Cybersecurity Headlines

Latest Episodes:

Week in Review: Energy sector 3CX attack, PaperCut pain continues, all-in-one infostealer Apr 28, 2023

Show notes

This week's Cyber Security Headlines – Week in Review, April 24-28, is hosted by Sean Kelly with our guest, Steve Zalewski, former CISO, Levi Strauss and co-host, Defense in Depth.

Thanks to today's episode sponsor, Tines

Ready to take security automation up a notch? With Tines, it's easier than ever! The no-code automation platform is redefining and simplifying security operations – start building mission-critical workflows and apps that streamline processes AND ensure crucial data stays safe while extending the influence of your security team throughout your organization. Visit Tines.com to find out more!

All links and the video of this episode can be found on CISO Series.com

New BellaCiao malware, PaperCut is Clop, Europe tech crackdown Apr 28, 2023

Show notes

Charming Kitten APT uses a new BellaCiao malware

Microsoft blames clop affiliate for PaperCut attacks

Big tech crackdown looms as EU, UK ready new rules

And now a word from our sponsor, Tines

Ready to take security automation up a notch? With Tines, it's easier than ever! The no-code automation platform is redefining and simplifying security operations - start building mission-critical workflows and apps that streamline processes AND ensure crucial data stays safe while extending the influence of your security team throughout your organization. Visit Tines.com to find out more!

For the stories behind the headlines, head to CISOseries.com.

Messaging malware update, China reclassifies cyberattacks, more cyberattacks don't use malware Apr 27, 2023

Show notes

Messaging app update distributes malware

China reclassifies cyberattacks

Malware-free cyberattacks on the rise

And now a word from our sponsor, Tines

Ask anyone at RSA; security teams can't operate in a silo. No SOAR solutions enable users to dynamically collect information outside their systems and use it at multiple points in an automated workflow - but Tines does! With Tines, users can exchange real-time information outside its platform and use it to drive automated workflows. Visit Tines.com/build to learn more!

US policing AI use for civil rights violations, Bill proposes security testing centers for government tech, Microsoft Edge leaking browsing data to Bing Apr 26, 2023

Show notes

US policing use of AI for civil rights violations

Bill proposes new security testing centers for critical government tech

Microsoft Edge is leaking user browsing data to Bing

And now a word from our sponsor, Tines

To proactively protect against threats, you need a culture of cybersecurity - and solutions that facilitate this. With Tines' no-code automation platform, you can: 1. Remediate threats faster. 2. Improve automation. 3. Control access to your data. 4. Create a culture of cybersecurity. Tines allows users to leverage real-time information across any stage of an automated workflow! Visit Tines.com to learn more.

For the stories behind the headlines, visit CISOseries.com.

Threat group taxonomy, disabling EDR, North Dakota's AI cyber tools Apr 25, 2023

Show notes

A call to standardize threat group naming

Threat actors using new tool to disable EDR

North Dakota turns to AI for cyber

And now a word from our sponsor, Tines

3CX hits utilities, CISA PaperCut warning, Hyena devours GPT4 Apr 24, 2023

Show notes

Energy sector orgs in US, Europe hit by same supply chain attack as 3CX

CISA adds 3 actively exploited flaws to KEV catalog, including critical PaperCut bug

Hyena code poised to devour GPT4

And now a word from our sponsor, Tines

For the stories behind the headlines, head to CISOseries.com.

"New class" of Russian attackers, GitHub helps open source security, used routers leak info Apr 23, 2023

Show notes

NCSC warns of "new class" of Russian adversaries

GitHub adds Action to help open source security

Used routers hold on to secrets

Thanks to today's episode sponsor, Pentera

This episode of Cyber Security Headlines is made possible in part by Pentera. Today over 60% of cyber attacks involve the use of exposed credentials. Now, for the first time, security teams can address this critical threat head-on. Pentera collects an organization's leaked credentials and automatically tests their exploitability across the external and internal attack surface. Pentera's customers find that leveraging the Pentera automated security validation platform as part of their exposure management strategy increases their ability to identify security gaps, improves the efficiency of remediation processes, and maximizes their security readiness. To learn more, visit Pentera.io

Week in Review: 3CX double supply chain attack, Remcos Tax-Day RAT, Surveillance kills morale Apr 21, 2023

Show notes

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, April 17-21, is hosted by Rich Stroffolino with our guest, Shawn Bowen, CISO, World Fuel Services

Thanks to our show sponsor, Pentera

All links and the video of this episode can be found on CISO Series.com

Microsoft 365 outage, Capita burglary evidence, 3CX attack update Apr 21, 2023

Show notes

Microsoft 365 outage blocks access to web apps and services

Capita has 'evidence' customer data was stolen in digital burglary

3CX supply chain attack was the result of a previous supply chain attack

Thanks to today's episode sponsor, Pentera

For the stories behind the headlines, head to CISOseries.com.

Elon Musk wants to develop TruthGPT, Southwest disrupted by 'technical issue', Officials warn of hackers targeting Cisco routers Apr 19, 2023

Show notes

Elon Musk wants to develop TruthGPT