Cybersecurity Headlines

Latest Episodes:

Week in Review: Antivirus data wipers, TSA expands facial recognition, Uber breach Dec 16, 2022

Show notes

This week's Cyber Security Headlines – Week in Review, December 12-16, is hosted by Rich Stroffolino with our guest, Jeremy Embalabala, CISO, HUB International

Thanks to our show sponsor, Fortra

The cybersecurity landscape is full of single-solution providers, making it easy for unexpected cyberthreats to sneak through the cracks. That's why Fortra is creating a stronger, simpler strategy for protection. One that increases your security maturity while decreasing the operational burden that comes with it. Fortra's integrated, scalable solutions help customers face their toughest challenges with confidence. Learn more at Fortra.com

All links and the video of this episode can be found on CISO Series.com

Japanese MirrorStealer malware, HTML smuggling SVGs, DDoS-for-hire arrests Dec 16, 2022

Show notes

Hackers target Japanese politicians with new MirrorStealer malware

Crooks use HTML smuggling to spread QBot malware via SVG files

FBI charges 6, seizes domains linked to DDoS-for-hire service platforms

Thanks to this week's episode sponsor, Fortra

For the stories behind the headlines, head to CISOseries.com.

EU drafts new US-data sharing agreement, Microsoft signed malicious drivers, InfraGard data leak Dec 15, 2022

Show notes

EU gets closer to US-data sharing agreement

Microsoft signed malicious drivers

InfraGard data for sale on dark web

Thanks to this week's episode sponsor, Fortra

Twitter data leak, Uber hit with another breach, Chinese police arrest crypto laundering gang Dec 14, 2022

Show notes

Twitter addresses claims of recent data leak

Uber hit with another breach after attack on third-party vendor

Police in China arrest gang who laundered $1.7 billion via crypto

Thanks to this week's episode sponsor, Fortra

For the stories behind the headlines, visit CISOseries.com

India leaks expat passport info, Cloudflare expands free security tools, Greece outlaws spyware Dec 13, 2022

Show notes

India's foreign ministry leaks passport details

Cloudflare Zero Trust suite available to at-risk groups

Greece outlaws spyware

Thanks to this week's episode sponsor, Fortra

Pwn2Own Toronto winners, EDR data wipers, MuddyWater's new campaign Dec 12, 2022

Show notes

Pwn2Own Toronto 2022 nets almost $1M for 63 zero days

Antivirus and EDR solutions tricked into acting as data wipers

Iran-linked MuddyWater APT launches new campaign

Thanks to this week's episode sponsor, Fortra

For the stories behind the headlines, head to CISOseries.com.

Week in Review: DHS reviews Lapsus$, AI generated malware, unsupported applications warning Dec 09, 2022

Show notes

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, December 5-9, is hosted by Rich Stroffolino with our guest, Ken Athanasiou, CISO, VF Corporation

Thanks to our show sponsor, PlexTrac

The best pentesting teams trust PlexTrac. PlexTrac can improve efficiency and effectiveness at every phase of your proactive assessments. By centralizing the data from all your automation tools, cataloging important reusable content for easy access, and promoting communication and visibility at every phase of an assessment, PlexTrac cuts reporting time in half and adds value between reports. Check out PlexTrac.com/CISOSeries to learn why PlexTrac is the premier pentest reporting and collaboration platform.

All links and the video of this episode can be found on CISO Series.com

APT37 exploits zero-day, Firewalls bypassed generically, Zombinder's Android malware Dec 09, 2022

Show notes

North Korea-linked APT37 exploits Internet Explorer zero-day flaw

Firewalls of several major vendors bypassed with generic attack method

New 'Zombinder' platform binds Android malware with legitimate apps

Thanks to today's episode sponsor, PlexTrac

Check out PlexTrac.com/CISOSeries to learn why PlexTrac is the premier pentest reporting and collaboration platform.

For the stories behind the headlines, head to CISOseries.com.

Pentagon cloud deal, Apple now encrypts iCloud backups, CloudSEK hacked by cybersecurity firm? Dec 08, 2022

Show notes

Pentagon awards cloud deal to four major providers

Apple finally adds encryption to iCloud backups

CloudSEK claims it was hacked by another cybersecurity firm

Thanks to today's episode sponsor, PlexTrac

The Plextrac platform is your offensive security team's secret weapon. Build better reports in half the time, centralize your data, maximize your reusable content, and become more efficient and effective. PlexTrac clients report a "5X ROI in 1 year," a "30% increase in efficiency," have "cut their reporting cycle by 65%," and experienced a "18 to 22% time savings per engagement." Check out PlexTrac.com/CISOSeries to learn how PlexTrac can help your team deliver results.

For the stories behind the headlines, visit CISOseries.com

AI generated malware, Rackspace confirms ransomware, Meta Oversight Board rules on cross-check Dec 07, 2022

Show notes

Are we in the age of AI generated malware

Rackspace confirms ransomware attack

Meta Oversight Board rules on cross-check system

Thanks to today's episode sponsor, PlexTrac