Cybersecurity Headlines

Latest Episodes:

The Department of Know: Google's CodeMender, CISA's big leak, Torvalds open-source warning May 29, 2026

Show notes

This week's Department of Know is hosted by Rich Stroffolino, with guests Bruce Schneier, chief of security architecture, Inrupt, and Chris Ray, field CTO, GigaOm.

Missed the live show? Check it out on YouTube.

Huge thanks to our sponsor, Guardsquare

Mobile security incidents are no longer the exception—they are the norm. Last year, seventy-two percent of companies suffered a mobile app security incident. As the primary gateway to your APIs and data, your mobile app requires more than just basic encryption; it needs a multi-layered security strategy. Protect your brand and your bottom line with layered mobile app protection. Learn more at Guardsquare.com.

World Cup fraud, US military location targets, IBM and Red Hat go Project Lightwell May 29, 2026

Show notes

Fraud gang steals from World Cup fans

Pentagon says US military targeted by location

IBM and Red Hat commit to "Project Lightwell"

Check out your show notes here: https://cisoseries.com/cybersecurity-news-world-cup-fraud-us-military-location-targets-ibm-and-red-hat-go-project-lightwell/

Huge thanks to our sponsor, Guardsquare

Attackers are treating your mobile app like an open book. Sixty-three percent of security leaders recently detected app tampering, cloning, or unauthorized modifications. When your code runs in an untrusted environment, you need runtime self-protection and code hardening to keep attackers out. Address tampering before it starts. Learn more at Guardsquare.com.

Glassworm botnet shattered, China overhauls surveillance, Charter confirms ShinyHunters breach May 28, 2026

Show notes

Glassworm botnet gets shattered

China overhauls world's biggest surveillance network

Charter confirms ShinyHunters data breach

Check out your show notes here: https://cisoseries.com/cybersecurity-news-glassworm-botnet-shattered-china-overhauls-surveillance-charter-confirms-shinyhunters-breach/

Huge thanks to our sponsor, Guardsquare

AI is speeding up development, but at what cost? While ninety-six percent of teams now use AI tools, eighty-one percent report that AI-generated code has introduced new vulnerabilities into their mobile apps. In a world with automated threats, you need multi-layered, polymorphic security to stay ahead of the curve. Learn more at Guardsquare.com.

Nimbus Manticore, real-time credential harvesting, the 12-hour patch May 27, 2026

Show notes

Nimbus Manticore learning new tricks

Phishing moves to real-time credential harvesting

India wants 12-hour patches

Check out your show notes here: https://cisoseries.com/cybersecurity-news-nimbus-manticore-real-time-credential-harvesting-12-hour-patches/

Huge thanks to our sponsor, Guardsquare

Is your mobile app truly protected? Relying on the OS isn't enough. A global study of thirteen-hundred security and developer leaders found that ninety-six percent of teams using layered protection reported significantly fewer security incidents. Don't wait for a breach to harden your defenses. Get the protection needed for modern secuirty risks. Learn more at Guardsquare.com.

Megalodon infects GitHub repositories, Netherlands seizes 800 servers, Ghost CMS exploited for ClickFix attacks May 26, 2026

Show notes

'Megalodon' infects GitHub repositories

Netherlands seizes 800 servers over cyberattacks

Ghost CMS exploited for ClickFix attacks

Check out your show notes here: https://cisoseries.com/cybersecurity-news-megalodon-infects-github-netherlands-server-seize-ghost-cms-exploited-for-clickfix/

Huge thanks to our sponsor, Guardsquare

Your backend is only as secure as your frontend. Research shows that client-side compromise is now a primary driver of API risk. With sixty-three percent of leaders detecting mobile app tampering or cloning last year, don't leave your mobile app security to chance. Get multilayered protection for your entire mobile app ecosystem from the outside in. Learn more at Guardsquare.com.

Drupal KEV addition, Underminr revives domain fronting, Canadian KimWolf arrest May 25, 2026

Show notes

CISA adds Drupal Core flaw to KEV

Underminr hides malicious connections behind trusted domains

Canadian man charged with running KimWolf DDoS botnet

Check out your show notes here: https://cisoseries.com/cybersecurity-news-drupal-kev-addition-underminr-revives-domain-fronting-canadian-kimwolf-arrest/

Huge thanks to our sponsor, Guardsquare

Mobile app security isn't just a tech issue; it's a revenue issue. A recent global study found that seventy-two percent of organizations experienced a mobile app security incident last year. Even worse? Sixty-five percent saw customer churn or uninstalls as a result. Protect your brand and your bottom line with layered mobile app protection. Learn more at Guardsquare.com.

The Department of Know: Google's CodeMender, CISA's big leak, Torvalds open-source warning May 22, 2026

Show notes

This week's Department of Know is hosted by Rich Stroffolino, with guests Kathleen Mullin, former CISO, MyCareGorithm, and Nick Espinosa, host, Deep Dive Radio Show.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

Huge thanks to our sponsor, ThreatLocker

ThreatLocker is extending Zero Trust beyond endpoint control. With their recent release of Zero Trust Network Access and Zero Trust Cloud Access, access isn't based on credentials alone, it requires the right user, the right device, and the right conditions. Because as we've seen in recent large-scale CRM breaches, stolen credentials and misconfigurations can expose massive amounts of data. With ThreatLocker, nothing is exposed, and access is limited to exactly what's needed. Learn more and start your free trial today at ThreatLocker.com/CISO.

Cisco's 10.0 vulnerability, Microsoft email spammed, Chrome vulnerability surge May 22, 2026

Show notes

Cisco issues 10.0 Secure Workload admin flaw warning

Spammers abuse internal Microsoftonline account

Google's surge in Chrome vulnerability announcements

Get the show notes here: https://cisoseries.com/cybersecurity-news-ciscos-10-0-vulnerability-microsoft-email-spammed-chrome-vulnerability-surge/

Thanks to our episode sponsor, ThreatLocker

ThreatLocker is extending Zero Trust beyond endpoint control. With their recent release of Zero Trust Network Access and Zero Trust Cloud Access, access isn't based on credentials alone, it requires the right user, the right device, and the right conditions. Because as we've seen in recent large-scale CRM breaches, stolen credentials and misconfigurations can expose massive amounts of data. With ThreatLocker, nothing is exposed, and access is limited to exactly what's needed. Learn more and start your free trial today at ThreatLocker.com/CISO.

GitHub VS Code extension breach, Shai-Hulud npm package compromise, Huawei/Luxembourg telecom link May 21, 2026

Show notes

GitHub breach via VS Code extension

Shai-Hulud wave compromises 600 npm packages

Huawei attack behind Luxembourg telecom crash

Get the show notes here: https://cisoseries.com/cybersecurity-news-github-vs-code-extension-breach-shai-hulud-npm-package-compromise-huawei-luxembourg-telecom-link/

Thanks to our episode sponsor, ThreatLocker