Cybersecurity Headlines

Latest Episodes:

Week in Review - April 19-23, 2021 Apr 22, 2021

Show notes

This week's Cyber Security Headlines - Week in Review, April 19-23, 2021, is hosted by Steve Prentice (@stevenprentice) with our guest, George Finney, CISO, Southern Methodist University

Thanks to our episode sponsor, Palo Alto Networks

All links and the video of this episode can be found on CISO Series.com

April 22, 2021 Apr 22, 2021

Show notes

EU weighs regulations on "high-risk" AI

DOJ forms ransomware task force

Facebook disrupts two state-sponsored hacking groups

Thanks to our episode sponsor, Palo Alto Networks

Ralph Waldo Emerson famously wrote that "It's not the destination, it's the journey." For your cloud security journey, you need a reliable partner. On April 27th, Prisma Cloud by Palo Alto Networks will be hosting Spectrum, a virtual event with sessions to help you create a comprehensive cloud security strategy. Learn more at go.paloaltonetworks.com/spectrum

April 21, 2021 Apr 21, 2021

Show notes

Hundreds of networks reportedly hacked in Codecov supply-chain attack

Remote code execution vulnerabilities uncovered in smart air fryer

Biden administration unveils plan to defend electric sector from cyberattacks

Thanks to our episode sponsor, Palo Alto Networks

In Latin, the word "spectrum" means "image". Spectrum also happens to be a cloud security event that's all about container images…and CI/CD pipeline security, cloud transformation strategies, and much more. Join Prisma Cloud by Palo Alto Networks on April 27 for a virtual event covering all things cloud security. Learn more at go.paloaltonetworks.com/spectrum

For the stories behind the headlines, head to CISOseries.com.

April 20, 2021 Apr 20, 2021

Show notes

Security conferences set for in-person return

Apple approves Parler's return to the App Store

Geico exposed driver's license numbers for months

Thanks to our episode sponsor, Palo Alto Networks

In 1666, Sir Isaac Newton famously used a prism to disperse white light into colors. Today, cloud security professionals use Prisma Cloud from Palo Alto Networks to disperse full lifecycle security and full stack protection across their multi- and hybrid-cloud environments. We think Sir Isaac would approve. Learn more about Prisma Cloud at paltoaltonetworks.com/Prisma

April 19, 2021 Apr 19, 2021

Show notes

Codecov discloses 2.5-month-long supply chain attack

BazarLoader malware aims at Slack and BaseCamp users

Windows 10 update causing DNS and shared folder issues

Thanks to our episode sponsor, Palo Alto Networks

For the stories behind the headlines, head to CISOseries.com.

April 16, 2021 Apr 16, 2021

Show notes

US pins SolarWinds attack on Cozy Bear, boots 10 Russian diplomats

Second Google Chromium zero-day released on Twitter this week

Google rolls out Chrome 90 with HTTPS by default

Thanks to our episode sponsor, Sonatype

With security concerns around software supply chains ushered to center stage in recent months, organizations around the world are turning to Sonatype as trusted advisors. The company's Nexus platform offers the only full-spectrum control of the cloud-native software development lifecycle including third-party open source code, first-party source code, infrastructure as code, and containerized code.

Week in Review - April 12-16, 2021 Apr 15, 2021

Show notes

Link to Blog Post

https://cisoseries.com/cyber-security-headlines-week-in-review-april-12-16-2021

This week's Cyber Security Headlines - Week in Review, April 12-16, 2021, is hosted by Steve Prentice (@stevenprentice) with our guest, Davi Ottenheimer, vp, trust and digital ethics, Inrupt.

Thanks to our episode sponsor, Sonatype

All links and the video of this episode can be found on CISO Series.com

April 15, 2021 Apr 15, 2021

Show notes

FBI patches Exchange server backdoors

IcedID looks to fill the Emotet malware void

Draft plan to improve US power grid security

Thanks to our episode sponsor, Sonatype

Ask any software developer, and they'll tell you the truth about two things: 1. Conventional code analysis and appsec tools are noisy and not well integrated into the dev workflow. 2: Tools that don't actually make life easier for them just add friction and are ignored. Rather than slowing devs down with process-heavy security gates or circuitous quality alerts, Sonatype believes developers are better served by gentle, timely, and effective nudges that actually help them improve the quality, and security of the applications they are building.