Cybersecurity Headlines

Latest Episodes:

Week in Review: Hiring slows, new infrastructure woes, Tik Tok grows Jul 22, 2022

Show notes

This week's Cyber Security Headlines – Week in Review, June 6-10, is hosted by Rich Stroffolino with our guest, Renee Guttmann, Former CISO, Campbell Soup, Coca Cola, Time Warner

Thanks to this week's sponsor, 6clicks

6clicks is your AI-powered GRC platform, featuring a fully-integrated content library. 6clicks provides organizations with a powerful GRC platform to build highly scalable risk and compliance functions and advisors with the tools to streamline and scale their services, saving everyone enormous time and money. Reimagine risk. Improve cybersecurity. Demonstrate compliance. For more information visit 6clicks.com/cisoseries.

All links and the video of this episode can be found on CISO Series.com

Microsoft Teams outage, heatwave melts Oracle, hiring cyber mercenaries Jul 22, 2022

Show notes

Microsoft Teams outage also takes down Microsoft 365 services

Heatwave forced Google and Oracle to shut down in London

Hackers for hire: adversaries employ "cyber mercenaries"

Thanks to today's episode sponsor, 6clicks

Experience the magic of Hailey, the 6clicks artificial intelligence engine for risk and compliance. With Hailey, organizations can automatically show cross-compliance between regulations or identify gaps to external compliance requirements in their policies. Eliminate manual and costly risk and compliance processes by joining the hundreds of businesses that trust 6clicks. For more information visit 6clicks.com/cisoseries.

For the stories behind the headlines, head to CISOseries.com.

Microsoft security job cuts, Neopet data leak, Russia malware trickery Jul 21, 2022

Show notes

Microsoft cuts security jobs amidst weakening economy

Is your cute little Neopet leaking your personal data?

Russia disguises malware as Ukrainian app for hacking Russia

Thanks to today's episode sponsor, 6clicks

The 6clicks GRC solution comes with a fully integrated content library full of hundreds of standards, assessment templates, libraries, playbooks, and more. With the content library included in every 6clicks license, organizations can get started on their GRC implementation faster than ever before. For more information visit 6clicks.com/content.

For the stories behind the headlines, head over to CISOseries.com

Leaky GPS Trackers, Russian Malware Spoof Pro-Ukraine App, MacOS Backdoor to the Cloud Jul 20, 2022

Show notes

Car GPS tracker exposes location data

Russian malware groups spoof pro-Ukraine apps

MacOS backdoor speaks to the cloud

Thanks to today's episode sponsor, 6clicks

Your GRC solution is only as valuable as the reports it can generate. Provide an exceptional analytics experience for all your GRC stakeholders with the 6clicks reporting suite. Unlock powerful insights and prove compliance using dashboards and charts, pixel perfect reporting, presentations, and data storytelling via LiveDocs. For more information visit 6clicks.com/analytics/overview.

Cyberattack hits Albania, Speculative execution not patched, DARPA studies open-source Jul 19, 2022

Show notes

Albania hit with cyberattack

Vendors not patching for speculative execution

DARPA looks into open-source

Thanks to today's episode sponsor, 6clicks

6clicks has pioneered a unique Hub & Spoke architecture to underpin its AI-powered GRC solution and cater to markets requiring scalable, multi-tenanted GRC. This model enables organizations to deploy multiple, autonomous GRC entities connected to a single hub for roll-up reporting, management, and visibility. For more information visit 6clicks.com/lp-enterprise-hub-spoke.

Towns paying for remote workers, CISA orders agency patch, PLC software delivers Sality Jul 18, 2022

Show notes

Dozens of cities and towns are paying tech workers to abandon Silicon Valley

CISA orders agencies to patch new Windows zero-day used in attacks

Password recovery tool infects industrial systems with Sality malware

Thanks to today's episode sponsor, 6clicks

The 6clicks AI-powered GRC platform with an integrated content library is the most intelligent way to get ISO 27001 certified. It allows you to automate audits, manage risks, track assets, and report in real-time. Join hundreds of businesses that trust 6clicks and start your ISO 27001 journey today. For more information visit 6clicks.com/lp-iso-27001.

For the stories behind the headlines, head to CISOseries.com.

Week in Review: Microsoft phishing warning, Callback phishing scams, Log4J forever Jul 15, 2022

Show notes

Link to Blog Post

This week's Cyber Security Headlines – Week in Review, June 6-10, is hosted by Rich Stroffolino with our guest, Carla Sweeney, VP Information Security Red Ventures

Thanks to our episode sponsor, Edgescan

Edgescan simplifies Vulnerability Management by delivering a single full-stack solution (SaaS) integrated with world-class security professionals. Instead of managing a plethora of point scanning tools for each layer of the attack surface and squandering precious staff resources manually removing false positives, Edgescan offers automated and accurate contextualized alerts across the entire attack surface into a single source of truth.

All links and the video of this episode can be found on CISO Series.com

C.I.A. Vault 7 engineer convicted, Hackers targeted Jan6 journalists, Twitter's brief outage Jul 15, 2022

Show notes

Ex-C.I.A. engineer convicted in biggest theft ever of Agency secrets

Chinese hackers targeted U.S. political reporters just ahead of January 6 attack, researchers say

Twitter outage briefly hits thousands

Thanks to today's episode sponsor, Edgescan

For the stories behind the headlines, head to CISOseries.com.

Massive phishing operation, Android malware gets millions of millions, Spectre-like x86 attack Jul 14, 2022

Show notes

Microsoft warns of massive phishing operation

Android malware downloaded over 3 million times

More speculative-execution attacks found for x86

Thanks to today's episode sponsor, Edgescan

Scalable automated and continuous Attack Surface Management (ASM) and vulnerability detection integrated with a world-class cyber security team provide 100% false-positive-free alerts and expert remediation guidance.

FTC anonymization crackdown, TikTok privacy change, gov't contractor pays $9 million Jul 13, 2022

Show notes

FTC is cracking down on false claims of anonymizing data

TikTok halts privacy policy change in Europe

Government contractor pays $9 million over whistleblower allegations

Thanks to today's episode sponsor, Edgescan

Edgescan combines full-stack coverage with integrated reporting and business-level prioritization to deliver a single source of truth for your entire vulnerability management program with zero false positives.

For the stories behind the headlines, head to CISOseries.com

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected