Cybersecurity Headlines

State-backed attackers exploit WinRAR zero-day

Five Eyes warns of Chinese IP theft

ServiceNow data exposure issue identified

Huge thanks to our sponsor, Vanta

Growing a business? That likely means more tools, third-party vendors, and data sharing — AKA, way more risk. Vanta's market-leading trust management platform brings GRC and security efforts together. Integrate information from multiple systems and reduce risks to your business and your brand — all without the need for additional staffing. And by automating up to 90% of the work for SOC 2, ISO 27001, and more, you'll be able to focus on strategy and security, not maintaining compliance. Join 5,000 fast-growing companies that leverage Vanta to manage risk and prove security in real-time. Our listeners get $1,000 off Vanta. Go to vanta.com/ciso to claim this discount.

Zero-day attacks affect over 10,000 Cisco devices

US government warns of widespread exploitation of Confluence vulnerability

D-Link confirms data breach caused by phishing attack

Huge thanks to our sponsor, Vanta

Growing a business? That likely means more tools, third-party vendors, and data sharing — AKA, way more risk. Vanta's market-leading trust management platform brings GRC and security efforts together. Integrate information from multiple systems and reduce risks to your business and your brand — all without the need for additional staffing. And by automating up to 90% of the work for SOC 2, ISO 27001, and more, you'll be able to focus on strategy and security, not maintaining compliance. Join 5,000 fast-growing companies that leverage Vanta to manage risk and prove security in real-time. Our listeners get $1,000 off Vanta. Go to vanta.com/ciso to claim this discount.

For the stories behind the headlines, visit CISOseries.com.

Israeli government warns to secure home security cameras

Signal debunks zero-day report

Equifax fined for 2017 data breach

Huge thanks to our sponsor, Vanta

Growing a business? That likely means more tools, third-party vendors, and data sharing — AKA, way more risk. Vanta's market-leading trust management platform brings GRC and security efforts together. Integrate information from multiple systems and reduce risks to your business and your brand — all without the need for additional staffing. And by automating up to 90% of the work for SOC 2, ISO 27001, and more, you'll be able to focus on strategy and security, not maintaining compliance. Join 5,000 fast-growing companies that leverage Vanta to manage risk and prove security in real-time. Our listeners get $1,000 off Vanta. Go to vanta.com/ciso to claim this discount.

LockBit claims attack on CDW

FBI and CISA publish joint advisory regarding AvosLocker ransomware

EPA rescinds cyber regulations for water sector

Huge thanks to our sponsor, Vanta

Growing a business? That likely means more tools, third-party vendors, and data sharing — AKA, way more risk. Vanta's market-leading trust management platform brings GRC and security efforts together. Integrate information from multiple systems and reduce risks to your business and your brand — all without the need for additional staffing. And by automating up to 90% of the work for SOC 2, ISO 27001, and more, you'll be able to focus on strategy and security, not maintaining compliance. Join 5,000 fast-growing companies that leverage Vanta to manage risk and prove security in real-time. Our listeners get $1,000 off Vanta. Go to vanta.com/ciso to claim this discount.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review, is hosted by Rich Stroffolino with guest Martin Choluj, VP Security ClickHouse

Thanks to our show sponsor, Hyperproof

Are you struggling to showcase the value of your work? It's a classic challenge in the risk and compliance space: leadership just doesn't understand what exactly you do and why it matters. With Hyperproof, the leading risk and compliance management platform, you get access to real-time reports that can help your leadership team understand the impact of the valuable work you do every day. Get a demo at hyperproof.io.

All links and the video of this episode can be found on CISO Series.com

Microsoft thwarts large-scale ransomware attack

Former Uber CISO files appeal

ToddyCat group targets telcos

Thanks to today's episode sponsor, Hyperproof

Is your company scaling? Do you need to quickly add more compliance frameworks but don't know where to start? Hyperproof has you covered. Hyperproof is a risk and compliance management platform that can help you manage compliance at scale. With Hyperproof, you can quickly add new frameworks, crosswalk controls between frameworks, view your risk posture, and manage your risks, all in one place. Visit hyperproof.io to get started today.

404 pages hijacked

Atlassian Confluence attacked by state-backed actors

Adobe's "icon of transparency"

Thanks to today's episode sponsor, Hyperproof

It's more critical than ever to focus on strategically addressing risk, but how can you do it when working with limited resources? That's where Hyperproof comes in: Hyperproof is a risk and compliance operations platform that helps you automate evidence collection, task management, and collaboration within your organization so you can focus on what matters most: keeping your company secure by prioritizing strategy, not manual processes. Get a demo at Hyperproof.io.

Internet-wide zero-day bug fuels largest-ever DDoS attack

23andMe resets user passwords after genetic data posted online

Microsoft Exchange gets 'better' patch to mitigate critical bug

Thanks to today's episode sponsor, Hyperproof

We get it. You're a risk manager or compliance professional, and you're overworked. You're trying to do the right thing by keeping your company safe and secure, but your technology is holding you back. Why not upgrade to Hyperproof? Hyperproof is a platform that not only eliminates the manual tasks you dread, but helps you scale security. Get a demo today at hyperproof.io.

For the stories behind the headlines, visit CISOseries.com.

Hacktivist attacks abound in the Middle East

Network protocol open-source tool Curl faces worst security flaw in a long time

HelloKitty ransomware source code leaked on hacking forum

Thanks to today's episode sponsor, Hyperproof

Imagine. You have an audit coming up, but instead of the usual rush, you actually feel prepared. You've collected your evidence. You can see which risks have been mitigated. And best of all, you don't have to send out any last-minute emails to other teams begging them for that one screenshot. Sounds like a dream, right? With Hyperproof's risk and compliance platform, this could be your reality. Get a demo at hyperproof.io.

For the stories behind the headlines, head to CISOseries.com.

MGM Resorts quotes ransomware tab at $110 million

Blackbaud in $49.5 million settlement for May 2020 ransomware attack

23andMe investigates breach claims

Thanks to today's episode sponsor, Hyperproof

Tired of managing risk and compliance in spreadsheets? Sick of tracking down stakeholders to find evidence? Worried about whether that evidence is up to date for your next audit? Hyperproof has you covered. With Hyperproof, you can efficiently manage multiple compliance frameworks and risks in a single place so you can focus on what matters most: keeping your company secure and growing. Visit hyperproof.io to get a demo.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review, is hosted by Rich Stroffolino with guest Bob Schuetter, CISO, Ashland

Thanks to our show sponsor, Conveyor

Got a scary security questionnaire to complete and you'd rather have AI do it? Your infosec friends are making the switch from outdated RFP and compliance tools to Conveyor: the most accurate security questionnaire automation software on the market. The proof is in the AI. Customers are seeing 80-90% accurate auto-generated answers by and decreasing the time spent on questionnaire answering by 91%. Try a free one-week proof of concept at www.conveyor.com.

All links and the video of this episode can be found on CISO Series.com

Apple rolls out patch for active iOS Zero-Day

Cisco patches urgent Emergency Responder flaw

Researchers warn of 100,000 exposed ICS systems

Thanks to our episode sponsor, Conveyor

We can all agree that AI can take one job from us: answering security questionnaires. Enter Conveyor: the AI security review platform helping infosec teams attack security questionnaires from all angles. Reduce incoming questionnaires by sharing a trust portal with customers and for those questionnaires you do get, use our AI questionnaire completion tool to auto-generate precise answers to entire questionnaires in seconds. Lucid tried a free one week proof of concept and reduced time spent on questionnaires by 91%. Learn more at www.conveyor.com.

For the stories behind the headlines, head to CISOseries.com.

Red Cross issues hacktivist rules

Looney Tunables hits major Linux distros

CISA may have violated the First Amendment

Thanks to our episode sponsor, Conveyor

Will security questionnaires ever go away? Maybe. But as long as they're still here, you might as well get AI to complete them for you. Enter Conveyor. The AI security questionnaire automation software that auto-generates 80-90% accurate answers to entire questionnaires in seconds so all you have to do is review. There's even a browser extension for the world's worst portals. Not sure if it'll work for you? Try a free one-week proof of concept at www.conveyor.com.

Arm and Qualcomm warn about exploited GPU drivers

EU Parliament strengthens spyware protections for journalists

NSA creates AI Security Center

Thanks to our episode sponsor, Conveyor

Does the mountain of security questionnaires in your inbox make you feel like a 2 dollar umbrella in a hurricane? Then you might want to check out Conveyor: the AI security review platform helping infosec teams attack security questionnaires from all angles. Reduce incoming questionnaires by sharing a trust portal with customers and for those questionnaires you do get, use our AI questionnaire completion tool to auto-generate precise answers to entire questionnaires in seconds. Lucid tried a free one week proof of concept and reduced time spent on questionnaires by 91%. Learn more at www.conveyor.com.

Critical Progress FTP bug now being exploited in attacks

Norway urges Europe-wide ban on Meta's targeted data collection

KillNet claims DDoS attack against Royal Family website

Thanks to our episode sponsor, Conveyor

Got a scary security questionnaire to complete and you'd rather have AI do it? Your infosec friends are making the switch from outdated RFP and compliance tools to Conveyor: the most accurate security questionnaire automation software on the market. The proof is in the AI. Customers are seeing 80-90% accurate auto-generated answers by and decreasing the time spent on questionnaire answering by 91%. Try a free one-week proof of concept at www.conveyor.com.

For the stories behind the headlines, visit CISOseries.com.

Cloudflare DDoS protections bypassed using Cloudflare

McLaren Health Care becomes latest ALPHV/BlackCat victim

Lazarus Group poses as Meta recruiters to spearfish Spanish engineers

Thanks to our episode sponsor, Conveyor

Does the thought of answering another security questionnaire make you want to beat the stuffing out of 32 pinatas?

Then you might want to check out Conveyor: the AI security review platform helping infosec and sales teams attack security questionnaires from all angles.

Reduce incoming questionnaires by sharing a trust portal with customers and for those questionnaires you do get, use our AI questionnaire completion tool to auto-generate precise answers to entire questionnaires in seconds.

Lucid tried a free one week proof of concept and reduced time spent on questionnaires by 91%. Learn more at www.conveyor.com.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review, is hosted by Rich Stroffolino with guest Andrew Storms, VP of security, Replicated

Thanks to our show sponsor, AppOmni

Are you confident in your organization's SaaS security? AppOmni surveyed 600+ security practitioners globally and 71% answered yes. But 79% experienced SaaS cybersecurity incidents. What's behind this disconnect?

CISOs believe they have a mature level of SaaS cybersecurity using CASB, MFA, and IdP. But these solutions lack unified risk visibility. Without SSPM, they're blind to the true extent of their SaaS attack surface risk. Don't gamble with your data. Get the visibility and insights you need to protect your SaaS environment with AppOmni.

All links and the video of this episode can be found on CISO Series.com

Chinese hackers stole emails from US State Dept in Microsoft breach

Johnson Controls faces $51 million ransomware demand

Google fixes year's fifth Chrome zero-day

Thanks to today's episode sponsor, AppOmni

If you think CASBs effectively secure your SaaS data… think again. CASBs lack visibility into your SaaS estate. Nor can they address and detect risks that arise from SaaS apps' unlimited endpoints. What you need is a robust SSPM designed to secure the dynamic and extensible nature of SaaS apps and their data. That's where AppOmni comes in. We continuously monitor your SaaS estate to detect cyber risks and secure your company's most critical data and workflows. Get started at AppOmni.com.

For the stories behind the headlines, head to CISOseries.com.

GPUs vulnerable to pixel-stealing attacks

Info-stealing commits hit GitHub

Alleged Sony hackers hit NTT Docomo

Thanks to today's episode sponsor, AppOmni

Are you confident in your organization's SaaS security? AppOmni surveyed 600+ security practitioners globally and 71% answered yes. But 79% experienced SaaS cybersecurity incidents. What's behind this disconnect? CISOs believe they have a mature level of SaaS cybersecurity using CASB, MFA, and IdP. But these solutions lack unified risk visibility. Without SSPM, they're blind to the true extent of their SaaS attack surface risk. Don't gamble with your data. Get the visibility and insights you need to protect your SaaS environment with AppOmni.

Multiple threat actors lay claim to Sony hack

Philippines health org struggling to recover from ransomware attack

Canadian Flair Airlines leaked user data for months

Thanks to today's episode sponsor, AppOmni

If you think CASBs effectively secure your SaaS data… think again. CASBs lack visibility into your SaaS estate. Nor can they address and detect risks that arise from SaaS apps' unlimited endpoints. What you need is a robust SSPM designed to secure the dynamic and extensible nature of SaaS apps and their data. That's where AppOmni comes in. We continuously monitor your SaaS estate to detect cyber risks and secure your company's most critical data and workflows. Get started at AppOmni.com.

For the stories behind the headlines, visit CISOseries.com.

Mixin Network loses $200 million

Kia and Hyundai exploit linked to massive car thefts

Stress testing voting equipment

Thanks to today's episode sponsor, AppOmni

Are you confident in your organization's SaaS security? AppOmni surveyed 600+ security practitioners globally and 71% answered yes. But 79% experienced SaaS cybersecurity incidents. What's behind this disconnect? CISOs believe they have a mature level of SaaS cybersecurity using CASB, MFA, and IdP. But these solutions lack unified risk visibility. Without SSPM, they're blind to the true extent of their SaaS attack surface risk. Don't gamble with your data. Get the visibility and insights you need to protect your SaaS environment with AppOmni.

Car audio manufacturer Clarion hacked – ALPHV claims responsibility

High-ranking Egyptian politician targeted by Predator spyware

City of Dallas issues report on May cyberattack

Thanks to today's episode sponsor, AppOmni

If you think CASBs effectively secure your SaaS data… think again. CASBs lack visibility into your SaaS estate. Nor can they address and detect risks that arise from SaaS apps' unlimited endpoints. What you need is a robust SSPM designed to secure the dynamic and extensible nature of SaaS apps and their data. That's where AppOmni comes in. We continuously monitor your SaaS estate to detect cyber risks and secure your company's most critical data and workflows. Get started at AppOmni.com.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review, is hosted by Rich Stroffolino with guest Shawn Bowen, CISO, World Kinect Corporation

Thanks to our show sponsor, Hyperproof

Is your company scaling? Do you need to quickly add more compliance frameworks but don't know where to start? Hyperproof has you covered. Hyperproof is a risk and compliance management platform that can help you manage compliance at scale. With Hyperproof, you can quickly add new frameworks, crosswalk controls between frameworks, view your risk posture, and manage your risks, all in one place. Visit hyperproof.io to get started today.

All links and the video of this episode can be found on CISO Series.com

UK launches comprehensive new online safety laws

Cisco buys Splunk

TransUnion denies breach

Huge thanks to our sponsor, Hyperproof

Is your company scaling? Do you need to quickly add more compliance frameworks but don't know where to start? Hyperproof has you covered. Hyperproof is a risk and compliance management platform that can help you manage compliance at scale. With Hyperproof, you can quickly add new frameworks, crosswalk controls between frameworks, view your risk posture, and manage your risks, all in one place. Visit hyperproof.io to get started today.

For the stories behind the headlines, head to CISOseries.com.

Cyber attack disrupted Canadian airports

Huawei ships chips for surveillance cameras

Signal adds quantum-resistant encryption

Huge thanks to our sponsor, Hyperproof

It's more critical than ever to focus on strategically addressing risk, but how can you do it when working with limited resources? That's where Hyperproof comes in: Hyperproof is a risk and compliance operations platform that helps you automate evidence collection, task management, and collaboration within your organization so you can focus on what matters most: keeping your company secure by prioritizing strategy, not manual processes. Get a demo at Hyperproof.io.

DHS council seeks to simplify cyber incident reporting rules

UK passes the Online Safety Bill

Finland and Europol take down PIILOPUOTI marketplace

Huge thanks to our sponsor, Hyperproof

We get it. You're a risk manager or compliance professional, and you're overworked. You're trying to do the right thing by keeping your company safe and secure, but your technology is holding you back. Why not upgrade to Hyperproof? Hyperproof is a platform that not only eliminates the manual tasks you dread, but helps you scale security. Get a demo today at hyperproof.io.

For the stories behind the headlines, visit CISOseries.com.

Microsoft leaks terabytes of internal data

UK CMA outlines principles for AI regulation

Germany warns of attacks on LNG terminals

Huge thanks to our sponsor, Hyperproof

Imagine. You have an audit coming up, but instead of the usual rush, you actually feel prepared. You've collected your evidence. You can see which risks have been mitigated. And best of all, you don't have to send out any last-minute emails to other teams begging them for that one screenshot. Sounds like a dream, right? With Hyperproof's risk and compliance platform, this could be your reality. Get a demo at hyperproof.io.

Lazarus Group suspected in CoinEx robbery

Thailand financial company CardX discloses leak

Ransomware hits trucking software provider

Huge thanks to our sponsor, Hyperproof

Tired of managing risk and compliance in spreadsheets? Sick of tracking down stakeholders to find evidence? Worried about whether that evidence is up to date for your next audit? Hyperproof has you covered. With Hyperproof, you can efficiently manage multiple compliance frameworks and risks in a single place so you can focus on what matters most: keeping your company secure and growing. Visit hyperproof.io to get a demo.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review, is hosted by Rich Stroffolino with guest Davi Ottenheimer, VP, Trust and Ethics, Inrupt

Thanks to our show sponsor, Conveyor

The team at Lucid software reduced the time spent answering customer security questionnaires by a whopping 91% with Conveyor's security questionnaire automation software – powered by OpenAI. Compared to the tools on the market, Conveyor's AI auto-generates the most accurate answers to entire questionnaires so you can spend almost zero time on them. That's it. That's the ad. We'll let you get back to the show, but if you want to take away the pain of questionnaires, try a free proof of concept at www.conveyor.com.

All links and the video of this episode can be found on CISO Series.com

Caesars reportedly paid millions to stop Scattered Spider

Cybersecurity incident impacts Canada's Weather Network

Blocked LockBit affiliate deploys 3AM instead

Huge thanks to our sponsor, Conveyor

The team at Lucid software reduced the time spent answering customer security questionnaires by a whopping 91% with Conveyor's security questionnaire automation software - powered by OpenAI. Compared to the tools on the market, Conveyor's AI auto-generates the most accurate answers to entire questionnaires so you can spend almost zero time on them. That's it. That's the ad. We'll let you get back to the headlines, but if you want to take away the pain of questionnaires, try a free proof of concept at www.conveyor.com.

For the stories behind the headlines, head to CISOseries.com.

NSC asks governments not to pay ransoms

CISA's open source software security roadmap

Save the Children hit with ransomware

Huge thanks to our sponsor, Conveyor

Got a scary security questionnaire to complete and you'd rather have AI do it? Your infosec friends are making the switch from outdated RFP and compliance tools to Conveyor - the most accurate security questionnaire automation software on the market. The proof is in the AI. Customers are seeing 80-90% accurate answers and decreasing the time spent on questionnaire answering by 91%. We're excited about the success customers like Lucid and Carta have seen using Conveyor. Try a free proof of concept at www.conveyor.com.

MGM Resorts slot machines and ATMs disrupted by "cybersecurity incident"

Hackers access sensitive data of thousands of Airbus vendors

Cryptoqueen's sidekick sentenced for $4 billion scam

Huge thanks to our sponsor, Conveyor

Here's how to measure if your security questionnaire answering software is effective. We benchmarked the RFP and compliance tools on the market and most are only generating accurate responses to questionnaires 20-50% of the time. Ready for 80-90% auto-generated accurate answers so you can fly through your review? Then you should try Conveyor's AI-security questionnaire automation tool. Don't believe us? Try a free proof of concept at www.conveyor.com

For the stories behind the headlines, visit CISOseries.com.

UK government sees record critical IT infrastructure attacks

Charming Kitten unleashes Sponsor backdoor

Ransomware costs Sri Lankan government months of data

Huge thanks to our sponsor, Conveyor

The team at Lucid software reduced the time spent answering customer security questionnaires by a whopping 91% with Conveyor's security questionnaire automation software - powered by OpenAI. Compared to the tools on the market, Conveyor's AI auto-generates the most accurate answers to entire questionnaires so you can spend almost zero time on them. That's it. That's the ad. We'll let you get back to the headlines, but if you want to take away the pain of questionnaires, try a free proof of concept at www.conveyor.com.

Evil Telegram fake apps send spyware

Akamai announces mitigation of largest DDoS on a US financial company

Rhysida attacks three more hospitals

Huge thanks to our sponsor, Conveyor

What's scarier than the Sunday scaries? Opening your inbox to a 200 question, 15 tab macro-enabled workbook containing a customer security questionnaire to complete. Let Conveyor's AI security questionnaire automation tool, powered by OpenAI, help your answering process go a lot faster. Spend 91% less time on questionnaires when you get precise answers auto-generated for you. Try a free proof of concept to see how fast you can get through questionnaires with Conveyor at www.conveyor.com

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review, is hosted by Rich Stroffolino with guest Dan Walsh, CISO, VillageMD

Thanks to our show sponsor, Comcast DataBee

DataBee™, from Comcast Technology Solutions, is a cloud-native security, risk and compliance data fabric platform that transforms your security data chaos into connected outcomes. Built by security professionals for security professionals, DataBee makes your data a gold mine, rich with information that enables you to examine the past, react to the present, and protect the future of your business. Learn more at https://comca.st/DataBee.

All links and the video of this episode can be found on CISO Series.com

How Chinese hackers stole a Microsoft signing key

The ICC to prosecute cyberwar crimes

North Korean cyberattacks against Russian targets

Thanks to today's episode sponsor, Comcast

DataBee™, from Comcast Technology Solutions, is a cloud-native security, risk and compliance data fabric platform that transforms your security data chaos into connected outcomes. Built by security professionals for security professionals, DataBee makes your data a gold mine, rich with information that enables you to examine the past, react to the present, and protect the future of your business. Learn more at https://comca.st/DataBee.

CISA close to finalizing incident reporting rules

Krebs on cracked LastPass keys

Connected cars not great for privacy and security

Thanks to today's episode sponsor, Comcast

Are you still using whiteboards and pivoting between tools to find out who owns what data sources and the relationships between data points? It's time to improve your OODA loop and enhance your security and compliance efforts with DataBee, from Comcast Technology Solutions. Learn how DataBee weaves together and enriches data from across the enterprise to provide deeper insights into your security, risk and compliance posture. Visit https://comca.st/DataBee.

CISA hires 'Mudge' to work on security-by-design principles

All 50 states call on Congress to address AI-generated CSAM

Stake.com loses $41 million to hot wallet hackers

Thanks to today's episode sponsor, Comcast

What if you could integrate enterprise-wide business intelligence with your security data for better contextual insights into potential threats and compliance issues? You can. With DataBee™, from Comcast Technology Solutions. Learn how DataBee enables users to leverage integrated insights to mitigate risks and stay compliant. Visit https://comca.st/DataBee.

For the stories behind the headlines, visit CISOseries.com.

New PDF MalDoc allows evasion of antivirus

MinIO Storage system being used to compromise servers

Okta warns of IT help desk attacks

Thanks to today's episode sponsor, Comcast

Data rules everything around us – but why are the people who need data the most unable to access it? What if you could boost the productivity of your security teams and their ability to collaborate by providing them access to the same shared and enriched data? You can. With DataBee™, from Comcast Technology Solutions. Learn how DataBee can help your organization make better informed decisions, quickly and cost-effectively. Visit https://comca.st/DataBee

For the stories behind the headlines, head to CISOseries.com.

X to collect member employment data

Technical details of Sandworm malware 'Infamous Chisel' released

Golf club maker Callaway suffers breach

Thanks to today's episode sponsor, Comcast DataBee

"Data is the currency of the 21st century", yet for so many cybersecurity professionals, it's still too difficult to access, correlate and use this 'currency' for better, faster security and compliance decision-making. That's why Comcast Technology Solutions created DataBee™, a cloud-native security data fabric platform that can help you turn your security data into valuable business 'currency'. Learn more at https://comca.st/DataBee.

For the stories behind the headlines, head to CISOseries.com.

Gamaredon hackers hit Ukraine military

Movie giant Paramount Global suffers data breach

Takeover swarm exploits OpenFire

Huge thanks to today's episode sponsor, AppOmni

Over provisioned users could lead to your most sensitive data being exposed or leaked. Just a single attack on one of those users may compromise your entire SaaS estate. With AppOmni's SaaS Identity Fabric, secure and manage end-users, entitlements, and threat-based activity. Gain visibility and control over provisioned users, the SaaS data they have access to, and receive guided remediation. Get connected with SaaS security experts at AppOmni.com.

For the stories behind the headlines, head to CISOseries.com.

Chinese threat actors breached Japan's cybersecurity agency

Human trafficking into cyber scams

China set to approve first generative AI services

Huge thanks to today's episode sponsor, AppOmni

SaaS cyberattacks are prevalent and often go unnoticed until data loss or breaches occur. Sign-ins from an unusual IP address. Stolen session tokens. These security risks can lurk in the shadows and put your entire SaaS estate at risk. Don't wait for a breach to secure your SaaS data. AppOmni helps security teams to detect suspicious activity, decide what activities to be alerted on, and receive guided remediation. Learn how at AppOmni.com.

FBI dismantles Qakbot operation that took millions in ransom

University of Michigan severs ties to internet after cyberattack

Microsoft joins growing list of organizations criticizing UN cybercrime treaty

Huge thanks to today's episode sponsor, AppOmni

Over provisioned users could lead to your most sensitive data being exposed or leaked. Just a single attack on one of those users may compromise your entire SaaS estate. With AppOmni's SaaS Identity Fabric, secure and manage end-users, entitlements, and threat-based activity. Gain visibility and control over provisioned users, the SaaS data they have access to, and receive guided remediation. Get connected with SaaS security experts at AppOmni.com.

For the stories behind the headlines, visit CISOseries.com.

UK network outage grounds flights

The malware loader Big 3

Another spyware firm breached

Huge thanks to today's episode sponsor, AppOmni

SaaS cyberattacks are prevalent and often go unnoticed until data loss or breaches occur. Sign-ins from an unusual IP address. Stolen session tokens. These security risks can lurk in the shadows and put your entire SaaS estate at risk. Don't wait for a breach to secure your SaaS data. AppOmni helps security teams to detect suspicious activity, decide what activities to be alerted on, and receive guided remediation. Learn how at AppOmni.com.

Cisco fixes flaws in NX-OS AND FXOS software

Windows preview updates bring blue screen of death

FBI warns Barracuda bug still has bite

Huge thanks to today's episode sponsor, AppOmni

Over provisioned users could lead to your most sensitive data being exposed or leaked. Just a single attack on one of those users may compromise your entire SaaS estate. With AppOmni's SaaS Identity Fabric, secure and manage end-users, entitlements, and threat-based activity. Gain visibility and control over provisioned users, the SaaS data they have access to, and receive guided remediation. Get connected with SaaS security experts at AppOmni.com.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review, is hosted by Rich Stroffolino with guest Gerald Auger Ph.D., Chief Content Creator, Simply Cyber

Thanks to our show sponsor, HyperProof

Is your company scaling? Do you need to quickly add more compliance frameworks but don't know where to start? Hyperproof has you covered. Hyperproof is a risk and compliance management platform that can help you manage compliance at scale. With Hyperproof, you can quickly add new frameworks, crosswalk controls between frameworks, view your risk posture, and manage your risks, all in one place. Visit hyperproof.io to get started today.

All links and the video of this episode can be found on CISO Series.com

Lazarus Group exploits ManageEngine to drop new RATS on internet and healthcare

Vulnerabilities in Rockwell ThinManager threaten industrial control systems

Mississippi hospital system suffers cyberattack

Huge thanks to our sponsor, HyperProof

Is your company scaling? Do you need to quickly add more compliance frameworks but don't know where to start? Hyperproof has you covered. Hyperproof is a risk and compliance management platform that can help you manage compliance at scale. With Hyperproof, you can quickly add new frameworks, crosswalk controls between frameworks, view your risk posture, and manage your risks, all in one place. Visit to get started today.

For the stories behind the headlines, head to CISOseries.com.

Tornado Cash developers face indictment

UN begins final cybercrime treaty talks

FBI warns of North Korean crypto cash out

Huge thanks to our sponsor, HyperProof

It's more critical than ever to focus on strategically addressing risk, but how can you do it when working with limited resources? That's where Hyperproof comes in: Hyperproof is a risk and compliance operations platform that helps you automate evidence collection, task management, and collaboration within your organization so you can focus on what matters most: keeping your company secure by prioritizing strategy, not manual processes. Get a demo at Hyperproof.io.

CISOs proclaim cybersecurity confidence, but majority admit to SaaS incidents

Cyber Health Report: Hacker entry point shifts from email to network

Duo outage causes Azure Auth authentication errors

Huge thanks to our sponsor, HyperProof

We get it. You're a risk manager or compliance professional, and you're overworked. You're trying to do the right thing by keeping your company safe and secure, but your technology is holding you back. Why not upgrade to Hyperproof? Hyperproof is a platform that not only eliminates the manual tasks you dread, but helps you scale security. Get a demo today at hyperproof.io.

For the stories behind the headlines, head to CISOseries.com.

ChatGPT used in crypto botnet

Brits tipping off ransomware targets

Tesla data breach caused by insiders

Huge thanks to our sponsor, HyperProof

Imagine. You have an audit coming up, but instead of the usual rush, you actually feel prepared. You've collected your evidence. You can see which risks have been mitigated. And best of all, you don't have to send out any last-minute emails to other teams begging them for that one screenshot. Sounds like a dream, right? With Hyperproof's risk and compliance platform, this could be your reality. Get a demo at hyperproof.io.