Cybersecurity Headlines

North Korean hackers suspected of targeting S. Korea-US drills

Android malware apps use APK compression to evade detection

Security agencies warn space industry of increased attacks

Huge thanks to our sponsor, HyperProof

Tired of managing risk and compliance in spreadsheets? Sick of tracking down stakeholders to find evidence? Worried about whether that evidence is up to date for your next audit? Hyperproof has you covered. With Hyperproof, you can efficiently manage multiple compliance frameworks and risks in a single place so you can focus on what matters most: keeping your company secure and growing. Visit hyperproof.io to get a demo.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review, is hosted by Rich Stroffolino with guest, Jon Oltsik, distinguished analyst and fellow, Enterprise Strategy Group

Thanks to our show sponsor, Veza

75% of breaches happen because of bad permissions. The problem is that you don't know exactly WHO has access to WHAT data in your environment. For example, roles labeled as "read-only" can often edit and delete sensitive data. Veza automatically finds and fixes every bad permission—in every app—across your environment.

All links and the video of this episode can be found on CISO Series.com

Influence operators fine-tuning AI to deceive targets

67% of government agencies claim confidence in adopting zero trust

CISA warns of urgent Citrix vulnerability

Huge thanks to today's episode sponsor, Veza

75% of breaches happen because of bad permissions. The problem is that you don't know exactly WHO has access to WHAT data in your environment. For example, roles labeled as "read-only" can often edit and delete sensitive data. Veza automatically finds and fixes every bad permission—in every app—across your environment.

For the stories behind the headlines, head to CISOseries.com.

LockBit struggles to publish leaked data

Google's quantum resilient security key

Organizations optimistic and unprepared for AI

Huge thanks to today's episode sponsor, Veza

75% of breaches happen because of bad permissions. The problem is that you don't know exactly WHO has access to WHAT data in your environment. For example, roles labeled as "read-only" can often edit and delete sensitive data. Veza automatically finds and fixes every bad permission—in every app—across your environment.

Huge thanks to today's episode sponsor, Veza

75% of breaches happen because of bad permissions. The problem is that you don't know exactly WHO has access to WHAT data in your environment. For example, roles labeled as "read-only" can often edit and delete sensitive data. Veza automatically finds and fixes every bad permission—in every app—across your environment.

For the stories behind the headlines, visit CISOseries.com.

Moovit bug allowed for free rides

A look at Black Hat's network operations center

Business and gaming disputes lead to DDoS attacks

Huge thanks to today's episode sponsor, Veza

75% of breaches happen because of bad permissions. The problem is that you don't know exactly WHO has access to WHAT data in your environment. For example, roles labeled as "read-only" can often edit and delete sensitive data. Veza automatically finds and fixes every bad permission—in every app—across your environment.

Ford says cars with WiFi vulnerability still safe to drive

Cyber Safety Review Board to analyze cloud security in wake of Microsoft hack

Knight ransomware distributed in fake TripAdvisor complaint emails

Huge thanks to today's episode sponsor, Veza

75% of breaches happen because of bad permissions. The problem is that you don't know exactly WHO has access to WHAT data in your environment. For example, roles labeled as "read-only" can often edit and delete sensitive data. Veza automatically finds and fixes every bad permission—in every app—across your environment.

For the stories behind the headlines, head to CISOseries.com.

Link to blog post

This week's Cyber Security Headlines – Week in Review, August 7-11, is hosted by Rich Stroffolino with guest, Michael Woods, CISO, GE

Thanks to our show sponsor, Conveyor

We can all agree there's one thing the AI bots can take from us: completing customer security questionnaires. That's why we built Conveyor's GPT-questionnaire response tool.

It auto-generates precise, accurate answers to entire questionnaires with accuracy far superior to existing tools on the market. It's so accurate, your customers can now use it in our new 'upload questions to trust portal' feature. It's exactly as it sounds. Customers can upload questions and the AI will generate instant answers based on your trust portal content.

Try a free proof of concept with your own data and see why top SaaS companies are making the switch from outdated RFP software and other portal solutions. Learn more at Conveyor.

All links and the video of this episode can be found on CISO Series.com

CISA Warns organizations of exploited vulnerability affecting .NET, Visual Studio

Dell Compellent hardcoded key exposes VMware vCenter admin creds

DEF CON: Thousands of security researchers vie to outsmart AI in Las Vegas

Thanks to today's episode sponsor, Conveyor

We can all agree there's one thing the AI bots can take from us: completing customer security questionnaires. That's why we built Conveyor's GPT-questionnaire response tool. It auto-generates precise, accurate answers to entire questionnaires with accuracy far superior to existing tools on the market. It's so accurate, your customers can now use it in our new 'upload questions to trust portal' feature. It's exactly as it sounds. Customers can upload questions and the AI will generate instant answers based on your trust portal content. Try a free proof of concept with your own data and see why top SaaS companies are making the switch from outdated RFP software and other portal solutions. Learn more at www.conveyor.com.

For the stories behind the headlines, head to CISOseries.com.

AI Cyber Challenge announced at Black Hat

Tencent typing app had real time "eavesdropper"

Google adds cellular security to Android

Thanks to today's episode sponsor, Conveyor

Your scariest questionnaires that are HUNDREDS of questions long are no match for Conveyor's GPT-security questionnaire tool - the most accurate questionnaire automation tool on the market. It's so accurate that you can even let customers upload their own questions in your portal to get instant answers generated from your content. For questionnaires you still need complete, infosec and sales teams are spending 89% less time on answering questionnaires because they're getting accurate answers to entire questionnaires that they don't have to re-write. Try a free proof of concept with your own data. Learn more at www.conveyor.com

Google's Messages app now uses RCS to encrypt chats

Electoral Commission apologizes for security breach involving UK voters' data

Banks hit with over $500 million in fines for using out-of-band chat apps

Thanks to today's episode sponsor, Conveyor

Did you catch the biggest release of the year? No, not Barbenheimer. It's Conveyor's GPT-powered security questionnaire response tool: the most accurate questionnaire automation tool on the market. It's so good, you can let your customers upload their own questions in your trust portal to get instant answers based on your content. And of course, it's not just for your customers. You can use the GPT-questionnaire response tool internally as well to get auto-generated precise answers to entire questionnaires in minutes so all you have to do is review. Maybe it's time to replace your outdated RFP software… Try a free proof of concept with your own data. Learn more at www.conveyor.com

For the stories behind the headlines, head to CISOseries.com

White House rolls out school cyber initiatives

North Koreans breach Russian missile developer

Large language models getting worse at math

Thanks to today's episode sponsor, Conveyor

GPT for security questionnaires? Conveyor has already built that for you. Conveyor's GPT-questionnaire response tool is so accurate, you can use it in two ways. One: Let your customers upload their own questions in your trust portal to get AI-generated answers based on the content in your portal. And Two: It's not just for your customers. You can use the GPT-questionnaire response tool internally as well to get auto-generated precise answers to entire questionnaires in minutes so all you have to do is review. Try a free proof of concept with your own data to see it in action. Learn more at www.conveyor.com

Microsoft resolves vulnerability following criticism from Tenable CEO

FBI investigating ransomware attack crippling hospitals across 4 states

New acoustic attack steals data from keystrokes with 95% accuracy

Thanks to today's episode sponsor, Conveyor

Did you catch the biggest release of the year? No, not Barbenheimer. It's Conveyor's GPT-powered security questionnaire response tool: the most accurate questionnaire automation tool on the market. It's so good, you can let your customers upload their own questions in your trust portal to get instant answers based on your content. And of course, it's not just for your customers. You can use the GPT-questionnaire response tool internally as well to get auto-generated precise answers to entire questionnaires in minutes so all you have to do is review. Maybe it's time to replace your outdated RFP software… Try a free proof of concept with your own data. Learn more at www.conveyor.com

For the stories behind the headlines, head to CISOseries.com

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, July 31-August 4, is hosted by Rich Stroffolino with guest, Jeff Hudesman, CISO, Pinwheel

Thanks to our show sponsor, Opal

Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale. Visit opal.dev.

Fortinet VPN bug tops CISA's list of most exploited vulnerabilities in 2022

Chrome malware Rilide targets enterprise users via PowerPoint guides

Researchers discover bypass for recently fixed Ivanti EPMM vulnerability

Thanks to today's episode sponsor, Opal

Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale. Visit Opal.dev.

For the stories behind the headlines, head to CISOseries.com.

Australian Senate recommends banning WeChat

US company accused of aiding APT

Hacking group to detail P2P protocol at DEF CON

Thanks to today's episode sponsor, Opal

Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale. Visit Opal.dev.

Musk sues disinformation researchers for driving away advertisers

Researchers claim cloud host facilitated state-backed cyberattacks

UK spy agencies want to relax 'burdensome' laws on AI data use

Thanks to today's episode sponsor, Opal

Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale. Visit Opal.dev.

For the stories behind the headlines, visit CISOseries.com.

White House releases National Cyber and Workforce Education Strategy

Latest DeFi exploit sees millions in losses

No link found between cyber insurance and paying ransoms

Thanks to today's episode sponsor, Opal

Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale. Visit Opal.dev.

Israel's largest oil refinery website offline amid cyber attack claims

TSA renews cybersecurity guidelines for pipelines

CISA AND Australia warn of IDOR vulnerabilities after major breaches

Thanks to today's episode sponsor, Opal

Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale. Visit Opal.dev.

For the stories behind the headlines, head to CISOseries.com.

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, July 24-28, is hosted by Rich Stroffolino with guest, TC Niedzialkowski‌, CISO, Nextdoor

Thanks to today's episode sponsor, AppOmni

Over provisioned users could lead to your most sensitive data being exposed or leaked. Just a single attack on one of those users may compromise your entire SaaS estate. With AppOmni's SaaS Identity Fabric, secure and manage end-users, entitlements, and threat-based activity. Gain visibility and control over provisioned users, the SaaS data they have access to, and receive guided remediation. Get connected with SaaS security experts at AppOmni.com.

All links and the video of this episode can be found on CISO Series.com

Millions affected by data breach at US government contractor Maximus

Two severe Linux vulnerabilities impact 40% of Ubuntu users

Heart monitoring technology provider confirms cyberattack

Thanks to today's episode sponsor, AppOmni

Over provisioned users could lead to your most sensitive data being exposed or leaked. Just a single attack on one of those users may compromise your entire SaaS estate. With AppOmni's SaaS Identity Fabric, secure and manage end-users, entitlements, and threat-based activity. Gain visibility and control over provisioned users, the SaaS data they have access to, and receive guided remediation. Get connected with SaaS security experts at AppOmni.com.

For the stories behind the headlines, head to CISOseries.com.

Russian court convicts cyber security executive of treason

SEC to require incident disclosure

Government cyber attacks rely on valid credentials

Thanks to today's episode sponsor, AppOmni

SaaS cyberattacks are prevalent and often go unnoticed until data loss or breaches occur. Sign-ins from an unusual IP address. Stolen session tokens. These security risks can lurk in the shadows and put your entire SaaS estate at risk. Don't wait for a breach to secure your SaaS data. AppOmni helps security teams to detect suspicious activity, decide what activities to be alerted on, and receive guided remediation. Learn how at AppOmni.com.

Vulnerability found in TETRA encryption

Ryzen CPUs vulnerable to Zenbleed exploit

Norwegian government breached with Ivanti zero-day

Thanks to today's episode sponsor, AppOmni

Over provisioned users could lead to your most sensitive data being exposed or leaked. Just a single attack on one of those users may compromise your entire SaaS estate. With AppOmni's SaaS Identity Fabric, secure and manage end-users, entitlements, and threat-based activity. Gain visibility and control over provisioned users, the SaaS data they have access to, and receive guided remediation. Get connected with SaaS security experts at AppOmni.com.

Clop moves leaked data to clearweb sites

EU governments push back on centralized cyber reporting

Cost of data breaches up 15%

Thanks to today's episode sponsor, AppOmni

SaaS cyberattacks are prevalent and often go unnoticed until data loss or breaches occur. Sign-ins from an unusual IP address. Stolen session tokens. These security risks can lurk in the shadows and put your entire SaaS estate at risk. Don't wait for a breach to secure your SaaS data. AppOmni helps security teams to detect suspicious activity, decide what activities to be alerted on, and receive guided remediation. Learn how at AppOmni.com.

Microsoft key stolen by Chinese hackers provided access far beyond Outlook

JumpCloud breach traced back to North Korean state hackers

DHL investigating MOVEit breach as number of victims surpasses 20 million

Thanks to today's episode sponsor, AppOmni

Over provisioned users could lead to your most sensitive data being exposed or leaked. Just a single attack on one of those users may compromise your entire SaaS estate. With AppOmni's SaaS Identity Fabric, secure and manage end-users, entitlements, and threat-based activity. Gain visibility and control over provisioned users, the SaaS data they have access to, and receive guided remediation. Get connected with SaaS security experts at AppOmni.com.

For the stories behind the headlines, head to CISOseries.com.

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, July 17-21, is hosted by Rich Stroffolino with our guest, Dimitri van Zantvliet, CISO, Dutch Railways

Thanks to our show sponsor, OpenVPN

According to Oriel Hernan Villalba Pinzetta, a System Administrator with CEDEC's cybersecurity and IT department, "The pandemic meant we could not come to the office, and we needed to facilitate access to our local resources," says Villalba. "Cloud Connexa was really easy and fast to set up, two things we really needed in that moment." Read more here.

All links and the video of this episode can be found on CISO Series.com

New P2PInfect worm targeting Redis servers on Linux and Windows systems

Adobe releases new patches for exploited ColdFusion vulnerabilities

Estée Lauder breached by two ransomware groups

And now a word from our sponsor, OpenVPN

According to Oriel Hernan Villalba Pinzetta, a System Administrator with CEDEC's cybersecurity and IT department, "The pandemic meant we could not come to the office, and we needed to facilitate access to our local resources," says Villalba. "Cloud Connexa was really easy and fast to set up, two things we really needed in that moment." Read more at the link in our show notes.

For the stories behind the headlines, head to CISOseries.com.

Complex DDoS attacks on the rise

MI6 warns of Chinese data traps

Microsoft expands cloud log access

And now a word from our sponsor, OpenVPN

Karim Hakim, CTO at Hakim Misr Paco, says that CloudConnexa has given him some long-sought peace of mind. "OpenVPN has helped my company to access remote nodes securely without worrying about security protocols," he says. "My company has been looking for a similar solution for years, and we finally got what we were looking for." Read more at the link in our show notes.

US government launches IoT security labeling program

Renewable technologies could pose risk to US electric grid

US blacklists two spyware firms run by Israeli former general

And now a word from our sponsor, OpenVPN

Stephen Haecker, Chief Technology Officer at Carteras Colectivas, relies on Cloud Connexa customer support for his remote team. "I have used them about once per month to help with our growing networks," he says, "and the service quality is great with quick turnarounds." Haecker appreciates the consistency of the support team, and their personalized approach. Read more at the link in our show notes.

For the stories behind the headlines, visit CISOseries.com.

JumpCloud breached by APT

Wisconsin allegedly hit by LockBit

Typos leaking military emails

And now a word from our sponsor, OpenVPN

Zach Belhadri, the Infrastructure Manager at Knight Capital, shares why using Cloud Connexa for his team's security has been a game changer. With the Cybershield feature, he's able to prevent malware, phishing, and other threats by restricting access to only authorized and trusted internet destinations. He calls Cloud Connexa "an awesome product with huge potential." Read more at the link in our show notes.

Russia-linked Gamaredon starts stealing data 30 to 50 minutes after initial compromise

New AI tool – WormGPT allows for sophisticated cyber attacks

Microsoft still unsure how hackers stole Azure AD signing key

And now a word from our sponsor, OpenVPN

We asked Anthony Hook, the CTO at Dataweavers, if he would recommend Cloud Connexa to other companies. His response? A resounding yes! With Cloud Connexa, he says "we bypassed the clunky client-owned VPNs and networks, gaining a seamless, secure, and efficient connectivity solution." Read more at the link in our show notes.

For the stories behind the headlines, head to CISOseries.com.

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, July 10-14, is hosted by Sean Kelly with our guest, Yaron Levi, CISO, Dolby

Thanks to our show sponsor, Opal

Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale. Visit Opal.dev.

All links and the video of this episode can be found on CISO Series.com

USB drive malware attacks spiking again in first half of 2023

Users of Honeywell Experion DCS platforms urged to patch 9 vulnerabilities immediately

Ransomware gangs have extorted $449 million this year

Thanks to this week's episode sponsor, Opal

Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale.

For the stories behind the headlines, head to CISOseries.com.

What we know about NATO cyber pledges

Tax prep companies "recklessly" shared data

Report finds decrease in crypto crime

Thanks to this week's episode sponsor, Opal

Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale.

Silk Road's senior advisor sentenced to 20 years in prison

11 million HCA patients impacted by data breach

Google hit with lawsuit alleging it stole user data to train its AI tools

Thanks to this week's episode sponsor, Opal

Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale.

For the stories behind the headlines, visit CISOseries.com.

JumpCloud resets customer API keys

Would you be interested in a slightly used dark web market?

US and EU agree on new data transfer agreement

Thanks to this week's episode sponsor, Opal

Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale.

New 'Big Head' ransomware displays fake Windows update alert

RedEnergy stealer-as-a-ransomware threat targeting energy and telecom sectors

Three new MOVEit bugs spur CISA warning as more victims report breaches

Thanks to this week's episode sponsor, Opal

Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale.

For the stories behind the headlines, head to CISOseries.com.

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, July 3-7, is hosted by Rich Stroffolino with our guest, Hadas Cassorla, CISO, M1

Thanks to today's episode sponsor, SlashNext

SlashNext, a leader in SaaS-based Integrated Cloud Messaging Security across email, web, and mobile has the industry's first artificial intelligence solution, HumanAI, that uses generative AI to defend against advanced business email compromise (BEC), supply chain attacks, executive impersonation, and financial fraud. Request a demo today.

All links and the video of this episode can be found on CISO Series.com

Shell confirms MOVEit-related breach after ransomware group leaks data

28,000 impacted by data breach at Pepsi Bottling Ventures

INTERPOL nabs hacking crew OPERA1ER's leader behind $11 million cybercrime

Thanks to today's episode sponsor, SlashNext

SlashNext, a leader in SaaS-based Integrated Cloud Messaging Security across email, web, and mobile has the industry's first artificial intelligence solution, HumanAI, that uses generative AI to defend against advanced business email compromise (BEC), supply chain attacks, executive impersonation, and financial fraud. Request a demo today.

For the stories behind the headlines, head to CISOseries.com.

Japan's major port hit with ransomware

European court orders changes to Meta's data practices

Injunction restricts White House contact with social media companies

Thanks to today's episode sponsor, SlashNext

SlashNext, a leader in SaaS-based Integrated Cloud Messaging Security across email, web, and mobile has the industry's first artificial intelligence solution, HumanAI, that uses generative AI to defend against advanced business email compromise (BEC), supply chain attacks, executive impersonation, and financial fraud. Request a demo today.

BlackCat ransomware pushes Cobalt Strike via WinSCP search ads

CISA issues warning for cardiac device system vulnerability

330,000 FortiGate firewalls still unpatched to CVE-2023-27997 RCE flaw

Thanks to today's episode sponsor, SlashNext

SlashNext, a leader in SaaS-based Integrated Cloud Messaging Security across email, web, and mobile has the industry's first artificial intelligence solution, HumanAI, that uses generative AI to defend against advanced business email compromise (BEC), supply chain attacks, executive impersonation, and financial fraud. Request a demo today.

For the stories behind the headlines, head to CISOseries.com.

Semiconductor giant says IT supplier was attacked, LockBit makes related claims

Several US states investigating 'SiegedSec' hacking campaign

Russian telecom confirms hack after group backing Wagner boasted about an attack

Thanks to today's episode sponsor, SlashNext

For the stories behind the headlines, head to CISOseries.com.

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, June 26-30, is hosted by Rich Stroffolino with our guest, Cassio Goldschmidt, CISO, ServiceTitan

Thanks to our show sponsor, AppOmni

Over provisioned users could expose your organization's most sensitive data. Just a single attack on one of those users may compromise your entire SaaS estate. With AppOmni's identity and threat detection capabilities, you can detect and respond to suspicious activities within your SaaS environment. Gain visibility into over provisioned users, the SaaS data they have access to, and receive guided remediation. Get started at AppOmni.com.

All links and the video of this episode can be found on CISO Series.com

SEC notice to SolarWinds CISO and CFO roils cybersecurity industry

Newly uncovered ThirdEye Windows-based malware steals sensitive data

Cyber Command to expand 'canary in the coal mine' unit working with private sector

Thanks to today's episode sponsor, AppOmni

Over provisioned users could expose your organization's most sensitive data. Just a single attack on one of those users may compromise your entire SaaS estate. With AppOmni's identity and threat detection capabilities, you can detect and respond to suspicious activities within your SaaS environment. Gain visibility into over provisioned users, the SaaS data they have access to, and receive guided remediation. Get started at AppOmni.com.

For the stories behind the headlines, head to CISOseries.com.

Federal network devices fail CISA requirements

US considering more AI chip export bans

The scope of MOVEit vulnerability

Thanks to today's episode sponsor, AppOmni

Are you continuously monitoring the common misconfigurations occurring in your SaaS ecosystem? From inactive connected SaaS apps retaining access to sensitive data, to threat actors manipulating conditional access rules, these misconfigurations can pose a significant threat to your SaaS security. Take action with AppOmni. Secure your organization's most sensitive data and continuously monitor your SaaS estate for data exposure and misconfigurations. Visit AppOmni.com to get a free risk assessment.

Thanks to today's episode sponsor, AppOmni

Over provisioned users could expose your organization's most sensitive data. Just a single attack on one of those users may compromise your entire SaaS estate. With AppOmni's identity and threat detection capabilities, you can detect and respond to suspicious activities within your SaaS environment. Gain visibility into over provisioned users, the SaaS data they have access to, and receive guided remediation. Get started at AppOmni.com.

For the stories behind the headlines, visit CISOseries.com.

Monopoly darknet operator charged

Activision Blizzard games hit with DDoS

5G deadline could impact flights

Thanks to today's episode sponsor, AppOmni

Are you continuously monitoring the common misconfigurations occurring in your SaaS ecosystem? From inactive connected SaaS apps retaining access to sensitive data, to threat actors manipulating conditional access rules, these misconfigurations can pose a significant threat to your SaaS security. Take action with AppOmni. Secure your organization's most sensitive data and continuously monitor your SaaS estate for data exposure and misconfigurations. Visit AppOmni.com to get a free risk assessment.

CISA adds 6 flaws to known exploited vulnerabilities catalog

US military personnel report receiving smartwatches in the mail

Microsoft 365 users new Outlook and Teams problems

Thanks to today's episode sponsor, AppOmni

Over provisioned users could expose your organization's most sensitive data. Just a single attack on one of those users may compromise your entire SaaS estate. With AppOmni's identity and threat detection capabilities, you can detect and respond to suspicious activities within your SaaS environment. Gain visibility into over provisioned users, the SaaS data they have access to, and receive guided remediation. Get started at AppOmni.com.

For the stories behind the headlines, head to CISOseries.com

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, June 19-23, is hosted by Rich Stroffolino with our guest, Janet Heins, CISO, iHeartMedia

Thanks to our show sponsor, Wing Security

The first step to securing your organization's SaaS usage is knowing which SaaS applications your employees are using. 3rd party included. Wing offers a completely free, SaaS Shadow IT Discovery tool. You can find it at wing.security and self onboard. No sales in the process, no credit card needed, no time-limit. Just go ahead and discover your SaaS usage.

All links and the video of this episode can be found on CISO Series.com

Cybersecurity breaches more than double among Canadian businesses

Experienced China-based hacking group has new backdoor tool

Cyberattacks on OT, ICS lay groundwork for kinetic warfare

Thanks to today's episode sponsor, Wing Security

The first step to securing your organization's SaaS usage is knowing which SaaS applications your employees are using. 3rd party included. Wing offers a completely free, SaaS Shadow IT Discovery tool. You can find it at wing.security and self onboard. No sales in the process, no credit card needed, no time-limit. Just go ahead and discover your SaaS usage.

For the stories behind the headlines, head to CISOseries.com.