Cybersecurity Headlines

View Top 200 Chart

Back to Rankings Page

News
**Cybersecurity Headlines**

Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.

Latest Episodes:

Uyghur software malware, DDoS jumps, 4chan back Apr 29, 2025

Show notes

Uyghur Language Software Hijacked to Deliver Malware

Cloudflare sees a big jump in DDoS attacks

4chan back online

Thanks to today's episode sponsor, ThreatLocker

ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com/CISO.

SAP zero-day active, another OAuth exploit, cybersecurity CEO arrested Apr 28, 2025

Show notes

SAP zero-day vulnerability under widespread active exploitation

Hackers abuse OAuth 2.0 workflows to hijack Microsoft 365 accounts

Cybersecurity firm CEO charged with installing malware on hospital systems

Thanks to today's episode sponsor, ThreatLocker

Find the stories behind the headlines at CISOseries.com.

Week in Review: Secure by Design departure, Microsoft's security report, LLMs outrace vulnerabilities Apr 25, 2025

Show notes

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Bethany De Lude, CISO emeritus, The Carlyle Group

Thanks to our show sponsor, Dropzone AI

Alert investigation is eating up your security team's day—30 to 40 minutes per alert adds up fast. Dropzone AI's SOC Analyst transforms this reality by investigating every alert with expert-level thoroughness at machine speed. Our AI SOC Analyst gathers evidence, connects the dots across your security tools, and delivers clear reports with recommended actions—all in minutes. No playbooks to build, no code to write. Just consistent, high-quality investigations that free your team to focus on what matters: stopping actual threats. Meet us at RSA Booth ESE-60.

All links and the video of this episode can be found on CISO Series.com

Russian army map malware, edge tech attack report, Commvault flaw Apr 25, 2025

Show notes

Russian army targeted by Android malware hidden in mapping app

Attackers hit security device defects hard in 2024

Critical Commvault Command Center flaw warning

Huge thanks to our sponsor, Dropzone AI

Find the stories behind the headlines at CISOseries.com.

Blue Shield of California shared private data,FBI IC3 report, Ex-Army sergeant jailed Apr 24, 2025

Show notes

Blue Shield of California shared private health data of millions with Google

The FBI issues its 2024 IC3 report

Ex-Army sergeant jailed for selling military secrets

Huge thanks to our sponsor, Dropzone AI

Security analysts need practical experience to build investigation skills, but getting expert guidance for every alert is impossible. That's why Dropzone AI created COACH—a free Chrome extension that serves as an AI security mentor for SOC analysts at any level. COACH reads alerts across all major security platforms, explains their context, provides alternative hypotheses, and guides analysts through industry-standard investigation methodologies. Unlike our AI SOC Analyst product, COACH doesn't do the work for you—it teaches you how to think through investigations yourself. It supplements human mentoring with always-available guidance that respects your data with zero retention. Develop your security team's skills at Dropzone.ai/coach.

For the stories behind the headlines, head to CISOseries.com.

Microsoft Recall updates, Russian orgs deal with networking software updates, SSL.com certificate issuance vulnerability Apr 23, 2025

Show notes

Microsoft Recall on Copilot+ PC: testing the security and privacy implications

Russian organizations targeted by backdoor masquerading as secure networking software updates

SSL.com Scrambles to Patch Certificate Issuance Vulnerability

Huge thanks to our sponsor, Dropzone AI

Is your security team spending too much time chasing alerts instead of stopping threats? Dropzone AI modernizes your security operations by handling the routine investigations that consume your team's day. Our AI SOC Analyst works with your existing security tools, learns your environment, and delivers clear, actionable reports within minutes. Your human analysts can finally focus on the most critical threats. Organizations using our AI SOC Analyst handle significantly more alerts without growing their team. See how at RSA at booth ESE-60.

Google OAuth abused, Japan's trading scams, hijacking with Zoom Apr 22, 2025

Show notes

Google OAuth abused in DKIM replay attack

Japan warns of sharp rise in unauthorized trading

North Koreans hijacking Zoom's Remote Control

Huge thanks to our sponsor, Dropzone AI

Security threats don't clock out at 5 PM, but your analysts need to sleep sometime. Dropzone AI delivers around-the-clock alert investigations with the same attention to detail at midnight as at noon. Our AI SOC Analyst ensures no more morning backlogs and no more off-hours blind spots. Just reliable, continuous protection that ensures every alert gets the attention it deserves, regardless of when it arrives. See how SOC teams are achieving true 24/7 coverage with our AI SOC Analyst without the staffing challenges at Dropzone.ai.

Microsoft Entra lockouts, wine tasting malware, job scam solution Apr 21, 2025

Show notes

Widespread Microsoft Entra lockouts cause by new security feature rollout

Malware delivered through diplomatic wine-tasting invites

British companies told to hold in-person interviews to thwart North Korea job scammers

Huge thanks to our sponsor, Dropzone AI

Growing your MSSP client roster while your alerts are multiplying? Dropzone AI works alongside your team, investigating alerts just like your best human analysts would. Our AI SOC Analyst cuts investigation time from an hour to minutes while handling five times more alerts per analyst. Unlike complex SOAR solutions, Dropzone deploys quickly and adapts to your environment without the need for playbooks or coding. Eliminate backlogs, reduce false positives, and deliver the detailed investigations your clients expect. Ready to scale your MSSP without scaling your team? Meet us at booth ESE-60 at RSA.

Find the stories behind the headlines at CISOseries.com.

Week in Review: CISA workforce cuts, AI slopsquatting risk, CVE funding saga Apr 18, 2025

Show notes

Link to episode page

This week's Cyber Security Headlines – Week in Review is hosted by David Spark with guest Trina Ford, CISO, iHeartMedia

Thanks to our show sponsor, Vanta

Do you know the status of your compliance controls right now? Like…right now? We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta. Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting, and helps you get security questionnaires done 5 times faster with AI. Now that's…a new way to GRC. Get started at Vanta.com/headlines.

All links and the video of this episode can be found on CISO Series.com

Cyberthreat sharing law renewal, APTs love ClickFix, GoDaddy mutes Zoom Apr 18, 2025

Show notes

Bipartisan push for renewal of cyberthreat information sharing law

ClickFix becoming a favorite amongst state-sponsored hackers

GoDaddy puts Zoom on mute for about 90 minutes

Thanks to this week's episode sponsor, Vanta

Do you know the status of your compliance controls right now? Like...right now?

We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta.

Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting,

And helps you get security questionnaires done 5 times faster with AI.

Now that's…a new way to GRC. Get started at Vanta.com/headlines.

Find the stories behind the headlines at CISOseries.com

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected