Cybersecurity Headlines

Link to episode page

This week's Department of Know is hosted by Rich Stroffolino with guests Mathew Biby, director, cybersecurity, TixTrack, and Derek Fisher, Director of the Cyber Defense and Information Assurance Program, Temple University

Thanks to our show sponsor, Vanta

This message comes from Vanta. What's your 2 AM security worry? Is it "Do I have the right controls in place?" Or "Are my vendors secure?" Enter Vanta. Vanta automates manual work, so you can stop sweating over spreadsheets, chasing audit evidence, and filling out endless questionnaires. Their trust management platform continuously monitors your systems, centralizes your data, and simplifies your security at scale. Get started at Vanta.com/CISO

All links and the video of this episode can be found on CISO Series.com

Japanese brewer Asahi provides details regarding October ransomware attack

California law regulating web browsers might impact national data privacy

Microsoft to speed up Teams

Huge thanks to our episode sponsor, Vanta

This message comes from Vanta. What's your 2 AM security worry? Is it "Do I have the right controls in place?" Or "Are my vendors secure?" Enter Vanta. Vanta automates manual work, so you can stop sweating over spreadsheets, chasing audit evidence, and filling out endless questionnaires. Their trust management platform continuously monitors your systems, centralizes your data, and simplifies your security at scale. Get started at Vanta.com/CISO

Find the stories behind the headlines at CISOseries.com.

Microsoft to block unauthorized scripts in Entra ID logins with 2026 CSP update

New legislation targets scammers that use AI to deceive

ASUS firmware patches critical AiCloud vulnerability

Huge thanks to our episode sponsor, KnowBe4

LLMs help malware authors evade detection

Anthropic questioned over Claude espionage

Huge thanks to our episode sponsor, KnowBe4

CISA warns of app break-ins

StealC V2 spread through blender files

Russia arrests cybersecurity entrepreneur for treason

Huge thanks to our episode sponsor, KnowBe4

CISA orders feds to patch OIM

Delta Dental of Virginia incurs data breach

Systems down at postal operator in Ukraine

Huge thanks to our episode sponsor, KnowBe4

Link to episode page

This week's Department of Know is hosted by Rich Stroffolino with guests Keith Townsend, Keith Townsend, host CTO Advisor Podcast, founder of The Advisor Bench, and creator of the Virtual CTO Advisor; and Howard Holton, CEO, GigaOm

Thanks to our show sponsor, Knowbe4

Cybersecurity isn't just a tech problem—it's a human one. That's why KnowBe4's Human Risk Management platform allows you to measure, quantify and actually reduce human risk across your organization. With AI-powered risk scoring, automated coaching and reporting, HRM+ helps you surface your highest risk users and reduce the risk of data breaches and cyberattacks proactively. Ready to move from awareness to action? Request a demo of HRM+ today at knowbe4.com.

All links and the video of this episode can be found on CISO Series.com

CrowdStrike catches insider feeding information to hackers

Spanish airline Iberia suffers breach and data leak

AI is too risky to insure, say insurers

Huge thanks to our episode sponsor, KnowBe4

Sturnus Android Trojan captures encrypted chats and hijacks devices

Canadian regulators say schools share blame for PowerSchool hack

Bill reintroduced to bolster cybersecurity at Securities and Exchange Commission

Huge thanks to our episode sponsor, KnowBe4

Your email gateway isn't catching everything — and cybercriminals know it.

That's why there's KnowBe4's Cloud Email Security platform. It's not just another filter—it's a dynamic, AI-powered layer of defense that detects and stops advanced threats before they reach your users' inbox.

Request a demo of KnowBe4's Cloud Email Security at knowbe4.com or visit them this week at Microsoft Ignite booth #5523.

Find the stories behind the headlines at CISOseries.com.

Cloudflare blames database

Crypto heist takedown

WhatsApp flaw exposed billions

Huge thanks to our episode sponsor, KnowBe4

Your email gateway isn't catching everything — and cybercriminals know it.

That's why there's KnowBe4's Cloud Email Security platform. It's not just another filter—it's a dynamic, AI-powered layer of defense that detects and stops advanced threats before they reach your users' inbox.

Request a demo of KnowBe4's Cloud Email Security at knowbe4.com or visit them this week at Microsoft Ignite booth #5523.

Huge thanks to our episode sponsor, KnowBe4

Your email gateway isn't catching everything — and cybercriminals know it.

That's why there's KnowBe4's Cloud Email Security platform. It's not just another filter—it's a dynamic, AI-powered layer of defense that detects and stops advanced threats before they reach your users' inbox.

Request a demo of KnowBe4's Cloud Email Security at knowbe4.com or visit them this week at Microsoft Ignite booth #5523.

Huge thanks to our episode sponsor, KnowBe4

Your email gateway isn't catching everything — and cybercriminals know it.

That's why there's KnowBe4's Cloud Email Security platform. It's not just another filter—it's a dynamic, AI-powered layer of defense that detects and stops advanced threats before they reach your users' inbox.

Request a demo of KnowBe4's Cloud Email Security at knowbe4.com or visit them this week at Microsoft Ignite booth #5523.

Link to episode page

This week's Department of Know is hosted by Rich Stroffolino with guests Robb Dunewood, Host, Daily Tech News Show, and Howard Holton, CEO, GigaOm

Thanks to our show sponsor, KnowBe4

Your email gateway isn't catching everything — and cybercriminals know it. That's why there's KnowBe4's Cloud Email Security platform. It's not just another filter—it's a dynamic, AI-powered layer of defense that detects and stops advanced threats before they reach your users' inbox. Request a demo of KnowBe4's Cloud Email Security at knowbe4.com or visit them this week at Microsoft Ignite booth #5523.

All links and the video of this episode can be found on CISO Series.com

Microsoft warns of potential Windows 10 update failure

China-backed hackers launch first large-scale autonomous AI cyberattack

Feds fumbled Cisco patches requirements, says CISA

Huge thanks to our episode sponsor, KnowBe4

Your email gateway isn't catching everything — and cybercriminals know it.

That's why there's KnowBe4's Cloud Email Security platform. It's not just another filter—it's a dynamic, AI-powered layer of defense that detects and stops advanced threats before they reach your users' inbox.

Request a demo of KnowBe4's Cloud Email Security at knowbe4.com or visit them this week at Microsoft Ignite booth #5523.

Find the stories behind the headlines at CISOseries.com.

Two key cyber laws are back as president signs bill to end shutdown Microsoft's screen capture prevention for Teams users is finally rolling out FBI calls Akira top five ransomware variant out of 130 targeting U.S. businesses

Huge thanks to our sponsor, Vanta

Huge thanks to our sponsor, Vanta

Google's Find Hub turns into remote-wipe weapon

Qilin ransomware activity surges

GootLoader is back

Huge thanks to our sponsor, Vanta

CISA reauthorization

Denmark and Norway investigating electric bus "kill switches"

European Commission looking to simplify privacy laws for AI

Huge thanks to our sponsor, Vanta

Link to episode page

This week's Department of Know is hosted by Rich Stroffolino with guests Jacob Coombs, CISO, Tandem Diabetes Care, and Ross Young, Co-host, CISO Tradecraft

Thanks to our show sponsor, Vanta

What's your 2 AM security worry? Is it "Do I have the right controls in place?" Or "Are my vendors secure?" ….or the really scary one: "how do I get out from under these old tools and manual processes? Enter Vanta. Vanta automates manual work, so you can stop sweating over spreadsheets, chasing audit evidence, and filling out endless questionnaires. Their trust management platform continuously monitors your systems, centralizes your data, and simplifies your security at scale. Vanta also fits right into your workflows, using AI to streamline evidence collection, flag risks, and keep your program audit-ready—ALL…THE…TIME. With Vanta, you get everything you need to move faster, scale confidently—and get back to sleep. Get started at vanta.com/headlines

All links and the video of this episode can be found on CISO Series.com

runC flaws could allow hackers to escape Docker containers

Lost iPhone scam warning

Landfall Android spyware targets Samsung Galaxy phones

Huge thanks to our sponsor, Vanta

Hackers use Windows Hyper-V to evade EDR detection

Critical Cisco UCCX flaw lets attackers run commands as root

The Louvre's video security password was reportedly Louvre

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker.

Find the stories behind the headlines at CISOseries.com.

Huge thanks to our sponsor, ThreatLocker

Cybercriminals don't knock — they sneak in through the cracks other tools miss. That's why organizations are turning to ThreatLocker. As a zero-trust endpoint protection platform, ThreatLocker puts you back in control, blocking what doesn't belong and stopping attacks before they spread. Zero Trust security starts here — with ThreatLocker

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker.

Huge thanks to our sponsor, ThreatLocker

Cybercriminals don't knock — they sneak in through the cracks other tools miss. That's why organizations are turning to ThreatLocker. As a zero-trust endpoint protection platform, ThreatLocker puts you back in control, blocking what doesn't belong and stopping attacks before they spread. Zero Trust security starts here — with ThreatLocker

Link to episode page

This week's Department of Know is hosted by Rich Stroffolino with guests Davi Ottenheimer, vp, digital trust and ethics, Inrupt, and Rob Teel, Field CTO, GigaOm

Thanks to our show sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker.

All links and the video of this episode can be found on CISO Series.com

Australia warns of BADCANDY attacks exploiting Cisco IOS XE

Chinese hackers exploiting Cisco ASA firewalls used by governments worldwide

OpenAI's Aardvark GPT-5 agent finds and fixes code flaws automatically

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker.

Find the stories behind the headlines at CISOseries.com.

LinkedIn users have until Monday to opt out of its AI training program New names surface for NSA leadership Open-source security group pulls out of U.S. grant, citing DEI restrictions

Huge thanks to our sponsor, Conveyor

Security reviews don't have to feel like a hurricane. Most teams are buried in back-and-forth emails and never-ending customer requests for documentation or answers. But Conveyor takes all that chaos and turns it into calm.

AI fills in the questionnaires, your trust center is always ready, and sales cycles move without stalls.

Breathe easier—check out Conveyor at www.conveyor.com.

Find the stories behind the headlines at CISOseries.com.

10 million+ impacted by Conduent breach

Huge thanks to our sponsor, Conveyor

Security reviews don't have to feel like a hurricane. Most teams are buried in back-and-forth emails and never-ending customer requests for documentation or answers. But Conveyor takes all that chaos and turns it into calm.

AI fills in the questionnaires, your trust center is always ready, and sales cycles move without stalls.

Breathe easier—check out Conveyor at www.conveyor.com.

Huge thanks to our sponsor, Conveyor

Have you been personally victimized by a questionnaire this week? The queue never ends. But Conveyor can change that story.

With AI that answers questionnaires of any format, and a trust center that handles document sharing, security reviews get done without the stress.

Feel calm in the chaos with Conveyor. Learn more at www.conveyor.com.

Atlas browser hijacked

Bye, bye Twitter birdie

Dante spyware surfaces

Huge thanks to our sponsor, Conveyor

Security reviews don't have to feel like a hurricane. Most teams are buried in back-and-forth emails and never-ending customer requests for documentation or answers. But Conveyor takes all that chaos and turns it into calm.

AI fills in the questionnaires, your trust center is always ready, and sales cycles move without stalls.

Breathe easier—check out Conveyor at www.conveyor.com.

Link to episode page

This week's edition of The Department of Know is hosted by Rich Stroffolino with guests Bil Harmer, operating partner and CISO, Craft Ventures, and Sasha Pereira, CISO, WASH

Thanks to our show sponsor, ThreatLocker

If security questionnaires make you feel like you're drowning in chaos, you're not alone. Endless spreadsheets, portals, and questions—always when you least expect them. Conveyor brings calm to the storm. With AI that auto-fills questionnaires and a trust center that shares all your docs in one place, you'll feel peace where there used to be panic. Find your security review zen at www.conveyor.com.

All links and the video of this episode can be found on CISO Series.com

Microsoft WSUS vulnerability could allow for remote code execution

Fake LastPass death claims used to breach password vaults

New CoPhish attack steals OAuth tokens via Copilot Studio agents

Huge thanks to our sponsor, Conveyor

If security questionnaires make you feel like you're drowning in chaos, you're not alone.

Endless spreadsheets, portals, and questions—always when you least expect them.

Conveyor brings calm to the storm. With AI that auto-fills questionnaires and a trust center that shares all your docs in one place, you'll feel peace where there used to be panic.

Find your security review zen at www.conveyor.com.

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guests David Cross, CISO, Atlassian, and davidcrosstravels.com, and Montez Fitzpatrick, CISO, Navvis

Thanks to our show sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker.

All links and the video of this episode can be found on CISO Series.com

Jingle Thief hackers steal millions in gift cards by exploiting cloud infrastructure Lazarus hackers targeted European defense companies Deep Tech work culture pushes for 72 hour workweeks

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker.

Find the stories behind the headlines at CISOseries.com.

Huge thanks to our sponsor, ThreatLocker

Cybercriminals don't knock — they sneak in through the cracks other tools miss. That's why organizations are turning to ThreatLocker. As a zero-trust endpoint protection platform, ThreatLocker puts you back in control, blocking what doesn't belong and stopping attacks before they spread. Zero Trust security starts here — with ThreatLocker

Sophisticated campaign targets servers of high-profile organizations

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker.

DNS failure leads to AWS outage

China accuses NSA of hacking national time center

Chrome store flooded with high-risk WhatsApp automation

Huge thanks to our sponsor, ThreatLocker

Cybercriminals don't knock — they sneak in through the cracks other tools miss. That's why organizations are turning to ThreatLocker. As a zero-trust endpoint protection platform, ThreatLocker puts you back in control, blocking what doesn't belong and stopping attacks before they spread. Zero Trust security starts here — with ThreatLocker

Europol dismantles 49 million fake account SIM farm

Envoy Air confirms Oracle E-Business Suite compromise

Cybercrime group Everest claims Collins Aerospace hack

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker.

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guests Tom Hollingsworth, networking technology advisor, The Futurum Group, as well as on BlueSky, and Brett Conlon, CISO, American Century Investments

Thanks to our show sponsor, Vanta

What's your 2 AM security worry? Is it "Do I have the right controls in place?" Or "Are my vendors secure?" ….or the really scary one: "how do I get out from under these old tools and manual processes? Enter Vanta. Vanta automates manual work, so you can stop sweating over spreadsheets, chasing audit evidence, and filling out endless questionnaires. Their trust management platform continuously monitors your systems, centralizes your data, and simplifies your security at scale. Vanta also fits right into your workflows, using AI to streamline evidence collection, flag risks, and keep your program audit-ready—ALL…THE…TIME. With Vanta, you get everything you need to move faster, scale confidently—and get back to sleep. Get started at vanta.com/headlines

All links and the video of this episode can be found on CISO Series.com

Sotheby's suffers cyberattack

Hackers exploit Cisco SNMP flaw in "Zero Disco' attacks

Microsoft revokes more than 200 certificates to disrupt ransomware campaign

Huge thanks to our sponsor, Vanta

Huge thanks to our sponsor, Vanta

Huge thanks to our sponsor, Vanta

Millions of records exposed in Salesforce data leak

SimonMed breach grows from hundreds to over a million

Dutch government freezes Chinese-owned chipmaker

Huge thanks to our sponsor, Vanta

Huge thanks to our sponsor, Vanta

Link to episode page

This week's Cyber Security Headlines - Week in Review is hosted by Rich Stroffolino with guests Mike Lockhart, CISO Eagleview, and Dustin Sachs, chief technologist at CyberRisk collaborative, and author of Behavioral Insights in Cybersecurity

Thanks to our show sponsor, ThreatLocker

Cybercriminals don't knock — they sneak in through the cracks other tools miss. That's why organizations are turning to ThreatLocker. As a zero-trust endpoint protection platform, ThreatLocker puts you back in control, blocking what doesn't belong and stopping attacks before they spread. Zero Trust security starts here — with ThreatLocker"

All links and the video of this episode can be found on CISO Series.com

Azure outage blocks access to Microsoft 365 services and admin portals

Major U.S. law firm suffers cyberattack

Hacktivists aiming for critical infrastructure get pwned

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker. Learn more at ThreatLocker.com.

Find the stories behind the headlines at CISOseries.com.

Huge thanks to our sponsor, ThreatLocker

Cybercriminals don't knock — they sneak in through the cracks other tools miss. That's why organizations are turning to ThreatLocker. As a zero-trust endpoint protection platform, ThreatLocker puts you back in control, blocking what doesn't belong and stopping attacks before they spread. Zero Trust security starts here — with ThreatLocker. Learn more at ThreatLocker.com.

North Korean hackers steal more than $2B in crypto

Group suspected of sending stolen UK phones to China

Avnet confirms breach, says stolen data unreadable

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker. Learn more at ThreatLocker.com.

Unity vulnerability puts popular games at risk

Oracle zero-day exploit patched

Third-party breach claims Discord user info

Huge thanks to our sponsor, ThreatLocker

Cybercriminals don't knock — they sneak in through the cracks other tools miss. That's why organizations are turning to ThreatLocker. As a zero-trust endpoint protection platform, ThreatLocker puts you back in control, blocking what doesn't belong and stopping attacks before they spread. Zero Trust security starts here — with ThreatLocker. Learn more at ThreatLocker.com.

ParkMobile 2021 data breach class action suit concludes

UK government study suggests secondary schools larger target than businesses

Zimbra Collaboration Suite flaw used in calendar attacks

Huge thanks to our sponsor, ThreatLocker

Imagine having the power to decide exactly what runs in your IT environment — and blocking everything else by default. That's what ThreatLocker delivers. As a zero-trust endpoint protection platform, ThreatLocker fills the gaps traditional solutions leave behind, giving your business stronger security and control. Don't just react to threats — stop them with ThreatLocker. Learn more at ThreatLocker.com.

Find the stories behind the headlines at CISOseries.com.