Better business through smarter cybersecurity

Better business through smarter cybersecurity

All Posts

The Department of Know: GemStuffer attack, AI SBOMs, and AI-created zero-days

The Department of Know: GemStuffer attack, AI SBOMs, and AI-created zero-days

Rich Stroffolino -
This week’s Department of Know is hosted by Rich Stroffolino, with guests Gary Chan, CISO, SSM Health and Peter Liebert, CISO, Salesloft. Missed the live…
Cybersecurity News: G7 releases AI SBOM, DELL SupportAssist BSOD, Dirty Frag sequel

Cybersecurity News: G7 releases AI SBOM, DELL SupportAssist BSOD, Dirty Frag sequel

Steve Prentice -
In today’s cybersecurity news… G7 countries release AI SBOM guidance Agencies from U.S., Canada, Japan, Germany, France, Italy, the United Kingdom, along with the European…
Why Cyber Startups Need CISO Advisors

Why Cyber Startups Need CISO Advisors

David Spark -
All security startups will tell you they talk to potential customers. The problem is that you limit your development when you only talk to CISOs…
Cybersecurity News: Foxconn factory attacks, BitLocker zero-day accesses protected drives, MDASH patches Windows flaws

Cybersecurity News: Foxconn factory attacks, BitLocker zero-day accesses protected drives, MDASH patches Windows flaws

Sarah Lane -
In today’s cybersecurity news… Foxconn confirms North American factory attack Foxconn said that several North American factories were hit by a cyberattack claimed by the…
Shadow IT Is an Insider Threat (And Not a Malicious One) with ThreatLocker

Shadow IT Is an Insider Threat (And Not a Malicious One) with ThreatLocker

Josh Peets -
Shadow IT rarely comes from bad intentions. Most of the time, employees reach for an unsanctioned app because it makes their job easier, not because…
Join us 5-29-26 for “Hacking Pentesting in the Age of Agentic AI” – Super Cyber Friday

Join us 5-29-26 for “Hacking Pentesting in the Age of Agentic AI” – Super Cyber Friday

Rich Stroffolino -
Please join us on Friday May 29, 2026 for Super Cyber Friday. Our topic of discussion will be “Hacking Pentesting in the Age of Agentic…
Cybersecurity News: Instructure’s agreement, Shai Hulud campaign, OpenAI’s Daybreak

Cybersecurity News: Instructure’s agreement, Shai Hulud campaign, OpenAI’s Daybreak

Rich Stroffolino -
In today’s cybersecurity news… Instructure reaches an “agreement” with ShinyHunters In “things that won’t come back to bite them later” news, Instructure, the company that…
Can You Please Train the AI on Your Way Out the Door?

Can You Please Train the AI on Your Way Out the Door?

David Spark -
There’s no doubt that AI will displace some portion of current knowledge workers, including in cybersecurity. But if it can displace all of them, how…
Cybersecurity News: A.I. software flaw hackers, Forza Horizon 6 leak, Linux kernel hit again

Cybersecurity News: A.I. software flaw hackers, Forza Horizon 6 leak, Linux kernel hit again

Sarah Lane -
In today’s cybersecurity news… A.I. hackers find software flaw Google says it has identified the first known case of hackers using AI to discover and…
Why Multi-Factor Authentication Is No Longer Enough

Why Multi-Factor Authentication Is No Longer Enough

Yuriy Tsibere -
Sponsored Article Multi-factor authentication (MFA) was designed to stop credential-based attacks. But modern phishing techniques have corrupted it into another attack vector. If your cloud…
Securing Mobile Apps with Guardsquare

Securing Mobile Apps with Guardsquare

Rich Stroffolino -
Mobile apps now drive the majority of digital commerce and financial transactions, yet security teams continue to treat them as an afterthought. Once an app…
Cybersecurity News: New cPanel vulnerabilities, JDownloader delivers malware, Schumer pushes DHS

Cybersecurity News: New cPanel vulnerabilities, JDownloader delivers malware, Schumer pushes DHS

Steve Prentice -
In today’s cybersecurity news… cPanel, WHM release fixes for three new vulnerabilities This is not a follow-up from last week’s report of a cPanel and…
The Department of Know: AI “transformation paradox,” Copy Fail chaos, hacked lawnmowers

The Department of Know: AI “transformation paradox,” Copy Fail chaos, hacked lawnmowers

Rich Stroffolino -
This week’s Department of Know is hosted by Rich Stroffolino, with guests Jonathan Waldrop, CISO, Acoustic, and Jason Elrod, CISO, MultiCare Health System. Missed the…
Cybersecurity News: PAN-OS RCE exploit , Poland water hacks, Ivanti EPMM flaw

Cybersecurity News: PAN-OS RCE exploit , Poland water hacks, Ivanti EPMM flaw

Steve Prentice -
In today’s cybersecurity news… PAN-OS RCE exploit under active use enabling root access and espionage This is a recently disclosed CVE-numbered flaw that researchers at…
Breaking the Reactive Cycle of Cybersecurity

Breaking the Reactive Cycle of Cybersecurity

David Spark -
We often frame cybersecurity as an endless reactive process. We’ve heard the term cat and mouse game between attackers and defenders. It’s a viscious cycle.…
Cybersecurity News: Chrome installs AI model on devices, Daemon Tools disk app backdoored, crypto security exodus

Cybersecurity News: Chrome installs AI model on devices, Daemon Tools disk app backdoored, crypto security exodus

Sarah Lane -
In today’s cybersecurity news… Google Chrome installs 4GB AI model on devices Computer scientist and lawyer Alexander Hanff reports that recent versions of Google Chrome…
Stopping Scams in Real Time by Intercepting the Attacker Mid-Conversation with Transmit Security

Stopping Scams in Real Time by Intercepting the Attacker Mid-Conversation with Transmit Security

Josh Peets -
Fraudsters have gotten smarter and faster. Social engineering and authorized push payment scams have surged as traditional account takeover becomes harder to pull off, pushing…
Cybersecurity News: Video game supply chain attack, Bleeding Llama, US gets early LLM access

Cybersecurity News: Video game supply chain attack, Bleeding Llama, US gets early LLM access

Rich Stroffolino -
In today’s cybersecurity news… Video game platform hit by supply chain attack Researchers at ESET documented a campaign by the North Korea-aligned threat group ScarCruft…
Default-Deny as a Practical Zero Trust Control

Default-Deny as a Practical Zero Trust Control

Josh Peets -
A “Best-of” compilation article, sponsored by ThreatLocker Zero Trust has achieved near universal buy-in. Even the federal government is on board. So why does implementation…
AI Confidence: It’s a Trap! (LIVE in San Francisco)

AI Confidence: It’s a Trap! (LIVE in San Francisco)

Rich Stroffolino -
Early research is showing that Ai provides clear productivity gains, but the ROI is harder to pinpoint. Almost all LLMs will confidently produce seemingly high-quality…
Cybersecurity News: Instructure discloses breach, DigiCert revokes certificates, Silver Fox targets Indian and Russian orgs

Cybersecurity News: Instructure discloses breach, DigiCert revokes certificates, Silver Fox targets Indian and Russian orgs

Sarah Lane -
In today’s cybersecurity news… Instructure discloses breach amid leak threats Education software provider Instructure disclosed a cyberattack that disrupted services tied to API keys and…
Verifying Identities with Trusona

Verifying Identities with Trusona

Rich Stroffolino -
The identity verification model most enterprises rely on is falling apart. Authentication used to be a checkpoint; you know the password, you have the device,…
Cybersecurity News: Telegram Mini Apps malware, cPanel is Sorry, patch wave warning

Cybersecurity News: Telegram Mini Apps malware, cPanel is Sorry, patch wave warning

Steve Prentice -
In today’s cybersecurity news… Telegram Mini Apps deliver Android malware Researchers at Bahrain-based cybersecurity research firm CTM360 are warning of “a large-scale fraud operation that…
The Department of Know: GitHub drama, AI deletes production data, Claude Security Beta

The Department of Know: GitHub drama, AI deletes production data, Claude Security Beta

Rich Stroffolino -
This week’s Department of Know is hosted by Rich Stroffolino, with guests Janet Heins, CISO, ChenMed, and TC Niedzialkowski, Head of IT & Security, Opendoor.…
1...45...147Page 4 of 147

ABOUT US

Acting as a media network for cyber information and exchange, CISO Series is just a member of this fantastic community that unfortunately has some conflicts. We're just putting ourselves at the center of the conversation, acting as couples counseling for security vendors and practitioners.

CISO Series: Delivering the most fun you'll have in cybersecurity.

Contact us: info@cisoseries.com

FOLLOW US

© 2024 CISO Series