Cybersecurity Headlines

GitHub vulnerability warning regarding ArtiPacked

RansomHub affiliate launches new EDR-killing tool

SolarWinds issues hotfix for web help desk vulnerability

Thanks to today's episode sponsor, ThreatLocker

Do zero-day exploits and supply chain attacks keep you up at night? Worry no more; you can harden your security with ThreatLocker.

ThreatLocker helps you take a proactive, default-deny approach to cybersecurity and provides a full audit of every action, allowed or blocked, for risk management and compliance. Onboarding and operation are fully supported by their US-based support team.

To learn more about how ThreatLocker can help keep your organization running efficiently and protected from ransomware, visit ThreatLocker.com.

For the stories behind the headlines, head to CISOseries.com.

Google details privacy commitments with Gemini AI

MIT releases AI Risk Repository

Russian spies using highly targeted phishing

Thanks to today's episode sponsor, ThreatLocker

Do zero-day exploits and supply chain attacks keep you up at night? Worry no more; you can harden your security with ThreatLocker.

ThreatLocker helps you take a proactive, default-deny approach to cybersecurity and provides a full audit of every action, allowed or blocked, for risk management and compliance. Onboarding and operation are fully supported by their US-based support team.

To learn more about how ThreatLocker can help keep your organization running efficiently and protected from ransomware, visit ThreatLocker.com.

FBI shutters Radar ransomware gangs servers

NIST finalizes post-quantum encryption standards

2.7 billion National Public Data records leaked

Thanks to today's episode sponsor, ThreatLocker

Do zero-day exploits and supply chain attacks keep you up at night? Worry no more; you can harden your security with ThreatLocker.

ThreatLocker helps you take a proactive, default-deny approach to cybersecurity and provides a full audit of every action, allowed or blocked, for risk management and compliance. Onboarding and operation are fully supported by their US-based support team.

To learn more about how ThreatLocker can help keep your organization running efficiently and protected from ransomware, visit ThreatLocker.com.

For the stories behind the headlines, visit CISOseries.com.

U.S. operation of "laptop farm" for North Korea shutdown

Over 100 Ukrainian government computers compromised

Trump campaign says they were hacked

Thanks to today's episode sponsor, ThreatLocker

Do zero-day exploits and supply chain attacks keep you up at night? Worry no more; you can harden your security with ThreatLocker.

ThreatLocker helps you take a proactive, default-deny approach to cybersecurity and provides a full audit of every action, allowed or blocked, for risk management and compliance. Onboarding and operation are fully supported by their US-based support team.

To learn more about how ThreatLocker can help keep your organization running efficiently and protected from ransomware, visit ThreatLocker.com.

Iranian hackers ramping up U.S. election interference

AMD SinkClose flaw helps install nearly undetectable malware

ADT discloses breach that impacts more than 30,000 customers demands

Thanks to today's episode sponsor, ThreatLocker

Do zero-day exploits and supply chain attacks keep you up at night? Worry no more; you can harden your security with ThreatLocker.

ThreatLocker helps you take a proactive, default-deny approach to cybersecurity and provides a full audit of every action, allowed or blocked, for risk management and compliance. Onboarding and operation are fully supported by their US-based support team.

To learn more about how ThreatLocker can help keep your organization running efficiently and protected from ransomware, visit ThreatLocker.com.

For the stories behind the headlines, head to CISOseries.com

Link to blog post

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest DJ Schleen, distinguished security architect, Yahoo

Thanks to our show sponsor, Vanta

Whether you're starting or scaling your security program, Vanta helps you automate compliance across frameworks like SOC 2, ISO 27001, and more. With Vanta, you can streamline security reviews by automating questionnaires and demonstrating your security posture with a customer-facing Trust Center. Over 7,000 global companies like Atlassian, Flo Health, and Quora use Vanta to manage risk and prove security. Our listeners get $1,000 off at Vanta.com/headlines. That's vanta.com/headlines.

All links and the video of this episode can be found on CISO Series.com

Chameleon reappears targeting Canadian restaurant chain

Rhysida claims attack on Bayhealth Hospital in Delaware

BlackSuit/Royal achieves $500m in ransomware demands

Huge thanks to our sponsor, Vanta

Whether you're starting or scaling your security program, Vanta helps you automate compliance across frameworks like SOC 2, ISO 27001, and more. With Vanta, you can streamline security reviews by automating questionnaires and demonstrating your security posture with a customer-facing Trust Center. Over 7,000 global companies like Atlassian, Flo Health, and Quora use Vanta to manage risk and prove security. Our listeners get $1,000 off at Vanta.com/headlines. That's vanta.com/headlines.

For the stories behind the headlines, head to CISOseries.com.

McLaren hospitals disruption linked to INC ransomware attack

CrowdStrike to give customers control over Falcon sensor updates

Ronin Network hacked by "white hats"

Huge thanks to our sponsor, Vanta

When it comes to ensuring your company has top-notch security practices, things can get complicated, fast. Vanta automates compliance for SOC 2, ISO 27001, and more, saving you time and money. With Vanta, you can unify your security program management and proactively manage security reviews with AI-powered security questionnaires.Our listeners get $1,000 off at vanta.com/headlines. That's vanta.com/headlines

Google patches Android kernel zero-day

Researchers find flaws in Georgia voter portal

Law would make ransomware a terrorist threat

Huge thanks to our sponsor, Vanta

Whether you're starting or scaling your security program, Vanta helps you automate compliance across frameworks like SOC 2, ISO 27001, and more. With Vanta, you can streamline security reviews by automating questionnaires and demonstrating your security posture with a customer-facing Trust Center. Over 7,000 global companies like Atlassian, Flo Health, and Quora use Vanta to manage risk and prove security. Our listeners get $1,000 off at Vanta.com/headlines. That's vanta.com/headlines.

CrowdStrike strikes back against Delta's claims of negligence

Ransomware attack costs Keytronic $17 million

Patch required for high-severity flaw in Apache OFBiz

Huge thanks to our sponsor, Vanta

When it comes to ensuring your company has top-notch security practices, things can get complicated, fast. Vanta automates compliance for SOC 2, ISO 27001, and more, saving you time and money. With Vanta, you can unify your security program management and proactively manage security reviews with AI-powered security questionnaires.Our listeners get $1,000 off at vanta.com/headlines. That's vanta.com/headlines

Hackers use ISP to send malware through software updates

CrowdStrike sued by investors following update failure

Historic prisoner swap includes cybercriminals returned to Russia

Huge thanks to our sponsor, Vanta

Whether you're starting or scaling your security program, Vanta helps you automate compliance across frameworks like SOC 2, ISO 27001, and more. With Vanta, you can streamline security reviews by automating questionnaires and demonstrating your security posture with a customer-facing Trust Center. Over 7,000 global companies like Atlassian, Flo Health, and Quora use Vanta to manage risk and prove security. Our listeners get $1,000 off at Vanta.com/headlines. That's vanta.com/headlines.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Dennis Pickett, vp, CISO, Westat

Thanks to our show sponsor, Dropzone AI

Dropzone AI's Analyst investigates alerts with unmatched speed and precision, providing clear, actionable reports. Experience the power of autonomous threat detection. Meet Dropzone AI at BSides Las Vegas. Visit dropzone.ai for a 3-month free trial.

All links and the video of this episode can be found on CISO Series.com

Cencora confirms patient data stolen in February cyberattack

Phishing campaign targets OneDrive users

Argentina will use AI to predict future crimes

Huge thanks to our sponsor, Dropzone AI

Picture an analyst who works tirelessly around the clock. Dropzone AI's Analyst investigates every alert and provides comprehensive, actionable reports. Boost your SOC's capabilities with a 3-month free trial at dropzone.ai.

For the stories behind the headlines, head to CISOseries.com

DDoS attacks won't impact US elections

Dating apps leaked precise location data

Germany formally blames China for 2021 cyberattack

Huge thanks to our sponsor, Dropzone AI

Think of Alex, your new team member who never takes a break. Dropzone AI's Analyst investigates every alert and delivers detailed reports without playbooks or code. Experience Alex's dedication with a 3-month free trial at dropzone.ai.

Delta enlists Microsoft's legal nemesis over CrowdStrike losses

Dark Angels receives record-breaking ransom payment

Meta to pay $1.4 billion biometric lawsuit

Huge thanks to our sponsor, Dropzone AI

Dropzone AI's Analyst investigates alerts and responds to threats with unmatched speed and precision. No playbooks, no code required. Transform your SOC's performance with a 3-month free trial at dropzone.ai.

For the stories behind the headlines, head to CISOseries.com.

4.3 million impacted by HealthEquity data breach

Microsoft admits CrowdStrike incident far greater than first reported

Proofpoint exploit allows for millions of fake emails

Huge thanks to our sponsor, Dropzone AI

Imagine an analyst who never misses an alert. Dropzone AI autonomously investigates every alert and provides decision-ready reports, enhancing your SOC's efficiency. Try it free for 3 months at dropzone.ai.

Hackers exploiting PyPi package targets MacOS

Columbus, Ohio suffers cyber incident

Windows July updates come with some BitLocker and remote connectivity challenges

Huge thanks to our sponsor, Dropzone AI

Meet Dropzone AI, the analyst who never rests. Investigating every alert with unparalleled speed and precision, delivering clear, actionable reports. No playbooks, no code. Experience the power of AI with a 3-month free trial at dropzone.ai.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Jana Moore, CISO, Belron, also vice president, EmpoWer – Supporting women in infosec.

Thanks to our show sponsor, Vanta

When it comes to ensuring your company has top-notch security practices, things can get complicated, fast. Vanta automates compliance for SOC 2, ISO 27001, and more, saving you time and money. With Vanta, you can unify your security program management and proactively manage security reviews with AI-powered security questionnaires. Our listeners get $1,000 off at Vanta dot com/headlines.

All links and the video of this episode can be found on CISO Series.com

Hackers exploiting Microsoft Defender SmartScreen bug

IT leaders note increase in severity of cyber-attacks, ransomware and BEC stand out,

Trump shooting investigation revives the end-to-end encryption issue

Huge thanks to our sponsor, Vanta

Whether you're starting or scaling your security program, Vanta helps you automate compliance across frameworks like SOC 2, ISO 27001, and more. With Vanta, you can streamline security reviews by automating questionnaires and demonstrating your security posture with a customer-facing Trust Center. Over 7,000 global companies like Atlassian, Flo Health, and Quora use Vanta to manage risk and prove security. Our listeners get $1,000 off at Vanta.com/headlines.

For the stories behind the headlines, head to CISOseries.com

CrowdStrike dishes details

Google scuttles third-party cookie deprecation

BreachForums leaked on Telegram

Huge thanks to our sponsor, Vanta

When it comes to ensuring your company has top-notch security practices, things can get complicated, fast. Vanta automates compliance for SOC 2, ISO 27001, and more, saving you time and money. With Vanta, you can unify your security program management and proactively manage security reviews with AI-powered security questionnaires. Our listeners get $1,000 off at vanta.com/headlines.

Google's $23 billion plan to buy Wiz falls apart

U.S. government looking for answers amidst CrowdStrike aftermath

dYdX exchange hacked in DNS hijack attack

Thanks to our episode sponsor, Vanta

Whether you're starting or scaling your security program, Vanta helps you automate compliance across frameworks like SOC 2, ISO 27001, and more. With Vanta, you can streamline security reviews by automating questionnaires and demonstrating your security posture with a customer-facing Trust Center. Over 7,000 global companies like Atlassian, Flo Health, and Quora use Vanta to manage risk and prove security. Our listeners get $1,000 off at Vanta.com/headlines.

For the stories behind the headlines, visit CISOseries.com.

CrowdStrike says "significant number" back up and running

Russian cyber criminals sanctioned for infrastructure attacks

Ransomware attack shuts down largest trial court in U.S.

Huge thanks to our sponsor, Vanta

When it comes to ensuring your company has top-notch security practices, things can get complicated, fast. Vanta automates compliance for SOC 2, ISO 27001, and more, saving you time and money. With Vanta, you can unify your security program management and proactively manage security reviews with AI-powered security questionnaires. Our listeners get $1,000 off at vanta.com/headlines.

Microsoft confirms CrowdStrike update also hit cloud Windows PCs

Cybercriminals exploit CrowdStrike problem to distribute malware

CISA adds some big names to its KEV catalog

Huge thanks to our sponsor, Vanta

Whether you're starting or scaling your security program, Vanta helps you automate compliance across frameworks like SOC 2, ISO 27001, and more. With Vanta, you can streamline security reviews by automating questionnaires and demonstrating your security posture with a customer-facing Trust Center. Over 7,000 global companies like Atlassian, Flo Health, and Quora use Vanta to manage risk and prove security. Our listeners get $1,000 off at Vanta.com/headlines.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post – get exact one from https://cisoseries.com

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Adam Arellano, former vp, enterprise cybersecurity, PayPal

Thanks to our show sponsor, Conveyor

Why do teams choose Conveyor over the competition to automate answering security questionnaires? A few reasons. One. Market-leading AI accuracy Two. They don't have to maintain a crazy knowledge base anymore because ConveyorAI can read from any source like external support sites, documents, past questionnaires and more. Three. It can process ANY customer file format – even PDFs! It will even auto-scroll and auto-complete portal-basedl questionnaires. Don't believe it? Try it yourself for free at www.conveyor.com.

All links and the video of this episode can be found on CISO Series.com

Windows outage worldwide

UK national blood stocks suffer the effects of ransomware

Security flaws in SAP AI Core cloud-based platform

Thanks to today's episode sponsor, Conveyor

It's Friday and Conveyor hopes you don't have a meaty security questionnaire waiting for you on the other side of this podcast. If you do, you should check them out. As the market leader in instant, generative AI answers to entire security questionnaires, Conveyor helps you complete questionnaires fast, no matter the format they're in, so you don't feel like you're getting crushed by the wave of unfinished work. Learn why we're the software your infosec friends love at www.conveyor.com

For the stories behind the headlines, head to CISOseries.com

UK mandatory ransomware reporting gets watered-down

Google introduces AI agent to look for software bugs

Critical infrastructure ransomware costs spike

Thanks to today's episode sponsor, Conveyor

Does the anticipation of the next monster security questionnaire wrecking your day ever make you feel like a balloon floating above a cactus field? If so, you should check out Conveyor. Conveyor is the market-leader in instant, generative AI answers to entire security questionnaires no matter the format they are in. Yes, that's right. Upload any file like Excel, Word docs and even PDFs for instant processing and tackle any portal-based questionnaire with a browser extension that auto-scrolls and fills in answers for you. Try a free proof of concept today at www.conveyor.com.

Yesteryears (DECISION) by Sascha Ende Free download: https://filmmusic.io/song/244-yesteryears-decision License (CC BY 4.0): https://filmmusic.io/standard-license

Rite Aid says 'limited' cybersecurity incident affected over 2 million people

AT&T ransom laundered through mixers and gambling services

Hacktivists leak Disney data to protect artist rights

Thanks to today's episode sponsor, Conveyor

Why do teams choose Conveyor over the competition to automate answering security questionnaires? A few reasons. One. Market-leading AI accuracy Two. They don't have to maintain a crazy knowledge base anymore because ConveyorAI can read from any source like external support sites, documents, past questionnaires and more. Three. It can process ANY customer file format - even PDFs! It will even auto-scroll and auto-complete portal-based questionnaires. Don't believe it? Try it yourself for free at www.conveyor.com.

For the stories behind the headlines, head to CISOseries.com.

Alphabet in talks to acquire Wiz

AT&T allegedly paid hacker to delete data

Details on Squarespace domain hacks

Thanks to today's episode sponsor, Conveyor

Does the mountain of security questionnaires in your inbox make you feel like you're in a rowboat trying to make it through a tsunami? If so, you should check out Conveyor. As the market leader in instant, generative AI answers to entire security questionnaires, Conveyor helps you complete them fast, no matter the format they're in, and never feel like you're getting crushed by the wave of unfinished work. Learn more about the AI security review automation platform your infosec friends love at www.conveyor.com. Mention this podcast for 5 free questionnaire credits when you purchase a Pro plan.

Rite Aid announces data breach following June cyberattack

The personal security implications of the AT&T breach

US offers support to prevent Paris Olympics cyber and disinformation attacks

Thanks to today's episode sponsor, Conveyor

Ever feel like completing security questionnaires has become your full-time side hustle you're not even getting paid extra for? If so, you should check out Conveyor. Conveyor is the market leader in instant, generative AI answers to entire security questionnaires no matter the format they are in. Yes, that's right. Upload any file like Excel, Word docs and even PDFs for instant processing and tackle any portal-based questionnaire with a browser extension that auto-scrolls and fills in answers for you. Try a free proof of concept today at www.conveyor.com.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Andrew Cannata, CISO, Primo Water

Thanks to our show sponsor, Entro Security

What are you doing to secure your company's non-human identities? Vaults and scanners are helpful, but they don't give the context for where your secrets are, how they're being used, or when it's time to remove or rotate them. The entro platform provides automated lifecycle management and seamless integration, ensuring comprehensive security & compliance through a unified and easy to use interface.

All links and the video of this episode can be found on CISO Series.com

PHP vulnerability exploited, spreading malware and DDoS attacks

Advance Auto Parts reveals damage from Snowflake breach

FTC report reveals dark patterns used to trick consumers

Thanks to today's episode sponsor, Entro

Reclaim control over your Non-human identities! Entro enables security teams to manage and secure the lifecycle of non-human identities and secrets from inception to rotation. Think of it like an airtag for your secrets - know where they are, how they're being used, and their risk level in one seamless platform. Visit https://entro.security/ to learn more.

For the stories behind the headlines, head to CISOseries.com.

Australia targets government tech under foreign control

Singapore banks replace OTP with digital tokens

New group targets Veeam vulnerability

Thanks to today's episode sponsor, Entro

What are you doing to secure your company's non-human identities? Vaults and scanners are helpful, but they don't give the context for where your secrets are, how they're being used, or when it's time to remove or rotate them. The entro platform provides automated lifecycle management and seamless integration, ensuring comprehensive security & compliance through a unified and easy to use interface. Visit https://entro.security/ to learn more.

US disrupts Russian AI-powered disinformation bot farm

Senate takes aim at 'overly burdensome' cybersecurity regs

Fujitsu confirms customer data exposed in cyberattack

Thanks to today's episode sponsor, Entro

Reclaim control over your Non-human identities! With Entro, security teams can now manage and secure the lifecycle of Non-human identities and secrets. Like an air tag for your non-human identities, The entro platform provides automated lifecycle management and seamless integration, ensuring comprehensive security & compliance through a unified and easy to use interface. Visit https://entro.security/ to learn more.

For the stories behind the headlines, visit CISOseries.com.

Record-breaking 10 billion stolen passwords exposed

Supreme court ruling makes cybersecurity regulations even trickier

Apple removes popular apps at Russia's request

Thanks to today's episode sponsor, Entro

Did you know that an attack on non-human identities and secrets is one of the top 2 cyber attack vectors out there ? With Entro, security teams can now manage and secure the lifecycle of Non-human identities and secrets. The entro platform provides automated lifecycle management and seamless integration, ensuring comprehensive security & compliance through a unified and easy to use interface. Visit https://entro.security/ to learn more.

Alabama Department of Education suffers data breach

New York Times claims hackers stole OpenAI secrets in a 2023 security breach

RansomHub claims to have published Florida health department data

Thanks to today's episode sponsor, Entro

Reclaim control over your Non-human identities! Entro enables security teams to manage and secure the lifecycle of non-human identities and secrets from inception to rotation. Think of it like an airtag for your secrets - know where they are, how they're being used, and their risk level in one seamless platform. Visit https://entro.security/ to learn more.

For the stories behind the headlines, head to CISOseries.com.

Senate leader demands answers from CISA re March Ivanti hack

China's Velvet Ant hackers exploiting new Cisco zero-day

Europol law enforcement takes down Cobalt Strike servers

Huge thanks to our sponsor, Demoed

Buyers do 70% of their product research before talking to a company. That blew our minds. Why not give buyers as much information about your product as possible to help them decide? Eliminating friction has always been key to a solid sales strategy. With Demoed, buyers can research faster and more effectively. Sign up at demoed.com

For the stories behind the headlines, head to CISOseries.com.

Evolve Bank data breach is evolving

Patelco Credit Union cyberattack disrupts services for nearly 500,000 members

LockBit claims cyberattack on Croatia's largest hospital

Huge thanks to our sponsor, Demoed

Did you know that Demoed is the first platform that allows you to watch a live product demo and ask questions without receiving a barrage of follow-ups? We change buyer-vendor engagement: fewer follow-ups for buyers, more leads for vendors. Sign up now at demoed.com

For the stories behind the headlines, visit CISOseries.com.

14 million Linux systems threatened by 'RegreSSHion' vulnerability

Critical patch issued for Juniper routers

Millions not thousands impacted by Prudential breach

Huge thanks to our sponsor, Demoed

"I have extra time in my day" is something no security professional has ever said. Vendors on Demoed host 15-minute pitches highlighting their value and differentiation. Demoed allows buyers to browse and get educated without sales pressure—window shopping for enterprise sales. Sign up now at demoed.com

Update on the TeamViewer network breach

HubSpot looks into customer account hacks

U.S. businesses struggle to obtain cyber insurance

Huge thanks to our sponsor, Demoed

Demoed is a unique platform that connects buyers and sellers. Buyers want to see more products, and vendors want more leads. Demoed solves this for both by making buyers anonymous. Buyers can watch demos without follow-ups, hiding their identity until they are ready. Sign up now at demoed.com.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Jim Bowie, CISO, Tampa General Hospital

Thanks to our show sponsor, Prelude Security

When executives ask the question, are we vulnerable to this threat? How long does it take you to get a confident answer? Prelude automatically transforms threat intelligence into validated detections, so you can know with certainty in just a manner of minutes. Visit preludesecurity.com/threats to upload your own threat intelligence and see for yourself.

All links and the video of this episode can be found on CISO Series.com

Gas chromatograph vulnerabilities reveal medical IoT challenges

We never authorized polyfill.io to use our name, says Cloudflare

Evolve Bank confirms data breach, undermining LockBit's Federal Reserve claim

Huge thanks to our sponsor, Prelude Security

When executives ask the question, are we vulnerable to this threat? How long does it take you to get a confident answer? Prelude automatically transforms threat intelligence into validated detections, so you can know with certainty in just a manner of minutes. Visit preludesecurity.com to upload your own threat intelligence and see for yourself.

For the stories behind the headlines, head to CISOseries.com.

Android lying Snowblind in the sun

Identity verification service exposed data for over a year

Polyfill.io JavaScript attack impacts thousands of sites

Huge thanks to our sponsor, Prelude Security

30 minutes to peace of mind. That's what you'll get with Prelude's automated threat management platform where you can upload any piece of threat intelligence and quickly generate threat-hunting queries, detection rules, and more. Visit preludesecurity.com and get all of this in 30 minutes or get a pizza on Prelude.

Julian Assange to plead guilty and return to Australia

Fresh MOVEit bug under attack just hours after disclosure

Criminal selling Neiman Marcus customer info for $150K

Huge thanks to our sponsor, Prelude Security

Don't be left wondering if you're protected the next time a new threat hits the news. Week in review listeners can upload their threat intelligence to Prelude and receive a free bundle of relevant detection rules, hunt queries, and security tests. Any piece of threat intelligence. All in 30 minutes. Upload yours at prelude security dot com forward slash threats.

Indonesia battles Lockbit 3.0 ransomware

DOJ charges cybercrime group for $71 million in damages

SEC reports pile in following CDK Global attack

Huge thanks to our sponsor, Prelude Security

What would your security teams do with more time back in their day? Prelude provides an end-to-end threat management automation platform that quickly generates hunt queries, detection rules, and security tests from your threat intelligence to help you stay ahead of threats. Upload your own threat intelligence at preludesecurity.com and get all of that in just 30 minutes or less.

CDK Global outage caused by BlackSuit ransomware attack

Bug allows Microsoft corporate email account spoofing

UK's largest nuclear site pleads guilty over cybersecurity failures

Huge thanks to our sponsor, Prelude Security

When executives ask the question, are we vulnerable to this threat? How long does it take you to get a confident answer? Prelude automatically transforms threat intelligence into validated detections, so you can know with certainty in just a manner of minutes. Visit preludesecurity.com to upload your own threat intelligence and see for yourself.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines - Week in Review is hosted by Rich Stroffolino with guest Bil Harmer, operating partner and CISO, Craft Ventures, also at wilharm3.com.

Thanks to our show sponsor, Vanta

Whether you're starting or scaling your security program, Vanta helps you automate compliance across frameworks like SOC 2, ISO 27001, and more. With Vanta, you can streamline security reviews by automating questionnaires and demonstrating your security posture with a customer-facing Trust Center. Over 7,000 global companies like Atlassian, Flo Health, and Quora use Vanta to manage risk and prove security Our listeners get $1,000 off at vanta.com/headlines.

All links and the video of this episode can be found on CISO Series.com

CDK Global gets hacked twice

LockBit Activity on the rise

Kraken extorted by security researcher

Thanks to today's episode sponsor, Vanta

Whether you're starting or scaling your security program, Vanta helps you automate compliance across frameworks like SOC 2, ISO 27001, and more. With Vanta, you can streamline security reviews by automating questionnaires and demonstrating your security posture with a customer-facing Trust Center. Over 7,000 global companies like Atlassian, Flo Health, and Quora use Vanta to manage risk and prove security. Our listeners get $1,000 off at Vanta.com/headlines.

Nvidia becomes world's most valuable company

Markopolo scam delivers infostealer through fake meeting software

Medibank hack blamed on MFA failure

Thanks to today's episode sponsor, Vanta

When it comes to ensuring your company has top-notch security practices, things can get complicated, fast. Vanta automates compliance for SOC 2, ISO 27001, and more, saving you time and money. With Vanta, you can unify your security program management and proactively manage security reviews with AI-powered security questionnaires.Our listeners get $1,000 off at vanta.com/headlines.

For the stories behind the headlines, head to CISOseries.com.

AMD investigates breach after data for sale on hacking forum Qilin demands $50 million ransom from UK hospital Hackers derail Amtrak Guest Rewards accounts

Thanks to today's episode sponsor, Vanta

Whether you're starting or scaling your security program, Vanta helps you automate compliance across frameworks like SOC 2, ISO 27001, and more. With Vanta, you can streamline security reviews by automating questionnaires and demonstrating your security posture with a customer-facing Trust Center. Over 7,000 global companies like Atlassian, Flo Health, and Quora use Vanta to manage risk and prove security. Our listeners get $1,000 off at Vanta.com/headlines.

For the stories behind the headlines, visit CISOseries.com.

Snowflake breach escalates with ransom demands and death threats

MITRE has a memo for the president

Velvet Ant maintains three-year cyber espionage campaign

Thanks to today's episode sponsor, Vanta

When it comes to ensuring your company has top-notch security practices, things can get complicated, fast. Vanta automates compliance for SOC 2, ISO 27001, and more, saving you time and money. With Vanta, you can unify your security program management and proactively manage security reviews with AI-powered security questionnaires.Our listeners get $1,000 off at vanta.com/headlines.