Cybersecurity Headlines

LockBit takedown update

Signal now lets users keep phone numbers private

NSA Cybersecurity Director Rob Joyce to retire

Thanks to today's episode sponsor, Conveyor

No more portal scaries. Conveyor just launched AI autofill of OneTrust portal questionnaires. That means no more clicking question-by-question to copy-paste each answer when a customer sends you a OneTrust security questionnaire. Conveyor's AI will read and autofill the whole page for you. Trying a proof of concept with your own data is always free. Learn more at www.conveyor.com. Mention this podcast for 5 free questionnaire credits when you purchase an Enterprise plan.

Get the stories behind the headlines at CISOSeries.com

LockBit disrupted by global police operation

Cactus leaks Schneider Electric data on dark web

ALPHV gang takes credit for LoanDepot, Prudential attacks

Thanks to today's episode sponsor, Conveyor

Conveyor, the security questionnaire automation software one of our customers dubbed "my favorite security tool of the year", is now even better. They've upgraded their browser extension for portal-based questionnaires and it can now autofill OneTrust portal questionnaires in one click. You can test the AI in a free proof of concept at www.conveyor.com. Mention this podcast for 5 free questionnaire credits when you purchase an Enterprise plan.

Get the stories behind the headlines at CISOSeries.com

Google Chrome feature blocks attacks against home networks

Mastermind behind Zeus and IcedID malware pleads guilty

Air Canada must honor refund invented by its chatbot, says court

Thanks to today's episode sponsor, Conveyor

Conveyor AI is so good, it can now autofill OneTrust portal questionnaires in one click. Yes, you heard us right. Conveyor's security questionnaire automation tool not only boasts industry leading AI accuracy, but now fills in One Trust portals with a single click. Trying a proof of concept with your own data is always free. Learn more at www.conveyor.com. Mention this podcast for 5 free questionnaire credits when you purchase an Enterprise plan.

Get the stories behind the headlines at CISOSeries.com

Link to blog post

This week's Cyber Security Headlines - Week in Review is hosted by Rich Stroffolino with guest Trina Ford, CISO, iHeartMedia

Thanks to our show sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging. Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization. Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk. To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

All links and the video of this episode can be found on CISO Series.com

Microsoft warns of new Exchange Server zero-day

Neuberger: Pace of ransomware takedown operations isn't enough

Gold Pickaxe malware steals your face

Huge thanks to our sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging. Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization. Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk. To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

For the stories behind the headlines, head to CISOseries.com.

Trans-Northern Pipelines confirms cyberattack

Threat actors using LLMs to improve cyberattacks

Email provider published internal emails in plain text

Huge thanks to our sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging. Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization. Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk. To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

Prudential Financial data breached in cyberattack

Facebook Marketplace user records leaked on hacking forum

Bank of America customers at risk after third party breach

Huge thanks to our sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging. Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization. Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk. To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

For the stories behind the headlines, visit CISOseries.com.

CISA releases repository security framework

Ransomware takes down Romanian healthcare management system

Ivanti flaw used to deploy backdoor

Huge thanks to our sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging. Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization. Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk. To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

Raspberry Robin – a new one-day exploit targeting Windows

Hyundai Europe suffers Black Basta ransomware attack

Cisco to cut thousands of jobs as it focuses on high growth areas

Huge thanks to our sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging. Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization. Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk. To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Doug Mayer, vp, CISO, WCG

Thanks to our show sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging. Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization. Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk. To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

All links and the video of this episode can be found on CISO Series.com

CISA, FBI issue sobering warning about Volt Typhoon

Cisco fixes critical Expressway flaws

3 million records from thousands of credit unions exposed

Thanks to today's episode sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging.

Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization.

Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk.

To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

For the stories behind the headlines, visit CISOseries.com.

CISA collaboration initiative on thin ice

Iran focusing cyber efforts

Ransomware payments cross $1 billion in 2023

Thanks to today's episode sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging.

Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization.

Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk.

To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

For the stories behind the headlines, visit CISOseries.com.

Tech giants and world govs unite to tackle spyware threats

Spyware vendors to blame for most Google zero-days

Insider data breach hits almost half of Verizon's employee base

Thanks to today's episode sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging.

Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization.

Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk.

To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

For the stories behind the headlines, visit CISOseries.com.

Spoutible API vulnerability leaks user data

Illicit service cranks out fake IDs

Sudo coming to Windows

Thanks to today's episode sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging.

Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization.

Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk.

To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

For the stories behind the headlines, visit CISOseries.com.

Cloudflare announces nation-state level breach

AnyDesk says hackers breached production servers, reset passwords

Chicago children's hospital announces cyberattack

Thanks to today's episode sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging.

Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization.

Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk.

To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

For the stories behind the headlines, visit CISOseries.com.

Link to blog post

Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Mary Rose Martinez, vp, CISO Marathon Petroleum

Thanks to our show sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging. Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization. Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk. To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

All links and the video of this episode can be found on CISO Series.com

FBI director warns of Chinese hacker threat to U.S. critical infrastructure

CISA warns of exploited Apple flaw

Pentagon Intelligence supplier allegedly hacked

Thanks to today's episode sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging.

Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization.

Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk.

To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

For the stories behind the headlines, visit CISOseries.com.

FBI grounds Volt Typhoon

More companies refuse to pay ransoms

Binance internal info exposed on GitHub

Thanks to today's episode sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging.

Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization.

Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk.

To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

For the stories behind the headlines, visit CISOseries.com.

Mercedes-Benz exposes sensitive data, source code

Juniper Networks issues out-of-band fix for high severity flaws

New ZLoader malware, now with 64-bit Windows compatibility

Thanks to today's episode sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging.

Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization.

Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk.

To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

For the stories behind the headlines, visit CISOseries.com.

Microsoft takes another hit

Energy giant hit by ransomware

The NSA is secretly buying your data

Thanks to today's episode sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging.

Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization.

Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk.

To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

For the stories behind the headlines, visit CISOseries.com.

Urgent patch alert for Jenkins

Cisco flaw exposes Unified Comms systems

Pro-Ukraine hackers wipe 2 petabytes of data from Russian intelligence center

Thanks to today's episode sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging.

Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization.

Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk.

To learn more, go to vanta.com/ciso and watch their 3-minute product demo.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Mike Kelley, vp, CISO, The E.W. Scripps Company and partner, OTAWireless.com.

Thanks to our show sponsor, Conveyor

Conveyor, the security questionnaire automation software known for generating the most accurate AI answers to questionnaires is launching a much-requested feature. Conveyor's AI can now use uploaded security documents like a SOC 2 and security policy whitepapers to auto-generate precise answers to entire questionnaires in seconds. See why customers like Lucid and Carta are raving about the software and try the AI yourself in a free proof of concept at www.conveyor.com.

All links and the video of this episode can be found on CISO Series.com

Hewlett Packard Enterprise (HPE) attacked through Microsoft 365 email system

Study reveals 18,000 exposed API secrets, including $20 million in vulnerable Stripe tokens

Ukrainian energy, postal, and transportation services hit by cyberattacks

Thanks to today's episode sponsor, Conveyor

Conveyor, the security questionnaire automation software known for generating the most accurate AI answers to questionnaires is launching a much-requested feature. Conveyor's AI can now use uploaded security documents like a SOC 2 and security policy whitepapers to auto-generate precise answers to entire questionnaires in seconds. See why customers like Lucid and Carta are raving about the software and try the AI yourself in a free proof of concept at www.conveyor.com.

For the stories behind the headlines, head to CISOseries.com.

Cyberattack knocks EquiLend offline

Brits warn of the AI impact on ransomware

Data leak claims to hold over 26 billion records

Thanks to today's episode sponsor, Conveyor

Conveyor, the security questionnaire automation software one of our customers dubbed "my favorite security tool of the year", is now even better. How? Conveyor's AI can now use uploaded security documents like a SOC 2 or security policy document to auto-generate precise answers to entire security questionnaires in seconds. You can test the AI in a free proof of concept at www.conveyor.com.

CISA boss targeted in "harrowing" swatting attack

Subway puts a LockBit investigation on the menu

Australia sanctions REvil hacker behind Medibank data breach

Thanks to today's episode sponsor, Conveyor

Ever wish AI could auto-generate answers to security questionnaires for you just based on your SOC 2 or other documents? Spoiler alert - it can and you can now try it for free with Conveyor's AI security questionnaire automation software. Set up takes a few seconds. Get a free Conveyor account and simply upload your security documents. Then, upload a new questionnaire to see AI generate answers in seconds based on your documents. Try a free proof of concept today at www.conveyor.com.

For the stories behind the headlines, visit CISOseries.com.

Thailand court attempts to suppress data leak

CISA issues emergency directive on Ivanti zero-days

Cybersecurity startup funding down 50%

Huge thanks to our episode sponsor, Conveyor

What's worse than a last minute security questionnaire in your inbox?

Having to maintain a thousand question and answer pairs to use to respond to a questionnaire.

Now, Conveyor's AI security questionnaire automation software can use security documents like a SOC 2 and a pared down question and answer bank to auto-generate precise answers to entire questionnaires in seconds.

Try a free proof of concept today at www.conveyor.com.

Russian hackers breach Microsoft executive emails to learn about themselves

JPMorgan Chase says hacking attempts are increasing

TeamViewer still being abused to breach networks in new ransomware attacks

Thanks to today's episode sponsor, Conveyor

AI can now literally answer any question in seconds, yet infosec teams are still in a living nightmare manually filling out questionnaires. Conveyor AI's can now use your uploaded security documents to auto-generate precise answers to entire questionnaires. The software one of our customers dubbed "my favorite security tool of the year" in 2023 has gotten even better and it takes just minutes to get started. Try a free proof of concept at www.conveyor.com.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Jerich Beason, CISO, WM

Thanks to our show sponsor, Savvy Security

Shadow identities on SaaS apps are growing unchecked, rapidly expanding an attack surface where businesses have little-to-no visibility or control. Savvy helps security teams safely embrace SaaS benefits by automating the discovery and removal of the most toxic combinations of SaaS identity risk. Savvy's automation playbooks and just-in-time security guardrails guide users at scale towards proper identity hygiene. That's Savvy—Identity-First SaaS Security. Learn more at savvy.security/headlines.

All links and the video of this episode can be found on CISO Series.com

Atlassian outage briefly affected multiple cloud services

iShutdown helps discover spyware on iPhones

Russian state hackers COLDRIVER deploy malware in European espionage campaign

Huge thanks to our sponsor, Savvy Security

Shadow identities on SaaS apps are growing unchecked, rapidly expanding an attack surface where businesses have little-to-no visibility or control. Savvy helps security teams safely embrace SaaS benefits by automating the discovery and removal of the most toxic combinations of SaaS identity risk. Savvy's automation playbooks and just-in-time security guardrails guide users at scale towards proper identity hygiene. That's Savvy—Identity-First SaaS Security.

Learn more at savvy.security/headlines.

For the stories behind the headlines, head to CISOseries.com.

Chinese drones considered national security threat

PixieFail could spell trouble for cloud providers

Have I Been Pwned adds "statistically significant" data leak

Huge thanks to our sponsor, Savvy Security

Shadow identities on SaaS apps are growing unchecked, rapidly expanding an attack surface where businesses have little-to-no visibility or control. Savvy helps security teams safely embrace SaaS benefits by automating the discovery and removal of the most toxic combinations of SaaS identity risk. Savvy's automation playbooks and just-in-time security guardrails guide users at scale towards proper identity hygiene. That's Savvy—Identity-First SaaS Security.

Learn more at savvy.security/headlines.

Google patches first Chrome zero-day vulnerability of the year

Urgent warning from Citrix to patch two zero-day vulnerabilities

New malware strain persists despite patch

Huge thanks to our sponsor, Savvy Security

Shadow identities on SaaS apps are growing unchecked, rapidly expanding an attack surface where businesses have little-to-no visibility or control. Savvy helps security teams safely embrace SaaS benefits by automating the discovery and removal of the most toxic combinations of SaaS identity risk. Savvy's automation playbooks and just-in-time security guardrails guide users at scale towards proper identity hygiene. That's Savvy—Identity-First SaaS Security.

Learn more at savvy.security/headlines.

Turkey blocks some VPNs

OpenAI publishes election guidance

Spanish municipality faces stiff ransomware demand

Huge thanks to our sponsor, Savvy Security

Shadow identities on SaaS apps are growing unchecked, rapidly expanding an attack surface where businesses have little-to-no visibility or control. Savvy helps security teams safely embrace SaaS benefits by automating the discovery and removal of the most toxic combinations of SaaS identity risk. Savvy's automation playbooks and just-in-time security guardrails guide users at scale towards proper identity hygiene. That's Savvy—Identity-First SaaS Security.

Learn more at savvy.security/headlines.

Ransomware gang targets clean water nonprofit

Denmark energy sector attacks likely not Sandworm after all

SEC says X account breach did not lead to further breaches

Thanks to our episode sponsor, Savvy Security

Shadow identities on SaaS apps are growing unchecked, rapidly expanding an attack surface where businesses have little-to-no visibility or control. Savvy helps security teams safely embrace SaaS benefits by automating the discovery and removal of the most toxic combinations of SaaS identity risk. Savvy's automation playbooks and just-in-time security guardrails guide users at scale towards proper identity hygiene. That's Savvy—Identity-First SaaS Security. Learn more at savvy.security/headlines.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Allan Cockriel, Group CISO, Shell

Thanks to our show sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging. Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization. Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk. To see Vanta's platform firsthand and access resources plus a special offer, go to vanta.com/ciso and watch their 3-minute product demo.

All links and the video of this episode can be found on CISO Series.com

Ivanti VPN hit by zero-days

Akira targeting backups

Sensitive school data accidentally exposed online

Remember to subscribe to the Cyber Security Headlines newsletter here.

Thanks to today's episode sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging. Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization. Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk. To see Vanta's platform firsthand and access resources plus a special offer, go to vanta.com/ciso and watch their 3-minute product demo.

Texas healthcare provider suffer data breach

Entire population of Brazil possibly exposed in data leak

Decryptor for Tortilla ransomware released

Thanks to today's episode sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging. Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization. Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk. To see Vanta's platform firsthand and access resources plus a special offer, go to vanta.com/ciso and watch their 3-minute product demo.

For the stories behind the headlines, head to CISOseries.com.

Bitcoin price spikes after SEC Twitter account hijack

Twitter account hijack wave affects Mandiant

China claims it cracked Apple AirDrop

Thanks to today's episode sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging. Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization. Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk. To see Vanta's platform firsthand and access resources plus a special offer, go to vanta.com/ciso and watch their 3-minute product demo.

For the stories behind the headlines, head to CISOseries.com.

Google accounts hacked: No passwords required

loanDepot joins growing list of US mortgage lenders attacked

Netgear and Hyundai's X accounts latest to be compromised in crypto scam

Thanks to today's episode sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging. Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization. Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk. To see Vanta's platform firsthand and access resources plus a special offer, go to vanta.com/ciso and watch their 3-minute product demo.

Merck and its insurers settle $1.4 billion NotPetya case

BreachForums admin Popompurin breaches terms of pretrial freedom

Iranian crypto exchange Bit24.cash accidentally exposes customer data

Thanks to today's episode sponsor, Vanta

From dozens of spreadsheets and screenshots to fragmented tools and manual security reviews, managing the requirements for modern compliance and security programs is increasingly challenging. Vanta is the leading Trust Management Platform that helps you centralize your efforts to establish trust and enable growth across your organization. Over 6,000 companies partner with Vanta to automate compliance, strengthen security posture, streamline security reviews, and reduce third-party risk. To see Vanta's platform firsthand and access resources plus a special offer, go to vanta.com/ciso and watch their 3-minute product demo.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Johna Till Johnson, CEO, Nemertes, and podcaster at Heavy Strategy.

Thanks to our show sponsor, NetSPI

Take the hassle out of dealing with alert fatigue, validation, and prioritization. Instead, use NetSPI's ASM platform to hone in on what's actually important. Attack surface vulnerabilities constantly evolve, causing a lack of visibility and overwhelm for your security teams. Start the new year off right by partnering with NetSPI to enhance your security program. Visit netspi.com/ASM

All links and the video of this episode can be found on CISO Series.com

Mandiant Twitter account restored after crypto scam hack

Law firm that handles data breaches hit by data breach

Spanish mobile carrier suffers outage after account takeover

Thanks to today's episode sponsor, NetSPI

Take the hassle out of dealing with alert fatigue, validation, and prioritization. Instead, use NetSPI's ASM platform to hone in on what's actually important. Attack surface vulnerabilities constantly evolve, causing a lack of visibility and overwhelm for your security teams. Start the new year off right by partnering with NetSPI to enhance your security program. Visit netspi.com/ASM to learn more.

For the stories behind the headlines, head to CISOseries.com.

A call for formal ban on ransomware payments

FTC asks for ideas to fight voice cloning

Cyberattack impacts French township

Thanks to today's episode sponsor, NetSPI

Take the hassle out of dealing with alert fatigue, validation, and prioritization. Instead, use NetSPI's ASM platform to hone in on what's actually important. Attack surface vulnerabilities constantly evolve, causing a lack of visibility and overwhelm for your security teams. Start the new year off right by partnering with NetSPI to enhance your security program. Visit netspi.com/ASM to learn more.

Google settles $5 billion 'incognito mode' lawsuit

Over $80 million in crypto stolen from Orbit Chain

Watchdog calls for updated medical device cyber agreement

Thanks to today's episode sponsor, NetSPI

Take the hassle out of dealing with alert fatigue, validation, and prioritization. Instead, use NetSPI's ASM platform to hone in on what's actually important. Attack surface vulnerabilities constantly evolve, causing a lack of visibility and overwhelm for your security teams. Start the new year off right by partnering with NetSPI to enhance your security program. Visit netspi.com/ASM to learn more.

For the stories behind the headlines, visit CISOseries.com.

Swedish national grocer stung by Cactus

Flaw in Black Basta decryptor allows recovery of victims' files - temporarily

Cyberattack hist Boston area hospital

Thanks to today's episode sponsor, NetSPI

Take the hassle out of dealing with alert fatigue, validation, and prioritization. Instead, use NetSPI's ASM platform to hone in on what's actually important. Attack surface vulnerabilities constantly evolve, causing a lack of visibility and overwhelm for your security teams. Start the new year off right by partnering with NetSPI to enhance your security program. Visit netspi.com/ASM to learn more.

For the stories behind the headlines, head to CISOseries.com.

LockBit hits German hospital system over the holidays

Ohio Lottery cyberattack claimed by DragonForce

First American says funds are secure

Thanks to today's episode sponsor, Barricade Cyber Solutions

Don't let ransomware ruin the holidays again this year! Prepare and spread holiday cheer with recoverfromransomware.com! The trusted DFIR experts at Barricade Cyber Solutions have saved 3,000 and counting businesses from ransomware attacks, including small and medium businesses just like yours! Barricade Cyber is YOUR solution for rapid data and systems recovery. Book a meeting directly with the CEO to discover how to recover from ransomware. Visit recoverfromransomware.com.

For the stories behind the headlines, head to CISOseries.com.

Threat actors install backdoor on Barracuda appliances

iPhone triangulation exploit used undocumented features

New York Times starts the publisher LLM lawsuits

Thanks to today's episode sponsor, Barricade Cyber Solutions

Don't let ransomware ruin the holidays again this year! Prepare and spread holiday cheer with recoverfromransomware.com! The trusted DFIR experts at Barricade Cyber Solutions have saved 3,000 and counting businesses from ransomware attacks, including small and medium businesses just like yours! Barricade Cyber is YOUR solution for rapid data and systems recovery. Book a meeting directly with the CEO to discover how to recover from ransomware. Visit recoverfromransomware.com.

CBS and Paramount owner hacked a year ago

Rockstar Games allegedly suffers source code leak

LoanCare says 1.3 million people affected by cyberattack

Thanks to today's episode sponsor, Barricade Cyber Solutions

When you're hit with ransomware, remember recoverfromransomware.com. Barricade Cyber Solutions' experienced DFIR team is ready to help your business recover from ransomware now. You'll work directly with the CEO to resolve your case quickly and efficiently. Whether you're experiencing a ransomware attack or want to get ahead of one by discussing a prevention plan, contact Barricade Cyber Solutions at recoverfromransomware.com.

For the stories behind the headlines, visit CISOseries.com.

First American suffers cyberattack, website down

Iran-linked group targets defense contractors worldwide

November saw record numbers of ransomware leak site victims

Thanks to today's episode sponsor, Barricade Cyber Solutions

Encountering a ransomware attack? Keep cool and reach out to Barricade Cyber Solutions, the trusted DFIR experts. Barricade is known for helping small and medium businesses just like yours restore their business data and successfully recover from ransomware. Escape the ransomware nightmare and bring your business back online now. Contact Barricade Cyber Solutions today at recoverfromransomware.com. That's recoverfromransomware.com.

For the stories behind the headlines, head to CISOseries.com.

Indian tech company HCL investigating ransomware attack

Agent Tesla and an old Microsoft Office vulnerability create new problems

New JavaScript malware targets banks

Thanks to today's episode sponsor, Barricade Cyber Solutions

Is ransomware affecting your business operations? Contact Barricade Cyber Solutions at recoverfromransomware.com. Barricade Cyber Solutions are elite DFIR experts who come to the rescue for businesses like yours daily. The trusted team at Barricade Cyber traces the source of infiltration and fortifies your defenses. Depend on Barricade Cyber Solutions for your data and system security prevention and recovery. Go to recoverfromransomware.com and set up a time to connect with the team today. Again, that's recoverfromransomware.com.

For the stories behind the headlines, head to CISOseries.com.

BlackCat came back

Child abuse images found in AI datasets

ESO solutions breach impacts million

Thanks to today's episode sponsor, Barricade Cyber Solutions

Has your organization fallen victim to ransomware? Remain calm and head over to recoverfromransomware.com. Barricade Cyber Solutions is the "go-to" for ransomware recovery services that small to medium business executives can trust. Over the past 5 years, Barricade Cyber Solutions has saved 3,000+ businesses in your shoes. Trust the elite DFIR team at Barricade Cyber Solutions with your data and system security recovery. Book a free consultation with the CEO at recoverfromransomware.com now.