HomePodcastCybersecurity Headlines

Cybersecurity Headlines

CYBER SECURITY HEADLINES

The Department of Know: Mythos Mayhem, critical infrastructure targeted, NVD changes

This week’s Department of Know is hosted by Rich Stroffolino, with guests Andrew Storms, security engineering, Kilo Code, and Eduardo Ortiz-Romeu, VP, global head...

Cybersecurity News: Cisco Webex warning, Splunk’s Enterprise fix, Git spoof tricks Claude

In today’s cybersecurity news… Cisco posts urgent Webex Services warning Cisco has “released security updates to patch four critical vulnerabilities, including a fixed improper certificate validation...

Cybersecurity News: OpenAI’s GPT-5.4-Cyber, McGraw Hill blames Salesforce for breach, signed adware disables antivirus

In today’s cybersecurity news… OpenAI rolls out GPT-5.4-Cyber OpenAI is rolling out GPT-5.4-Cyber to a limited group of trusted users to help identify software vulnerabilities, expanding...

Cybersecurity News: Ransomware drama, faked Ledger app, Treasury wants Mythos

Placeholder In today’s cybersecurity news… Ransomware rivals turn on each other A ransomware group listing a company on their leak site is a distressingly commonplace occurrence. Listing...

Cybersecurity News: Claude Mythos Preview’s capabilities, Anodot breached companies face extortion, wolfSSL flaw enables forged certificates

In today’s cybersecurity news… Claude Mythos Preview’s cyber capabilities The AI Security Institute reports that Claude Mythos Preview shows a significant jump in cyber capabilities, successfully...

Cybersecurity News: Adobe patches zero-day, Marimo flaw exploited, Venice flood threat

In today’s cybersecurity news… Adobe patches months-old Reader zero-day Following up on a story we covered on Friday, “Adobe on Saturday released emergency patches for a...

Cybersecurity News: Android API exposure, Acrobat Reader zero-day, Bitcoin Depot cyberattack

In today’s cybersecurity news… Google API keys in Android apps expose Gemini endpoints Researchers from Truffle Security are warning that API keys for public services such...

Cybersecurity News: ChipSoft popped, APT28 updates, CIA cyber espionage elevation

In today’s cybersecurity news… Ransomware knocks Dutch healthcare vendor offline The attack impacted the Dutch software vendor ChipSoft, which provides patient record software to 80% of...

Cybersecurity News: Anthropic’s Project Glasswing, CISA funding in doubt, routers hijacked for passwords

In today’s cybersecurity news… Anthropic announces Project Glasswing Anthropic says its unreleased AI model, Claude Mythos Preview, is powerful enough to autonomously discover and even exploit...

Cybersecurity News: Drift blames exploit on North Korea, GitHub attacks target South Korea, Die Linke breach threatens data leak

In today’s cybersecurity news… Drift says exploit was North Korean intelligence operation A North Korean state-linked group apparently spent about six months infiltrating Drift Protocol by...

The Department of Know: Axios malware, TeamPCP campaign, New Storm infostealer

This week’s Department of Know is hosted by Sarah Lane, with guests Jack Kufahl, CISO, Michigan Medicine, and Adam Palmer, CISO, First Hawaiian Bank. Missed...

Cybersecurity News: Malicious npm packages, CISA budget cuts, hackers exploit React2Shell

In today’s cybersecurity news… 36 Malicious npm packages exploited to deploy persistent implants Researchers at security firm SafeDep have discovered 36 malicious packages in the npm...

Cybersecurity News: Texas hospital breach, CISA orders NetScaler patch, ISO file RAT warning

In today’s cybersecurity news… 250,000 affected by data breach at Texas hospital The incident occurred at Nacogdoches Memorial Hospital (NMH) in the city of Nacogdoches, Texas,...

Cybersecurity News: Apple pushes new patches over DarkSword, FBI: US surveillance hack is major incident, Cisco code stolen in Trivy-linked breach

In today’s cybersecurity news… Apple pushes new patches over DarkSword Apple told Wired it’s releasing rare “backported” security patches for iOS 18 to protect users from...

Cybersecurity News: Axios poisoned, TeamPCP details, Claude Code leaked

In today’s cybersecurity news… HTTP client introduces malicious dependency Axios, a widely used HTTP client library on npm, was hijacked by threat actors to introduce a...