HomePodcastCybersecurity Headlines

Cybersecurity Headlines

CYBER SECURITY HEADLINES

Cybersecurity News: ICANN lookups, push notification spying, Google’s Gemini

Krebs on ICANN Lookups Back in May 2018, the Internet Corporation for Assigned Names and Numbers, aka ICANN, issued new requirements to registrars to redact...

Cybersecurity News: Mexican spyware trial, Breach of ColdFusion vuln, Malicious loan app downloaded 12MM

Spyware trial implicating former Mexican president kicks off On Monday, the far-reaching Pegasus spyware scandal in Mexico went to court. Prosecutors are expected to focus...

Cybersecurity News: Nuclear site hacked, Iranian water breaches, ChatGPT data leaks

UK nuclear site attacked by state-linked attackers The Guardian reports that threat actors linked to Russia and China breached the UK’a Sellafield nuclear site. Sellafield...

Cybersecurity News:  Credit Unions outage, Roblox-Twitch extortion, Apple zero-days

Credit unions facing outages due to ransomware attack on cloud provider Up to 60 credit unions across the US are facing outages resulting from a...

Cyber Security Headlines Week in Review: Okta breach expands, Former Uber CISO speaks, OpenAI’s chatbot leak secrets

This week’s Cyber Security Headlines - Week in Review is hosted by Rich Stroffolino with guest Christina Shannon, CIO, KIK Consumer Products Cyber Security Headlines...

Cybersecurity News: Manufacturing tops extortion, RETVec battles spam, new Zyxel warnings

Manufacturing industry tops cyber extortion trend According the annual threat landscape report from France-based Orange Cyberdefense, the manufacturing sector ranked as the top targeted industry,...

Cybersecurity News: Okta breach expands, JAXA cyberattack, leaky GPTs

All Okta customers exposed in breach The access and identity stalwart disclosed that the breach it discovered in October saw threat actors steal data on...

Cybersecurity News: Ransomware gang busted in Ukraine, North Texas water utility cyberattack, Former Uber CISO breaks 6-year silence

Ransomware gang busted in Ukraine by international operation European authorities said Tuesday that Ukrainian police arrested the 32-year-old ringleader of a ransomware operation, along with...

Cybersecurity News: International AI agreement, water utility attack, Ukraine cyberattack on Russian aviation

International AI agreement The international community didn’t take a long Thanksgiving weekend. On November 26th, 18 countries, including the US, UK, Germany, Estonia, Israel, and...

Cybersecurity News: London & Zurich, Fidelity National Financial attacks, Royal Family’s hospital, Vanderbilt University Med Center attacks, US Nuclear lab and Gulf Air breaches

Financial sector: London & Zurich, Fidelity National Financial attacks A ransomware attack at the direct debit collection company London & Zurich began on November 10,...

Cybersecurity News: Cyber exec hacked hospital, ‘Citrix Bleed’ vuln targeted, Binance CEO steps down in $4 billion settlement

Cyber exec admits hacking hospital as a sales tactic Former network security firm executive, Vikas Singla, has pleaded guilty to compromising two Gwinnett Medical Center...

Healthcare hit with MOVEit, malware uses trig, OpenAI shakeup

Healthcare platform impacted by MOVEit The list of victims from the MOVEit breach keeps growing. This time the Virgin Pulse-owned healthcare platform Welltok disclosed a...

Cybersecurity News:  Clorox CISO departure, BlackCat’s SEC complaint, Dudley interim NCD

Clorox CISO departs months after cyberattack As reported in Bloomberg, Amy Bogac has departed after about two and a half years in the role. No...

Cyber Security Headlines Week in Review: UK Health data shared, SSH keys vulnerable, Microsoft Copilot

This week’s Cyber Security Headlines - Week in Review is hosted by Rich Stroffolino with guest Jay Wilson, CISO, Insurity Cyber Security Headlines - Week...

Cybersecurity News: Fortinet Injection bug, Another Samsung breach, government Rhysida warning

Fortinet warns of critical command injection bug in FortiSIEM This is a vulnerability that could allow unauthenticated executions through API requests. It is being tracked...