Cybersecurity Headlines

Hackers hijacked Google's Gemini AI with a poisoned calendar invite to take over a smart home

Nvidia rejects US demand for backdoors in AI chips

Google says hackers stole its customers' data by breaching its Salesforce database

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

PBS confirms data breach after employee info leaked on Discord servers

Cloudflare on Perplexity web scraping techniques to avoid robot.txt and network blocks

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

Microsoft and Google among most affected as zero day exploits jump 46%

Vietnamese hackers use PXA Stealer, hit 4,000 IPs and steal 200,000 passwords globally

New Plague Linux malware stealthily maintains SSH access

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Derek Fisher, Director of the Cyber Defense and Information Assurance Program, Temple University – also check out Derek's substack.

Thanks to our show sponsor, Dropzone AI

Security teams everywhere are drowning in alerts. That's why companies like Zapier and CBTS turned to Dropzone AI—the leader in autonomous alert investigation. Their AI investigates everything, giving your analysts time back for real security work. No more 40-minute rabbit holes. If you're at BlackHat, find them in Startup City. Otherwise, check out their self-guided demo at dropzone.ai. This is how modern SOCs are scaling without burning out.

All links and the video of this episode can be found on CISO Series.com

NATM network breached and attacked through 4G Raspberry Pi

Easterly's appointment to West Point rescinded

Report links Chinese companies to tools used by state-sponsored hackers

Huge thanks to our sponsor, Dropzone AI

Security teams everywhere are drowning in alerts. That's why companies like Zapier and CBTS turned to Dropzone AI—the leader in autonomous alert investigation. Their AI investigates everything, giving your analysts time back for real security work. No more 40-minute rabbit holes. If you're at BlackHat, find them in Startup City. Otherwise, check out their self-guided demo at dropzone.ai. This is how modern SOCs are scaling without burning out.

Find the stories behind the headlines at CISOseries.com.

Oh No! Lenovo

You sunk my battleship! Or did you?

Russians unable to get a taste of their own medicine

Huge thanks to our sponsor, Dropzone AI

Critical Authentication Flaw Identified in Base44 Vibe Coding Platform

French telecom giant Orange discloses cyberattack

FBI seizes $2.4M in Bitcoin from new Chaos ransomware operation

Huge thanks to our sponsor, Dropzone AI

Hacktivist attack grounds Russian flights

Naval group denies breach, hackers beg to differ

Dating app breach exposes thousands of women's pictures

Huge thanks to our sponsor, Dropzone AI

Let me tell you about Dropzone AI—they're revolutionizing how security teams work. Companies like CBTS and Zapier use their AI to investigate alerts automatically, freeing up analysts for the work that really matters. We're talking 40-minute investigations done in 3 minutes. You can meet the Dropzone team at BlackHat in Startup City, or just head to dropzone.ai for a self-guided demo. Trust me, this is the future of security operations.

NASCAR announces data breach following March cyberattack

Plankey appears to be on track to lead CISA

Microsoft investigates another outage affecting 365 admin center

Huge thanks to our sponsor, Dropzone AI

Today's sponsor is Dropzone AI, the leader in AI-powered SOC automation. Major companies like Zapier and UiPath are using Dropzone to give their security teams superpowers. Imagine your analysts focusing on real threats while AI handles every routine investigation—in minutes, not hours. If you're heading to BlackHat, stop by their booth in Startup City. But you don't have to wait—check out their self-guided demo at dropzone.ai and see why Fortune 500s are making the switch.

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Nick Espinosa, host, The Deep Dive Radio Show

Thanks to our show sponsor, Nudge Security

Nudge Security discovers new apps, accounts, and data-sharing in real-time and helps guide employees toward secure behaviors. Instead of trying to control everything, we give IT and security teams the visibility and automation they need to secure the Workforce Edge.

All links and the video of this episode can be found on CISO Series.com

SonicWall announces SMA 100 patches

FBI warns about The Com

Compromised Amazon Q extension deletes everything

Huge thanks to our sponsor, Nudge Security

Nudge Security discovers new apps, accounts, and data-sharing in real-time and helps guide employees toward secure behaviors. Instead of trying to control everything, we give IT and security teams the visibility and automation they need to secure the Workforce Edge.

Find the stories behind the headlines at CISOseries.com.

Huge thanks to our sponsor, Nudge Security

Trying to squeeze a few more items into your budget? Nudge Security can help by discovering up to TWO YEARS of historical SaaS spend along with usage insights so you can eliminate wasted spend. In fact, Nudge Security customer KarmaCheck was able to recoup 150% of their investment in Nudge within the first 6 months. See where you can save money by starting a free trial at nudgesecurity.com/spend.

Russian threat actors target NGOs with new OAuth phishing tactics

Huge thanks to our sponsor, Nudge Security

Nudge Security discovers every SaaS app used in your org, secures configurations, enforces MFA, and manages app-to-app access so you can prevent identity based attacks. Start a free 14-day trial today at NudgeSecurity.com

SharePoint RCE flaws patched and exploited from China

Dell acknowledges World Leaks data breach

$44 million stolen from crypto exchange

Huge thanks to our sponsor, Nudge Security

Nudge Security discovers every GenAI tool ever used in your org, even those you've never heard of. For each tool, you'll see who introduced it, who else is using it, where it's integrated into other tools, and a vendor security profile. Get your free GenAI inventory today at NudgeSecurity.com.

Hewlett Packard warns of hardcoded passwords in Aruba access points

SharePoint zero-day exploited via RCE, no patch available

Russian vodka producer suffers ransomware attack

Huge thanks to our sponsor, Nudge Security

Discover every SaaS account ever created by anyone in your org within minutes of starting a free trial. Harden configs, enforce MFA, revoke risky app-to-app access, and more. Learn more at NudgeSecurity.com

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Cyrus Tibbs, CISO, PennyMac

Thanks to our show sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

All links and the video of this episode can be found on CISO Series.com

Chinese hackers use Cobalt Strike on Taiwan's semiconductor sector

Salt Typhoon breaches National Guard and steals network configurations

Congress considers Stuxnet to manage OT threats

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

Find the stories behind the headlines at CISOseries.com.

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

Pentagon welcomes Chinese engineers into its environment

HazyBeacon: It's not a beer, but it leaves a bitter aftertaste

What the world needs now is another framework

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

(Reuters)

(Security Week)

(Infosecurity Magazine)

(Reuters)

(Infosecurity Magazine)

(Bleeping Computer)

(Bleeping Computer)

(The Record)

(AP News)

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

CISA gives one day for Citrix Bleed 2 fix

Google Gemini flaw hijacks email summaries for phishing

Louis Vuitton says UK customer data stolen in cyber-attack

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Jim Bowie, vp, CISO, Tampa General Hospital

Thanks to our show sponsor, Vanta

Do you know the status of your compliance controls right now? Like…right now? We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta. Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting, and helps you get security questionnaires done 5 times faster with AI. Now that's…a new way to GRC. Get started at Vanta.com/headlines

All links and the video of this episode can be found on CISO Series.com

Look Out! Another Outlook Outage

Iranian APTs increased activity against U.S. industries in late spring

Russian basketball player arrested in France over alleged ransomware ties

Huge thanks to our sponsor, Vanta

Do you know the status of your compliance controls right now? Like...right now?

We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks.

But more than 9,000 companies have continuous visibility into their controls with Vanta. Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001.

They also centralize key workflows like policies, access reviews, and reporting, and helps you get security questionnaires done 5 times faster with AI. Now that's…a new way to GRC.

Get started at Vanta.com/headlines

Find the stories behind the headlines at CISOseries.com.

AMD warns of new Meltdown, Spectre-like bugs affecting CPUs

Multiple vulnerabilities in Mozilla Thunderbird could allow for arbitrary code execution

Bitcoin Depot breach exposes data of nearly 27,000 crypto users, More than $40 million stolen from GMX crypto platform

Huge thanks to our sponsor, Vanta

Do you know the status of your compliance controls right now? Like...right now?

We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks.

But more than 9,000 companies have continuous visibility into their controls with Vanta. Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001.

They also centralize key workflows like policies, access reviews, and reporting, and helps you get security questionnaires done 5 times faster with AI. Now that's…a new way to GRC.

Get started at Vanta.com/headlines

Four members of President Trump's cabinet impersonated

Is this some kind of a game?

Batavia attacks Russian industrial companies

Huge thanks to our sponsor, Vanta

Do you know the status of your compliance controls right now? Like...right now?

We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks.

But more than 9,000 companies have continuous visibility into their controls with Vanta. Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001.

They also centralize key workflows like policies, access reviews, and reporting, and helps you get security questionnaires done 5 times faster with AI. Now that's…a new way to GRC.

Get started at Vanta.com/headlines

Call of Duty game pulled from PC store after reported exploit

U.S. military gets cybersecurity boost

Bank employee helped hackers steal $100M

Huge thanks to our sponsor, Vanta

Do you know the status of your compliance controls right now? Like...right now?

We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks.

But more than 9,000 companies have continuous visibility into their controls with Vanta. Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001.

They also centralize key workflows like policies, access reviews, and reporting, and helps you get security questionnaires done 5 times faster with AI. Now that's…a new way to GRC.

Get started at Vanta.com/headlines

Ingram Micro suffers ransomware attack

Hacker leaks Telefónica data allegedly from new breach

ChatGPT prone to recommending wrong URLs, creating a new phishing opportunity

Huge thanks to our sponsor, Vanta

Do you know the status of your compliance controls right now? Like...right now?

We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks.

But more than 9,000 companies have continuous visibility into their controls with Vanta. Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001.

They also centralize key workflows like policies, access reviews, and reporting, and helps you get security questionnaires done 5 times faster with AI. Now that's…a new way to GRC.

Get started at Vanta.com/headlines

Find the stories behind the headlines at CISOseries.com.

Undetectable Android spyware leaks user logins

Hunters ransomware group shuts doors

Medical device company Surmodics reports cyberattack

Huge thanks to our sponsor, Palo Alto Networks

You're moving fast in the cloud and so are attackers. But while SecOps and cloud security teams are working in silos, attackers are exploiting the gaps between them. Cortex Cloud by Palo Alto Networks bridges this divide, unifying teams and stopping attacks with real-time cloud security that includes AI-powered protection, detection and automated response capabilities. Threats are stopped in minutes instead of days, and teams can finally protect cloud environments at the speed and scale of modern attacks. To learn more about how Cortex Cloud stops cloud attacks before they become breaches, visit: paloaltonetworks.com/cortex/cloud-detection-and-response

Find the stories behind the headlines at CISOseries.com.

Student data lost in Columbia University hack

German hunger relief charity hit by ransomware

Qantas contact center breached

Huge thanks to our sponsor, Palo Alto Networks

You're moving fast in the cloud and so are attackers. But while SecOps and cloud security teams are working in silos, attackers are exploiting the gaps between them.

Cortex Cloud by Palo Alto Networks bridges this divide, unifying teams and stopping attacks with real-time cloud security that includes AI-powered protection, detection and automated response capabilities.

Threats are stopped in minutes instead of days, and teams can finally protect cloud environments at the speed and scale of modern attacks. To learn more about how Cortex Cloud stops cloud attacks before they become breaches, visit: paloaltonetworks.com/cortex/cloud-detection-and-response

Chrome Zero-Day CVE-2025-6554 under active attack — Google issues security update

International Criminal Court targeted by new 'sophisticated' attack

Kelly Benefits says 2024 data breach impacts 550,000 customers, Esse Health says recent data breach affects over 263,000 patients

Huge thanks to our sponsor, Palo Alto Networks

You're moving fast in the cloud and so are attackers. But while SecOps and cloud security teams are working in silos, attackers are exploiting the gaps between them.

Cortex Cloud by Palo Alto Networks bridges this divide, unifying teams and stopping attacks with real-time cloud security that includes AI-powered protection, detection and automated response capabilities.

Threats are stopped in minutes instead of days, and teams can finally protect cloud environments at the speed and scale of modern attacks. To learn more about how Cortex Cloud stops cloud attacks before they become breaches, visit: paloaltonetworks.com/cortex/cloud-detection-and-response

U.S. agencies issue urgent warning over Iran threat

Canada bans Chinese surveillance company

CISA names new executive director

Huge thanks to our sponsor, Palo Alto Networks

You're moving fast in the cloud and so are attackers. But while SecOps and cloud security teams are working in silos, attackers are exploiting the gaps between them.

Cortex Cloud by Palo Alto Networks bridges this divide, unifying teams and stopping attacks with real-time cloud security that includes AI-powered protection, detection and automated response capabilities.

Threats are stopped in minutes instead of days, and teams can finally protect cloud environments at the speed and scale of modern attacks. To learn more about how Cortex Cloud stops cloud attacks before they become breaches, visit: paloaltonetworks.com/cortex/cloud-detection-and-response

Hawaiian Airlines suffers cyberattack

United Natural Foods says cyber incident will impact quarterly income

Russia throttles Cloudflare making sites inaccessible

Huge thanks to our sponsor, Palo Alto Networks

You're moving fast in the cloud and so are attackers. But while SecOps and cloud security teams are working in silos, attackers are exploiting the gaps between them.

Cortex Cloud by Palo Alto Networks bridges this divide, unifying teams and stopping attacks with real-time cloud security that includes AI-powered protection, detection and automated response capabilities.

Threats are stopped in minutes instead of days, and teams can finally protect cloud environments at the speed and scale of modern attacks. To learn more about how Cortex Cloud stops cloud attacks before they become breaches, visit: paloaltonetworks.com/cortex/cloud-detection-and-response

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Bil Harmer, operating partner and CISO, Craft Ventures. Check out Bil's page, KillSwitchAdvisory.

Thanks to our show sponsor, ThreatLocker

Alert fatigue, false positives, analyst burnout—you know the drill. What if you could stop threats before they run? ThreatLocker gives CISOs what they've been asking for: real control at the execution layer. Only approved apps, scripts, and executables run. Period. Known-good is enforced. Everything else? Denied by default. Ringfencing and storage control keep even trusted tools in their lane—so PowerShell doesn't become a weapon. And yes—it works at scale. Granular policies. Fast rollout. Built for modern infrastructure. You don't need more alerts. You need fewer chances for malware to make a move. ThreatLocker helps you flip the model—from detect-and-respond… to deny-and-verify. Go to ThreatLocker.com/CISO to schedule your free demo and close the last gap in your Zero Trust strategy, before it's exploited.

All links and the video of this episode can be found on CISO Series.com

Iranian-backed spearphishing campaign seeks out cybersecurity experts

Microsoft fixes Outlook bug causing crashes when opening emails

Glasgow City Council suffers cyberattack

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

Find the stories behind the headlines at CISOseries.com.

NHS confirms patient death linked to ransomware attack

BreachForums busted again

Thousands of SaaS apps still vulnerable to nOAuth

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

Hackers target over 70 Microsoft Exchange servers to steal credentials via keyloggers

Apple, Netflix, Microsoft sites 'hacked' for tech support scams

The 2022 initiative by Cloudflare, CrowdStrike and Ping Identity provided cybersecurity support to critical infrastructure sectors seen as potential targets of Russia-linked attacks

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

DHS warns of retaliatory Iranian cyberattacks

Steel giant Nucor confirms breach

Ransomware hits healthcare system again

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

CMC officially points finger at Scattered Spider for Marks & Spencer and Co-op attacks

Aflac investigating suspicious activity on its U.S. network

Russian dairy producers suffer cyberattack

Huge thanks to our sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Howard Holton, COO and industry analyst, GigaOm

Thanks to our show sponsor, Adaptive Security

As deepfake scams and GenAI phishing evolve, Adaptive equips security teams with AI-powered phishing simulations featuring realistic personalized deepfakes and engaging security awareness training. Their new AI Content Creator turns threat intel and policy updates into interactive, multilingual training — instantly. Trusted by Fortune 500s and backed by Andreessen Horowitz and OpenAI, Adaptive helps you stay ahead of AI-driven threats. Learn more at adaptivesecurity.com.

All links and the video of this episode can be found on CISO Series.com

Cisco, Atlassian fix high-severity vulnerabilities

Alleged Ryuk ransomware gang member arrested and extradited

Telecom company Viasat attacked by Salt Typhoon

Huge thanks to our sponsor, Adaptive Security — OpenAI's first cybersecurity investment

As deepfake scams and GenAI phishing evolve, Adaptive equips security teams with AI-powered phishing simulations featuring realistic personalized deepfakes and engaging security awareness training. Their new AI Content Creator turns threat intel and policy updates into interactive, multilingual training — instantly.

Trusted by Fortune 500s and backed by Andreessen Horowitz and OpenAI, Adaptive helps you stay ahead of AI-driven threats.

Learn more at adaptivesecurity.com.

Find the stories behind the headlines at CISOseries.com.

Over 5 million impacted by Episource breach

Predatory Sparrow strikes Iran again

Data leak at Swiss banks

Huge thanks to our sponsor, Adaptive Security — OpenAI's first cybersecurity investment

As deepfake scams and GenAI phishing evolve, Adaptive equips security teams with AI-powered phishing simulations featuring realistic personalized deepfakes and engaging security awareness training. Their new AI Content Creator turns threat intel and policy updates into interactive, multilingual training — instantly.

Trusted by Fortune 500s and backed by Andreessen Horowitz and OpenAI, Adaptive helps you stay ahead of AI-driven threats.

Learn more at adaptivesecurity.com.

Organizations warned of vulnerability exploited against discontinued TP-Link routers

Russia detects first SuperCard malware attacks skimming bank data via NFC

Huge thanks to our sponsor, Adaptive Security — OpenAI's first cybersecurity investment

As deepfake scams and GenAI phishing evolve, Adaptive equips security teams with AI-powered phishing simulations featuring realistic personalized deepfakes and engaging security awareness training. Their new AI Content Creator turns threat intel and policy updates into interactive, multilingual training — instantly.

Trusted by Fortune 500s and backed by Andreessen Horowitz and OpenAI, Adaptive helps you stay ahead of AI-driven threats.

Learn more at adaptivesecurity.com.

Beware the SMS 2FA middleman

Police seize Archetyp Market

Zoomcar hack impacts 8.4 million users

Huge thanks to our sponsor, Adaptive Security

As deepfake scams and GenAI phishing evolve, Adaptive equips security teams with AI-powered phishing simulations featuring realistic personalized deepfakes and engaging security awareness training. Their new AI Content Creator turns threat intel and policy updates into interactive, multilingual training — instantly. Trusted by Fortune 500s and backed by Andreessen Horowitz and OpenAI, Adaptive helps you stay ahead of AI-driven threats. Learn more at adaptivesecurity.com.

Washington Post investigates hacking incident on journalists' emails

Canadian airline WestJet is containing a cyberattack

Crash records stolen from Texas DOT

Huge thanks to our sponsor, Adaptive Security — OpenAI's first cybersecurity investment

As deepfake scams and GenAI phishing evolve, Adaptive equips security teams with AI-powered phishing simulations featuring realistic personalized deepfakes and engaging security awareness training. Their new AI Content Creator turns threat intel and policy updates into interactive, multilingual training — instantly.

Trusted by Fortune 500s and backed by Andreessen Horowitz and OpenAI, Adaptive helps you stay ahead of AI-driven threats.

Learn more at adaptivesecurity.com.

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Christina Shannon, CIO, KIK Consumer Products

Thanks to our show sponsor, Vanta

Is your manual GRC program slowing you down? There's something more efficient than spreadsheets, screenshots, and manual processes — Vanta. With Vanta, GRC can be so. much. easier—while also strengthening your security posture and driving revenue for your business. Vanta automates key areas of your GRC program—including compliance, risk, and customer trust—and streamlines the way you manage information. The impact is real: A recent IDC analysis found that compliance teams using Vanta are one hundred and twenty nine percent more productive. Get back time to focus on strengthening security and scaling your business. Get started at Vanta.com/headlines.

All links and the video of this episode can be found on CISO Series.com

Hackers attacks target Microsoft Entra ID accounts using pentesting tool

Google Cloud and Cloudflare outages reported

House Homeland Chairman Mark Green announces his departure

Huge thanks to our sponsor, Vanta

Is your manual GRC program slowing you down? There's something more efficient than spreadsheets, screenshots, and manual processes — Vanta.

With Vanta, GRC can be so. much. easier—while also strengthening your security posture and driving revenue for your business. Vanta automates key areas of your GRC program—including compliance, risk, and customer trust—and streamlines the way you manage information.

The impact is real: A recent IDC analysis found that compliance teams using Vanta are one hundred and twenty nine percent more productive.

Get back time to focus on strengthening security and scaling your business. Get started at Vanta.com/headlines.

Find the stories behind the headlines at CISOseries.com.

Zero-click data leak flaw in Copilot

Operation Secure targets infostealer operations

FIN6 targets recruiters

Huge thanks to our sponsor, Vanta

Is your manual GRC program slowing you down? There's something more efficient than spreadsheets, screenshots, and manual processes — Vanta.

With Vanta, GRC can be so. much. easier—while also strengthening your security posture and driving revenue for your business. Vanta automates key areas of your GRC program—including compliance, risk, and customer trust—and streamlines the way you manage information.

The impact is real: A recent IDC analysis found that compliance teams using Vanta are one hundred and twenty nine percent more productive.

Get back time to focus on strengthening security and scaling your business. Get started at Vanta.com/headlines.

Huge thanks to our sponsor, Vanta

Is your manual GRC program slowing you down? There's something more efficient than spreadsheets, screenshots, and manual processes — Vanta.

With Vanta, GRC can be so. much. easier—while also strengthening your security posture and driving revenue for your business. Vanta automates key areas of your GRC program—including compliance, risk, and customer trust—and streamlines the way you manage information.

The impact is real: A recent IDC analysis found that compliance teams using Vanta are one hundred and twenty nine percent more productive.

Get back time to focus on strengthening security and scaling your business. Get started at Vanta.com/headlines.

Brute forcing phone numbers linked to Google accounts

The Guardian launches Secure Messaging service

United Natural Foods hit by cyberattack

Huge thanks to our sponsor, Vanta

Is your manual GRC program slowing you down? There's something more efficient than spreadsheets, screenshots, and manual processes — Vanta.

With Vanta, GRC can be so. much. easier—while also strengthening your security posture and driving revenue for your business. Vanta automates key areas of your GRC program—including compliance, risk, and customer trust—and streamlines the way you manage information.

The impact is real: A recent IDC analysis found that compliance teams using Vanta are one hundred and twenty nine percent more productive.

Get back time to focus on strengthening security and scaling your business. Get started at Vanta.com/headlines.