Shows
Daily DefSec BriefCyber Security News for September 9 2026 - Daily DefSec Brief1. Record 974-CVE Patch Tuesday, two zero-days live — CVE-2026-81963, CVE-2026-85880 (CVSS 7.8) — Do: Install September Windows updates now — SecurityWeek — https://www.securityweek.com/microsoft-patches-record-974-vulnerabilities-including-two-exploited-zero-days/
2. Chrome 153 patches its seventh zero-day of 2026 — CVE-2026-87491 — Do: Push Chrome 153.0.8010.36, force restart — SecurityWeek — https://www.securityweek.com/chrome-153-patches-seventh-zero-day-of-2026/
3. F5 BIG-IP rootkit hides its web shell in memory — CVE-2025-53521 (CVSS 9.8) — Do: Patch BIG-IP APM, then hunt memory — The Hacker News — https://thehackernews.com/2026/09/f5-big-ip-apm-malware-injects-php-web.html
4. Defender patch bypassed again, no fix yet — CVE-2026-69414 (the bypassed fix) — Do: No fix — watch SYSTEM-level file reads — Security Affairs — https://securityaffairs.com/198726/security/chaotic-eclipse-released-shieldcrash-a-poc-for-microsoft-defender-zero-day.html
5. SAP kernel flaw scores 10.0, no au...
2026-09-0905 min
CyberPulseThe Compression GapDescription: Today’s briefing frames the current threat pattern as a tempo problem: attackers are compressing the time between disclosure, exploitation, and usable leverage across secure access, voice management, software repositories, workflow engines, model-routing infrastructure, website plugins, and social-engineering chains. Gulf security leaders should move from patch queues to evidence-backed exposure-tempo reviews.Links & Resourceshttps://thehackernews.com/2026/09/cisa-adds-seven-exploited-flaws-as.htmlhttps://www.securityweek.com/sonicwall-warns-of-two-sma1000-zero-days-exploited-in-attacks/https://www.securityweek.com/sangoma-switchvox-vulnerabilities-exploited-in-the-wild/https://www.securityweek.com/critical-jfrog-artifactory-vulnerability-reportedly-exploited-in-the-wild/https://www.securityweek.com/hackers-start-exploiting-critical-langflow-vulnerability/https://www.securityweek.com/elementor-pro-wordpress-plugin-vulnerability-exploited-to-hack-sites/https://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/https://www.microsoft.com/en-us/security/bl...
2026-09-0700 minCyberPulseThe Exception LedgerDescription: Today’s board-level CyberPulse briefing frames the weekend risk as accumulated exceptions: exposed access paths, inherited database privileges, broad security-tool permissions, workflow automation, browser exposure, and administrative keys that turn old decisions into fresh leverage. Gulf leadership should require named ownership, expiry, containment playbooks, and proof that temporary risk can actually be revoked.Links & Resourceshttps://thehackernews.com/2026/09/cisa-adds-seven-exploited-flaws-as.htmlhttps://www.bleepingcomputer.com/news/security/cisa-sonicwall-sma1000-flaws-now-exploited-by-ransomware-gangs/https://www.bleepingcomputer.com/news/security/jadepuffer-ransomware-used-ai-agent-to-automate-entire-attack/https://www.securityweek.com/sangoma-switchvox-vulnerabilities-exploited-in-the-wild/https://www.securityweek.com/12-year-old-postgresql-vulnerability-enables-database-server-takeover/https://www.securityweek.com/vmware-workstation-and-fusion-updates-patch-critical-vulnerability/https://www.securityweek.com/google-patches-6th-chrome-zero-day-of-2026/ht...
2026-09-0500 minDaily DefSec BriefCyber Security News for August 24 2026 - Daily DefSec Brief1. Passkey phishing kit keeps mailbox access after a password reset — SecurityWeek — https://www.securityweek.com/new-phishing-toolkit-uses-passkeys-to-maintain-access-after-password-resets/
2. Encrypted-prompt technique bypasses AI guardrails in Grok and Gemini — SecurityWeek — https://www.securityweek.com/encrypted-prompts-bypass-ai-safety-guardrails-in-grok-and-gemini/
3. Hundreds of leaked AWS keys still live, many with admin — BleepingComputer — https://www.bleepingcomputer.com/news/security/hundreds-of-leaked-aws-keys-give-full-control-over-corporate-accounts/
4. Trojanized npm packages drop an AI-assisted Linux backdoor on import — The Hacker News — https://thehackernews.com/2026/08/14-trojanized-npm-packages-drop-redc2.html
5. North Korea-linked actors poison popular Rust crates — Infosecurity Magazine — https://www.infosecurity-magazine.com/news/north-korean-rust-supply-chain/
6. SynkLoader malware spread via Teams help-desk impersonation — BleepingComputer — https://www.bleepingcomputer.com/news/security/new-synkloader-malware-pushed-in-microsoft-teams-phishing-campaign/
7. Chameleon SEO poisoning cloaks fake bank sites f...
2026-08-2404 minDaily DefSec BriefCyber Security News for August 14 2026 - Daily DefSec Brief1. GeoServer zero-day exploited within hours, no patch yet — SecurityWeek https://www.securityweek.com/hackers-exploiting-unpatched-geoserver-zero-day/ · Cyber Security News https://cybersecuritynews.com/geoserver-0-day-vulnerability/
2. Citrix NetScaler pre-auth RCE detailed by researchers — CVE-2026-8452 (tentative) — watchTowr Labs https://labs.watchtowr.com/youre-back-in-the-room-citrix-netscaler-pre-auth-rce-cve-2026-8452/
3. VMware vCenter Syslog RCE hitting 361 IPs across 47 countries — CVE-2026-59310 — BleepingComputer https://www.bleepingcomputer.com/news/security/critical-vmware-vcenter-rce-flaw-exploited-for-reverse-ssh-access/ · Dark Reading https://www.darkreading.com/vulnerabilities-threats/global-threat-campaign-critical-vmware-vcenter-flaw
4. HoneyMyte CoolClient backdoor deploys signed kernel rootkit — Securelist https://securelist.com/honeymyte-coolclient-driver-rootkit/121028/
5. Adobe Commerce account-hijack flaw under active exploitation — CVE-2026-71362 — SecurityWeek https://www.securityweek.com/adobe-commerce-bug-targeted-immediately-after-disclosure/
6. AmnesiaStealer macOS malware via fake GitHub ClickFix pages — CVE-2020-9...
2026-08-1405 minDaily DefSec BriefCyber Security News for August 13 2026 - Daily DefSec Brief1. VMware vCenter path-traversal RCE now APT-exploited — CVE-2026-59310 — SecurityWeek — https://www.securityweek.com/critical-vmware-vcenter-vulnerability-in-attackers-crosshairs/
2. Fortinet FortiWeb auth bypass (any-password login) — CVE-2026-26035, CVE-2026-49975, CVE-2026-70465, CVE-2026-70468 — SecurityWeek — https://www.securityweek.com/fortinet-patches-authentication-flaws-in-fortiweb-and-fortimanager/
3. City-Forum campaign reads Salesforce/ServiceNow portals as guest (block 158.220.87.79) — BleepingComputer — https://www.bleepingcomputer.com/news/security/city-forum-data-theft-attacks-target-salesforce-servicenow-portals/
4. WordPress Imagick RCE via crafted upload — CVE-2026-65640 — Cyber Security News — https://cybersecuritynews.com/wordpress-imagick-rce-vulnerability/
5. Akira reboots Windows into Safe Mode to bypass EDR — Cyber Security News — https://cybersecuritynews.com/akira-uses-windows-safe-mode/
6. LiteLLM supply-chain breach: 153GB of CI/CD secrets, 2,488 firms — Help Net Security — https://www.helpnetsecurity.com/2026/08/13/litellm-breach-stolen-credentials-leak/
7. JWR phishing framework, live opera...
2026-08-1304 minDaily DefSec BriefCyber Security News for August 12 2026 - Daily DefSec Brief1. Windows WinSock use-after-free zero-day exploited by Lazarus — CVE-2026-68820 — SecurityWeek — https://www.securityweek.com/fresh-windows-zero-day-exploited-in-north-korean-cyberattacks/
2. Cisco ASA/FTD VPN flaw exploited to crash firewalls — CVE-2026-20349 — BleepingComputer — https://www.bleepingcomputer.com/news/security/cisco-warns-of-asa-and-ftd-vpn-flaw-exploited-to-crash-devices/
3. Microsoft Defender 'ShieldBreak' PoC bypasses patch for SYSTEM — CVE-2026-50656 — BleepingComputer — https://www.bleepingcomputer.com/news/security/new-microsoft-defender-shieldbreak-zero-day-grants-system-privileges/
4. SharePoint RCE chain fully disclosed — CVE-2026-63520, CVE-2026-55040 — Rapid7 — https://www.rapid7.com/blog/post/etr-cve-2026-63520-microsoft-sharepoint-remote-code-execution-fixed
5. SAP Commerce Cloud max-severity RCE — CVE-2026-58231 — The Hacker News — https://thehackernews.com/2026/08/sap-commerce-cloud-flaw-could-let.html
6. Adobe ColdFusion and Campaign Classic critical RCE flaws — CVE-2026-48362, CVE-2026-48273, CVE-2026-71384 — SecurityWeek — https://www.securit...
2026-08-1204 minDaily DefSec BriefCyber Security News for August 11 2026 - Daily DefSec Brief1. Gunra ransomware exploits Fortinet and Schneider Electric flaws — joint FBI/CISA/South Korea advisory — CVE-2024-55591, CVE-2025-24472, CVE-2024-5559 (verify) — The Hacker News — https://thehackernews.com/2026/08/gunra-ransomware-exploits-fortinet-and.html
2. Metabase SQL-injection zero-day exploited in the wild — no CVE assigned — SecurityWeek — https://www.securityweek.com/metabase-patches-vulnerability-exploited-as-zero-day/
3. SonicWall SMA1000 flaws added to CISA KEV, used in ransomware — CVE-2026-15409, CVE-2026-15410 — Cyber Security News — https://cybersecuritynews.com/sonicwall-sma1000-vulnerabilities-exploited/
4. Attackers scanning exposed VMware vCenter after auth-bypass disclosed — CVE-2026-59309, CVE-2026-47876, CVE-2026-59310 — Cyber Security News — https://cybersecuritynews.com/hackers-scan-vmware-vcenter-vulnerabilities/
5. Windows 11 USB Plug-and-Play auto-install chained to SYSTEM — The Hacker News — https://thehackernews.com/2026/08/researchers-turn-u...
2026-08-1105 min
Cyber Daily NewsCyber Daily News for August 7th, 2026Cyber Daily News for August 7th, 2026
Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news
Stories mentioned in today's briefing:
- Snowflake Hacker Pleads Guilty in US Court
https://www.securityweek.com/snowflake-hacker-pleads-guilty-in-us-court/
- Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts
https://www.securityweek.com/zero-click-ai-browser-hacking-claude-and-chatgpt-atlas-hijacked-via-emails-x-posts/
- Critical Paperclip Flaw Allowed Admin Access, Code Execution
https://www.securityweek.com/critical-paperclip-flaw-allowed-admin-access-code-execution/
- 3.8 Million Impacted by Unlimited Technology Systems Data Breach
https://www.securityweek.com/3-8-million-impacted-by-unlimited-technology-systems-data-breach/
- Microsoft, Apple Release Fresh Security Updates
https://www.securityweek.com/microsoft-apple-release-fresh-security-updates/
2026-08-0702 min
SecurityWeek Podcast Series - Cybersecurity InsightsPodcast: Compliance Won’t Save You: The Future of Cyber Risk with Edna ConwayIn today's digital age, cybersecurity is more critical than ever, and organizations must prioritize resilience to protect themselves against evolving threats. In this podcast, we share insights from Edna Conway, a recognized leader in cybersecurity and supply chain resilience with over 40 years of experience in the field. We'll explore governance challenges, the importance of adapting to rapid technological advancements, and actionable strategies organizations can implement to enhance their cybersecurity posture.Discover insights from cybersecurity expert Edna Conway as she discusses evolving governance, AI advancements, supply chain resilience, and the critical role of collaboration in safeguarding...
2026-08-0655 minSecurityWeek PodcastPodcast: Compliance Won’t Save You: The Future of Cyber Risk with Edna ConwayIn today's digital age, cybersecurity is more critical than ever, and organizations must prioritize resilience to protect themselves against evolving threats. In this podcast, we share insights from Edna Conway, a recognized leader in cybersecurity and supply chain resilience with over 40 years of experience in the field. We'll explore governance challenges, the importance of adapting to rapid technological advancements, and actionable strategies organizations can implement to enhance their cybersecurity posture.Discover insights from cybersecurity expert Edna Conway as she discusses evolving governance, AI advancements, supply chain resilience, and the critical role of collaboration in safeguarding...
2026-08-0655 minDaily DefSec BriefDaily DefSec Brief - Cyber Security News for July 20 20261. ServiceNow AI Platform RCE now under active exploitation — CVE-2026-6875 — BleepingComputer — https://www.bleepingcomputer.com/news/security/critical-servicenow-code-execution-flaw-now-exploited-in-attacks/
2. WP2Shell — WordPress core flaws exploited within hours — CVE-2026-60137, CVE-2026-63030 — SecurityWeek — https://www.securityweek.com/wp2shell-wordpress-vulnerabilities-exploited-in-the-wild/
3. Chrome 150 patches seven memory-safety bugs, three critical — SecurityWeek — https://www.securityweek.com/chrome-150-update-patches-severe-memory-safety-bugs/
4. SleeperGem — malicious RubyGems impersonate git_credential_manager — The Hacker News — https://thehackernews.com/2026/07/sleepergem-uses-three-malicious.html
5. OTTERCOOKIE hides in SVG images in fake coding-test lure — Cyber Security News — https://cybersecuritynews.com/north-korean-hackers-ottercookie-malware/
6. Solo threat actor uses Gemini CLI to run a small botnet — The Hacker News — https://thehackernews.com/2026/07/russian-speaking-hacker-uses-google.html
7. Hugging Face breached by...
2026-07-2003 minSecurityWeek Podcast Series - Cybersecurity InsightsBroken Governance, Agentic AI, and the MindStone Agent ExclusiveArtificial intelligence is transforming cybersecurity, but are governance, compliance, and security practices evolving fast enough to keep up?In this exclusive SecurityWeek interview, Brian “SchleiF” Schleifer sits down with Clint Bodungen, Director of AI/ML Engineering at Arcovo, founder of ThreatGen, and one of the industry’s leading voices in industrial cybersecurity.Together they tackle why traditional governance often fails practitioners, how cybersecurity has evolved over the past two decades, and why the biggest vulnerability is still people not technology. Clint also shares, for the first time publicly, the story behind the MindStone Agent
2026-07-1758 minSecurityWeek PodcastBroken Governance, Agentic AI, and the MindStone Agent ExclusiveArtificial intelligence is transforming cybersecurity, but are governance, compliance, and security practices evolving fast enough to keep up?In this exclusive SecurityWeek interview, Brian “SchleiF” Schleifer sits down with Clint Bodungen, Director of AI/ML Engineering at Arcovo, founder of ThreatGen, and one of the industry’s leading voices in industrial cybersecurity.Together they tackle why traditional governance often fails practitioners, how cybersecurity has evolved over the past two decades, and why the biggest vulnerability is still people not technology. Clint also shares, for the first time publicly, the story behind the MindStone Agent
2026-07-1758 minCyber Daily NewsCyber Daily News for June 27, 2026Cyber Daily News for June 27, 2026
Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news
Stories mentioned in today's briefing:
- DirtyClone: Fourth Linux Kernel Flaw in Six Weeks Escalates to Root
https://securityaffairs.com/194338/uncategorized/dirtyclone-fourth-linux-kernel-flaw-in-six-weeks-escalates-to-root.html
- Chinese APT CL-STA-1062 Expands Attacks on Southeast Asian Critical Infrastructure With Custom Malware
https://securityaffairs.com/194312/intelligence/chinese-apt-cl-sta-1062-expands-attacks-on-southeast-asian-critical-infrastructure-with-custom-malware.html
- Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories
https://www.securityweek.com/amazon-q-flaw-enabled-cloud-credential-theft-via-malicious-repositories/
- More Klue Breach Victims Identified as Hackers Get Hacked
https://www.securityweek.com/more-klue-breach-victims-identified-as-hackers-get-hacked/
- Five Eyes Issue Urgent AI Threat...
2026-06-2703 minCyber Daily NewsCyber Daily News for June 20, 2026Cyber Daily News for June 20, 2026
Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news
Stories mentioned in today's briefing:
- FortiBleed Fallout: CISA Warns of Active Exploitation of 74,000 Leaked Fortinet Credentials
https://securityaffairs.com/193902/hacking/cisa-warns-of-active-exploitation-following-fortibleed-leak.html
- Joomla Content Editor and LiteSpeed cPanel Plugin Flaws Under Active Attack
https://thecyberexpress.com/cve-2026-48907-joomla-jce-litespeed-cpanel/
- Novo Nordisk Breach Exposes Clinical Trial and Healthcare Professional Data
https://thecyberexpress.com/tce-weekly-roundup-global-threats/
- Velvet Ant Group Maintained Decade-Long Stealth Inside Networks
https://www.securityweek.com/in-other-news-apple-patches-beats-eavesdropping-flaw-dot-closes-delta-crowdstrike-probe-aws-continuum/
- Unpatched Google Cloud Config Connector Flaw Enables Account Takeover
https://www...
2026-06-2003 minCyber Daily NewsCyber Daily News for June 6, 2026Cyber Daily News for June 6, 2026
Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news
Stories mentioned in today's briefing:
- Claude Opus Found a Four-Year-Old Hole in Zcash's Privacy Layer
https://securityaffairs.com/193224/hacking/claude-opus-found-a-four-year-old-hole-in-zcashs-privacy-layer-nobody-knows-if-someone-already-used-it.html
- Cisco SD-WAN Has a New Root-Level Problem, and There's No Fix Yet
https://securityaffairs.com/193203/security/cisco-sd-wan-has-a-new-root-level-problem-and-theres-no-fix-yet.html
- Silent Ransom Group (SRG): Switching To DNS Fast Flux Infrastructure
https://securityaffairs.com/193215/cyber-crime/silent-ransom-group-srg-switching-to-dns-fast-flux-infrastructure.html
- Anthropic Maps AI Threats (In Other News)
https://www.securityweek.com/in-other-news-anthropic-maps-ai-threats-unpatched-comodo-flaw-palantir-chief-eyed-for-cisa/
- Opal Security Raises $23 Million for AI-Native Identity Governance
https://www...
2026-06-0603 minCyber Daily NewsCyber Daily News for May 27, 2026Cyber Daily News for May 27, 2026
Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news
Stories mentioned in today's briefing:
- FBI: Hackers Sending Operatives in Person to Insert USB Drives and Steal Data
https://www.securityweek.com/fbi-hackers-sending-operatives-in-person-to-insert-usb-drives-and-steal-data/
- Microsoft SharePoint Has a New RCE Flaw
https://securityaffairs.com/192730/security/microsoft-sharepoint-has-a-new-rce-flaw-if-you-havent-patched-yet-go-do-that.html
- SymJack Attack Turns AI Coding Agents Into Supply Chain Attack Delivery Systems
https://www.securityweek.com/symjack-attack-turns-ai-coding-agents-into-supply-chain-attack-delivery-systems/
- LA Metro Cyberattack Linked to Iranian State-Sponsored Hackers
https://www.securityweek.com/la-metro-cyberattack-linked-to-iranian-state-sponsored-hackers/
- CISA Urges Immediate Patching of Exploited LiteSpeed cPanel Plugin Zero-Day
https...
2026-05-2703 minCyber Daily NewsCyber Daily News for May 18, 2026Cyber Daily News for May 18, 2026
Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news
Stories mentioned in today's briefing:
- Researcher Drops MiniPlasma Windows Exploit for Unpatched 2020 CVE
https://www.securityweek.com/researcher-drops-miniplasma-windows-exploit-for-unpatched-2020-cve/
- Exploitation of Critical NGINX Vulnerability Begins
https://www.securityweek.com/exploitation-of-critical-nginx-vulnerability-begins/
- Grafana Confirms Breach After Hackers Claim They Stole Data
https://www.securityweek.com/grafana-confirms-breach-after-hackers-claim-they-stole-data/
- Hackers Earn $1.3 Million at Pwn2Own Berlin 2026
https://www.securityweek.com/hackers-earn-1-3-million-at-pwn2own-berlin-2026/
- First Shai-Hulud Worm Clones Emerge
https://www.securityweek.com/first-shai-hulud-worm-clones-emerge/
- Attackers exploit Funnel Builder bug to inject...
2026-05-1803 min
CyberWire DailyEvery layer needs a patch now.Patch Tuesday. Global agencies update SBOM guidance. Iran-linked espionage group Seedworm breached a major South Korean electronics manufacturer. A telehealth platform breach affects 716,000. Foxconn confirms a cyberattack. Maria Varmazis has an update on orbital data centers. A lawmaker questions surveillance pricing. Brandon Karpf, friend of the show, is talking with Dave about "Japan’s space systems face growing cybersecurity threats." Robotic lawnmowers on the cutting edge.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss...
2026-05-1425 minCyber Daily NewsCyber Daily News for May 8, 2026Cyber Daily News for May 8, 2026
Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news
Stories mentioned in today's briefing:
- Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking
https://www.securityweek.com/palo-alto-zero-day-exploited-in-campaign-bearing-hallmarks-of-chinese-state-hacking/
- Dirty Frag Linux Vulnerability Exposes Major Distributions to Root Access Attacks
https://thecyberexpress.com/dirty-frag-linux-lpe-cve-2026-31431/
- OpenAI and Anthropic LLMs Used in Critical Infrastructure Cyber-Attack, Warns Dragos
https://www.infosecurity-magazine.com/news/llm-critical-infrastructure/
- Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks
https://www.securityweek.com/ivanti-patches-epmm-zero-day-exploited-in-targeted-attacks/
- Cyberattack Hits Canvas System Used by Thousands of Schools...
2026-05-0803 minSecurityWeek Podcast Series - Cybersecurity InsightsDecoding the IEC 62443-4-1 Standard for OTIn this episode of the SecurityWeek Podcast, we speak with Rod Locke of Fortinet about the growing importance of IEC 62443 standards in operational technology (OT) security. The conversation explores secure-by-design principles, IEC 62443-4-1 certification, long-term security support for industrial systems, and how critical infrastructure operators can evaluate vendor security practices as IT and OT environments continue to converge. Follow SecurityWeek on LinkedIn
2026-05-0618 minSecurityWeek PodcastDecoding the IEC 62443-4-1 Standard for OTIn this episode of the SecurityWeek Podcast, we speak with Rod Locke of Fortinet about the growing importance of IEC 62443 standards in operational technology (OT) security. The conversation explores secure-by-design principles, IEC 62443-4-1 certification, long-term security support for industrial systems, and how critical infrastructure operators can evaluate vendor security practices as IT and OT environments continue to converge. Follow SecurityWeek on LinkedIn
2026-05-0618 minCyber Daily NewsCyber Daily News for May 2, 2026Cyber Daily News for May 2, 2026
Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news
Stories mentioned in today's briefing:
- New Deep#Door RAT uses stealth and persistence to target Windows
https://securityaffairs.com/191567/malware/new-deepdoor-rat-uses-stealth-and-persistence-to-target-windows.html
- Scattered Spider Hacker Arrested
https://www.securityweek.com/in-other-news-scattered-spider-hacker-arrested-soc-effectiveness-metrics-nsa-tool-vulnerability/
- Carding service Jerry's Store leak exposes 345,000 stolen payment cards
https://securityaffairs.com/191536/cyber-crime/carding-service-jerrys-store-leak-exposes-345000-stolen-payment-cards.html
- Digital attacks drive a new wave of cargo theft, FBI says
https://securityaffairs.com/191556/cyber-crime/digital-attacks-drive-a-new-wave-of-cargo-theft-fbi-says.html
- New Bluekit Phishing Kit Features AI Assistant
https://www.securityweek.com/new-bluekit-phishing-kit-features-ai-assistant/
...
2026-05-0202 min
CyberHub PodcastPatch Tuesday: 167 Microsoft Fixes, SharePoint 0-Day, Kraken Extorted, Mythos AI Threat Warning🎙️ Patch Tuesday: 167 Microsoft Fixes, SharePoint 0-Day, Kraken Extorted, Mythos AI Threat Warning🚨 Join us on the CyberHub Podcast as we break down today’s biggest cybersecurity stories shaping global risk and resilience. Ep – 1090: Today's episode will discuss the latest news: CSA Urges CISOs to Prepare for Mythos-Ready Security as Accelerated AI Threats Reshape the Threat LandscapeAdobe Patches 55 Vulnerabilities Across 11 Products Including Actively Exploited Acrobat Reader Zero-Day Fortinet Patches 11 Vulnerabilities Including Critical FortiClient EMS Flaw Already Under Active Exploitation✅ Story Links:https://www.bleepingcomputer.com/news/security/mcgraw-hill-confirms-data-breach-following-extortion-threat/https://www...
2026-04-1518 minCyber Daily NewsCyber Daily News for April 11, 2026Cyber Daily News for April 11, 2026
Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news
Stories mentioned in today's briefing:
- CVE-2026-39987: Marimo RCE Exploited in Hours After Disclosure
https://securityaffairs.com/190623/hacking/cve-2026-39987-marimo-rce-exploited-in-hours-after-disclosure.html
- Ransomware Attack on ChipSoft Knocks EHR Services Offline Across Dutch and Belgian Hospitals
https://securityaffairs.com/190615/cyber-crime/ransomware-attack-on-chipsoft-knocks-ehr-services-offline-across-hospitals-in-the-netherlands-and-belgium.html
- Iran-Linked Hackers Targeting ICS and SCADA Systems in Critical Infrastructure
https://www.securityweek.com/industry-reactions-to-iran-hacking-ics-in-critical-infrastructure-feedback-friday/
- APT28 DNS Hijacking Campaign Exploiting Vulnerable Routers
https://thecyberexpress.com/weekly-roundup-cybersecurity-global-threats/
- Juniper Networks Patches Dozens of Junos OS Vulnerabilities Including Critical...
2026-04-1103 minCyber Daily NewsCyber Daily News for April 4, 2026Cyber Daily News for April 4, 2026
Cyber Daily News is also available via podcast!
https://feeds.transistor.fm/cyber-daily-news
Stories mentioned in today's briefing:
- European Commission Breach Exposes 300GB of Data from 30 EU Entities
https://www.securityweek.com/european-commission-confirms-data-breach-linked-to-trivy-supply-chain-attack/
- North Korea-Linked Hackers Drain $285M from Drift Protocol
https://securityaffairs.com/190330/hacking/north-korea-linked-hackers-drain-285m-from-drift-in-sophisticated-attack.html
- TrueConf Zero-Day Exploited in Asian Government Attacks
https://www.securityweek.com/trueconf-zero-day-exploited-in-asian-government-attacks/
- Critical ShareFile Flaws Lead to Unauthenticated RCE
https://www.securityweek.com/critical-sharefile-flaws-lead-to-unauthenticated-rce/
- CrystalX RAT: New MaaS Malware Combines Spyware, Stealer, and Remote Access
https://securityaffairs.com/190310/cyber-crime/crystalx-rat-new-maas-malware-combines-spyware-stealer-and-remote-access.html
...
2026-04-0403 minSecurityWeek PodcastEmbedded Industrial Security: The Network-Native AdvantageAndrew McPhee, Industrial IoT Security Solution Manager at Cisco, joins the SecurityWeek podcast and dives into why traditional monitoring and SPAN-based approaches fail to deliver true visibility in industrial environments, and how network-native security embeds inspection, segmentation, and protection directly into the network. We discuss real-world implementation challenges, economic tradeoffs, and how to move from visibility to action without disrupting operations. (Want to continue the discussion? Contact Cisco.)Follow SecurityWeek on LinkedIn
2026-01-2927 minSecurityWeek Podcast Series - Cybersecurity InsightsEmbedded Industrial Security: The Network-Native AdvantageAndrew McPhee, Industrial IoT Security Solution Manager at Cisco, joins the SecurityWeek podcast and dives into why traditional monitoring and SPAN-based approaches fail to deliver true visibility in industrial environments, and how network-native security embeds inspection, segmentation, and protection directly into the network. We discuss real-world implementation challenges, economic tradeoffs, and how to move from visibility to action without disrupting operations. (Want to continue the discussion? Contact Cisco.)Follow SecurityWeek on LinkedIn
2026-01-2927 minCyberWire DailyWhen preview pane becomes preview pain.Patch Tuesday. Federal prosecutors charge a Houston man with smuggling Nvidia chips to China, a Ukrainian woman for targeting critical infrastructure, and an Atlanta activist for wiping his phone. The power sector sees cyber threats doubling. The new Spiderman phishing kit slings its way across the dark web. Our guest is Dick O'Brien, Principal Intelligence Analyst from Symantec and Carbon Black Threat Hunter Team, discussing “Unwanted Gifts: Major Campaign Lures Targets with Fake Party Invites.” The Pentagon unveils a killer chatbot.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss...
2025-12-1023 minCyberHub PodcastAnthropic Says Claude AI Powered 90% of Chinese Espionage Campaign, Checkout.com Discloses Data Breach, WaPo Says Nearly 10K Employees Impacted by Hack, JLR Breach Cost $220M🎙️ Anthropic Claude AI Powered 90% Chinese Espionage, Checkout.com Breach, WaPo 10K Oracle Hack🚨 Join us on the CyberHub Podcast as we break down today’s biggest cybersecurity stories shaping global risk and resilience.Ep – 1012: Today's episode will discuss the latest news:· Jaguar Land Rover Cyberattack Cost the Company Over $220 Million· Akira Ransomware Group Made $244 Million in Ransom Proceeds· Cyberattack on Danish Government Sites Disrupts Critical Services ✅ Story Links: https://www.securityweek.com/anthropic-says-claude-ai-powered-90-of-chinese-espionage-campaign/https://www.securityweek.com/checkout-com-discloses-data-breach-after-extortion-attempt/https://www.bleepingcomputer.com/n...
2025-11-1719 minSecurityWeek PodcastCISO Perspectives: Navigating the Security Landscape in 2025In a world where cyber risk is business risk, today's Chief Information Security Officers are not just defenders of data—they are strategic partners driving organizational resilience. Moderated by Gartner's Ash Ahuja, this candid conversation explores how security leaders are balancing innovation with risk management, influencing board-level decision-making, and navigating complex threat environments in 2025.Ash Ahuja, VP & Executive Partner, Security & Risk Management - GartnerTim Silverline, VP of Security, Rocket LawyerJarell Mikell, Executive Director - Power Systems & Gas Cybersecurity - Southern CompanyThis session took place at SecurityWeek's CISO Forum at the Ritz-Carlton, Ha...
2025-11-0744 minSecurityWeek Podcast Series - Cybersecurity InsightsCISO Perspectives: Navigating the Security Landscape in 2025In a world where cyber risk is business risk, today's Chief Information Security Officers are not just defenders of data—they are strategic partners driving organizational resilience. Moderated by Gartner's Ash Ahuja, this candid conversation explores how security leaders are balancing innovation with risk management, influencing board-level decision-making, and navigating complex threat environments in 2025.Ash Ahuja, VP & Executive Partner, Security & Risk Management - GartnerTim Silverline, VP of Security, Rocket LawyerJarell Mikell, Executive Director - Power Systems & Gas Cybersecurity - Southern CompanyThis session took place at SecurityWeek's CISO Forum at the Ritz-Carlton, Ha...
2025-11-0744 minCyberHub PodcastAmerican Airlines Envoy Air Oracle Hack, VW Ransomware, Prosper 17.6M Breach, NSO $4M Fine🎙️ American Airlines Envoy Air Oracle Hack, VW Ransomware, Prosper 17.6M Breach, NSO $4M Fine🚨 Join us daily on the CyberHub Podcast as we delve into the latest headlines for cybersecurity practitionersEp – 996: Today's episode will discuss the latest news as American Airlines Envoy Air Oracle Hack with more news below:· ConnectWise Fixes Automate Bug Allowing AitM Update Attacks· Microsoft Fixes Highest Severity ASP.NET Core Flaw Ever Discovered· Microsoft Revokes Over 200 Certificates to Disrupt Ransomware Campaign ✅ Story Links: https://www.securityweek.com/hackers-steal-sensitive-data-from-auction-house-sothebys/https://www.securityweek.co...
2025-10-2017 minCyberHub PodcastF5 Nation-State Hack Source Code Stolen, Mango Data Breach, Capita $14M Fine 6.6M People🎙️ F5 Nation-State Hack Source Code Stolen, Mango Data Breach, Capita $14M Fine 6.6M People🚨 Join us daily on the CyberHub Podcast as we delve into the latest headlines for cybersecurity practitionersEp – 995: Today's episode will discuss the latest news as F5 Nation-State Hack Source Code Stolen with more news below:· Adobe Experience Manager Zero-Day Vulnerability Under Active Exploitation· ICS Patch Tuesday: Fixes Announced by Siemens Schneider Rockwell ABB Phoenix Contact· High Severity Vulnerabilities Patched by Fortinet and Ivanti ✅ Story Links: https://www.securityweek.com/f5-blames-nation-state-hacke...
2025-10-1616 minCyberHub PodcastEurope Airport Ransomware Suspect Arrested, UN Telecom Threat Stopped, JLR Extends Shutdown Again🎙️ Europe Airport Ransomware Suspect Arrested, UN Telecom Threat Stopped, JLR Extends Shutdown Again🚨 Join us daily on the CyberHub Podcast as we delve into the latest headlines for cybersecurity practitionersEp – 984: Today's episode will discuss the latest news as Europe Airport Ransomware Suspect Arrested with more news below:· Google BrickStorm Malware Used to Steal US Organizations Data for Over a Year· Chinese Hackers RedNovember Target Government and Military Organizations· Hackers Target Casino Operator Boyd Gaming in New Attack ✅ Story Links: https://www.securityweek.com/european-airport-cyberattack...
2025-09-2524 minCyberWire DailyWhen spies get spied on.Patch Tuesday. The Matrix Foundation patches high-severity vulnerabilities in its open-source communications protocol. The “Curly COMrades” Russian-aligned APT targets critical infrastructure. Microsoft tells users to ignore new CertificateServicesClient (CertEnroll) errors. Researchers uncover a malware campaign hiding the NjRat Remote Access Trojan in a fake Minecraft clone. Motorcycle manufacturer Royal Enfield suffers a ransomware attack. The DOJ details a major operation against the BlackSuit ransomware group. Our guest is Jack Jones, father of Factor Analysis of Information Risk (FAIR) and the FAIR Controls Analytics Model (FAIR-CAM), sharing insights on cyber risk quantification. Data Brokers’ digital hide-and-seek.
Remember to leave u...
2025-08-1328 minCyberHub PodcastUnited Natural Foods Projects Up to $400 Million Sales Hit from June Cyberattack, Co-op Confirms Data of 6.5 Million Members Stolen in Cyberattack, Cambodia Makes 1,000 Arrests in Latest Crackdown on Cybercrime🎙️ United Natural Foods $400M Hit from Cyberattack, Co-op 6.5M Members' Data STOLEN, Cambodia Arrests 1,000 Cyber Criminals 🚨 Join us daily on the CyberHub Podcast as we delve into the latest headlines for cybersecurity practitionersEp – 946: Today's episode will discuss the latest news as United Natural Foods $400M Hit from Cyberattack with more news below:· Chinese Hackers Target Taiwan's Presidential Office Networks· Oracle Patches 200 Vulnerabilities with July 2025 CPU· Cisco Patches Another Critical ISE VulnerabilityFor more information, please visit our website: https://www.cyberhubpodcast.com/ ✅ Story Links: https...
2025-07-1720 minCyberHub Podcast🎙️ Hawaiian Airlines Hacked by Scattered Spider Aviation Campaign, Ahold Delhaize Breach Impacts 2.2 million People, Over 1,200 Citrix Servers Unpatched🎙️ Scattered Spider STRIKES Airlines, 2.2M Records STOLEN, 1,200+ Citrix Servers UNPATCHED🚨 Join us daily on the CyberHub Podcast as we delve into the latest headlines for cybersecurity practitionersEp – 936: Today’s episode will discuss the latest news as Scattered Spider STRIKES Hawaiian Airlines and more other headlines: • Canada Gives Hikvision the Boot on National Security Grounds • NATO Agreement Calls for 5% GDP Defense Spending Including Cyber • Germany Orders Apple, Google to Remove DeepSeek AppFor more information, please visit our website: https://www.cyberhubpodcast.co...
2025-07-0116 minCyberHub Podcast🎙️ FBI Warns China Typhoon Groups Still Active, Iran Exploits Israeli Security Cameras for Missile Strikes, North Korea Supply Chain Attack Hits Developers🎙️ FBI Warns China Typhoon Groups Still Active, Iran Exploits Israeli Security Cameras for Missile Strikes, North Korea Supply Chain Attack Hits Developers 🚨 Join us daily on the CyberHub Podcast as we delve into the latest headlines for cybersecurity practitioners Ep – 934: Today’s episode will discuss the latest news as BI Warns China Typhoon Groups Still Active and more other headlines:· US Hit by DDoS Attacks from Iranian Hacktivists· Cyber Insurance Premiums Decline According to AM Best Report· GitHub Enterprise Server Patches Critical Code Execution Vulnerability For more information, plea...
2025-06-2518 minCyberHub PodcastUBS Confirms Data Stolen in Cyberattack, Minnesota Lawmaker's Alleged Killer Had Data Broker List, SuperCard Malware Targets Banks🎙️ UBS Confirms Data Stolen in Cyberattack, Minnesota Lawmaker's Alleged Killer Had Data Broker List, SuperCard Malware Targets Banks 🚨 Join us daily on the CyberHub Podcast as we delve into the latest headlines for cybersecurity practitioners Ep – 930: Today’s episode will discuss the latest news as UBS Confirms Data Stolen in Cyberattack more news below:· Scania Insurance Data Stolen in Extortion· Asana AI Feature Exposed Customer Data· Cambodian Hacktivists Target Thai Government For more information, please visit our website: https://www.cyberhubpodcast.com/ ✅ Story Links: https...
2025-06-1818 minCyberHub PodcastPlay Ransomware Hits 900 orgs, Ukraine Claims it Hacked Russian War Plane, CISA Cuts, BidenCash Takedown🎙️ Play Ransomware Hits 900 orgs, Ukraine Claims it Hacked Russian War Plane, CISA Cuts, BidenCash Takedown 🚨 Join us daily on the CyberHub Podcast as we delve into the latest headlines for cybersecurity practitioners Ep – 923: Today’s episode will discuss the latest news as Play Ransomware Hits 900 orgs more news below:· Lee Enterprises Breach Update· China Targets Taiwan· Criminals Target Salesforce apps For more information, please visit our website: https://www.cyberhubpodcast.com/ ✅ Story Links: https://www.securityweek.com/lee-enterprises-says-40000-hit-by-ra...
2025-06-0518 minCyberHub PodcastNova Scotia Power Ransomware, $223 Million Crypto Heist, Cityworks Zeroday Exploited by China, SEC Disclosure Challenged🎙️ Nova Scotia Power Ransomware, $223 Million Crypto Heist, Cityworks Zeroday Exploited by China, SEC Disclosure Challenged 🚨 Join us daily on the CyberHub Podcast as we delve into the latest headlines for cybersecurity practitioners Ep – 916: Today’s episode will discuss the latest news as Nova Scotia Power Ransomware more news below:· 270 Tied to Dark Web Arrested Globally· Malicious NPM Packages collect Data· SEC Disclosure Rule Challenged For more information, please visit our website: https://www.cyberhubpodcast.com/ ✅ Story Links: https://www.securityweek.com/nova-scotia-powe...
2025-05-2619 minCyberHub PodcastCoinbase Breach Impact Revealed, Cellcom Disruption by Cyberattack, M&S Breach To Hit $402M🎙️ Coinbase Breach Impact Revealed, Cellcom Disruption by Cyberattack, M&S Breach To Hit $402M 🚨 Join us daily on the CyberHub Podcast as we delve into the latest headlines for cybersecurity practitioners Ep – 914: Today’s episode will discuss the latest news as Coinbase Breach Impact Revealed more news below:· SK Telecom Breach Debrief· Alabama Cyberattack Neutralized· Ivanti Exploitation Continues For more information, please visit our website: https://www.cyberhubpodcast.com/ ✅ Story Links: https://www.bleepingcomputer.com/news/security/coinbase-says-recent-data-breach-impac...
2025-05-2118 minCyberHub PodcastSupply-Chain Carnage: Chinese Hack Drone Makers, Nucor Steel Knocked Offline, Scattered Spider Mauls Retail, Chrome 0-Day🎙️ Supply-Chain Carnage: Chinese Hack Drone Makers, Nucor Steel Knocked Offline, Scattered Spider Mauls Retail, Chrome 0-Day 🚨 Join us daily on the CyberHub Podcast as we delve into the latest headlines for cybersecurity practitioners Ep – 911: Today’s episode will discuss the latest news as Supply-Chain Carnage: Chinese Hack Drone Makers more news below:· Co-op cyberattack· Chipmaker Patch Tuesday· NSA & Cybercommand Leadership Pick For more information, please visit our website: https://www.cyberhubpodcast.com/ ✅ Story Links: https://www.securityweek.com/chinese-hackers-hit-drone-secto...
2025-05-1522 minCyberHub Podcast5 Microsoft 0days Patched, Fortinet Zeroday, WeChat Money Laundering, Alabama Cyberattack, Ukraine Cyber Spying🎙️ 5 Microsoft 0days Patched, Fortinet Zeroday, WeChat Money Laundering, Alabama Cyberattack, Ukraine Cyber Spying 🚨 Join us daily on the CyberHub Podcast as we delve into the latest headlines for cybersecurity practitioners Ep – 910: Today’s episode will discuss the latest news as 5 Microsoft 0days Patched more news below:· SAP Patches Another Netweaver Vulnerability· Ivanti EPMM ZeroDay· VMWare Tools Vulnerability For more information, please visit our website: https://www.cyberhubpodcast.com/ ✅ Story Links: https://www.securityweek.com/zero-day-attacks-highlight-another-busy-microsoft-patch-tuesday/https://www.bleepingcomputer.com/news/security...
2025-05-1424 minCyberHub PodcastSouth African Airways Cyberattack, Powerschool Criminals extort school districts, Crowdstrike Layoffs, Lockbit Exposed🎙️ South African Airways Cyberattack, Powerschool Criminals extort school districts, Crowdstrike Layoffs, Lockbit Exposed 🚨 Join us daily on the CyberHub Podcast as we delve into the latest headlines for cybersecurity practitioners Ep – 907: Today’s episode will discuss the latest news as South African Airways Cyberattack more news below:· Masimo Manufacturing Cyberattack· Cisco Patches Vulnerabilities· Russian Data Theft Malware Spotted For more information, please visit our website: https://www.cyberhubpodcast.com/ ✅ Story Links: https://therecord.media/south-african-airways-cyberattack-disruptedhttps://www.securityweek.com/masimo-manufacturing...
2025-05-0818 minCyberHub PodcastUK Retailer Harrod’s 🛍️ Cyber Attack, E-Commerce Supply Chain Attacks, TikTok EU GDPR Fine 🕵️♂️🎙️ UK Retailer Harrod’s Cyber Attack, E-Commerce Supply Chain Attacks, TikTok EU GDPR Fine 🚨 Join us daily on the CyberHub Podcast as we delve into the latest headlines for cybersecurity practitioners Ep – 904: Today’s episode will discuss the latest news as UK Retailer Harrod’s Cyber Attack more news below:· Ransomware Attacks on Food· Black Kingdom Ransomware· FinCen Targets Cambodia Cyber Crime For more information, please visit our website: https://www.cyberhubpodcast.com/ ✅ Story Links: https://www.securityweek.com/ransomware-group-claims-attac...
2025-05-0517 minCyberHub PodcastAscension Breach Linked to Cleo Hack, North Korea IT Fraud Hits Fortune 500, Clause AI Exploited🎙️ Ascension Breach Linked to Cleo Hack, North Korea IT Fraud Hits Fortune 500, Clause AI Exploited 🚨 Join us daily on the CyberHub Podcast as we delve into the latest headlines for cybersecurity practitioners Ep – 903: Today’s episode will discuss the latest news as Ascension Breach Linked to Cleo Hack more news below:· Co-op Retailer System Shut Down· NSO Whatsapp Spyware Case· Ukraine & Russia Trade Cyber Blows For more information, please visit our website: https://www.cyberhubpodcast.com/ ✅ Story Links: https://www.securityweek.com/ascension...
2025-05-0118 minCyberHub PodcastSAP Zero-Day, Nova Scotia Energy Provider Offline, SK Telecom Response, Leaked Git Secrets & Tokens🎙️ SAP Zero-Day, Nova Scotia Energy Provider Offline, SK Telecom Response, Leaked Git Secrets & Tokens 🚨 Join us daily on the CyberHub Podcast as we delve into the latest headlines for cybersecurity practitioners Ep – 902: Today’s episode will discuss the latest news as SAP ZeroDay Exploit more news below:· France Blames Russia for Cyberattacks· Weaponization of EV Batteries· Google Zero Day Report For more information, please visit our website: https://www.cyberhubpodcast.com/ ✅ Story Links: https://www.securityweek.com/sap-zero-day-possibly-exploited-by...
2025-04-3017 minCyberHub PodcastMark & Spencer CyberAttack, SK Telecom Hacked, Lemonade Breach, Russian Cyber Sabotage🎙️ Mark & Spencer CyberAttack, SK Telecom Hacked, Lemonade Breach, Russian Cyber Sabotage 🚨 Join us daily on the CyberHub Podcast as we delve into the latest headlines for cybersecurity practitioners Ep – 901: Today’s episode will discuss the latest news as Mark & Spencer CyberAttack more news below:· Baltimore public school ransomware· Cookie Bite Attack· MITRE Launches D3fend CAD Tool For more information, please visit our website: https://www.cyberhubpodcast.com/ ✅ Story Links: https://www.securityweek.com/cyberattack-hits-british-retailer-marks-spencer/https://www.securityweek.com/korean-telco-giant...
2025-04-2315 minCyberWire DailyMajor breach at the US Treasury’s OCC.Treasury’s OCC reports a major email breach. Patch Tuesday updates. A critical vulnerability in AWS Systems Manager (SSM) Agent allowed attackers to execute arbitrary code with root privileges. Experts urge Congress to keep strict export controls to help slow China’s progress in AI. A critical bug in WhatsApp for Windows allows malicious code execution.CISA adds multiple advisories on actively exploited vulnerabilities. Insider threat allegations rock a major Maryland medical center. Microsoft’s Ann Johnson from Afternoon Cyber Tea is joined by Jack Rhysider, the creator and host of the acclaimed podcast Darknet Diaries. Feds Aim to Rewrite...
2025-04-0928 minCyberWire DailyMassive malware cleanup.The FBI deletes PlugX malware from thousands of U.S. computers. Researchers uncover vulnerabilities in Windows 11 allowing attackers to bypass protections and execute code at the kernel level. A look at (a busy) Patch Tuesday. Researchers uncovered six critical vulnerabilities in a popular Linux file transfer tool. Texas sues Allstate for allegedly collecting, using, and selling driving data without proper consent. An executive order enables AI developers to build data centers on federal lands. On our Industry Voices segment, we are joined by Mike Hamilton, Chief Information Officer at Cloudflare, discussing how tech sprawl emulates the snake game. Meta...
2025-01-1535 min
Inside The Media MindsInside the Media Mind of Kevin Townsend: SecurityWeekIn the latest episode of #IMM, Christine and Madison speak with Kevin Townsend, Senior Contributor at SecurityWeek.
2024-11-0429 min
The Daily Threat🚨 Cybersecurity Crisis: Ransomware Surge, Data Breach in Italy, and Chrome Vulnerability! 🚨Welcome to The Daily Threat! Today, we’re diving into urgent cybersecurity stories every business needs to know to stay protected. From the massive data breach affecting hundreds of thousands in Italy to a concerning rise in ransomware groups and a critical Chrome vulnerability—each one is a reminder of how vulnerable businesses can be in today’s digital world. Get the insights you need to secure your data, protect your organization, and stay informed.👇 Dive into the full stories here:1️⃣ Italian Data Breach Impacts 800,000 CitizensLearn about the data exposure involving a private investigative agency and the criti...
2024-10-3104 minSecurityWeek PodcastFireside Chat With Phil Venables, CISO at Google CloudIn this fireside chat, we speak with Phil Venables, Chief Information Security Officer of Google Cloud. Venables leads the risk, security, compliance, and privacy teams for Google Cloud. Before joining Google, he was a Partner at Goldman Sachs where he held multiple roles over a long career, initially as their first Chief Information Security Officer, a role he held for 17 years. (Session recorded at SecurityWeek's 2024 Cloud & Data Security Summit)Follow SecurityWeek on LinkedIn
2024-09-0934 minSecurityWeek Podcast Series - Cybersecurity InsightsFireside Chat With Phil Venables, CISO at Google CloudIn this fireside chat, we speak with Phil Venables, Chief Information Security Officer of Google Cloud. Venables leads the risk, security, compliance, and privacy teams for Google Cloud. Before joining Google, he was a Partner at Goldman Sachs where he held multiple roles over a long career, initially as their first Chief Information Security Officer, a role he held for 17 years. (Session recorded at SecurityWeek's 2024 Cloud & Data Security Summit)Follow SecurityWeek on LinkedIn
2024-09-0934 minSecurityWeek PodcastFireside Chat: Bennett Pursell on the OpenSSF Siren Threat Intel ProjectIn this session SecurityWeek speaks to Bennett Pursell, Ecosystem Strategist at the Open Source Security Foundation (OpenSSF) about OpenSSF Siren, a community data-sharing initiative aimed at bolstering the defenses of open source projects worldwide. In this fireside chat, Pursell discusses the origins and goals of OpenSSF Siren, exploring transparent access to data that can help small- and medium-sized businesses during active incidents. Pursell also shares insights on the value of threat intelligence, the shelf life of IOC (indicators of compromise) and how businesses with limited resources can mitigate exposure to risk.(Recorded at SecurityWeek's 2024 Threat Detection & Incident...
2024-09-0630 minSecurityWeek Podcast Series - Cybersecurity InsightsFireside Chat: Bennett Pursell on the OpenSSF Siren Threat Intel ProjectIn this session SecurityWeek speaks to Bennett Pursell, Ecosystem Strategist at the Open Source Security Foundation (OpenSSF) about OpenSSF Siren, a community data-sharing initiative aimed at bolstering the defenses of open source projects worldwide. In this fireside chat, Pursell discusses the origins and goals of OpenSSF Siren, exploring transparent access to data that can help small- and medium-sized businesses during active incidents. Pursell also shares insights on the value of threat intelligence, the shelf life of IOC (indicators of compromise) and how businesses with limited resources can mitigate exposure to risk.(Recorded at SecurityWeek's 2024 Threat Detection & Incident...
2024-09-0630 minSecurityWeek Podcast Series - Cybersecurity InsightsFireside Chat: Abhishek Arya, Head of Google's Open Source Security TeamIn this exclusive fireside chat, SecurityWeek editor-at-large Ryan Naraine interviews Abhishek Arya, Director of Engineering on Google’s open source and supply chain security teams. We cover the evolving landscape of Software Supply Chain security, highlighting key advancements, challenges, research priorities, and much more. Session recoredef for SecurityWeek's 2024 Supply Chain Security Summit.Follow SecurityWeek on LinkedIn
2024-03-2631 minSecurityWeek PodcastFireside Chat: Abhishek Arya, Head of Google's Open Source Security TeamIn this exclusive fireside chat, SecurityWeek editor-at-large Ryan Naraine interviews Abhishek Arya, Director of Engineering on Google’s open source and supply chain security teams. We cover the evolving landscape of Software Supply Chain security, highlighting key advancements, challenges, research priorities, and much more. Session recoredef for SecurityWeek's 2024 Supply Chain Security Summit.Follow SecurityWeek on LinkedIn
2024-03-2631 minSecurityWeek Podcast Series - Cybersecurity InsightsPalo Alto Networks Talks IT/OT ConvergenceIn this episode, SecurityWeek editor-at-large Ryan Naraine interviews Del Rodillas, Senior Director of Product Management at Palo Alto Networks, about the integration of IT and OT in the ICS threat landscape. We discuss the evolution of cyber resilience, the challenges of merging IT and OT governance structures, process integrations for IT/OT security strategy, consolidated tech stacks for IT and OT, and the role of next-generation firewalls in an integrated IT/OT world.Follow SecurityWeek on LinkedIn
2024-01-2920 minSecurityWeek PodcastPalo Alto Networks Talks IT/OT ConvergenceIn this episode, SecurityWeek editor-at-large Ryan Naraine interviews Del Rodillas, Senior Director of Product Management at Palo Alto Networks, about the integration of IT and OT in the ICS threat landscape. We discuss the evolution of cyber resilience, the challenges of merging IT and OT governance structures, process integrations for IT/OT security strategy, consolidated tech stacks for IT and OT, and the role of next-generation firewalls in an integrated IT/OT world.Follow SecurityWeek on LinkedIn
2024-01-2920 minSecurityWeek Podcast Series - Cybersecurity InsightsFireside Chat With Former Netflix Security Chief, Jason ChanEnjoy this fireside chat with Jason Chan, former head of information security at Netflix and operating advisor, Bessemer Venture Partners. Jason joins SecurityWeek editor-at-large Ryan Naraine for a frank discussion on the state of vulnerability management and software development, multi-cloud deployments and expanding attack surfaces, the cyber startup vendor ecosystem, Microsoft's booming cybersecurity business, and some areas still ripe for innovation. (Recorded at SecurityWeek's 2023 Attack Surface Management Summit)Follow SecurityWeek on LinkedIn
2023-11-1533 minSecurityWeek PodcastFireside Chat With Former Netflix Security Chief, Jason ChanEnjoy this fireside chat with Jason Chan, former head of information security at Netflix and operating advisor, Bessemer Venture Partners. Jason joins SecurityWeek editor-at-large Ryan Naraine for a frank discussion on the state of vulnerability management and software development, multi-cloud deployments and expanding attack surfaces, the cyber startup vendor ecosystem, Microsoft's booming cybersecurity business, and some areas still ripe for innovation. (Recorded at SecurityWeek's 2023 Attack Surface Management Summit)Follow SecurityWeek on LinkedIn
2023-11-1533 min
The Audit - Cybersecurity PodcastThe Dark Side of Cyberspace: Data Breaches and the Price of InformationEpisode 022 - The AuditWant to understand the dark underbelly of cyberspace? Join us as we take a deep dive into recent data breaches at T-Mobile, discussing why fewer customers were impacted this time around compared to the January API attack. Get insights on how negligence in security could lead to government oversight and understand the power consumers can wield by voting with their feet. Learn how the fines collected from such breaches could fund cybersecurity improvements in vulnerable entities such as school districts.Curious about the consequences of data breaches? We shed light on...
2023-07-2442 min
Future of Cyber CrimeTips for Researchers When Working with Eduard Kovacs, Cyber Journalist from SecurityWeekIn this episode of the Future of Cybercrime podcast, Zaira speaks with Eduard Kovacs, a contributing editor to SecurityWeek. They discuss Eduard’s decade-long background as a cybersecurity journalist, the evolving trends in cybercrime over the past decade, the collaborative relationship between journalists and cybersecurity researchers, and how information is obtained from underground forums. Topics discussed: Eduard’s approach to write with individual readers in mind, even if he is covering a technical topicCyber threat actors are seen as humans, just like journalists and researchers.Why collaboration between journalists and cybersecurity researchers is critical.The role journalists play in bringing attent...
2023-03-2329 minSecurityWeek PodcastFireside Chat With Steve Mancini, Guardant HealthIn this interview from SecurityWeek's 2022 Threat Hunting Summit, Steve Mancini, head of Information Security at Guardant Health, discusses his personal mission to help secure healthcare data in the cancer research space and how threat hunting and threat intelligence fits into a modern cybersecurity program.Mancini discusses a career in the cybersecurity trenches -- managing threat intel at Intel Corp. before pivoting into the CISO chair to building and and security programs. Attendees can expect an engaging conversation on the CISO's decision-making process, best practices for securing corporate assets and data, the EDR and anti-malware landscape, and frameworks fo...
2022-11-1632 minSecurityWeek Podcast Series - Cybersecurity InsightsFireside Chat With Steve Mancini, Guardant HealthIn this interview from SecurityWeek's 2022 Threat Hunting Summit, Steve Mancini, head of Information Security at Guardant Health, discusses his personal mission to help secure healthcare data in the cancer research space and how threat hunting and threat intelligence fits into a modern cybersecurity program.Mancini discusses a career in the cybersecurity trenches -- managing threat intel at Intel Corp. before pivoting into the CISO chair to building and and security programs. Attendees can expect an engaging conversation on the CISO's decision-making process, best practices for securing corporate assets and data, the EDR and anti-malware landscape, and frameworks fo...
2022-11-1632 minSecurityWeek PodcastFireside Chat With Fidelity CISO, Adam ElyEnjoy this engaging fireside chat on security leadership with Adam Ely, Chief Information Security Officer at Fidelity Investments.At SecurityWeek's 2022 CISO Forum, SecurityWeek's editor-at-large Ryan Naraine hosted a discussion with Adam on the role of the modern CISO, the challenges of building a mature risk management program, communications challenges in large organizations, mentorship and staff retention, and much more. Follow SecurityWeek on LinkedIn
2022-09-1435 minSecurityWeek Podcast Series - Cybersecurity InsightsFireside Chat With Fidelity CISO, Adam ElyEnjoy this engaging fireside chat on security leadership with Adam Ely, Chief Information Security Officer at Fidelity Investments.At SecurityWeek's 2022 CISO Forum, SecurityWeek's editor-at-large Ryan Naraine hosted a discussion with Adam on the role of the modern CISO, the challenges of building a mature risk management program, communications challenges in large organizations, mentorship and staff retention, and much more. Follow SecurityWeek on LinkedIn
2022-09-1435 minSecurityWeek Podcast Series - Cybersecurity InsightsFireside Chat With Katie Moussouris, Luta SecurityIn this fireside chat from SecurityWeek's CISO Forum, Luta Security chief executive Katie Moussouris shares lessons from her work creating bug bounty and vulnerability disclosure programs for some of the biggest organizations in the world. Join this session to learn about the value -- and pitfalls -- of bug bounty programs, best practices around managing the flow of vulnerability data, and security response priorities.Follow SecurityWeek on LinkedIn
2022-09-1431 minSecurityWeek PodcastFireside Chat With Katie Moussouris, Luta SecurityIn this fireside chat from SecurityWeek's CISO Forum, Luta Security chief executive Katie Moussouris shares lessons from her work creating bug bounty and vulnerability disclosure programs for some of the biggest organizations in the world. Join this session to learn about the value -- and pitfalls -- of bug bounty programs, best practices around managing the flow of vulnerability data, and security response priorities.Follow SecurityWeek on LinkedIn
2022-09-1431 minSecurityWeek PodcastShould CISOs Care About Cyberwarfare?For the modern CISO, it's impossible to avoid news headlines and warnings about 'cyberwar' and nation-state APT attacks that require urgent attention. From the latest zero day exploit discovery to advisories from intelligence agencies, security leaders are often overwhelmed and unable to filter through the noise to make informed decisions.In this discussion from SecurityWeek's Threat Intelligence Summit, threat intel and detection and response practitioners will help explain the current threat landscape, the surge in zero-day exploit discoveries, the blurring of lines between APTs and ransomware attacks, and much more.Guests: A...
2022-05-1846 minSecurityWeek Podcast Series - Cybersecurity InsightsShould CISOs Care About Cyberwarfare?For the modern CISO, it's impossible to avoid news headlines and warnings about 'cyberwar' and nation-state APT attacks that require urgent attention. From the latest zero day exploit discovery to advisories from intelligence agencies, security leaders are often overwhelmed and unable to filter through the noise to make informed decisions.In this discussion from SecurityWeek's Threat Intelligence Summit, threat intel and detection and response practitioners will help explain the current threat landscape, the surge in zero-day exploit discoveries, the blurring of lines between APTs and ransomware attacks, and much more.Guests: A...
2022-05-1846 minSecurityWeek PodcastFireside Chat With Shane Huntley, Google Threat Analysis Group (TAG)Enjoy this exclusive fireside chat with Shane Huntley, head of Google's TAG (Threat Analysis Group). In this session from SecurityWeek's Threat Intelligence Summit, we have a frank discussion on the science of threat intelligence, the cloudy nature of the APT landscape, the surge in big-game ransomware and nation-state malware activity worth tracking.Follow SecurityWeek on LinkedIn
2022-05-1828 minSecurityWeek Podcast Series - Cybersecurity InsightsFireside Chat With Shane Huntley, Google Threat Analysis Group (TAG)Enjoy this exclusive fireside chat with Shane Huntley, head of Google's TAG (Threat Analysis Group). In this session from SecurityWeek's Threat Intelligence Summit, we have a frank discussion on the science of threat intelligence, the cloudy nature of the APT landscape, the surge in big-game ransomware and nation-state malware activity worth tracking.Follow SecurityWeek on LinkedIn
2022-05-1828 minSecurityWeek PodcastNews Podcast: Pipedream/Incontroller ICS Malware Designed to Target ICS[Breaking News Podcast] Sergio Caltagirone, VP of Threat Intelligence at industrial cybersecurity firm Dragos, discusses the U.S. government's joint advisory on the discovery of rare custom malware known as Pipedream/Incontroller, which is capable of doing damage to ICS/SCADA installations.Follow SecurityWeek on LinkedIn
2022-04-1412 minSecurityWeek Podcast Series - Cybersecurity InsightsNews Podcast: Pipedream/Incontroller ICS Malware Designed to Target ICS[Breaking News Podcast] Sergio Caltagirone, VP of Threat Intelligence at industrial cybersecurity firm Dragos, discusses the U.S. government's joint advisory on the discovery of rare custom malware known as Pipedream/Incontroller, which is capable of doing damage to ICS/SCADA installations.Follow SecurityWeek on LinkedIn
2022-04-1412 minSecurityWeek PodcastFireside Chat With McDonald’s CISO Shaun MarionIn this security leadership fireside chat, McDonald’s CISO Shaun Marion joins SecurityWeek’s Ryan Naraine to discuss the role of the modern CISO, the challenges of building a mature risk management program, securing multi-cloud deployments, supply chain anxieties, and much more. (Source: SecurityWeek’s 2022 Attack Surface Management Summit)Follow SecurityWeek on LinkedIn
2022-03-3139 minSecurityWeek Podcast Series - Cybersecurity InsightsFireside Chat With McDonald’s CISO Shaun MarionIn this security leadership fireside chat, McDonald’s CISO Shaun Marion joins SecurityWeek’s Ryan Naraine to discuss the role of the modern CISO, the challenges of building a mature risk management program, securing multi-cloud deployments, supply chain anxieties, and much more. (Source: SecurityWeek’s 2022 Attack Surface Management Summit)Follow SecurityWeek on LinkedIn
2022-03-3139 min
CISO Stories Podcast (Audio)Security Awareness That Works! - Steven Lentz - CSP #38October is Security Awareness Month! Security Awareness programs must grab the employee's attention if they are to succeed. Join the interviewee as he explains how he successfully engaged the workforce through creative and visible security awareness methods! To view the article from the CISO COMPASS Book that sparked this interview, please visit: https://securityweekly.com/wp-content/uploads/2021/07/CISOSTORIES_Steven_Lentz_Article.pdf Lentz, S. 2019. Security Awareness That Works. In CISO COMPASS: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers, 1st Ed, pg 151. Fitzgerald, T. CRC Press, Boca Raton, Fl. www.amazon.co...
2021-10-0524 min
The Bottom Line with Deepak and SyedEpisode 27 - Dow tumbling 700 points, Covid-19 fourth wave?, Printspooler continues, More ransomware and breaches.In this week's episode, Syed and Deepak talk about more security and technology news featuring Mircosoft's print spooler zero-day, Chrome's zero-day, and more. Deepak also talks about the Dow tumbling 700 points, Biden's inflation speech, and the crew has a lengthy discussion on Covid-19 and what to expect in the future. The episode is ended off with stock picks for the trading week.
Time:
0:00 - Intro
1:09 - New PrintNightmare Patch Can Be Bypassed, Say Researchers
1:58 - Oil giant Saudi Aramco hit by 1TB...
2021-07-2036 min
SecurityWeek PodcastSpotlight Podcast: F5's Corey Marshall Discusses Zero TrustOn this special edition of SecurityWeek's spotlight podcast, Corey Marshall, Director of Security Architecture at F5, discusses how Zero Trust can be used as a powerful strategy to help businesses stay secure amidst rapid digital transformation and expanding network attack surface.Follow SecurityWeek on LinkedIn
2021-04-2913 minSecurityWeek Podcast Series - Cybersecurity InsightsSpotlight Podcast: F5's Corey Marshall Discusses Zero TrustOn this special edition of SecurityWeek's spotlight podcast, Corey Marshall, Director of Security Architecture at F5, discusses how Zero Trust can be used as a powerful strategy to help businesses stay secure amidst rapid digital transformation and expanding network attack surface.Follow SecurityWeek on LinkedIn
2021-04-2913 min
DigitalisierungsFieberFolge 103: SecurITyweek - völlig gegen jeden Trend, wir planen das mega Event im 1. Halbjahr!In der heutigen Folge #Digitalisierungsfieber präsentiert Euch IT- und Datenschutzexperte Andreas Kunz gemeinsam mit Werner Theiner, dem German Mittelstand, managedIT und datensicherheit.de, DAS Event im 1. Halbjahr - die SecurITyweek. Denn, die sichere Digitalisierung ist #CHEFSACHE! Sie wollen auch zukünftig digital handlungsfähig sein und auch weiterhin DSGVO-konform agieren? Dann registrieren Sie sich jetzt unter https://andreaskunz.it für Ihr persönliches kostenfreies Online Beratungsgespräch!
2021-04-0610 min
Hacker Valley StudioEpisode 99 - Securityweek's 2020 CISO Forum: HVS StyleIn this special live recording of the Hacker Valley Studio podcast, Chris and Ron are joined by Fredrick 'Flee' Lee, chief security officer at Gusto and an inspirational cybersecurity leader who is focused on making security "lovable" across the organization.
Securityweek’s CISO Forum is designed for senior level security leaders to discuss, share and learn innovative information security and risk management strategies. The forum addresses issues and challenges that are top of mind for today’s security leaders and what the future looks like as chief defenders of the enterprise.
The Hacker Valley Studio podcas...
2020-10-1231 min
Cybersecurity & Cryptocurrency PodcastCyber & Crypto Podcast - Episode 102Cyber: https://www.zdnet.com/article/fbi-is-investigating-more-than-1000-cases-of-chinese-theft-of-us-technology/?ftag=COS-05-10aaa0g&taid=5e40f8a2ecb7110001ba5b78&utm_campaign=trueAnthem%3A+Trending+Content&utm_medium=trueAnthem&utm_source=twitter https://www.securityweek.com/ransomware-hits-north-miami-beach-police-department https://www.zdnet.com/article/deep-learning-godfathers-bengio-hinton-and-lecun-say-the-field-can-fix-its-flaws/?ftag=COS-05-10aaa0g&taid=5e41a857ecb7110001ba5de8&utm_campaign=trueAnthem%3A+Trending+Content&utm_medium=trueAnthem&utm_source=twitter https://www.securityweek.com/facebooks-twitter-instagram-accounts-hacked https://www.securityweek.com/unique-illinois-privacy-law-leads-550m-facebook-deal https://www.securityweek.com/equifax-breach-latest-many-hacks-linked-china Crypto: https://cointelegraph.com/news/bitcoin-price-forms-golden-cross-as-china-panic-prints-170b https://www.coindesk.com/95-confidence-ethereum-developers-pencil-in-july-2020-for-eth-2-0-launch?utm_source=hootsuite&...
2020-02-1330 minSecurityWeek Podcast Series - Cybersecurity InsightsThomas Rid on Cyberwar, Attribution and the Crypto DebateThomas Rid, Professor in the Department of War Studies at King’s College London, joins Ryan Naraine on the podcast to discuss his new book, the lack of nuance in the crypto debate and the future of global cyber conflict.
Follow SecurityWeek on LinkedIn
2016-05-2028 minSecurityWeek PodcastThomas Rid on Cyberwar, Attribution and the Crypto DebateThomas Rid, Professor in the Department of War Studies at King’s College London, joins Ryan Naraine on the podcast to discuss his new book, the lack of nuance in the crypto debate and the future of global cyber conflict.
Follow SecurityWeek on LinkedIn
2016-05-2028 minSecurityWeek PodcastJeremiah Grossman on the Attacker-Defender MentalityInfosec veteran and former CEO of WhiteHat Security Jeremiah Grossman joins Ryan Naraine on the podcast to talk about the parallels between jiu-jitsu and computer security and the ongoing cat-and-mouse game between attackers and defenders.
Follow SecurityWeek on LinkedIn
2016-05-1229 minSecurityWeek Podcast Series - Cybersecurity InsightsJeremiah Grossman on the Attacker-Defender MentalityInfosec veteran and former CEO of WhiteHat Security Jeremiah Grossman joins Ryan Naraine on the podcast to talk about the parallels between jiu-jitsu and computer security and the ongoing cat-and-mouse game between attackers and defenders.
Follow SecurityWeek on LinkedIn
2016-05-1229 minSecurityWeek PodcastPodcast: Why Are Hospitals Such a Prime Ransomware Target?Mike Hanley, Director of Duo Labs at Duo Security, joins Ryan Naraine on the podcast to talk about the state of security in the healthcare sector and why hospitals are such a prime target for ransomware attacks.
Follow SecurityWeek on LinkedIn
2016-05-0321 minSecurityWeek Podcast Series - Cybersecurity InsightsPodcast: Why Are Hospitals Such a Prime Ransomware Target?Mike Hanley, Director of Duo Labs at Duo Security, joins Ryan Naraine on the podcast to talk about the state of security in the healthcare sector and why hospitals are such a prime target for ransomware attacks.
Follow SecurityWeek on LinkedIn
2016-05-0321 minSecurityWeek PodcastInside the Epic Turla Cyber-Espionage CampaignDirector of Kaspersky Lab Global Research & Analysis Team Costin Raiu joins the podcast to discuss the latests discoveries surrounding the Epic Turla cyber-espionage campaign. Raiu talks about the infection mechanisms used by the malware and provides a global look at victim data.
Disclosure: Ryan Naraine is also a Kaspersky Lab employee.Follow SecurityWeek on LinkedIn
2014-08-0816 minSecurityWeek Podcast Series - Cybersecurity InsightsInside the Epic Turla Cyber-Espionage CampaignDirector of Kaspersky Lab Global Research & Analysis Team Costin Raiu joins the podcast to discuss the latests discoveries surrounding the Epic Turla cyber-espionage campaign. Raiu talks about the infection mechanisms used by the malware and provides a global look at victim data.
Disclosure: Ryan Naraine is also a Kaspersky Lab employee.Follow SecurityWeek on LinkedIn
2014-08-0816 minSecurityWeek PodcastBluebox Labs Explains Android 'Fake ID' VulnerabilityChief Technology Officer at Bluebox Security Jeff Forristal joins the podcast to discuss a significant Android vulnerability that lets hackers create a malicious application by copying the ID of a legitimate application to gain the same special privileges of the legitimate app.
Follow SecurityWeek on LinkedIn
2014-07-2915 minSecurityWeek Podcast Series - Cybersecurity InsightsBluebox Labs Explains Android 'Fake ID' VulnerabilityChief Technology Officer at Bluebox Security Jeff Forristal joins the podcast to discuss a significant Android vulnerability that lets hackers create a malicious application by copying the ID of a legitimate application to gain the same special privileges of the legitimate app.
Follow SecurityWeek on LinkedIn
2014-07-2915 minSecurityWeek Podcast Series - Cybersecurity InsightsTalking 'Suits and Spooks' with Jeffrey CarrJeffrey Carr, founder of Taia Global Inc. and creator of the Suits and Spooks conference series, joins the podcast to talk about the evolution of the event and the marriage of business intelligence and cyber-security issues.
Follow SecurityWeek on LinkedIn
2013-06-0320 minSecurityWeek PodcastTalking 'Suits and Spooks' with Jeffrey CarrJeffrey Carr, founder of Taia Global Inc. and creator of the Suits and Spooks conference series, joins the podcast to talk about the evolution of the event and the marriage of business intelligence and cyber-security issues.
Follow SecurityWeek on LinkedIn
2013-06-0320 min