All Posts

Cybersecurity News Week in Review: CISOs’ Uber fallout, US Airport DDoS, Digital license plates

This week’s Cyber Security Headlines – Week in Review, October 10-14, is hosted by Rich Stroffolino with our guest, Matt Honea, Head Of Security, SmartNews…

Cybersecurity News: Polonium targets Israel, CISO-Board relationships, UK Supply chain

Polonium APT targets Israel with a new custom backdoor dubbed PapaCreep The APT group has been employing custom backdoors in attacks aimed at Israeli entities…

Moving Security from a Prevention to a Resilience Strategy

Are security programs drifting from a prevention to a resilience strategy? If so, are you truly operating in a resilient environment? Or are you still…

Cybersecurity News: Npm timing attack, legit software spreading malware, Mango Markets hacked for $100 million

Npm timing attack could impact supply chain Security researchers at Aqua Security found a way to determine which private packages are present in a GitHub…

“Hacking API Security” – Super Cyber Friday

Please join us on Friday, October 28th, 2022 for Super Cyber Friday. Our topic of discussion will be “Hacking APIs: An hour of critical thinking…

Cybersecurity News: UK warns of Chinese security threat, Toyota data leak, CISOs at risk of being overworked

UK warns of Chinese global security threat  On Tuesday, Jeremy Fleming, the director of Britain’s Government Communications Headquarters, gave a rare speech in London, stating…

We Take Security and Privacy Seriously… Seriously.

After every breach, you hear the same mantra from the attacked company: “We take security and privacy seriously.” It’s lost all its meaning. But what…

Cybersecurity News: Heat leaks passwords, KillNet hits airports, Intel UEFI leak

Finger heat can leak your password Researchers at the University of Glasgow’s School of Computing Sciences developed a system called ThermoSecure, designed to reveal a…

What Can You Do When Your Data Knows Where It Is?

When data is self aware it can also be self protecting. Meaning you don’t have to go find the data, the data can tell you…

Cybersecurity News: Urgent Fortinet vulnerability, Windows update flaw, CIS scapegoating danger

Fortinet warns admins to patch critical auth bypass bug immediately Fortinet has warned administrators to update FortiGate firewalls and FortiProxy web proxies to the latest…

Cybersecurity News Week in Review: Lazarus hits Dell,  Uber chief guilty, Musk’s Twitter Takeover

This week’s Cyber Security Headlines – Week in Review, October 3-7, is hosted by Sean Kelly, with our guest, Patrick Benoit, VP, Global Cyber, GRC/BISO,…

Cybersecurity News: Uber coverup ruling, Optus data spilled, Easylife’s trigger fine

Former Uber security chief found guilty of data breach coverup A U.S. federal court jury has found former Uber Chief Security Officer Joseph Sullivan guilty…

How to Engage with Non-Technical Business Leaders

How do you talk to non-technical business leaders about cybersecurity? It’s a concern, it’s a risk, they want to know so they can make logical…

Cybersecurity News: CommonSpirit Health “IT security issue,” MySQL backdoor, P2P payment fraud rises

CommonSpirit Health hit with “IT security issue” The issue impacted its electronic health record systems, forcing the nonprofit health care organization to shut off systems…

“Hacking Customer Trust” – Super Cyber Friday

Please join us on Friday, October 21st, 2022 for Super Cyber Friday. Our topic of discussion will be “Hacking Customer Trust: An hour of critical…

Cybersecurity News: Musk Twitter deal back on, TikTok security deal politics, Netwalker affiliate 20-year prison sentence

Musk offers to proceed with Twitter deal On Tuesday, regulators received a letter from Elon Musk’s legal team offering to proceed with the $44 billion…

How to Be a Security Vendor CISOs Can’t Ignore

There are vendors that CISOs can’t look away from. Who are they and what did they do to get so much attention from CISOs? This…

Cybersecurity News: LA School Data Leaked, Exchange mitigations bypassed, Supreme Court looks at Section 230

LA school data published on leak site The Los Angeles Unified School District confirmed that a ransomware organization began publishing exfiltrated information about students online.…

Today’s Cloud Security Problems Are the Same as Yesterday’s

Nobody wants to believe that they’re entire company got PWNED because of some simple mistake like an open S3 bucket or a simple phish compromised…

Cybersecurity News: Microsoft Zero days, Lazarus attacks Dell, NSA employee caught

Microsoft confirms two Exchange Server zero days are being used in cyberattacks Microsoft confirmed it is investigating two zero days affecting its Exchange Server software…

Cybersecurity News Week in Review: Uber hacker arrested, cyberattacks deluge organizations, Russia’s cyber winter

This week’s Cyber Security Headlines – Week in Review, September 26-30, is hosted by Rich Stroffolino with our guest, Sara Lazarus, VP and head of…

Cybersecurity News: Russia’s cyber winter, military contractor attack, IRS smishing warning

Finnish intelligence warns Russia ‘highly likely’ to turn to cyber in winter The head of the Finnish Security Intelligence Service (Suojelupoliisi or SUPO) says it…

Cybersecurity Burnout

Why are cybersecurity professionals burning out? What’s the dynamic of the job, the pressures being put on them, that causes the best to leave? And…

Cybersecurity News: Leaked ransomware used in attack, Cloudflare Turnstile, Fast Company hit with cyber attack

Leaked ransomware builder used in attacks Last week, a LockBit 3.0 builder leaked on Twitter. This came as the result of a seeming fallout between…