Cybersecurity Headlines

Latest Episodes:

Week in Review: Okta breach expands, Former Uber CISO speaks, OpenAI's chatbot leak secrets Dec 01, 2023

Show notes

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Christina Shannon, CIO, KIK Consumer Products

Thanks to our show sponsor, SpyCloud

SpyCloud disrupts cybercrime by telling you what criminals know about your business and your customers, so you can take action on exposed authentication data to prevent ransomware, session hijacking, account takeover, and online fraud.

With knowledge of the specific data criminals have in hand – like credentials, cookies, and PII compromised by breaches and malware infections – security teams have better visibility into the expanding attack surface that puts their organization at risk of cyberattacks and can respond quickly with SpyCloud's automated solutions.

Find out what cybercriminals know about your business by visiting spycloud.com/ciso to get your free exposure report. That's spycloud.com/ciso.

All links and the video of this episode can be found on CISO Series.com

Manufacturing tops extortion, RETVec battles spam, new Zyxel warnings Dec 01, 2023

Show notes

Manufacturing industry tops cyber extortion trend

Google's RETVec the latest warrior on bad emails

Zyxel warns of vulnerabilities in NAS devices

Huge thanks to our sponsor, SpyCloud

New research from SpyCloud reveals a critical discovery: nearly a third of ransomware victim companies this year were infected with infostealer malware like Raccoon, Vidar or Redline before they were attacked. These infostealers exfiltrate authentication data from infected systems to aid follow-on attacks – everything from passwords to 2FA codes, and even cookies that enable session hijacking without the need for credentials at all. SpyCloud specializes in recapturing and remediating data siphoned from infostealers to protect businesses and their users from cybercrime. Get SpyCloud's new research and check your malware exposure at spycloud.com/ciso.

For the stories behind the headlines, head to CISOseries.com.

Okta breach expands, JAXA cyberattack, leaky GPTs Nov 30, 2023

Show notes

All Okta customers exposed in breach

JAXA hit by cyberattack

OpenAI's chatbots leak secrets

Huge thanks to our sponsor, SpyCloud

For some people ignorance is bliss – but that's not an option for those of us in cybersecurity. SpyCloud has a free tool that lets you check your company's darknet exposure, and you might find some things that are pretty alarming. Go to spycloud.com/ciso to see your company's exposure from data breaches and even infostealer malware infections that can open the door to ransomware. SpyCloud's focus is helping businesses act on what criminals are using right now to target them – addressing stolen passwords, cookies, and even API keys automatically to stop criminals in their tracks. To learn more and get your darknet exposure report, go to spycloud.com/ciso.

Ransomware gang busted in Ukraine, North Texas water utility cyberattack, Former Uber CISO breaks 6-year silence Nov 29, 2023

Show notes

Ransomware gang busted in Ukraine by international operation

North Texas water utility hit with cyberattack

Former Uber CISO speaks out after 6-year silence

Huge thanks to our sponsor, SpyCloud

SpyCloud has discovered that infostealer malware infections are an early warning signal for ransomware. In fact, nearly a third of ransomware victim companies this year were infected with infostealer malware like Raccoon, Vidar or Redline before they were attacked. Are you thinking about infostealers as a precursor to ransomware? SpyCloud believes that knowing what criminals have stolen from your managed, unmanaged and undermanaged infected machines is step one to stopping ransomware attacks. Get SpyCloud's new research on this topic and check your company's exposure from malware infections at spycloud.com/ciso.

For the stories behind the headlines, visit CISOseries.com.

International AI agreement, water utility attack, Ukraine cyberattack on Russian aviation Nov 28, 2023

Show notes

International AI agreement

PA water utility hit by cyberattack

Ukraine claims cyber attack against Russian aviation

Huge thanks to our sponsor, SpyCloud

Our sponsor today, SpyCloud, wants us to pay attention to a ransomware precursor that's not being talked about enough: infostealer malware. If you think you're covered by endpoint protection and anti-virus solutions, think again. The SpyCloud team discovered that the presence of infostealers including Racoon, Vidar, and Redline on machines accessing work applications may indicate a likely future ransomware attack. They believe the first step in thwarting ransomware lies in knowing the data criminals have stolen from malware-infected systems and remediating it quickly. Get SpyCloud's new research and check your malware exposure at spycloud.com/ciso.

London & Zurich, Fidelity National Financial attacks, Royal Family's hospital, Vanderbilt University Med Center attacks, US Nuclear lab and Gulf Air breaches Nov 27, 2023

Show notes

London & Zurich, and Fidelity National Financial attacks

Royal Family's hospital and Vanderbilt University Med Center suffer cybersecurity incidents

Gulf Air exposed to data breach

Huge thanks to our sponsor, SpyCloud

Cyber exec hacked hospital, 'Citrix Bleed' vuln targeted, Binance CEO steps down in $4 billion settlement Nov 22, 2023

Show notes

Cyber exec admits hacking hospital as a sales tactic

'Citrix Bleed' vulnerability targeted by nation-state hackers

Binance CEO steps down in $4 billion settlement

Thanks to today's episode sponsor, Egress

People are the biggest risk to your organizations' security and they are most vulnerable when using email. Egress is the only cloud email security platform to use an adaptive security architecture to automate threat detection and response for advanced phishing attacks and outbound data breaches, tailoring the experience for each user based on their real-time risk score. Visit egress.com to learn more about Egress' Intelligent Cloud Email Security suite and start detecting email threats your existing solution is missing today.

For the stories behind the headlines, visit CISOseries.com.

Healthcare hit with MOVEit, malware uses trig, OpenAI shakeup Nov 21, 2023

Show notes

Healthcare platform impacted by MOVEit

Threat actors find a use for trigonometry

What's happening with OpenAI

Thanks to today's episode sponsor, Egress

Clorox CISO departure, BlackCat's SEC complaint, Dudley interim NCD Nov 20, 2023

Show notes

Clorox CISO departs months after cyberattack

ALPHV/BlackCat Ransomware gang files SEC complaint

Drenan Dudley acting national cyber director while Coker confirmation process continues

Thanks to today's episode sponsor, Egress

For the stories behind the headlines, head to CISOseries.com

Week in Review: UK Health data shared, SSH keys vulnerable Nov 17, 2023

Show notes

Link to blog post

This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Jay Wilson, CISO, Insurity

Thanks to our show sponsor, Sysdig

For businesses innovating in the cloud, every second counts. Sysdig strengthens cyber resilience by reducing the attack surface, detecting threats in real time, and accelerating incident response. Our platform correlates signals across cloud workloads, identities, and services to enable businesses to prioritize risks and act decisively. Sysdig. Secure every second. Learn more at Sysdig.com

All links and the video of this episode can be found on CISO Series.com