Cybersecurity Headlines

Cloudflare outage impacts crypto exchanges

Biden signs a pair of cybersecurity bills

7-zip now supports Windows 'Mark-of-the-Web' security feature

Thanks to today's episode sponsor, Optiv

Modernizing your identity control plane from AD to the cloud is complex. Ralph Martino, who is leading the identity and access management (IAM) group for Optiv, discusses what challenges CISOs are facing in today's ever-changing climate: • Increasing security • Decreasing risk • Lowering cost Learn more at www.optiv.com/IAM-Microsoft.

For the stories behind the headlines, head to CISOseries.com

Windows downloads blocked in Russia

The importance of receipts

Chrome extensions can be used for fingerprinting

Thanks to today's episode sponsor, Optiv

Modernizing your identity control plane from AD to the cloud is complex. Ralph Martino, who is leading the identity and access management (IAM) group for Optiv, discusses what challenges CISOs are facing in today's ever-changing climate: • Increasing security • Decreasing risk • Lowering cost Learn more at www.optiv.com/IAM-Microsoft.

US DoJ announces shut down of Russian RSOCKS Botnet

Experts warn of a new eCh0raix ransomware campaign targeting QNAP NAS

Mixed results for Russia's aggressive Ukraine information war, experts say

Thanks to today's episode sponsor, Optiv

Modernizing your identity control plane from AD to the cloud is complex. Ralph Martino, who is leading the identity and access management (IAM) group for Optiv, discusses what challenges CISOs are facing in today's ever-changing climate: • Increasing security • Decreasing risk • Lowering cost Learn more at www.optiv.com/IAM-Microsoft.

For the stories behind the headlines, head to CISOseries.com.

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, June 6-10, is hosted by Rich Stroffolino with our guest, Ariel Weintraub, CISO, MassMutual

Thanks to today's episode sponsor, Datadog

Check out Datadog's on-demand fireside chat with CTO Cormac Brady. Over the course of his 20+ year career at Thomson Reuters, Cormac consistently built bridges between technical teams—and in the process helped teams achieve superior results and earned himself senior leadership positions. Watch now at datadoghq.com/ciso/

All links and the video of this episode can be found on CISO Series.com

House Armed Services chair calls national security software, systems 'too vulnerable'

Microsoft Office 365 AutoSave can assist cloud ransomware attacks

OMIGOD! There's more to OMIGOD

Thanks to today's episode sponsor, Datadog

Watch Datadog's on-demand webinar for a 30-minute discussion on driving DevSecOps best practices in the enterprise with CTO Cormac Brady. Over the course of his 20+ year career at Thomson Reuters, Cormac consistently built bridges between technical teams—and in the process helped teams achieve superior results and earned himself senior leadership positions. Cormac shares stories and leadership lessons that are applicable to any enterprise technical leader looking to help their firm build and operate services in an increasingly competitive and treacherous digital economy. Watch now at datadoghq.com/ciso/

For the stories behind the headlines, head to CISOseries.com.

Cloudflare repels another record DDoS

Africa's largest supermarket chain hit with ransomware

Resurgence in travel not ignored by threat actors

Thanks to today's episode sponsor, Datadog

Check out Datadog's on-demand fireside chat with CTO Cormac Brady. Over the course of his 20+ year career at Thomson Reuters, Cormac consistently built bridges between technical teams—and in the process helped teams achieve superior results and earned himself senior leadership positions. Watch now at datadoghq.com/ciso/

US defense contractor discusses takeover of NSO spyware

DoJ will no longer prosecute ethical hackers

Attack on Kaiser Permanente exposes data of thousands of customers

Thanks to today's episode sponsor, Datadog

Watch Datadog's on-demand webinar for a 30-minute discussion on driving DevSecOps best practices in the enterprise with CTO Cormac Brady. Over the course of his 20+ year career at Thomson Reuters, Cormac consistently built bridges between technical teams—and in the process helped teams achieve superior results and earned himself senior leadership positions. Cormac shares stories and leadership lessons that are applicable to any enterprise technical leader looking to help their firm build and operate services in an increasingly competitive and treacherous digital economy. Watch now at datadoghq.com/ciso/

For the stories behind the headlines, head to CISOseries.com

Leaky continuous integration logs

Exchange servers used to deploy Black Cat

Bluetooth can be used to track phones

Thanks to today's episode sponsor, Datadog

Check out Datadog's on-demand fireside chat with CTO Cormac Brady. Over the course of his 20+ year career at Thomson Reuters, Cormac consistently built bridges between technical teams—and in the process helped teams achieve superior results and earned himself senior leadership positions. Watch now at datadoghq.com/ciso/

Amazon's chat app has a child sex abuse problem

Ransomware decryptors now for sale on gaming platform

China's biggest online influencers go dark

Thanks to today's episode sponsor, Datadog

Watch Datadog's on-demand webinar for a 30-minute discussion on driving DevSecOps best practices in the enterprise with CTO Cormac Brady. Over the course of his 20+ year career at Thomson Reuters, Cormac consistently built bridges between technical teams—and in the process helped teams achieve superior results and earned himself senior leadership positions. Cormac shares stories and leadership lessons that are applicable to any enterprise technical leader looking to help their firm build and operate services in an increasingly competitive and treacherous digital economy. Watch now at datadoghq.com/ciso/

For the stories behind the headlines, head to CISOseries.com

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, June 6-10, is hosted by Rich Stroffolino with our guest, Upendra Mardikar, CSO, Snap Finance

PlexTrac is the platform that empowers your offensive security team to spend more time hacking and less time reporting. Build better reports in half the time, centralize your data, maximize your reusable content, and become more efficient and effective. PlexTrac clients report a "5X ROI in 1 year," a "30% increase in efficiency," have "cut their reporting cycle by 65%," and experienced a "18 to 22% time savings per engagement." Check out PlexTrac.com/CISOSeries to learn how PlexTrac can help your team deliver results.

All links and the video of this episode can be found on CISO Series.com

MFA could be long haul for some federal agencies says CISA official

New Emotet variant stealing users' credit card information from Google Chrome

Symantec: More malware operators moving in to exploit Follina

Thanks to today's episode sponsor, PlexTrac

PlexTrac is the platform that empowers your offensive security team to spend more time hacking and less time reporting. Build better reports in half the time, centralize your data, maximize your reusable content, and become more efficient and effective. PlexTrac clients report a "5X ROI in 1 year," a "30% increase in efficiency," have "cut their reporting cycle by 65%," and experienced a "18 to 22% time savings per engagement." Check out PlexTrac.com/CISOSeries to learn how PlexTrac can help your team deliver results.

For the stories behind the headlines, head to CISOseries.com.

Lack of reporting hurting the ransomware fight

CISA warns of China-linked network snooping

Personal information marketplace taken down

Thanks to today's episode sponsor, PlexTrac

PlexTrac is the platform that empowers your offensive security team to spend more time hacking and less time reporting. Build better reports in half the time, centralize your data, maximize your reusable content, and become more efficient and effective. PlexTrac clients report a "5X ROI in 1 year," a "30% increase in efficiency," have "cut their reporting cycle by 65%," and experienced a "18 to 22% time savings per engagement." Check out PlexTrac.com/CISOSeries to learn how PlexTrac can help your team deliver results.

Passwords are finally dead

Hackers steal credit cards from online gun shops

Shields data breach affects 2 million patients

Thanks to today's episode sponsor, PlexTrac

The best penetration tests begin and end with PlexTrac. PlexTrac can improve efficiency and effectiveness at every phase of your proactive assessments. By centralizing the data from all your automation tools, cataloging important reusable content for easy access, and promoting communication and visibility at every phase of an assessment, PlexTrac cuts reporting time in half and adds value between reports. Check out PlexTrac.com/CISOSeries to learn why PlexTrac is the premier pentest reporting and management platform.

For the stories behind the headlines, head to CISOseries.com

The once and future AlphaBay

Karakurt adopts bill collector tactics

China concludes its cybersecurity review of Didi

Thanks to today's episode sponsor, PlexTrac

PlexTrac is the platform that empowers your offensive security team to spend more time hacking and less time reporting. Build better reports in half the time, centralize your data, maximize your reusable content, and become more efficient and effective. PlexTrac clients report a "5X ROI in 1 year," a "30% increase in efficiency," have "cut their reporting cycle by 65%," and experienced a "18 to 22% time savings per engagement." Check out PlexTrac.com/CISOSeries to learn how PlexTrac can help your team deliver results.

Evasive phishing mixes reverse tunnels and URL shortening services

Exploit released for Atlassian Confluence RCE bug, patch now

Lawmakers are racing to pass tech antitrust reforms before midterms

Thanks to today's episode sponsor, PlexTrac

The best penetration tests begin and end with PlexTrac. PlexTrac can improve efficiency and effectiveness at every phase of your proactive assessments. By centralizing the data from all your automation tools, cataloging important reusable content for easy access, and promoting communication and visibility at every phase of an assessment, PlexTrac cuts reporting time in half and adds value between reports. Check out PlexTrac.com/CISOSeries to learn why PlexTrac is the premier pentest reporting and management platform.

For the stories behind the headlines, head to CISOseries.com.

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, May 30-June 3, is hosted by Rich Stroffolino with our guest, Steve Zalewski, Co-host, Defense in Depth

Thanks to today's episode sponsor, Feroot

All links and the video of this episode can be found on CISO Series.com

Leaked Conti chats confirm gang's ability to conduct firmware-based attacks

Critical UNISOC chip vulnerability affects millions of Android smartphones

ExpressVPN removes servers in India after refusing to comply with government order

Thanks to today's episode sponsor, Feroot

Feroot secures client-side web applications so that businesses can deliver a flawless and safe digital user experience to their customers. Inspector and Pageguard, Feroot's automated data protection solutions, increase code visibility, facilitate threat analysis, and detect and protect from dangerous client-side attacks, such as Magecart, cross-site scripting, e-skimming, and other threats focused on front-end JavaScript and web applications. Learn more at www.feroot.com.

For the stories behind the headlines, head to CISOseries.com.

Europol shuts down FluBot

Hive ransomware kicks Costa Rica when its down

CISA issues advisory on voting machine vulnerabilities

Thanks to today's episode sponsor, Feroot

Feroot secures client-side web applications so that businesses can deliver a flawless and safe digital user experience to their customers. Inspector and Pageguard, Feroot's automated data protection solutions, increase code visibility, facilitate threat analysis, and detect and protect from dangerous client-side attacks, such as Magecart, cross-site scripting, e-skimming, and other threats focused on front-end JavaScript and web applications. Learn more at www.feroot.com.

Follina vulnerability under active exploitation

Tension inside Google over conduct of fired researcher

IBM to pay $1.6 billion for poaching customer account

Thanks to today's episode sponsor, Feroot

Feroot secures client-side web applications so that businesses can deliver a flawless and safe digital user experience to their customers. Inspector and Pageguard, Feroot's automated data protection solutions, increase code visibility, facilitate threat analysis, and detect and protect from dangerous client-side attacks, such as Magecart, cross-site scripting, e-skimming, and other threats focused on front-end JavaScript and web applications. Learn more at www.feroot.com.

For the stories behind the headlines, head to CISOseries.com

China censoring open-source code

Follina zero-day hits Office

EnemyBot botnet acts fast

Thanks to today's episode sponsor, Feroot

Feroot secures client-side web applications so that businesses can deliver a flawless and safe digital user experience to their customers. Inspector and Pageguard, Feroot's automated data protection solutions, increase code visibility, facilitate threat analysis, and detect and protect from dangerous client-side attacks, such as Magecart, cross-site scripting, e-skimming, and other threats focused on front-end JavaScript and web applications. Learn more at www.feroot.com.

Pro-Russian hacker group KillNet plans to attack Italy today

Microsoft warns that hackers are using more advanced techniques to steal credit card data

China makes offer to ten nations help to run their cyber-defenses

Thanks to today's episode sponsor, Feroot

Feroot secures client-side web applications so that businesses can deliver a flawless and safe digital user experience to their customers. Inspector and Pageguard, Feroot's automated data protection solutions, increase code visibility, facilitate threat analysis, and detect and protect from dangerous client-side attacks, such as Magecart, cross-site scripting, e-skimming, and other threats focused on front-end JavaScript and web applications. Learn more at www.feroot.com.

For the stories behind the headlines, head to CISOseries.com.

Up to 83% of known compromised passwords would satisfy regulatory requirements

Broadcom confirms deal to acquire VMware

Experts warn of rise in ChromeLoader malware

Thanks to today's episode sponsor, Optiv

Up for a Zero Trust Crash Course? Join our expert, Jerry Chapman, Engineering Fellow at Optiv and author of "Zero Trust Security: An Enterprise Guide," as he delivers the following takeaways: - An introduction to Zero Trust - An overview of Optiv's Zero Trust principles - How to visualize your Zero Trust journey and place it in the proper context Catch Jerry's Zero Trust crash course or learn more by going to www.optiv.com/zerotrust.

For the stories behind the headlines, head to CISOseries.com.

Popular open source libraries leaked keys for "research"

DuckDuckGo gives Microsoft a pass on trackers

Microsoft weathers the vulnerability storm

Thanks to today's episode sponsor, Optiv

Need a guide on your Zero Trust journey? Jerry Chapman, Engineering Fellow at Optiv and author of "Zero Trust Security: An Enterprise Guide" shares the following takeaways: - The key elements of Zero Trust - How to visualize your Zero Trust journey and place it in the proper context - Integrated technologies to drive adaptive processes and a mature security model Learn more at www.optiv.com/zerotrust.

Interpol warns nation-state malware could become a commodity on dark web soon

General Motors Hit by cyber-attack exposing car owners' personal info

Canada to ban China's Huawei and ZTE from its 5G networks

Thanks to today's episode sponsor, Optiv

Up for a Zero Trust Crash Course? Join our expert, Jerry Chapman, Engineering Fellow at Optiv and author of "Zero Trust Security: An Enterprise Guide," as he delivers the following takeaways: - An introduction to Zero Trust - An overview of Optiv's Zero Trust principles - How to visualize your Zero Trust journey and place it in the proper context Catch Jerry's Zero Trust crash course or learn more by going to www.optiv.com/zerotrust.

For the stories behind the headlines, head to CISOseries.com.

Cyberattack divorces Zola users from registries

A look at the RansomHouse data-extortion operation

Now we have to worry about pre-hijacking attacks

Thanks to today's episode sponsor, Optiv

Need a guide on your Zero Trust journey? Jerry Chapman, Engineering Fellow at Optiv and author of "Zero Trust Security: An Enterprise Guide" shares the following takeaways: - The key elements of Zero Trust - How to visualize your Zero Trust journey and place it in the proper context - Integrated technologies to drive adaptive processes and a mature security model Learn more at www.optiv.com/zerotrust.

For the stories behind the headlines, go to CISOseries.com

Ransomware victim trolls hackers with obscene pics

CISOs list top cyber threats to enterprises in 2022

YouTube removes more than 9,000 Ukraine war-related channels

Thanks to today's episode sponsor, Optiv

Need a guide on your Zero Trust journey? Jerry Chapman, Engineering Fellow at Optiv and author of "Zero Trust Security: An Enterprise Guide" shares the following takeaways: - The key elements of Zero Trust - How to visualize your Zero Trust journey and place it in the proper context - Integrated technologies to drive adaptive processes and a mature security model Learn more at www.optiv.com/zerotrust.

For the stories behind the headlines, go to CISOseries.com

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, May 16-20, is hosted by Rich Stroffolino with our guest, Jerich Beason, CISO, Commercial Bank, CapitalOne

Thanks to today's episode sponsor, Torq

All links and the video of this episode can be found on CISO Series.com

Greenland health services limited from cyberattacks

Phishing attacks surge in Q1

Google details 2021 zero-days

And now let's thank today's sponsor, Torq

Myth 5: You Should Automate All Security Processes False. You should automate routine, repetitive tasks that are not subject to much conditional variance. But workflows that can't be reliably managed by automation tools, such as assessing the financial consequences of a breach or determining whether a security incident should trigger an application rollback, should remain the domain of humans. To learn more about the realities of automation, head to torq.io.

VMware bugs abused to deliver Mirai malware

Microsoft to debut of zero trust GDAP tool

Bank of Zambia refuses to pay ransom to cyberattack group Hive

And now let's thank today's sponsor, Torq

Myth 4: Automation Will Replace Skilled Security Professionals Not true. Any business that attempts to automate security will quickly find that most high-stakes security issues are far too complex to be detected and remediated by automation tools alone. Human security professionals need to take the lead delivering nuanced insight about the business impact of a large-scale breach. To learn more about the realities of automation, head to torq.io.

For the stories behind the headlines, head to CISOseries.com.

Buffalo massacre suspect signaled plans on Discord for months

Google faces litigation for unauthorised use of medical records

Venezuelan doctor accused of developing and distributing ransomware

And now let's thank today's sponsor, Torq

Myth 3: Only Enterprises Need Security Automation Debunked. While enterprises with thousands of endpoints and sprawling teams certainly need automation, businesses of all sizes face challenges related to other forms of scale when it comes to security. For instance, there are about 1 billion known types of malware in existence, and they imperil businesses of all sizes equally. To learn more about the realities of automation, head to torq.io.

For the stories behind the headlines, head to CISOseries.com

Costa Rican ransomware rhetoric somehow gets uglier

DOJ files its first criminal cryptocurrency sanctions case

Trying to fix open source supply chain security

And now let's thank today's sponsor, Torq

Myth 2: Security Automation Is Just a New Term for Automated Security Testing Wrong. While scanning and testing may be one example of a security automation use case, it's hardly the only one. Automation can be used to do things like help manage complex security workflows and optimize collaboration between different stakeholders. These are tasks that were not traditionally automated. To learn more about the realities of automation, head to torq.io.

Ukraine CERT-UA warns of new attacks launched by Russia-linked Armageddon APT

Microsoft fixes new PetitPotam Windows NTLM relay attack vector

Hackers are exploiting critical bug in Zyxel firewalls and VPNs

And now let's thank today's sponsor, Torq

Myth 1: Automation Is Only a Reactive Part of SecOps Incorrect. Proactive management of security incidents is just as important, like automatically scanning IaC configurations to detect vulnerabilities, automating collaboration between devs, IT ops and SecOps to prevent risks before they're threats. To learn more about the realities of automation, head to torq.io.

For the stories behind the headlines, head to CISOseries.com.

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, May 9-13, is hosted by Rich Stroffolino with our guest, Rich Lindberg, CISO, JAMS

Thanks to our sponsor, Datadog

Break down silos between DevOps and Security teams to enable collaboration and strengthen the security of your environment. In this on-demand webinar, hear from one of Datadog's engineers on how teams can speed up investigations by assessing security and observability data using Datadog's unified platform to reduce security threats by detecting vulnerabilities. Watch the on-demand webinar now to learn how to get full-stack security for your production environment at datadoghq.com/ciso/

All links and the video of this episode can be found on CISO Series.com

Google will use mobile devices to thwart phishing attacks

CISA urges organizations to patch actively exploited F5 BIG-IP vulnerability

Kick China off social media, says tech governance expert

Thanks to our episode sponsor, Datadog

Break down silos between DevOps and Security teams to enable collaboration and strengthen the security of your environment. In this on-demand webinar, hear from one of Datadog's engineers on how teams can speed up investigations by assessing security and observability data using Datadog's unified platform to reduce security threats by detecting vulnerabilities. Watch the on-demand webinar now to learn how to get full-stack security for your production environment at datadoghq.com/ciso/

For the stories behind the headlines, head to CISOseries.com.

Old botnets are new again

Meta withdraws Oversight Board guidance request

EU proposes new CSAM rules

Thanks to our episode sponsor, Datadog

In this on-demand webinar, you'll learn how to best utilize the suite of Datadog Cloud Security products to identify the root cause of an attack and how a unified platform provides real-time threat-detection and continuous configuration audits across applications, hosts, containers and cloud infrastructure. Built on top of the observability platform, Datadog brings unprecedented integration between security and devops aligned to shared organizational goals. Watch the on-demand webinar now to learn how to get full-stack security for your production environment at datadoghq.com/ciso/

Russian TV hacked on Victory Day

US pledges to help Ukraine keep internet and lights running

Pentagon's concerns China may prompt vetting startups

Thanks to our episode sponsor, Datadog

In this on-demand webinar, you'll learn how to best utilize the suite of Datadog Cloud Security products to identify the root cause of an attack and how a unified platform provides real-time threat-detection and continuous configuration audits across applications, hosts, containers and cloud infrastructure. Built on top of the observability platform, Datadog brings unprecedented integration between security and devops aligned to shared organizational goals. Watch the on-demand webinar now to learn how to get full-stack security for your production environment at datadoghq.com/ciso/

Ransomware state of emergency in Costa Rica

Microsoft launches service to fill the cyber skills gap

College closes permanently due to ransomware

Thanks to our episode sponsor, Datadog

Break down silos between DevOps and Security teams to enable collaboration and strengthen the security of your environment. In this on-demand webinar, hear from one of Datadog's engineers on how teams can speed up investigations by assessing security and observability data using Datadog's unified platform to reduce security threats by detecting vulnerabilities. Watch the on-demand webinar now to learn how to get full-stack security for your production environment at datadoghq.com/ciso/

Google Play now blocks paid app downloads, updates in Russia

NIST releases updated guidance for defending against supply-chain attacks

US State Department offering $10 million reward for information about Conti members

Thanks to our episode sponsor, Datadog

In this on-demand webinar, you'll learn how to best utilize the suite of Datadog Cloud Security products to identify the root cause of an attack and how a unified platform provides real-time threat-detection and continuous configuration audits across applications, hosts, containers and cloud infrastructure. Built on top of the observability platform, Datadog brings unprecedented integration between security and devops aligned to shared organizational goals. Watch the on-demand webinar now to learn how to get full-stack security for your production environment at datadoghq.com/ciso/

For the stories behind the headlines, head to CISOseries.com.

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, May 2-6, is hosted by Rich Stroffolino with our guest, Shawn Bowen, CISO, World Fuel Services

Thanks to our episode sponsor, Censys

Why Censys? Our Attack Surface Management tool is designed from the ground up to seamlessly integrate with existing security workflows. It's the only ASM tool that discovers modern cloud specific assets like storage buckets and our scanning platform finds more than 85% more services than our nearest competitor. Start with Censys at censys.io.

All links and the video of this episode can be found on CISO Series.com

Decade-old bugs discovered in Avast, AVG antivirus software

Thailand and Hong Kong Banks used most in BEC

Every ISP in the US must block these 3 pirate streaming services

Thanks to today's episode sponsor, Censys

Why Censys? Our Attack Surface Management tool is designed from the ground up to seamlessly integrate with existing security workflows. It's the only ASM tool that discovers modern cloud specific assets like storage buckets and our scanning platform finds more than 85% more services than our nearest competitor. Start with Censys at censys.io.

For the stories behind the headlines, head to CISOseries.com.

CuckooBees campaign stings targets for years

Health and Human Services hammered over security

Docker images used to DDoS Russian sites

Thanks to today's episode sponsor, Censys

Censys' Attack Surface Management tool discovers and inventories all Internet-facing assets including traditional assets like hosts, IPs, and cloud services like storage buckets across all accounts and networks. ASM gives you a continuous picture of your attack surface. Start with Censys at censys.io.

Google claims to have blocked billions of malicious app downloads

NortonLifeLock willfully infringed malware patents

Former eBay exec pleads guilty to cyber stalking

Thanks to today's episode sponsor, Censys

Tom the CTO can't go into the boardroom unprepared. It's his job to know all the risks to his company – especially the one that could land him on the front page of the newspaper. His best bet for survival is staying ahead of the most critical threats. Tom, you can be that source of truth; start with Censys at censys.io right now.

For the stories behind the headlines, head to CISOseries.com

Solana network goes dark after bot swarm

The spyware in Spain falls mostly on the politicians

Security isn't top of mind for mental health apps

Thanks to today's episode sponsor, Censys

All Pat the Security Practitioner wants is to do a good job and be the frontline in keeping his company safe. He's got great tools, but nothing that can show him if there are company assets that have somehow made their way onto the internet. If only Pat knew about Censys' Attack Surface Management tool. Now you do – start with Censys at censys.io.

Top 15 exploited security vulnerabilities in 2021

India gives orgs 6 hours to report cyber incidents

The White House wants more powers to crack down on rogue drones

Thanks to today's episode sponsor, Censys

What Chris the CISO wants is to protect against revenue loss and damage to his company's brand from data breaches and compliance failures. But he's got a blind spot around his internet exposure. What assets are out there on the internet that his team doesn't know about? Well, Chris, it's simple – start with Censys at censys.io.

For the stories behind the headlines, visit CISOseries.com.

Link to Blog Post

This week's Cyber Security Headlines - Week in Review, Apr 25-29, is hosted by Rich Stroffolino with our guest, Hadas Cassorla, CISO, M1 Financial

Thanks to our episode sponsor, Feroot

All links and the video of this episode can be found on CISO Series.com

Global security spending set to hit $198bn by 2025

New malware loader Bumblebee adopted by known ransomware access brokers

Cloudflare thwarts record DDoS attack

Thanks to today's episode sponsor, Feroot

Feroot secures client-side web applications so that businesses can deliver a flawless and safe digital user experience to their customers.

Inspector and Pageguard, Feroot's automated data protection solutions, increase code visibility, facilitate threat analysis, and detect and protect from dangerous client-side attacks, such as Magecart, cross-site scripting, e-skimming, and other threats focused on front-end JavaScript and web applications.

Learn more at www.feroot.com.

For the stories behind the headlines, head to CISOseries.com.

Russia experiences hacks at scale

State Department puts a price on NetPetya's head

Two-thirds of organizations hit with ransomware

Thanks to today's episode sponsor, Feroot

Feroot secures client-side web applications so that businesses can deliver a flawless and safe digital user experience to their customers.

Inspector and Pageguard, Feroot's automated data protection solutions, increase code visibility, facilitate threat analysis, and detect and protect from dangerous client-side attacks, such as Magecart, cross-site scripting, e-skimming, and other threats focused on front-end JavaScript and web applications.

Learn more at www.feroot.com.

Elon Musk's Twitter takeover could be bad for security and privacy

Stormous Ransomware targets Coca Cola

US offers $10 million reward for help locating Russian hackers

Thanks to today's episode sponsor, Feroot

Feroot secures client-side web applications so that businesses can deliver a flawless and safe digital user experience to their customers.

Inspector and Pageguard, Feroot's automated data protection solutions, increase code visibility, facilitate threat analysis, and detect and protect from dangerous client-side attacks, such as Magecart, cross-site scripting, e-skimming, and other threats focused on front-end JavaScript and web applications.

Learn more at www.feroot.com.

For the stories behind the headlines, head to CISOseries.com.

Mandiant finds record zero-days in 2021

Bored Ape Yacht Club hacked

Oracle patches critical Java vulnerability

Thanks to today's episode sponsor, Feroot

Feroot secures client-side web applications so that businesses can deliver a flawless and safe digital user experience to their customers.

Inspector and Pageguard, Feroot's automated data protection solutions, increase code visibility, facilitate threat analysis, and detect and protect from dangerous client-side attacks, such as Magecart, cross-site scripting, e-skimming, and other threats focused on front-end JavaScript and web applications.

Learn more at www.feroot.com.

Hackers find 122 vulnerabilities, 27 deemed critical, during first round of DHS bug bounty program

Anonymous has leaked 5.8 TB of Russian data since declaring cyber war

AWS's Log4j patches blew holes in its own security

Thanks to today's episode sponsor, Feroot

Feroot secures client-side web applications so that businesses can deliver a flawless and safe digital user experience to their customers.

Inspector and Pageguard, Feroot's automated data protection solutions, increase code visibility, facilitate threat analysis, and detect and protect from dangerous client-side attacks, such as Magecart, cross-site scripting, e-skimming, and other threats focused on front-end JavaScript and web applications.

Learn more at www.feroot.com.

For the stories behind the headlines, head to CISOseries.com.