Cybersecurity Headlines
de CISO Series
Cel mai nou episod
Microsoft 365 outage, Bomb hoaxers in hijacked inboxes, Operation…
Microsoft 365 outage, Bomb hoaxers in hijacked inboxes, Operation…
Despre acest podcast
Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.
Episoade
Cele mai noi 50 din 1.891 episoade
- Microsoft 365 outage, Bomb hoaxers in hijacked inboxes, Operation Endgame pulls malware plugs · 8 minGlobal Microsoft outage affects users worldwide https://www.bleepingcomputer.com/news/microsoft/massive-microsoft-365-outage-disrupts-outlook-teams-copilot-worldwide/ Old…
- Maersk gets a $5M ransom note, CopperDragon's malware connections, United grounds AI booking bots · 7 minMaersk gets a $5M ransom note https://www.bleepingcomputer.com/news/security/maersk-confirms-data-breach-as-whitearmor-ransomware-demands-5-million/ CopperDragon's malware…
- New CISA head, AI safety regulator, N-able's zero-day deluge · 8 minAustralia to create AI safety regulator https://apnews.com/article/australia-artificial-intelligence-regulator-openai-agent-breach-a5dfe5379c0f7458e44b72a9073833c6 Zero-day drop…
- France blames Iran for fridge hacks, Binance breach doubts, Ukraine crypto scam arrests · 8 minFrance turns up the heat on Iran over fridge hacks https://www.reuters.com/world/french-officials-suspect-iran-is-behind-refrigerator-hacks-sources-say-2026-11-09/ Binance says…
- New SonicWall flaw, WorkOS accidental AI breach, Bogota bomb hoax email · 8 minSonicWall warns of new exploited SSL-VPN MFA bypass flaw https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/…
- The Department of Know: LLM jacking, Asia rocked by Amadeus, freezers still getting hacked · 36 minRead the full stories at CISOseries.com. This week's Department of Know is hosted by Sarah Lane, with guests Jason Thomas, senior director, technology security, governance, and…
- Norway aid agency attack, GhostMap Android flaw, More airlines hacked · 7 minNorway's aid agency suffers data breach https://www.theregister.com/cyber-crime/2026/11/05/norways-aid-agency-pwned-and-all-users-data-is-stolen/5307765 GhostMap Android flaw…
- Blood bank fridge hacks, Anthropic model identity, Google Calendar phishing · 7 minBlood banks caught in European fridge attacks https://www.cnbc.com/2026/11/04/blood-bank-fridges-cyberattacks.html Anthropic wants proof of which AI model answered…
- China's AI guardrails, NCSC's 2028 warning, more Binance hack details · 8 minChina planning broad AI guardrails https://www.bloomberg.com/news/articles/2026-11-03/china-plans-broad-ai-guardrails-after-global-security-lapses UK predicts "routine" use of AI…
- European freezer hacks, BTCPay wallet thefts, GDPx tests AI agents · 7 minEuropean supermarkets report freezer hacks https://www.bloomberg.com/news/articles/2026-11-02/belgian-swedish-supermarkets-report-new-suspected-freezer-hack BTCPay warns of hot…
- DHS data leak, Northflank suffers breach, Russian Poryadok cyberattack · 8 minNetamLoader malware targets government Windows systems in Asia https://thehackernews.com/2026/11/netamloader-malware-targets-government.html Northflank warns of security breach…
- The Department of Know: Big Binance hack, Cursor backdoor, FEC taken offline · 38 minRead the full stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Jason Elrod, CISO, MultiCare Health System, and DJ Schleen…
- French energy breach, Pentagon freezer hack, Japan Airlines breach · 8 minFrench energy company ENGIE suffers data breach https://securityaffairs.com/201985/data-breach/engie-data-breach-exposes-customer-details-and-energy-contracts.html NIST publishes…
- OpenAI election war room, FEC filing disruption, Gemini Carbon debut · 8 minOpenAI opens an election war room https://www.politico.com/news/2026/10/28/openai-election-war-room-interference-01137690 Hack attempt disrupts FEC disclosures…
- Authenticator token theft, Tailworm SSH flaws, UK police supplier breaches · 8 minAuthenticator flaw exposes work accounts https://thehackernews.com/2026/10/microsoft-authenticator-flaw-let.html Tailworm flaws put Tailscale SSH at risk…
- HTTP2Shell emergency updates, PHP2Shell attacks, GitHub worm · 8 minHTTP2Shell sparks emergency patches https://www.bleepingcomputer.com/news/security/critical-http2shell-brotli-vulnerability-triggers-emergency-patches/ PHP2Shell: patch, then…
- AI-powered phishing detection, third PHP2Shell bug, Quest medical breach · 8 minMicrosoft Teams to get AI-powered, context-aware phishing detection https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-to-get-ai-powered-context-aware-phishing-detect…
- The Department of Know: PHP2Shell strikes, EU EOL still SOL, Cairn used in cyberattacks · 38 minRead the full stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Gary Chan, CISO, SSM Health, and Doug Mayer, CISO, RXSense…
- PHP vulnerabilities update, ConnectWise AI spies, Africa cybercrime takedown · 7 minRailway says intruder may have accessed customer secrets https://thehackernews.com/2026/10/railway-says-intruder-may-have-accessed.html Law enforcement disrupts nearly 11,000…
- PHP emergency patches, compromised TLS certificates, Signal hot mic bug · 7 minPHP rushes out emergency fixes for PHP2Shell https://www.bleepingcomputer.com/news/security/php-ships-emergency-patches-for-critical-php2shell-flaws/…
- Naval hack, Muse exposes secrets, Army researching offensive AI hacking · 8 minRussian-linked attacks hit naval shipbuilder https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html Muse exposes secrets when sharing chats…
- OpenCode keys exposed, AI agents raid websites, Rank Math backdoor · 8 minOpenCode breach exposes users' AI keys https://www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/ One hacker puts AI agents to…
- Cybersecurity jobs report, ConnectWise suspends cloud backup, Drupal patches flaws · 7 minCybersecurity jobs report reveals mixed bag https://www.securityweek.com/us-cybersecurity-job-postings-fall-26-as-ai-security-engineer-demand-soars/…
- The Department of Know: Hacked fridges, hiring humans to fix Mythos bugs, targeted ad spyware · 34 minSee the full stories at cisoseries.com This week's Department of Know is hosted by Rich Stroffolino, with guests Dennis Pickett, vp and CISO, RTI International, and David Cross…
- Candiru spyware infects Al Jazeera, Senators AI request, Microsoft crashes phishers · 8 minCenterPoint Energy reveals data breach numbers https://www.securitymagazine.com/articles/102658-1m-impacted-by-centerpoint-energy-data-breach Zero-Click Candiru spyware…
- FBI raids laptop farms, Meta loses GitHub data, Cisco gateways under attack · 7 minFBI shuts down North Korean laptop farms https://www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/ Meta's stolen…
- Webcams go to war, Kimsuky sends invites, Anthropic blocks copycats · 7 minWebcams get drafted into war https://www.wsj.com/tech/cybersecurity/video-cameras-webcams-hacked-war-b00b8a24?st=RRCsaw Kimsuky's invitations come with malware…
- Supermarket freezer hack, Ahold Delhaize offline, spy chip in crypto wallets · 8 minHackers turn up the heat on French supermarkets: https://www.infosecurity-magazine.com/news/french-supermarket-chains/ Ahold Delhaize offline after cyber attack…
- Anthropic restricts Claude, Google Calendar phishing, FBI hack arrest · 8 minCISA's KEV catalog grows by five https://securityaffairs.com/200734/security/u-s-cisa-adds-proftpd-onlyoffice-docs-strapi-apache-struts-and-isc-bind-flaws-to-its-known-exploited-v…
- The Department of Know: South Korean bank hacks, agents target Wikipedia, ransomware recovery fraud · 33 minRead the full stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Derek Fisher, Director of the Cyber Defense and Information…
- Top level domain theft, Yandex attacked, Cisco Nexus flaws · 8 minAttackers hijack three top level domains to obtain Google certificates https://www.infosecurity-magazine.com/news/attackers-hijack-cctlds-obtain/ Major Yandex data center in…
- Poetry-powered botnet, Flock hits a roadblock, Outlook blocks risky installers · 7 minBotnet takes orders from a poem https://cyberscoop.com/poellm-malware-botnet-poem-lumen-black-lotus-labs/ Flock's warrantless tracking hits a roadblock…
- Agents vs Wikipedia, South Korean bank hacks, ASOS breached · 8 minAgents trying to compromise Wikipedia tools https://thehackernews.com/2026/10/wikimedia-says-openai-agents-tried-to.html South Korea claims agents were used in bank hacks…
- Google pauses bug bounties, ATB faces extortion, Exchange flaw exposes mailboxes · 8 minGoogle pauses open-source bug bounties amid AI spam Ukraine's largest grocery chain hit by extortion attack Exchange flaw exposes other users' mailboxes Get the show notes here…
- Warlock continues SharePoint exploits, ShinyHunters member flips China's AI espionage · 7 minWarlock ransomware continues to exploit year-old SharePoint flaws ShinyHunters member detained in Jordan China-aligned espionage group targets American AI policy experts Get the…
- The Department of Know: ShinyHunters vs FBI, Kiteworks shutdown, and hundreds of orgs hit by rogue AI · 39 minRead all the stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Brett Conlon, CISO, American Century Investments, and Nick…
- AI readiness reports, KillSec takedown, OpenAI website scraping · 8 minReport suggests AI and quantum threat preparedness is lacking Authorities seize KillSec extortion group arrest leader Dozens more prominent websites scraped by OpenAI software…
- Gemini 4 enters the ring, MI5 flags research ties, Custom GPTs deliver malware · 7 minGemini 4 starts with cybersecurity MI5 flags Chinese research funding Custom GPTs steer users into ClickFix attacks Get the show notes here…
- Star Blizzard, Cloudflare CA, GPT-6.1 scuttled · 8 minMicrosoft details new Star Blizzard and NeedyMantis activity Cloudflare to become a public certificate authority Safety concerns scuttle GPT-6.1 Get the show notes here…
- GPT-6 Astra goes off script, ShinyHunters suspect arrested, Nvidia corrals rogue AI agents · 8 minGPT-6 Astra goes off script in attack simulations Dutch police arrest "reformed" hacker in ShinyHunters probe Nvidia builds a browser for AI agents Get the show notes here…
- New SharePoint exploit, Australian OpenAI hack developments, Kiteworks urges stoppage · 8 minAnother Microsoft SharePoint flaw now exploited Details and doubts emerge regarding OpenAI hack of Australian Health portal Kiteworks urges customers to stop using platform Get…
- The Department of Know: NCSC's AI "inconvenient truth," automated payment skimming, CISA's CVE plan · 34 minRead all the stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Dmitriy Sokolovskiy, senior vice president, information…
- OpenAI hacks Australia health, Astrana Health breached, TeamCity flaw exploited · 7 minOpenAI program hacks Australia's government health portal Astrana Health suffers data breach Ransomware gangs exploiting TeamCity flaw Get the show notes here…
- ShinyHunters peeks at FBI assignments, WordPress flaw wastes no time, Pentagon's cyber appetite grows · 7 minShinyHunters peeks at FBI assignments WordPress flaw wastes no time Pentagon's cyber appetite grows Get the show notes here…
- CAIRN framework, Muse zero-day, BigDiskBuster · 7 minCisco releases open-source CAIRN framework Muse zero-day opens the door to account takeovers Microsoft can't wake up from Nightmare Eclipse Get the show notes here…
- ShinyHunters hijacks Clop, fake LastPass kills security tools, trusted npm release carries malware · 7 minShinyHunters hijacks Clop's own leak site Fake LastPass installers kill security tools Trusted npm release carries GHAPPIER malware Huge thanks to our episode sponsor, Nudge…
- OpenAI Codex sandbox escape, President proposes AI Force, Cyber Command suicides · 8 minResearchers escape OpenAI Codex sandbox to run commands on host AI Force proposed to monitor technology Congress eyes new support for Cyber Command after recent suicide deaths…
- The Department of Know: Passkeys phished, Cisco hits root, nuclear red lines for AI · 35 minRead the full stories at CISOSeries.com. This week's Department of Know is hosted by Sarah Lane, with guests Jason Thomas, senior director of technology security, governance, and…
- Nuclear-style AI safeguards, AI legislation shelved, CISA's decoy guidance · 7 minNuclear-style safeguards proposed for AI risks Key lawmaker suggests action on AI safety legislation will wait until 2027 CISA releases cyber decoy guidance for infrastructure…
- Flock gets plucked, OpenAI agents arrived even earlier, inside China's AI spy shop · 7 minFlock gets plucked OpenAI agents arrived early China's AI spy shop Get the show notes here: https://cisoseries.com/cybersecurity-news-september-17-2026/ Huge thanks to our…
