Cybersecurity Headlines
von CISO Series
Neueste Folge
Microsoft 365 outage, Bomb hoaxers in hijacked inboxes, Operation…
Microsoft 365 outage, Bomb hoaxers in hijacked inboxes, Operation…
Über diesen Podcast
Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.
Folgen
Die neuesten 50 von 1.891 Folgen
- Microsoft 365 outage, Bomb hoaxers in hijacked inboxes, Operation Endgame pulls malware plugs · 8 Min.Global Microsoft outage affects users worldwide https://www.bleepingcomputer.com/news/microsoft/massive-microsoft-365-outage-disrupts-outlook-teams-copilot-worldwide/ Old…
- Maersk gets a $5M ransom note, CopperDragon's malware connections, United grounds AI booking bots · 7 Min.Maersk gets a $5M ransom note https://www.bleepingcomputer.com/news/security/maersk-confirms-data-breach-as-whitearmor-ransomware-demands-5-million/ CopperDragon's malware…
- New CISA head, AI safety regulator, N-able's zero-day deluge · 8 Min.Australia to create AI safety regulator https://apnews.com/article/australia-artificial-intelligence-regulator-openai-agent-breach-a5dfe5379c0f7458e44b72a9073833c6 Zero-day drop…
- France blames Iran for fridge hacks, Binance breach doubts, Ukraine crypto scam arrests · 8 Min.France turns up the heat on Iran over fridge hacks https://www.reuters.com/world/french-officials-suspect-iran-is-behind-refrigerator-hacks-sources-say-2026-11-09/ Binance says…
- New SonicWall flaw, WorkOS accidental AI breach, Bogota bomb hoax email · 8 Min.SonicWall warns of new exploited SSL-VPN MFA bypass flaw https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/…
- The Department of Know: LLM jacking, Asia rocked by Amadeus, freezers still getting hacked · 36 Min.Read the full stories at CISOseries.com. This week's Department of Know is hosted by Sarah Lane, with guests Jason Thomas, senior director, technology security, governance, and…
- Norway aid agency attack, GhostMap Android flaw, More airlines hacked · 7 Min.Norway's aid agency suffers data breach https://www.theregister.com/cyber-crime/2026/11/05/norways-aid-agency-pwned-and-all-users-data-is-stolen/5307765 GhostMap Android flaw…
- Blood bank fridge hacks, Anthropic model identity, Google Calendar phishing · 7 Min.Blood banks caught in European fridge attacks https://www.cnbc.com/2026/11/04/blood-bank-fridges-cyberattacks.html Anthropic wants proof of which AI model answered…
- China's AI guardrails, NCSC's 2028 warning, more Binance hack details · 8 Min.China planning broad AI guardrails https://www.bloomberg.com/news/articles/2026-11-03/china-plans-broad-ai-guardrails-after-global-security-lapses UK predicts "routine" use of AI…
- European freezer hacks, BTCPay wallet thefts, GDPx tests AI agents · 7 Min.European supermarkets report freezer hacks https://www.bloomberg.com/news/articles/2026-11-02/belgian-swedish-supermarkets-report-new-suspected-freezer-hack BTCPay warns of hot…
- DHS data leak, Northflank suffers breach, Russian Poryadok cyberattack · 8 Min.NetamLoader malware targets government Windows systems in Asia https://thehackernews.com/2026/11/netamloader-malware-targets-government.html Northflank warns of security breach…
- The Department of Know: Big Binance hack, Cursor backdoor, FEC taken offline · 38 Min.Read the full stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Jason Elrod, CISO, MultiCare Health System, and DJ Schleen…
- French energy breach, Pentagon freezer hack, Japan Airlines breach · 8 Min.French energy company ENGIE suffers data breach https://securityaffairs.com/201985/data-breach/engie-data-breach-exposes-customer-details-and-energy-contracts.html NIST publishes…
- OpenAI election war room, FEC filing disruption, Gemini Carbon debut · 8 Min.OpenAI opens an election war room https://www.politico.com/news/2026/10/28/openai-election-war-room-interference-01137690 Hack attempt disrupts FEC disclosures…
- Authenticator token theft, Tailworm SSH flaws, UK police supplier breaches · 8 Min.Authenticator flaw exposes work accounts https://thehackernews.com/2026/10/microsoft-authenticator-flaw-let.html Tailworm flaws put Tailscale SSH at risk…
- HTTP2Shell emergency updates, PHP2Shell attacks, GitHub worm · 8 Min.HTTP2Shell sparks emergency patches https://www.bleepingcomputer.com/news/security/critical-http2shell-brotli-vulnerability-triggers-emergency-patches/ PHP2Shell: patch, then…
- AI-powered phishing detection, third PHP2Shell bug, Quest medical breach · 8 Min.Microsoft Teams to get AI-powered, context-aware phishing detection https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-to-get-ai-powered-context-aware-phishing-detect…
- The Department of Know: PHP2Shell strikes, EU EOL still SOL, Cairn used in cyberattacks · 38 Min.Read the full stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Gary Chan, CISO, SSM Health, and Doug Mayer, CISO, RXSense…
- PHP vulnerabilities update, ConnectWise AI spies, Africa cybercrime takedown · 7 Min.Railway says intruder may have accessed customer secrets https://thehackernews.com/2026/10/railway-says-intruder-may-have-accessed.html Law enforcement disrupts nearly 11,000…
- PHP emergency patches, compromised TLS certificates, Signal hot mic bug · 7 Min.PHP rushes out emergency fixes for PHP2Shell https://www.bleepingcomputer.com/news/security/php-ships-emergency-patches-for-critical-php2shell-flaws/…
- Naval hack, Muse exposes secrets, Army researching offensive AI hacking · 8 Min.Russian-linked attacks hit naval shipbuilder https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html Muse exposes secrets when sharing chats…
- OpenCode keys exposed, AI agents raid websites, Rank Math backdoor · 8 Min.OpenCode breach exposes users' AI keys https://www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/ One hacker puts AI agents to…
- Cybersecurity jobs report, ConnectWise suspends cloud backup, Drupal patches flaws · 7 Min.Cybersecurity jobs report reveals mixed bag https://www.securityweek.com/us-cybersecurity-job-postings-fall-26-as-ai-security-engineer-demand-soars/…
- The Department of Know: Hacked fridges, hiring humans to fix Mythos bugs, targeted ad spyware · 34 Min.See the full stories at cisoseries.com This week's Department of Know is hosted by Rich Stroffolino, with guests Dennis Pickett, vp and CISO, RTI International, and David Cross…
- Candiru spyware infects Al Jazeera, Senators AI request, Microsoft crashes phishers · 8 Min.CenterPoint Energy reveals data breach numbers https://www.securitymagazine.com/articles/102658-1m-impacted-by-centerpoint-energy-data-breach Zero-Click Candiru spyware…
- FBI raids laptop farms, Meta loses GitHub data, Cisco gateways under attack · 7 Min.FBI shuts down North Korean laptop farms https://www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/ Meta's stolen…
- Webcams go to war, Kimsuky sends invites, Anthropic blocks copycats · 7 Min.Webcams get drafted into war https://www.wsj.com/tech/cybersecurity/video-cameras-webcams-hacked-war-b00b8a24?st=RRCsaw Kimsuky's invitations come with malware…
- Supermarket freezer hack, Ahold Delhaize offline, spy chip in crypto wallets · 8 Min.Hackers turn up the heat on French supermarkets: https://www.infosecurity-magazine.com/news/french-supermarket-chains/ Ahold Delhaize offline after cyber attack…
- Anthropic restricts Claude, Google Calendar phishing, FBI hack arrest · 8 Min.CISA's KEV catalog grows by five https://securityaffairs.com/200734/security/u-s-cisa-adds-proftpd-onlyoffice-docs-strapi-apache-struts-and-isc-bind-flaws-to-its-known-exploited-v…
- The Department of Know: South Korean bank hacks, agents target Wikipedia, ransomware recovery fraud · 33 Min.Read the full stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Derek Fisher, Director of the Cyber Defense and Information…
- Top level domain theft, Yandex attacked, Cisco Nexus flaws · 8 Min.Attackers hijack three top level domains to obtain Google certificates https://www.infosecurity-magazine.com/news/attackers-hijack-cctlds-obtain/ Major Yandex data center in…
- Poetry-powered botnet, Flock hits a roadblock, Outlook blocks risky installers · 7 Min.Botnet takes orders from a poem https://cyberscoop.com/poellm-malware-botnet-poem-lumen-black-lotus-labs/ Flock's warrantless tracking hits a roadblock…
- Agents vs Wikipedia, South Korean bank hacks, ASOS breached · 8 Min.Agents trying to compromise Wikipedia tools https://thehackernews.com/2026/10/wikimedia-says-openai-agents-tried-to.html South Korea claims agents were used in bank hacks…
- Google pauses bug bounties, ATB faces extortion, Exchange flaw exposes mailboxes · 8 Min.Google pauses open-source bug bounties amid AI spam Ukraine's largest grocery chain hit by extortion attack Exchange flaw exposes other users' mailboxes Get the show notes here…
- Warlock continues SharePoint exploits, ShinyHunters member flips China's AI espionage · 7 Min.Warlock ransomware continues to exploit year-old SharePoint flaws ShinyHunters member detained in Jordan China-aligned espionage group targets American AI policy experts Get the…
- The Department of Know: ShinyHunters vs FBI, Kiteworks shutdown, and hundreds of orgs hit by rogue AI · 39 Min.Read all the stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Brett Conlon, CISO, American Century Investments, and Nick…
- AI readiness reports, KillSec takedown, OpenAI website scraping · 8 Min.Report suggests AI and quantum threat preparedness is lacking Authorities seize KillSec extortion group arrest leader Dozens more prominent websites scraped by OpenAI software…
- Gemini 4 enters the ring, MI5 flags research ties, Custom GPTs deliver malware · 7 Min.Gemini 4 starts with cybersecurity MI5 flags Chinese research funding Custom GPTs steer users into ClickFix attacks Get the show notes here…
- Star Blizzard, Cloudflare CA, GPT-6.1 scuttled · 8 Min.Microsoft details new Star Blizzard and NeedyMantis activity Cloudflare to become a public certificate authority Safety concerns scuttle GPT-6.1 Get the show notes here…
- GPT-6 Astra goes off script, ShinyHunters suspect arrested, Nvidia corrals rogue AI agents · 8 Min.GPT-6 Astra goes off script in attack simulations Dutch police arrest "reformed" hacker in ShinyHunters probe Nvidia builds a browser for AI agents Get the show notes here…
- New SharePoint exploit, Australian OpenAI hack developments, Kiteworks urges stoppage · 8 Min.Another Microsoft SharePoint flaw now exploited Details and doubts emerge regarding OpenAI hack of Australian Health portal Kiteworks urges customers to stop using platform Get…
- The Department of Know: NCSC's AI "inconvenient truth," automated payment skimming, CISA's CVE plan · 34 Min.Read all the stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Dmitriy Sokolovskiy, senior vice president, information…
- OpenAI hacks Australia health, Astrana Health breached, TeamCity flaw exploited · 7 Min.OpenAI program hacks Australia's government health portal Astrana Health suffers data breach Ransomware gangs exploiting TeamCity flaw Get the show notes here…
- ShinyHunters peeks at FBI assignments, WordPress flaw wastes no time, Pentagon's cyber appetite grows · 7 Min.ShinyHunters peeks at FBI assignments WordPress flaw wastes no time Pentagon's cyber appetite grows Get the show notes here…
- CAIRN framework, Muse zero-day, BigDiskBuster · 7 Min.Cisco releases open-source CAIRN framework Muse zero-day opens the door to account takeovers Microsoft can't wake up from Nightmare Eclipse Get the show notes here…
- ShinyHunters hijacks Clop, fake LastPass kills security tools, trusted npm release carries malware · 7 Min.ShinyHunters hijacks Clop's own leak site Fake LastPass installers kill security tools Trusted npm release carries GHAPPIER malware Huge thanks to our episode sponsor, Nudge…
- OpenAI Codex sandbox escape, President proposes AI Force, Cyber Command suicides · 8 Min.Researchers escape OpenAI Codex sandbox to run commands on host AI Force proposed to monitor technology Congress eyes new support for Cyber Command after recent suicide deaths…
- The Department of Know: Passkeys phished, Cisco hits root, nuclear red lines for AI · 35 Min.Read the full stories at CISOSeries.com. This week's Department of Know is hosted by Sarah Lane, with guests Jason Thomas, senior director of technology security, governance, and…
- Nuclear-style AI safeguards, AI legislation shelved, CISA's decoy guidance · 7 Min.Nuclear-style safeguards proposed for AI risks Key lawmaker suggests action on AI safety legislation will wait until 2027 CISA releases cyber decoy guidance for infrastructure…
- Flock gets plucked, OpenAI agents arrived even earlier, inside China's AI spy shop · 7 Min.Flock gets plucked OpenAI agents arrived early China's AI spy shop Get the show notes here: https://cisoseries.com/cybersecurity-news-september-17-2026/ Huge thanks to our…
