys Enterprise TruRisk Management. Visit qualys.com/etm for more information."

FTC sends warning to future 23andMe buyer

Global phishing threat targets 88 countries

Samsung data breach tied to old stolen credentials

Thanks to today's episode sponsor, Qualys

"Overwhelmed by noise in your cybersecurity processes? Cut through the clutter with Qualys Enterprise TruRisk Management. Quantify your cyber risk in clear financial terms and focus on what matters most. Actionable insights help you prioritize critical threats, streamline remediation, and accelerate risk reduction— while effectively communicating impact to stakeholders. Empower your cybersecurity strategy with tools that drive faster, smarter, and more efficient risk management. Your secure future starts today with Qualys Enterprise TruRisk Management. Visit qualys.com/etm for more information."

FBI warns of increase in free online document converter scams

Resurge malware exploits Ivanti flaw

BlackLock hackers exposed through leak site vulnerability

Thanks to today's episode sponsor, Qualys

"Overwhelmed by noise in your cybersecurity processes? Cut through the clutter with Qualys Enterprise TruRisk Management. Quantify your cyber risk in clear financial terms and focus on what matters most. Actionable insights help you prioritize critical threats, streamline remediation, and accelerate risk reduction— while effectively communicating impact to stakeholders. Empower your cybersecurity strategy with tools that drive faster, smarter, and more efficient risk management. Your secure future starts today with Qualys Enterprise TruRisk Management. Visit qualys.com/etm for more information."

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Jonathan Waldrop, CISO, The Weather Company

Jonathan will be speaking at The CrowdStrike Crowd Tour, on Tuesday, April 15, 2025 in Atlanta – details here.

He will also be speaking at the C Vision International Think Tank on April 24, 2025, also in Atlanta – details here.

Thanks to our show sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

All links and the video of this episode can be found on CISO Series.com

150,000 sites compromised by JavaScript injection

Vulnerabilities in numerous solar power systems found

T-Mobile pays $33 million in SIM swap lawsuit

Huge thanks to our episode sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

Find the stories behind the headlines at CISOseries.com.

New ransomware group claims attack on US Telecom firm WideOpenWest

NSA warned of vulnerabilities in Signal app a month before Houthi strike chat

Huge thanks to our episode sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

EncryptHub linked to Microsoft Management Console exploit

Security Copilot gets AI agents

A call for more PETs in government

Huge thanks to our episode sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

More than 300 cyber criminals arrested in Africa

23andMe bankruptcy puts millions of DNA records at risk

Ukraine's state railway partially down after attack

Huge thanks to our episode sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

U.S. Treasury lifts sanctions on Tornado Cash

Web service outage in Russia due to reported Cloudflare block

Microsoft Trust Signing service abused to code-sign malware

Huge thanks to our episode sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Christina Shannon, CIO, KIK Consumer Products

Thanks to our show sponsor, DeleteMe

Data brokers bypass online safety measures to sell your name, address, and social security number to scammers. DeleteMe scours the web to find – and remove – your private information before it gets into the wrong hands by scanning for exposed information, and completing opt-outs and removals. With over 100 Million personal listings removed, DeleteMe is your trusted privacy solution for online safety. Get 20% off your DeleteMe plan when you go to JoinDeleteMe.com/CISO and use promo code CISO at checkout.

All links and the video of this episode can be found on CISO Series.com

Stalkerware company SpyX suffers data breach

Nation-state groups hit organizations with Microsoft Windows zero-day

Swiss telecom Ascom the latest victim of HellCat's Jira campaign

Thanks to this week episode sponsor, DeleteMe

Data brokers bypass online safety measures to sell your name, address, and social security number to scammers.

DeleteMe scours the web to find – and remove – your private information before it gets into the wrong hands by scanning for exposed information, and completing opt-outs and removals.

With over 100 Million personal listings removed, DeleteMe is your trusted privacy solution for online safety.

Get 20% off your DeleteMe plan when you go to JoinDeleteMe.com/CISO and use promo code CISO at checkout.

Find the stories behind the headlines at CISOseries.com

Attackers swipe data from Pennsylvania teachers union

Infosys settles $17.5M lawsuit after third-party breach

Top U.S. sperm bank discloses data breach

Thanks to this week episode sponsor, DeleteMe

Data brokers bypass online safety measures to sell your name, address, and social security number to scammers.

DeleteMe scours the web to find – and remove – your private information before it gets into the wrong hands by scanning for exposed information, and completing opt-outs and removals.

With over 100 Million personal listings removed, DeleteMe is your trusted privacy solution for online safety.

Get 20% off your DeleteMe plan when you go to JoinDeleteMe.com/CISO and use promo code CISO at checkout.

For the stories behind the headlines, visit CISOseries.com.

CISA scrambles to contact fired employees after court rules layoffs 'unlawful'

Thanks to this week episode sponsor, DeleteMe

Data brokers bypass online safety measures to sell your name, address, and social security number to scammers.

DeleteMe scours the web to find – and remove – your private information before it gets into the wrong hands by scanning for exposed information, and completing opt-outs and removals.

With over 100 Million personal listings removed, DeleteMe is your trusted privacy solution for online safety.

Get 20% off your DeleteMe plan when you go to JoinDeleteMe.com/CISO and use promo code CISO at checkout.

23,000 repositories targeted in popular GitHub action

Apache Tomcat RCE exploit hits servers—no authentication required

Microsoft 365 users targeted in new BEC campaigns

Thanks to this week episode sponsor, DeleteMe

Data brokers bypass online safety measures to sell your name, address, and social security number to scammers.

DeleteMe scours the web to find – and remove – your private information before it gets into the wrong hands by scanning for exposed information, and completing opt-outs and removals.

With over 100 Million personal listings removed, DeleteMe is your trusted privacy solution for online safety.

Get 20% off your DeleteMe plan when you go to JoinDeleteMe.com/CISO and use promo code CISO at checkout.

Black Basta creates tool to automate VPN brute-force attacks

Bipartisan Senate bill offers improved cybersecurity for water utilities

LockBit developer extradited from Israel, appears in New Jersey court

Thanks to this week episode sponsor, DeleteMe

Data brokers bypass online safety measures to sell your name, address, and social security number to scammers.

DeleteMe scours the web to find – and remove – your private information before it gets into the wrong hands by scanning for exposed information, and completing opt-outs and removals.

With over 100 Million personal listings removed, DeleteMe is your trusted privacy solution for online safety.

Get 20% off your DeleteMe plan when you go to JoinDeleteMe.com/CISO and use promo code CISO at checkout.

Find the stories behind the headlines at CISOseries.com.

Link to episode page

Thanks to our show sponsor, Vanta

Do you know the status of your compliance controls right now? Like…right now? We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta. Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting, And helps you get security questionnaires done 5 times faster with AI. Now that's…a new way to GRC. Get started at Vanta.com/headlines

All links and the video of this episode can be found on CISO Series.com

Medusa ransomware continues to attack infrastructure

DoJ seeks to break up Google

Another phishing campaign hits Booking.com

Huge thanks to our sponsor, Vanta

Do you know the status of your compliance controls right now? Like...right now? We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta. Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting, And helps you get security questionnaires done 5 times faster with AI. Now that's…a new way to GRC. Get started at Vanta.com/headlines

Find the stories behind the headlines at CISOseries.com.

Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero-Days

US communications regulator to create council to counter China technology threats

Signal no longer cooperating with Ukraine on Russian cyberthreats, official says

Huge thanks to our sponsor, Vanta

Do you know the status of your compliance controls right now? Like...right now? We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta. Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting, And helps you get security questionnaires done 5 times faster with AI. Now that's…a new way to GRC. Get started at Vanta.com/headlines

Sean Plankey nominated to head CISA

Ballista Botnet hits TP-Link devices

PowerSchool publishes breach report

Huge thanks to our sponsor, Vanta

Do you know the status of your compliance controls right now? Like...right now? We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta. Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting, And helps you get security questionnaires done 5 times faster with AI. Now that's…a new way to GRC. Get started at Vanta.com/headlines

Four healthcare breaches expose over 560,000 records

Cyber attack allegedly behind X outages

Case against MGM ransomware attack dropped

Huge thanks to our sponsor, Vanta

Do you know the status of your compliance controls right now? Like...right now? We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta. Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting, And helps you get security questionnaires done 5 times faster with AI. Now that's…a new way to GRC. Get started at Vanta.com/headlines

ONCD set to consolidate power in U.S. cyber

Undocumented commands found in Bluetooth chip used by a billion devices

Japanese telecom NTT breach affects 18,000 companies

Huge thanks to our sponsor, Vanta

Do you know the status of your compliance controls right now? Like...right now? We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta. Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting, And helps you get security questionnaires done 5 times faster with AI. Now that's…a new way to GRC. Get started at Vanta.com/headlines

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by David Spark with guest Brett Perry, CISO, Dot Foods

Thanks to our show sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

All links and the video of this episode can be found on CISO Series.com

Ransomware gang bypasses EDR via a webcam

Toronto Zoo updates January 2024 attack damage

House bill requires federal contractors to implement vulnerability disclosure policies

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

Then add: Find the stories behind the headlines at CISOseries.com.

Former top NSA cyber official protests probationary firings

Differing names for hackers hinders law enforcement, says security agent

Google releases AI scam detection for Android to fight conversational fraud

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

Find the stories behind the headlines at CISOseries.com.

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

CISA denies claims of deprioritizing Russian threats

Ransomware group claims attack on U.S. newspaper publisher

Latin America's escalating cybersecurity crisis

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

Hegseth orders Cyber Command to stand down on Russia planning

Microsoft hangs up on Skype after 14 years

Mark Cuban offers to fund government tech unit that was cut

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Andrew Wilder, CISO, Vetcor

Thanks to our show sponsor, Conveyor

Let me guess, another security questionnaire just landed in your inbox. Which means all the follow up tasks you don't have time for are close behind. What are you going to do? Here's a better question: what would Sue do? Sue is Conveyor's new AI Agent for Customer Trust. She handles the entire security review process like answering every customer request for a SOC 2 from sales, completing every questionnaire or executing every communications and coordination task in-between. No more manual work. Just a quick review when she's done. Ready to let Sue take the reins? Learn more at www.conveyor.com.

All links and the video of this episode can be found on CISO Series.com

Chinese cyber espionage jumped 150% last year

Nakasone warns of U.S. falling behind adversaries in cyberspace

PolarEdge botnet exploits Cisco, ASUS, QNAP, and Synology

Huge thanks to our sponsor, Conveyor

Let me guess, another security questionnaire just landed in your inbox. Which means all the follow up tasks you don't have time for are close behind. What are you going to do? Here's a better question: what would Sue do? Sue is Conveyor's new AI Agent for Customer Trust. She handles the entire security review process like answering every customer request for a SOC 2 from sales, completing every questionnaire or executing every communications and coordination task in-between. No more manual work. Just a quick review when she's done. Ready to let Sue take the reins? Learn more at www.conveyor.com.

Find the stories behind the headlines at CISOseries.com.

Huge thanks to our sponsor, Conveyor

It's 2025. This is your second sign to get a trust center if you don't already have one. Reduce manual work by 80% when you can share one link to your trust center and let customers download what they need on demand. Trusted by the world's top B2B companies, Conveyor's enterprise-grade trust center is specially designed to handle multiple products, complex orgs, and with AI first so you can even push your customers to self-serve their own AI answers to questionnaires. Learn more at www.conveyor.com.

US employee screening firm confirms breach

Swedish law enforcement seeking messaging app backdoors

Dems warn of exposed entry points on government systems

Huge thanks to our sponsor, Conveyor

Ever wish you had a teammate that could handle the most annoying parts of customer security reviews? You know, chasing down SMEs for answers, updating systems, coordinating across teams—all the grunt work nobody wants to do. Plus, having to finish the dang questionnaire itself. Well. That teammate exists—Conveyor just launched Sue, the first AI Agent for Customer Trust. Sue really is the dream teammate. She never misses a deadline, answers every customer request from sales, completes every questionnaire and knocks out all the coordination in-between. Sue, Conveyor's AI agent, handles it all so you don't have to. Learn more at www.conveyor.com.

Australia bans Kaspersky over security concerns

Government screens hijacked with AI Video of President Trump and Musk

EU sanctions North Korean official linked to Lazarus Group

Huge thanks to our sponsor, Conveyor

Does trying to get the security questionnaire done and back to your customer ever feel like you're herding cats? It's not just answering questions. It's all of the manual back and forth that becomes a slog like communicating between teams, tracking people down to get their review, updating sources and updating systems. Between all of this, you're also expected to field security documentation requests from customers. Well, Conveyor just launched an AI agent, Sue, to do all of these things and more for you. Learn about Sue at www.conveyor.com.

Hacker steals nearly $1.5 billion from Bybit crypto wallet

Apple pulls iCloud end-to-end encryption in the UK

PayPal "New Address" feature abused in phishing scam

Huge thanks to our sponsor, Conveyor

It's 2025. This is your sign to get a trust center if you don't already have one. Speed up security reviews and reduce the headaches when you can share one link to your trust center and let customers download what they need on demand. Trusted by the world's top B2B companies, Conveyor's enterprise-grade trust center is specially designed to handle multiple products, complex orgs, and with AI first so you can even push your customers to self-serve their own AI answers to questionnaires. Learn more at www.conveyor.com.

For the stories behind the headlines, visit CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest TC Niedzialkowski, former CISO

Thanks to our show sponsor, Scrut Automation

Scrut Automation allows compliance and risk teams of any size to establish enterprise-grade security programs. Their best-in-class features like process automation, AI, and over 75 native integrations reverse compliance debt and help manage risk proactively as your business grows. Visit scrut.io to schedule a demo or learn more. That's www.scrut.io.

All links and the video of this episode can be found on CISO Series.com

Minerals company loses $500,000 to BEC scam

Australian IVF provider investigating cyber incident

SEC replaces cryptocurrency fraud unit with emerging tech team

Thanks to today's episode sponsor, Scrut Automation

Scrut Automation allows compliance and risk teams of any size to establish enterprise-grade security programs. Their best-in-class features like process automation, AI, and over 75 native integrations reverse compliance debt and help manage risk proactively as your business grows. Visit scrut.io to schedule a demo or learn more. That's www.scrut.io.

Find the stories behind the headlines at CISOseries.com.

Russian hackers tap into Signal conversations

Ransomware group hits critical infrastructure globally

CISA says patch Palo Alto flaw immediately

Thanks to today's episode sponsor, Scrut Automation

Scrut Automation allows compliance and risk teams of any size to establish enterprise-grade security programs. Their best-in-class features like process automation, AI, and over 75 native integrations reverse compliance debt and help manage risk proactively as your business grows. Visit scrut.io to schedule a demo or learn more. That's www.scrut.io.

New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks — Patch Now

Microsoft reminds admins to prepare for WSUS driver sync deprecation

Zwipe runs out of time for biometric card revenues, files for bankruptcy

Thanks to today's episode sponsor, Scrut Automation

Scrut Automation allows compliance and risk teams of any size to establish enterprise-grade security programs. Their best-in-class features like process automation, AI, and over 75 native integrations reverse compliance debt and help manage risk proactively as your business grows. Visit scrut.io to schedule a demo or learn more. That's www.scrut.io.

Dutch Police take down Zservers

Chase to block Zelle payments to sellers on social media

Finastra notifies victims of October data breach

Thanks to today's episode sponsor, Scrut Automation

Scrut Automation allows compliance and risk teams of any size to establish enterprise-grade security programs. Their best-in-class features like process automation, AI, and over 75 native integrations reverse compliance debt and help manage risk proactively as your business grows. Visit scrut.io to schedule a demo or learn more. That's www.scrut.io.

For the stories behind the headlines, visit CISOseries.com.

Hackers steal emails in device code phishing attacks

Anti-TOAD feature seeks to prevent in-call sideloading attacks

Chinese hackers breach more U.S. telecoms via unpatched Cisco routers

Thanks to today's episode sponsor, Scrut Automation

Scrut Automation allows compliance and risk teams of any size to establish enterprise-grade security programs. Their best-in-class features like process automation, AI, and over 75 native integrations reverse compliance debt and help manage risk proactively as your business grows. Visit scrut.io to schedule a demo or learn more. That's www.scrut.io.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Doug Mayer, vp, CISO, WCG

Thanks to our show sponsor, Vanta

Do you know the status of your compliance controls right now? Like…right now? We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta. Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting, and helps you get security questionnaires done 5 times faster with AI. Now that's…a new way to GRC. Get started at Vanta.com/headlines

All links and the video of this episode can be found on CISO Series.com

U.S. lawmakers demand UK retraction of Apple backdoor

Sarcoma ransomware claims breach at giant PCB maker Unimicron

Ransomware attack disrupts Michigan's Sault Tribe operations

Huge thanks to our sponsor, Vanta

Do you know the status of your compliance controls right now? Like...right now? We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta. Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting, and helps you get security questionnaires done 5 times faster with AI. Now that's…a new way to GRC. Get started at Vanta.com/headlines

Find the stories behind the headlines at CISOseries.com.