Cybersecurity Headlines

CISA orders feds to patch OIM

Delta Dental of Virginia incurs data breach

Systems down at postal operator in Ukraine

Huge thanks to our episode sponsor, KnowBe4

Link to episode page

This week's Department of Know is hosted by Rich Stroffolino with guests Keith Townsend, Keith Townsend, host CTO Advisor Podcast, founder of The Advisor Bench, and creator of the Virtual CTO Advisor; and Howard Holton, CEO, GigaOm

Thanks to our show sponsor, Knowbe4

Cybersecurity isn't just a tech problem—it's a human one. That's why KnowBe4's Human Risk Management platform allows you to measure, quantify and actually reduce human risk across your organization. With AI-powered risk scoring, automated coaching and reporting, HRM+ helps you surface your highest risk users and reduce the risk of data breaches and cyberattacks proactively. Ready to move from awareness to action? Request a demo of HRM+ today at knowbe4.com.

All links and the video of this episode can be found on CISO Series.com

CrowdStrike catches insider feeding information to hackers

Spanish airline Iberia suffers breach and data leak

AI is too risky to insure, say insurers

Huge thanks to our episode sponsor, KnowBe4

Sturnus Android Trojan captures encrypted chats and hijacks devices

Canadian regulators say schools share blame for PowerSchool hack

Bill reintroduced to bolster cybersecurity at Securities and Exchange Commission

Huge thanks to our episode sponsor, KnowBe4

Your email gateway isn't catching everything — and cybercriminals know it.

That's why there's KnowBe4's Cloud Email Security platform. It's not just another filter—it's a dynamic, AI-powered layer of defense that detects and stops advanced threats before they reach your users' inbox.

Request a demo of KnowBe4's Cloud Email Security at knowbe4.com or visit them this week at Microsoft Ignite booth #5523.

Find the stories behind the headlines at CISOseries.com.

Cloudflare blames database

Crypto heist takedown

WhatsApp flaw exposed billions

Huge thanks to our episode sponsor, KnowBe4

Your email gateway isn't catching everything — and cybercriminals know it.

That's why there's KnowBe4's Cloud Email Security platform. It's not just another filter—it's a dynamic, AI-powered layer of defense that detects and stops advanced threats before they reach your users' inbox.

Request a demo of KnowBe4's Cloud Email Security at knowbe4.com or visit them this week at Microsoft Ignite booth #5523.

Huge thanks to our episode sponsor, KnowBe4

Your email gateway isn't catching everything — and cybercriminals know it.

That's why there's KnowBe4's Cloud Email Security platform. It's not just another filter—it's a dynamic, AI-powered layer of defense that detects and stops advanced threats before they reach your users' inbox.

Request a demo of KnowBe4's Cloud Email Security at knowbe4.com or visit them this week at Microsoft Ignite booth #5523.

Huge thanks to our episode sponsor, KnowBe4

Your email gateway isn't catching everything — and cybercriminals know it.

That's why there's KnowBe4's Cloud Email Security platform. It's not just another filter—it's a dynamic, AI-powered layer of defense that detects and stops advanced threats before they reach your users' inbox.

Request a demo of KnowBe4's Cloud Email Security at knowbe4.com or visit them this week at Microsoft Ignite booth #5523.

Link to episode page

This week's Department of Know is hosted by Rich Stroffolino with guests Robb Dunewood, Host, Daily Tech News Show, and Howard Holton, CEO, GigaOm

Thanks to our show sponsor, KnowBe4

Your email gateway isn't catching everything — and cybercriminals know it. That's why there's KnowBe4's Cloud Email Security platform. It's not just another filter—it's a dynamic, AI-powered layer of defense that detects and stops advanced threats before they reach your users' inbox. Request a demo of KnowBe4's Cloud Email Security at knowbe4.com or visit them this week at Microsoft Ignite booth #5523.

All links and the video of this episode can be found on CISO Series.com

Microsoft warns of potential Windows 10 update failure

China-backed hackers launch first large-scale autonomous AI cyberattack

Feds fumbled Cisco patches requirements, says CISA

Huge thanks to our episode sponsor, KnowBe4

Your email gateway isn't catching everything — and cybercriminals know it.

That's why there's KnowBe4's Cloud Email Security platform. It's not just another filter—it's a dynamic, AI-powered layer of defense that detects and stops advanced threats before they reach your users' inbox.

Request a demo of KnowBe4's Cloud Email Security at knowbe4.com or visit them this week at Microsoft Ignite booth #5523.

Find the stories behind the headlines at CISOseries.com.

Two key cyber laws are back as president signs bill to end shutdown Microsoft's screen capture prevention for Teams users is finally rolling out FBI calls Akira top five ransomware variant out of 130 targeting U.S. businesses

Huge thanks to our sponsor, Vanta

Huge thanks to our sponsor, Vanta

Google's Find Hub turns into remote-wipe weapon

Qilin ransomware activity surges

GootLoader is back

Huge thanks to our sponsor, Vanta

CISA reauthorization

Denmark and Norway investigating electric bus "kill switches"

European Commission looking to simplify privacy laws for AI

Huge thanks to our sponsor, Vanta

Link to episode page

This week's Department of Know is hosted by Rich Stroffolino with guests Jacob Coombs, CISO, Tandem Diabetes Care, and Ross Young, Co-host, CISO Tradecraft

Thanks to our show sponsor, Vanta

What's your 2 AM security worry? Is it "Do I have the right controls in place?" Or "Are my vendors secure?" ….or the really scary one: "how do I get out from under these old tools and manual processes? Enter Vanta. Vanta automates manual work, so you can stop sweating over spreadsheets, chasing audit evidence, and filling out endless questionnaires. Their trust management platform continuously monitors your systems, centralizes your data, and simplifies your security at scale. Vanta also fits right into your workflows, using AI to streamline evidence collection, flag risks, and keep your program audit-ready—ALL…THE…TIME. With Vanta, you get everything you need to move faster, scale confidently—and get back to sleep. Get started at vanta.com/headlines

All links and the video of this episode can be found on CISO Series.com

runC flaws could allow hackers to escape Docker containers

Lost iPhone scam warning

Landfall Android spyware targets Samsung Galaxy phones

Huge thanks to our sponsor, Vanta

Hackers use Windows Hyper-V to evade EDR detection

Critical Cisco UCCX flaw lets attackers run commands as root

The Louvre's video security password was reportedly Louvre

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker.

Find the stories behind the headlines at CISOseries.com.

Huge thanks to our sponsor, ThreatLocker

Cybercriminals don't knock — they sneak in through the cracks other tools miss. That's why organizations are turning to ThreatLocker. As a zero-trust endpoint protection platform, ThreatLocker puts you back in control, blocking what doesn't belong and stopping attacks before they spread. Zero Trust security starts here — with ThreatLocker

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker.

Huge thanks to our sponsor, ThreatLocker

Cybercriminals don't knock — they sneak in through the cracks other tools miss. That's why organizations are turning to ThreatLocker. As a zero-trust endpoint protection platform, ThreatLocker puts you back in control, blocking what doesn't belong and stopping attacks before they spread. Zero Trust security starts here — with ThreatLocker

Link to episode page

This week's Department of Know is hosted by Rich Stroffolino with guests Davi Ottenheimer, vp, digital trust and ethics, Inrupt, and Rob Teel, Field CTO, GigaOm

Thanks to our show sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker.

All links and the video of this episode can be found on CISO Series.com

Australia warns of BADCANDY attacks exploiting Cisco IOS XE

Chinese hackers exploiting Cisco ASA firewalls used by governments worldwide

OpenAI's Aardvark GPT-5 agent finds and fixes code flaws automatically

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker.

Find the stories behind the headlines at CISOseries.com.

LinkedIn users have until Monday to opt out of its AI training program New names surface for NSA leadership Open-source security group pulls out of U.S. grant, citing DEI restrictions

Huge thanks to our sponsor, Conveyor

Security reviews don't have to feel like a hurricane. Most teams are buried in back-and-forth emails and never-ending customer requests for documentation or answers. But Conveyor takes all that chaos and turns it into calm.

AI fills in the questionnaires, your trust center is always ready, and sales cycles move without stalls.

Breathe easier—check out Conveyor at www.conveyor.com.

Find the stories behind the headlines at CISOseries.com.

10 million+ impacted by Conduent breach

Huge thanks to our sponsor, Conveyor

Security reviews don't have to feel like a hurricane. Most teams are buried in back-and-forth emails and never-ending customer requests for documentation or answers. But Conveyor takes all that chaos and turns it into calm.

AI fills in the questionnaires, your trust center is always ready, and sales cycles move without stalls.

Breathe easier—check out Conveyor at www.conveyor.com.

Huge thanks to our sponsor, Conveyor

Have you been personally victimized by a questionnaire this week? The queue never ends. But Conveyor can change that story.

With AI that answers questionnaires of any format, and a trust center that handles document sharing, security reviews get done without the stress.

Feel calm in the chaos with Conveyor. Learn more at www.conveyor.com.

Atlas browser hijacked

Bye, bye Twitter birdie

Dante spyware surfaces

Huge thanks to our sponsor, Conveyor

Security reviews don't have to feel like a hurricane. Most teams are buried in back-and-forth emails and never-ending customer requests for documentation or answers. But Conveyor takes all that chaos and turns it into calm.

AI fills in the questionnaires, your trust center is always ready, and sales cycles move without stalls.

Breathe easier—check out Conveyor at www.conveyor.com.

Link to episode page

This week's edition of The Department of Know is hosted by Rich Stroffolino with guests Bil Harmer, operating partner and CISO, Craft Ventures, and Sasha Pereira, CISO, WASH

Thanks to our show sponsor, ThreatLocker

If security questionnaires make you feel like you're drowning in chaos, you're not alone. Endless spreadsheets, portals, and questions—always when you least expect them. Conveyor brings calm to the storm. With AI that auto-fills questionnaires and a trust center that shares all your docs in one place, you'll feel peace where there used to be panic. Find your security review zen at www.conveyor.com.

All links and the video of this episode can be found on CISO Series.com

Microsoft WSUS vulnerability could allow for remote code execution

Fake LastPass death claims used to breach password vaults

New CoPhish attack steals OAuth tokens via Copilot Studio agents

Huge thanks to our sponsor, Conveyor

If security questionnaires make you feel like you're drowning in chaos, you're not alone.

Endless spreadsheets, portals, and questions—always when you least expect them.

Conveyor brings calm to the storm. With AI that auto-fills questionnaires and a trust center that shares all your docs in one place, you'll feel peace where there used to be panic.

Find your security review zen at www.conveyor.com.

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guests David Cross, CISO, Atlassian, and davidcrosstravels.com, and Montez Fitzpatrick, CISO, Navvis

Thanks to our show sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker.

All links and the video of this episode can be found on CISO Series.com

Jingle Thief hackers steal millions in gift cards by exploiting cloud infrastructure Lazarus hackers targeted European defense companies Deep Tech work culture pushes for 72 hour workweeks

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker.

Find the stories behind the headlines at CISOseries.com.

Huge thanks to our sponsor, ThreatLocker

Cybercriminals don't knock — they sneak in through the cracks other tools miss. That's why organizations are turning to ThreatLocker. As a zero-trust endpoint protection platform, ThreatLocker puts you back in control, blocking what doesn't belong and stopping attacks before they spread. Zero Trust security starts here — with ThreatLocker

Sophisticated campaign targets servers of high-profile organizations

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker.

DNS failure leads to AWS outage

China accuses NSA of hacking national time center

Chrome store flooded with high-risk WhatsApp automation

Huge thanks to our sponsor, ThreatLocker

Cybercriminals don't knock — they sneak in through the cracks other tools miss. That's why organizations are turning to ThreatLocker. As a zero-trust endpoint protection platform, ThreatLocker puts you back in control, blocking what doesn't belong and stopping attacks before they spread. Zero Trust security starts here — with ThreatLocker

Europol dismantles 49 million fake account SIM farm

Envoy Air confirms Oracle E-Business Suite compromise

Cybercrime group Everest claims Collins Aerospace hack

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker.

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guests Tom Hollingsworth, networking technology advisor, The Futurum Group, as well as on BlueSky, and Brett Conlon, CISO, American Century Investments

Thanks to our show sponsor, Vanta

What's your 2 AM security worry? Is it "Do I have the right controls in place?" Or "Are my vendors secure?" ….or the really scary one: "how do I get out from under these old tools and manual processes? Enter Vanta. Vanta automates manual work, so you can stop sweating over spreadsheets, chasing audit evidence, and filling out endless questionnaires. Their trust management platform continuously monitors your systems, centralizes your data, and simplifies your security at scale. Vanta also fits right into your workflows, using AI to streamline evidence collection, flag risks, and keep your program audit-ready—ALL…THE…TIME. With Vanta, you get everything you need to move faster, scale confidently—and get back to sleep. Get started at vanta.com/headlines

All links and the video of this episode can be found on CISO Series.com

Sotheby's suffers cyberattack

Hackers exploit Cisco SNMP flaw in "Zero Disco' attacks

Microsoft revokes more than 200 certificates to disrupt ransomware campaign

Huge thanks to our sponsor, Vanta

Huge thanks to our sponsor, Vanta

Huge thanks to our sponsor, Vanta

Millions of records exposed in Salesforce data leak

SimonMed breach grows from hundreds to over a million

Dutch government freezes Chinese-owned chipmaker

Huge thanks to our sponsor, Vanta

Huge thanks to our sponsor, Vanta

Link to episode page

This week's Cyber Security Headlines - Week in Review is hosted by Rich Stroffolino with guests Mike Lockhart, CISO Eagleview, and Dustin Sachs, chief technologist at CyberRisk collaborative, and author of Behavioral Insights in Cybersecurity

Thanks to our show sponsor, ThreatLocker

Cybercriminals don't knock — they sneak in through the cracks other tools miss. That's why organizations are turning to ThreatLocker. As a zero-trust endpoint protection platform, ThreatLocker puts you back in control, blocking what doesn't belong and stopping attacks before they spread. Zero Trust security starts here — with ThreatLocker"

All links and the video of this episode can be found on CISO Series.com

Azure outage blocks access to Microsoft 365 services and admin portals

Major U.S. law firm suffers cyberattack

Hacktivists aiming for critical infrastructure get pwned

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker. Learn more at ThreatLocker.com.

Find the stories behind the headlines at CISOseries.com.

Huge thanks to our sponsor, ThreatLocker

Cybercriminals don't knock — they sneak in through the cracks other tools miss. That's why organizations are turning to ThreatLocker. As a zero-trust endpoint protection platform, ThreatLocker puts you back in control, blocking what doesn't belong and stopping attacks before they spread. Zero Trust security starts here — with ThreatLocker. Learn more at ThreatLocker.com.

North Korean hackers steal more than $2B in crypto

Group suspected of sending stolen UK phones to China

Avnet confirms breach, says stolen data unreadable

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker. Learn more at ThreatLocker.com.

Unity vulnerability puts popular games at risk

Oracle zero-day exploit patched

Third-party breach claims Discord user info

Huge thanks to our sponsor, ThreatLocker

Cybercriminals don't knock — they sneak in through the cracks other tools miss. That's why organizations are turning to ThreatLocker. As a zero-trust endpoint protection platform, ThreatLocker puts you back in control, blocking what doesn't belong and stopping attacks before they spread. Zero Trust security starts here — with ThreatLocker. Learn more at ThreatLocker.com.

ParkMobile 2021 data breach class action suit concludes

UK government study suggests secondary schools larger target than businesses

Zimbra Collaboration Suite flaw used in calendar attacks

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker. Learn more at ThreatLocker.com.

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Nick Espinosa, nationally syndicated host of The Deep Dive Radio Show, with guest Steve Zalewski, co-host, Defense in Depth

Thanks to our show sponsor, Nudge Security

Here's the thing: your employees are signing up for new apps, sharing data, and connecting tools together, often without anyone knowing. And, AI adoption is accelerating this trend. What if you could continuously discover when people start using new apps or sharing data, then prompt them with security guidance right when and where they are working? At Nudge Security, we call that securing the Workforce Edge. Instead of trying to control everything (which, let's face it, is impossible), we give IT and security teams the visibility they need and automation to guide employees toward secure behaviors. The result? Your workforce stays productive, your data stays secure, and you can finally get some sleep at night. Learn more at nudgesecurity.com/workforceedge

All links and the video of this episode can be found on CISO Series.com

Government shutdown furloughs most CISA staff

Microsoft Defender bug triggers erroneous BIOS update alerts

Motility RV software company suffers cyberattack

Huge thanks to our sponsor, Nudge Security

Here's the thing: your employees are signing up for new apps, sharing data, and connecting tools together, often without anyone knowing. And, AI adoption is accelerating this trend.

What if you could continuously discover when people start using new apps or sharing data, then prompt them with security guidance right when and where they are working?

At Nudge Security, we call that securing the Workforce Edge. Instead of trying to control everything (which, let's face it, is impossible), we give IT and security teams the visibility they need and automation to guide employees toward secure behaviors.

The result? Your workforce stays productive, your data stays secure, and you can finally get some sleep at night. Learn more at nudgesecurity.com/workforceedge

Find the stories behind the headlines at CISOseries.com.

Huge thanks to our sponsor, Nudge Security

AI notetakers like Otter AI spread fast. In fact, one Nudge Security customer discovered 800 new accounts created in only 90 days. Viral AI notetakers introduce a slew of data privacy risks by gaining access to calendars and adding themselves to every meeting.

Nudge Security can help. Within minutes of starting a free trial, you'll see every AI app, account, and integration, even those created in the past. And, smart automation helps you clean up unwanted accounts and guide users towards approved alternatives.

See how you can regain control today at nudgesecurity.com/stopotter

Apple's iOS fixes a bevy of glitches

Huge thanks to our sponsor, Nudge Security

The SaaS supply chain is a hot mesh. As your workforce introduces new SaaS apps and integrations, hidden pathways are created that attackers can exploit to gain access to core business systems. That's exactly what happened in the Drift breach, and it will happen again.

But, all is not lost. Nudge Security gives you the visibility and control you need to stop these attacks. Within minutes of starting a free trial, you'll discover every SaaS app and integration in your environment, map your SaaS supply chain, and identify risky OAuth grants that could be exploited.

The best part? Nudge Security alerts you of breaches impacting your 3rd and 4th party SaaS providers. That's right, even 4th party! So, you can take action quickly to limit the ripple effects. Learn how Nudge can help you secure your entire SaaS ecosystem at nudgesecurity.com/supplychain

Huge thanks to our sponsor, Nudge Security

AI tools have spread to every corner of your tech stack, which is great for innovation, but not so great for data governance.

That's where Nudge Security comes in. Nudge discovers shadow AI across your org - chatbots, MCP integrations, AI in the supply chain, and more. And, Nudge delivers guardrails to employees to help you stop data leakage before it even starts.

The best part? You'll have a full inventory of AI assets on Day One of your free trial, even those introduced before you started using Nudge. No time machine required.

Gain visibility and control of AI use. Get started at nudgesecurity.com/genai