Cybersecurity Headlines
autor: CISO Series
Nejnovější epizoda
Microsoft 365 outage, Bomb hoaxers in hijacked inboxes, Operation…
Microsoft 365 outage, Bomb hoaxers in hijacked inboxes, Operation…
O tomto podcastu
Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.
Epizody
Nejnovějších 50 z 1 891 epizod
- Microsoft 365 outage, Bomb hoaxers in hijacked inboxes, Operation Endgame pulls malware plugs · 8 minGlobal Microsoft outage affects users worldwide https://www.bleepingcomputer.com/news/microsoft/massive-microsoft-365-outage-disrupts-outlook-teams-copilot-worldwide/ Old…
- Maersk gets a $5M ransom note, CopperDragon's malware connections, United grounds AI booking bots · 7 minMaersk gets a $5M ransom note https://www.bleepingcomputer.com/news/security/maersk-confirms-data-breach-as-whitearmor-ransomware-demands-5-million/ CopperDragon's malware…
- New CISA head, AI safety regulator, N-able's zero-day deluge · 8 minAustralia to create AI safety regulator https://apnews.com/article/australia-artificial-intelligence-regulator-openai-agent-breach-a5dfe5379c0f7458e44b72a9073833c6 Zero-day drop…
- France blames Iran for fridge hacks, Binance breach doubts, Ukraine crypto scam arrests · 8 minFrance turns up the heat on Iran over fridge hacks https://www.reuters.com/world/french-officials-suspect-iran-is-behind-refrigerator-hacks-sources-say-2026-11-09/ Binance says…
- New SonicWall flaw, WorkOS accidental AI breach, Bogota bomb hoax email · 8 minSonicWall warns of new exploited SSL-VPN MFA bypass flaw https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/…
- The Department of Know: LLM jacking, Asia rocked by Amadeus, freezers still getting hacked · 36 minRead the full stories at CISOseries.com. This week's Department of Know is hosted by Sarah Lane, with guests Jason Thomas, senior director, technology security, governance, and…
- Norway aid agency attack, GhostMap Android flaw, More airlines hacked · 7 minNorway's aid agency suffers data breach https://www.theregister.com/cyber-crime/2026/11/05/norways-aid-agency-pwned-and-all-users-data-is-stolen/5307765 GhostMap Android flaw…
- Blood bank fridge hacks, Anthropic model identity, Google Calendar phishing · 7 minBlood banks caught in European fridge attacks https://www.cnbc.com/2026/11/04/blood-bank-fridges-cyberattacks.html Anthropic wants proof of which AI model answered…
- China's AI guardrails, NCSC's 2028 warning, more Binance hack details · 8 minChina planning broad AI guardrails https://www.bloomberg.com/news/articles/2026-11-03/china-plans-broad-ai-guardrails-after-global-security-lapses UK predicts "routine" use of AI…
- European freezer hacks, BTCPay wallet thefts, GDPx tests AI agents · 7 minEuropean supermarkets report freezer hacks https://www.bloomberg.com/news/articles/2026-11-02/belgian-swedish-supermarkets-report-new-suspected-freezer-hack BTCPay warns of hot…
- DHS data leak, Northflank suffers breach, Russian Poryadok cyberattack · 8 minNetamLoader malware targets government Windows systems in Asia https://thehackernews.com/2026/11/netamloader-malware-targets-government.html Northflank warns of security breach…
- The Department of Know: Big Binance hack, Cursor backdoor, FEC taken offline · 38 minRead the full stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Jason Elrod, CISO, MultiCare Health System, and DJ Schleen…
- French energy breach, Pentagon freezer hack, Japan Airlines breach · 8 minFrench energy company ENGIE suffers data breach https://securityaffairs.com/201985/data-breach/engie-data-breach-exposes-customer-details-and-energy-contracts.html NIST publishes…
- OpenAI election war room, FEC filing disruption, Gemini Carbon debut · 8 minOpenAI opens an election war room https://www.politico.com/news/2026/10/28/openai-election-war-room-interference-01137690 Hack attempt disrupts FEC disclosures…
- Authenticator token theft, Tailworm SSH flaws, UK police supplier breaches · 8 minAuthenticator flaw exposes work accounts https://thehackernews.com/2026/10/microsoft-authenticator-flaw-let.html Tailworm flaws put Tailscale SSH at risk…
- HTTP2Shell emergency updates, PHP2Shell attacks, GitHub worm · 8 minHTTP2Shell sparks emergency patches https://www.bleepingcomputer.com/news/security/critical-http2shell-brotli-vulnerability-triggers-emergency-patches/ PHP2Shell: patch, then…
- AI-powered phishing detection, third PHP2Shell bug, Quest medical breach · 8 minMicrosoft Teams to get AI-powered, context-aware phishing detection https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-to-get-ai-powered-context-aware-phishing-detect…
- The Department of Know: PHP2Shell strikes, EU EOL still SOL, Cairn used in cyberattacks · 38 minRead the full stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Gary Chan, CISO, SSM Health, and Doug Mayer, CISO, RXSense…
- PHP vulnerabilities update, ConnectWise AI spies, Africa cybercrime takedown · 7 minRailway says intruder may have accessed customer secrets https://thehackernews.com/2026/10/railway-says-intruder-may-have-accessed.html Law enforcement disrupts nearly 11,000…
- PHP emergency patches, compromised TLS certificates, Signal hot mic bug · 7 minPHP rushes out emergency fixes for PHP2Shell https://www.bleepingcomputer.com/news/security/php-ships-emergency-patches-for-critical-php2shell-flaws/…
- Naval hack, Muse exposes secrets, Army researching offensive AI hacking · 8 minRussian-linked attacks hit naval shipbuilder https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html Muse exposes secrets when sharing chats…
- OpenCode keys exposed, AI agents raid websites, Rank Math backdoor · 8 minOpenCode breach exposes users' AI keys https://www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/ One hacker puts AI agents to…
- Cybersecurity jobs report, ConnectWise suspends cloud backup, Drupal patches flaws · 7 minCybersecurity jobs report reveals mixed bag https://www.securityweek.com/us-cybersecurity-job-postings-fall-26-as-ai-security-engineer-demand-soars/…
- The Department of Know: Hacked fridges, hiring humans to fix Mythos bugs, targeted ad spyware · 34 minSee the full stories at cisoseries.com This week's Department of Know is hosted by Rich Stroffolino, with guests Dennis Pickett, vp and CISO, RTI International, and David Cross…
- Candiru spyware infects Al Jazeera, Senators AI request, Microsoft crashes phishers · 8 minCenterPoint Energy reveals data breach numbers https://www.securitymagazine.com/articles/102658-1m-impacted-by-centerpoint-energy-data-breach Zero-Click Candiru spyware…
- FBI raids laptop farms, Meta loses GitHub data, Cisco gateways under attack · 7 minFBI shuts down North Korean laptop farms https://www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/ Meta's stolen…
- Webcams go to war, Kimsuky sends invites, Anthropic blocks copycats · 7 minWebcams get drafted into war https://www.wsj.com/tech/cybersecurity/video-cameras-webcams-hacked-war-b00b8a24?st=RRCsaw Kimsuky's invitations come with malware…
- Supermarket freezer hack, Ahold Delhaize offline, spy chip in crypto wallets · 8 minHackers turn up the heat on French supermarkets: https://www.infosecurity-magazine.com/news/french-supermarket-chains/ Ahold Delhaize offline after cyber attack…
- Anthropic restricts Claude, Google Calendar phishing, FBI hack arrest · 8 minCISA's KEV catalog grows by five https://securityaffairs.com/200734/security/u-s-cisa-adds-proftpd-onlyoffice-docs-strapi-apache-struts-and-isc-bind-flaws-to-its-known-exploited-v…
- The Department of Know: South Korean bank hacks, agents target Wikipedia, ransomware recovery fraud · 33 minRead the full stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Derek Fisher, Director of the Cyber Defense and Information…
- Top level domain theft, Yandex attacked, Cisco Nexus flaws · 8 minAttackers hijack three top level domains to obtain Google certificates https://www.infosecurity-magazine.com/news/attackers-hijack-cctlds-obtain/ Major Yandex data center in…
- Poetry-powered botnet, Flock hits a roadblock, Outlook blocks risky installers · 7 minBotnet takes orders from a poem https://cyberscoop.com/poellm-malware-botnet-poem-lumen-black-lotus-labs/ Flock's warrantless tracking hits a roadblock…
- Agents vs Wikipedia, South Korean bank hacks, ASOS breached · 8 minAgents trying to compromise Wikipedia tools https://thehackernews.com/2026/10/wikimedia-says-openai-agents-tried-to.html South Korea claims agents were used in bank hacks…
- Google pauses bug bounties, ATB faces extortion, Exchange flaw exposes mailboxes · 8 minGoogle pauses open-source bug bounties amid AI spam Ukraine's largest grocery chain hit by extortion attack Exchange flaw exposes other users' mailboxes Get the show notes here…
- Warlock continues SharePoint exploits, ShinyHunters member flips China's AI espionage · 7 minWarlock ransomware continues to exploit year-old SharePoint flaws ShinyHunters member detained in Jordan China-aligned espionage group targets American AI policy experts Get the…
- The Department of Know: ShinyHunters vs FBI, Kiteworks shutdown, and hundreds of orgs hit by rogue AI · 39 minRead all the stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Brett Conlon, CISO, American Century Investments, and Nick…
- AI readiness reports, KillSec takedown, OpenAI website scraping · 8 minReport suggests AI and quantum threat preparedness is lacking Authorities seize KillSec extortion group arrest leader Dozens more prominent websites scraped by OpenAI software…
- Gemini 4 enters the ring, MI5 flags research ties, Custom GPTs deliver malware · 7 minGemini 4 starts with cybersecurity MI5 flags Chinese research funding Custom GPTs steer users into ClickFix attacks Get the show notes here…
- Star Blizzard, Cloudflare CA, GPT-6.1 scuttled · 8 minMicrosoft details new Star Blizzard and NeedyMantis activity Cloudflare to become a public certificate authority Safety concerns scuttle GPT-6.1 Get the show notes here…
- GPT-6 Astra goes off script, ShinyHunters suspect arrested, Nvidia corrals rogue AI agents · 8 minGPT-6 Astra goes off script in attack simulations Dutch police arrest "reformed" hacker in ShinyHunters probe Nvidia builds a browser for AI agents Get the show notes here…
- New SharePoint exploit, Australian OpenAI hack developments, Kiteworks urges stoppage · 8 minAnother Microsoft SharePoint flaw now exploited Details and doubts emerge regarding OpenAI hack of Australian Health portal Kiteworks urges customers to stop using platform Get…
- The Department of Know: NCSC's AI "inconvenient truth," automated payment skimming, CISA's CVE plan · 34 minRead all the stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Dmitriy Sokolovskiy, senior vice president, information…
- OpenAI hacks Australia health, Astrana Health breached, TeamCity flaw exploited · 7 minOpenAI program hacks Australia's government health portal Astrana Health suffers data breach Ransomware gangs exploiting TeamCity flaw Get the show notes here…
- ShinyHunters peeks at FBI assignments, WordPress flaw wastes no time, Pentagon's cyber appetite grows · 7 minShinyHunters peeks at FBI assignments WordPress flaw wastes no time Pentagon's cyber appetite grows Get the show notes here…
- CAIRN framework, Muse zero-day, BigDiskBuster · 7 minCisco releases open-source CAIRN framework Muse zero-day opens the door to account takeovers Microsoft can't wake up from Nightmare Eclipse Get the show notes here…
- ShinyHunters hijacks Clop, fake LastPass kills security tools, trusted npm release carries malware · 7 minShinyHunters hijacks Clop's own leak site Fake LastPass installers kill security tools Trusted npm release carries GHAPPIER malware Huge thanks to our episode sponsor, Nudge…
- OpenAI Codex sandbox escape, President proposes AI Force, Cyber Command suicides · 8 minResearchers escape OpenAI Codex sandbox to run commands on host AI Force proposed to monitor technology Congress eyes new support for Cyber Command after recent suicide deaths…
- The Department of Know: Passkeys phished, Cisco hits root, nuclear red lines for AI · 35 minRead the full stories at CISOSeries.com. This week's Department of Know is hosted by Sarah Lane, with guests Jason Thomas, senior director of technology security, governance, and…
- Nuclear-style AI safeguards, AI legislation shelved, CISA's decoy guidance · 7 minNuclear-style safeguards proposed for AI risks Key lawmaker suggests action on AI safety legislation will wait until 2027 CISA releases cyber decoy guidance for infrastructure…
- Flock gets plucked, OpenAI agents arrived even earlier, inside China's AI spy shop · 7 minFlock gets plucked OpenAI agents arrived early China's AI spy shop Get the show notes here: https://cisoseries.com/cybersecurity-news-september-17-2026/ Huge thanks to our…
