Cybersecurity Headlines

Microsoft Teams to get AI-powered, context-aware phishing detection

https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-to-get-ai-powered-context-aware-phishing-detection/

Quest Diagnostics confirms data breach including exposed patient records

https://www.bleepingcomputer.com/news/security/quest-diagnostics-confirms-data-breach-exposed-patient-records/

Senators say targeted ads are a security risk. Ad groups disagree

https://cyberscoop.com/targeted-ads-spyware-government-threat/

Bipartisan bill urges federal guidance for distillation attacks

https://cyberscoop.com/bipartisan-bill-combat-ai-distillation-attacks-nist/

CISA adds Collabora Online and Arista VeloCloud flaws to KEV

https://thehackernews.com/2026/10/cisa-flags-two-actively-exploited.html

Autonomous attack agent in Skynet mode hijacks other AI models

https://www.theregister.com/security/2026/10/24/autonomous-attack-agent-in-skynet-mode-hijacks-other-models-to-carry-out-its-evil-deeds/5305215

Researchers find a third PHP2Shell bug

https://www.theregister.com/security/2026/10/23/theres-a-third-php2shell-bug-but-it-wont-get-an-emergency-fix/5305208

Data breach takes a bite out of crime stoppers organization

https://therecord.media/toronto-crime-tips-org-freezes-ops-after-breach

Get the shownotes here: https://cisoseries.com/cybersecurity-news-ai-powered-phishing-detection-third-php2shell-bug-quest-medical-breach/

Mobile app security isn't just a tech issue; it's a revenue issue. A recent global study found that seventy-two percent of organizations experienced a mobile app security incident last year. Even worse? Sixty-five percent saw customer churn or uninstalls as a result. Protect your brand and your bottom line with layered mobile app protection. Learn more at Guardsquare.com.

Read the full stories at CISOSeries.com.

This week's Department of Know is hosted by Rich Stroffolino, with guests Gary Chan, CISO, SSM Health, and Doug Mayer, CISO, RXSense.

Also check out Gary's work at Security Mentalist.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

Big thanks to our sponsor, ThreatLocker!

Railway says intruder may have accessed customer secrets

https://thehackernews.com/2026/10/railway-says-intruder-may-have-accessed.html

Law enforcement disrupts nearly 11,000 cybercrime networks in Africa

https://www.bleepingcomputer.com/news/security/authorities-disrupt-nearly-11-000-cybercrime-networks-in-africa/

ConnectWise breach let Chinese AI spies move in on cloud tenants

https://www.theregister.com/security/2026/10/22/microsoft-says-connectwise-breach-let-chinese-spies-loose-on-2250-cloud-tenants/5304687

GitLab warns of new maximum severity code execution vulnerability

https://www.bleepingcomputer.com/news/security/gitlab-warns-of-new-max-severity-code-execution-vulnerability/

Hundreds of websites taken offline due to PHP vulnerabilities (continuing coverage)

https://therecord.media/php-script-vulnerabilities-warnings

https://www.bleepingcomputer.com/news/security/amazon-says-php2shell-exploitation-began-4-days-before-patches/

Splunk, SolarWinds release fresh security updates

https://www.securityweek.com/splunk-solarwinds-release-fresh-security-updates/

Lazarus hackers use post-quantum cryptography for malware delivery

https://www.bleepingcomputer.com/news/security/chrome-switching-to-nist-approved-ml-kem-quantum-encryption/

South Carolina officials offer assistance after state capital hit with cyberattack

https://therecord.media/south-carolina-officials-offer-assistance-cyber-incident

Get the show notes here: https://cisoseries.com/cybersecurity-news-october-23-2026/

Huge thanks to our episode sponsor, ThreatLocker

AI risk does not only come from attackers. Employees are adopting AI tools faster than many organizations can evaluate them. Today's tip: an AI policy should be backed by enforceable controls over what tools can access and do. See how ThreatLocker can help you govern AI use at threatlocker.com/ciso.

PHP rushes out emergency fixes for PHP2Shell https://www.bleepingcomputer.com/news/security/php-ships-emergency-patches-for-critical-php2shell-flaws/ https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/

Compromised certificates trigger internet cleanup https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/

Signal calls could stay live after you hang up https://www.theregister.com/security/2026/10/21/signal-bug-could-keep-your-mic-and-camera-on-after-hangup/5304528

OpenAI agents disable safeguards during coding tasks https://www.theverge.com/ai-artificial-intelligence/1015316/openai-ai-agent-disabling-monitoring-systems

Plex2Shell attacks hit media servers https://www.bleepingcomputer.com/news/security/cisa-hackers-chain-plex-flaws-in-plex2shell-attacks-to-breach-servers/

Poisoned LiteLLM update steals secrets & adds a backdoor https://www.theregister.com/security/2026/10/21/litellm-supply-chain-attack-hoovers-up-passwords-and-secrets/5304548

Meta faces a big Cambridge Analytica penalty https://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html

Chrome adds ClickFix warnings and checks insecure connections https://www.securityweek.com/google-hardens-chrome-against-clickfix-attacks-insecure-http-connections/

Get the show notes here: https://cisoseries.com/cybersecurity-news-october-22-2026/

Huge thanks to our episode sponsor, ThreatLocker

AI is compressing the timeline between initial access and impact. That leaves security teams less time to identify, investigate, and contain malicious activity. Faster response helps, but prevention can remove actions from the attack chain entirely. Give your responders a more controlled environment. Book a ThreatLocker demo at threatlocker.com/ciso.

Russian-linked attacks hit naval shipbuilder https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html

Muse exposes secrets when sharing chats https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-when-they-share-conversations/

Army Cyber Command looking to offload attacks to AI https://web.archive.org/web/20261020134149/https://theintercept.com/2026/10/19/army-autonomous-ai-agents-arcyber/

DeepSeek booted from federal agencies https://www.wsj.com/tech/ai/dhs-orders-deepseek-technology-removed-from-federal-civilian-it-systems-060b6d3d?st=m6DV2n

DHS asked CISA to hack voting machine https://www.propublica.org/article/cisa-election-security-donald-trump

EU doesn't require patching hacked freezers https://therecord.media/eu-cyber-law-wont-force-fixes-for-fridges-in-french-attack

Cairn platform abused by threat actors Security Week: https://www.securityweek.com/ai-platform-cairn-abused-to-hack-over-100-organizations/ Reuters: https://www.reuters.com/legal/government/how-one-hacker-used-ai-agents-few-thousand-dollars-break-into-scores-sites-2026-10-19/

Palo Alto still seeing active PAN-OS exploits https://thehackernews.com/2026/10/qilin-and-inc-ransomware-groups-exploit.html

LLMs getting better at COBOL https://openai.com/index/low-resource-programming-languages/

Get the show notes here: https://cisoseries.com/naval-hack-muse-exposes-secrets-army-researching-offensive-ai-hacking/

Huge thanks to our episode sponsor, ThreatLocker

Attackers do not always bring their own tools. AI can help them find ways to misuse software already trusted by the organization. Today's tip: approval should not mean unlimited access. Define what trusted applications can reach and what they can do. Learn how ThreatLocker applies this principle at threatlocker.com/ciso today.

OpenCode breach exposes users' AI keys https://www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/

One hacker puts AI agents to work on 1,200 sites https://www.reuters.com/legal/government/how-one-hacker-used-ai-agents-few-thousand-dollars-break-into-scores-sites-2026-10-19/

Rank Math PRO updates deliver a persistent backdoor https://thehackernews.com/2026/10/popular-wordpress-seo-plugin-rank-math.html

Nikkei discloses its third breach in a month https://www.bleepingcomputer.com/news/security/nikkei-discloses-third-data-breach-in-a-month-18m-records-exposed/

Microsoft adds controls for rogue AI agents https://www.geekwire.com/2026/microsoft-unveils-tools-to-monitor-and-corral-rogue-ai-agents/

ClickFix attackers borrow Siemens' signature https://www.securityweek.com/siemens-software-center-vulnerability-exploited-in-clickfix-malware-attacks/

Pegasus targets Serbian government critics before elections https://therecord.media/serbia-spyware-pegasus-elections

Bullhorn takes staffing platform offline after attack https://www.bleepingcomputer.com/news/security/bullhorn-takes-staffing-platform-offline-to-contain-cyberattack/

Get the show notes here: https://cisoseries.com/cybersecurity-news-october-20-2026/

Huge thanks to our episode sponsor, ThreatLocker

An attacker uses AI to create a payload your security tools have never seen. Detection now has to recognize it before the payload can act. ThreatLocker approaches the problem earlier by controlling whether that code is permitted to run at all. Explore a deny by default approach for your organization at threatlocker.com/ciso.

Cybersecurity jobs report reveals mixed bag

https://www.securityweek.com/us-cybersecurity-job-postings-fall-26-as-ai-security-engineer-demand-soars/

https://cybersn.com/resources/reports/cybersecurity-jobs-report

ConnectWise Suspends cloud backup after supply chain attack

https://thehackernews.com/2026/10/connectwise-suspends-cloud-backup-after.html

Drupal patches critical RCE flaws, warns of exploits

https://www.bleepingcomputer.com/news/security/drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon/

Chinese espionage attackers suspected of BeyondTrust zero-day

https://therecord.media/beyond-trust-cyberattack-china

Proofpoint to acquire Varonis' data security

https://therecord.media/proofpoint-varonis-cybersecurity-acquisition

Burger King Japan data breach exposes 11 million customer records

https://www.bleepingcomputer.com/news/security/burger-king-japan-data-breach-exposes-11-million-customer-records/

BAE Systems cyberattack disrupts US federal court operations

https://www.bleepingcomputer.com/news/security/bae-systems-cyberattack-disrupts-us-federal-court-operations/

CikaBika Bot RAT abuses Discord

https://www.securityweek.com/cikabika-bot-rat-uses-discord-for-cc/

Get the show notes here: https://cisoseries.com/cybersecurity-news-october-19-2026/

Huge thanks to our episode sponsor, ThreatLocker

AI is helping attackers research targets, create malicious code, and adapt faster. But the fundamentals have not changed. Code still needs to execute, applications still need access, and attackers still need privileges. Today's tip: control those actions instead of trying to predict every threat. Learn more from ThreatLocker at threatlocker.com/ciso.

See the full stories at cisoseries.com

This week's Department of Know is hosted by Rich Stroffolino, with guests Dennis Pickett, vp and CISO, RTI International, and David Cross, CISO, Atlassian.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

CenterPoint Energy reveals data breach numbers

https://www.securitymagazine.com/articles/102658-1m-impacted-by-centerpoint-energy-data-breach

Zero-Click Candiru spyware infections at Al Jazeera tracked to targeted online ads

https://thehackernews.com/2026/10/citizen-lab-traces-zero-click-candiru.html

UK Legal Aid Agency Hack Scope Widens After Forensic Review

https://www.securityweek.com/uk-legal-aid-agency-hack-scope-widens-after-forensic-review/

Bank of America needed 1,000 contractors to patch bugs found by Mythos

https://www.theregister.com/security/2026/10/15/bank-of-america-had-to-bring-in-1000-contractors-to-patch-all-the-bugs-mythos-identified/5303275

Microsoft takes down 3 major China-based phishing platforms

https://therecord.media/microsoft-takes-down-3-major-chinese-phishing-platforms

Windows Server 2022 reaches end of mainstream support

https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-server-2022-reached-end-of-mainstream-support/

Senators press for AI safety and security

https://cyberscoop.com/congress-presses-trump-administration-ai-safety-cybersecurity/

French supermarket refrigeration attack widens

https://www.securityweek.com/supermarket-refrigeration-attack-widens-to-copeland-dixell-controllers/

Get the show notes here: https://cisoseries.com/cybersecurity-news-october-16-2026/

Huge thanks to our episode sponsor, Guardsquare

Attackers are treating your mobile app like an open book. Sixty-three percent of security leaders recently detected app tampering, cloning, or unauthorized modifications. When your code runs in an untrusted environment, you need runtime self-protection and code hardening to keep attackers out. Address tampering before it starts. Learn more at Guardsquare.com.

FBI shuts down North Korean laptop farms https://www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/

Meta's stolen credentials open GitHub repositories https://www.securityweek.com/meta-says-hackers-took-code-personal-data-of-1500-in-github-breach/

Cisco email gateways face active attacks https://thehackernews.com/2026/10/cisco-warns-of-active-attacks.html

Ledger tells Asian sellers to stop sales https://www.bleepingcomputer.com/news/security/ledger-asks-sellers-across-asia-to-halt-sales-after-supply-chain-attack/

CISA urges Ivanti VPN updates https://www.securitymagazine.com/articles/102655-newly-exploited-vulnerability-in-ivanti-connect-secure

Microsoft's patch count breaks the annual record https://cyberscoop.com/microsoft-patch-tuesday-october-2026/

Six days, three Chrome bugs, one sandbox escape https://www.theregister.com/security/2026/10/14/security-researchers-spent-6-days-doing-their-chromework-built-1b-user-exploit/5303134

Windows gets its Always On VPN back https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-vpn-issues-caused-by-september-windows-updates/

Get the show notes here: https://cisoseries.com/cybersecurity-news-october-15-2026/

Huge thanks to our episode sponsor, Guardsquare

AI is speeding up development, but at what cost? While ninety-six percent of teams now use AI tools, eighty-one percent report that AI-generated code has introduced new vulnerabilities into their mobile apps. In a world with automated threats, you need multi-layered, polymorphic security to stay ahead of the curve. Learn more at Guardsquare.com.

Webcams get drafted into war https://www.wsj.com/tech/cybersecurity/video-cameras-webcams-hacked-war-b00b8a24?st=RRCsaw

Kimsuky's invitations come with malware https://therecord.media/north-korea-hackers-russia-ukraine

Anthropic makes copycats work harder https://www.anthropic.com/research/distillation-defenses

Adobe's patch pile hits 140 https://www.securityweek.com/adobe-patches-140-vulnerabilities-across-10-products/

Scam crackdown nets 28 arrests https://cyberscoop.com/west-african-scammers-international-scam-crackdown-joint-disruption-week/

Fashion brands hit an IT snag https://www.bleepingcomputer.com/news/security/tfg-london-cyberattack-disrupts-systems-at-hobbs-and-whistles-retailers/

npm closes a name-stealing loophole https://thehackernews.com/2026/10/github-tightens-npm-publishing-after.html

Chrome bug bounties bounce back https://www.securityweek.com/google-partially-reverses-chrome-bug-bounty-cuts/

Get the show notes here: https://cisoseries.com/cybersecurity-news-october-14-2026/

Huge thanks to our episode sponsor, Guardsquare

Is your mobile app truly protected? Relying on the OS isn't enough. A global study of thirteen-hundred security and developer leaders found that ninety-six percent of teams using layered protection reported significantly fewer security incidents. Don't wait for a breach to harden your defenses. Get the protection needed for modern secuirty risks. Learn more at Guardsquare.com.

Hackers turn up the heat on French supermarkets: https://www.infosecurity-magazine.com/news/french-supermarket-chains/

Ahold Delhaize offline after cyber attack: https://www.bleepingcomputer.com/news/security/retail-giant-ahold-delhize-takes-systems-offline-after-cyberattack/

Spy chip used in crypto wallet thefts: https://www.bleepingcomputer.com/news/security/ledger-confirms-hardware-wallet-spy-implant-behind-crypto-thefts/

Russian digital services disrupted from drone strike: https://therecord.media/ukraine-strikes-third-yandex-data-center

Microsoft wants AI "emergency brakes": https://www.bbc.com/news/articles/c6rmy7zmvx3lo

UK's AI Security Institute to get early model access: https://www.reuters.com/legal/litigation/us-reverses-course-britains-testing-ai-models-telegraph-says-2026-10-11/ and https://www.telegraph.co.uk/news/2026/10/11/britain-get-first-look-ai-systems-after-white-house-u-turn/

Threat actors trying to use critical SonicWall SMA flaw: https://thehackernews.com/2026/10/critical-sonicwall-sma-1000-flaw.html

Threat actors drop the mic with karaoke hack: https://www.bleepingcomputer.com/news/security/nippon-columbia-malware-incident-exposes-86-million-karaoke-fan-records/

Get the show notes here: https://cisoseries.com/cybersecurity-news-october-13-2026/

Huge thanks to our episode sponsor, Guardsquare

Your backend is only as secure as your frontend. Research shows that client-side compromise is now a primary driver of API risk. With sixty-three percent of leaders detecting mobile app tampering or cloning last year, don't leave your mobile app security to chance. Get multilayered protection for your entire mobile app ecosystem from the outside in. Learn more at Guardsquare.com.

CISA's KEV catalog grows by five

https://securityaffairs.com/200734/security/u-s-cisa-adds-proftpd-onlyoffice-docs-strapi-apache-struts-and-isc-bind-flaws-to-its-known-exploited-vulnerabilities-catalog.html

Calendar phishing becomes a thing

https://www.theguardian.com/money/2026/oct/11/calendar-phishing-scam-meeting-renewal-google-microsoft-paypal

Canadian cybersecurity executive arrested in FBI hack

https://www.cnn.com/2026/10/09/politics/fbi-arrest-shinyhunters-hack

Hackers abuse Google Ads, Bing redirects to deliver Claude ClickFix attacks

https://www.bleepingcomputer.com/news/security/hackers-abuse-google-ads-bing-redirects-to-push-claude-clickfix-attacks/

Biosensor firm iRhythm announces data breach numbers

https://therecord.media/irhythm-data-breach-reports

Japan confirms arrest of Russian Qilin operative

https://therecord.media/japan-germany-ransomware-arrest

Anthropic cuts live internet access for internal AI tests after exploitative behaviors

https://thehackernews.com/2026/10/anthropic-cuts-live-internet-access-for.html

Leader of money mule operation pleads guilty

https://therecord.media/leader-of-money-mule-operation-for-cybercriminals-pleads-guilty

Get the show notes here: https://cisoseries.com/cybersecurity-news-october-12-2026/

Huge thanks to our episode sponsor, Guardsquare

Mobile app security isn't just a tech issue; it's a revenue issue. A recent global study found that seventy-two percent of organizations experienced a mobile app security incident last year. Even worse? Sixty-five percent saw customer churn or uninstalls as a result. Protect your brand and your bottom line with layered mobile app protection. Learn more at Guardsquare.com.

Read the full stories at CISOSeries.com.

This week's Department of Know is hosted by Rich Stroffolino, with guests Derek Fisher, Director of the Cyber Defense and Information Assurance Program, Temple University, and Chris Ray, field CTO, GigaOm.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

Big thanks to our sponsor, Vanta!

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Attackers hijack three top level domains to obtain Google certificates

https://www.infosecurity-magazine.com/news/attackers-hijack-cctlds-obtain/

Major Yandex data center in Russia hit by Ukrainian drone

https://therecord.media/yandex-russia-drone-ukraine

Cisco warns of critical flaws allowing Nexus switch takeover

https://www.bleepingcomputer.com/news/security/cisco-warns-of-critical-flaws-allowing-nexus-switch-takeover/

Attackers target Atlassian vulnerability shortly after PoC publication

https://www.securityweek.com/attackers-target-critical-atlassian-vulnerability-within-hours-of-poc-publication/

Wazza Phishkit targets banking, government, and manufacturing

https://thehackernews.com/2026/10/wazza-phishkit-targets-banking.html

Shai-Hulud worm moves to AI infrastructure with Tensorlake compromise

https://www.theregister.com/security/2026/10/08/shai-hulud-worm-makes-jump-to-ai-infrastructure-with-tensorlake-compromise/5302054

Japan sees sharp rise in web data leaks

https://thehackernews.com/2026/10/japan-sees-sharp-rise-in-web-data-leaks.html

DOJ charges ransomware recovery CEO for secretly paying hackers

https://therecord.media/ransomware-recovery-charges-doj

Get the show notes here: https://cisoseries.com/cybersecurity-news-top-level-domain-theft-yandex-attacked-cisco-nexus-flaws/

Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Botnet takes orders from a poem https://cyberscoop.com/poellm-malware-botnet-poem-lumen-black-lotus-labs/

Flock's warrantless tracking hits a roadblock https://therecord.media/oklahoma-flock-ruing-supreme-court-chatrie-decision

npm packages come with unwanted extras https://thehackernews.com/2026/10/eight-malicious-npm-packages-downloaded.html

AWS gives AI agents a sandbox with house rules https://www.theregister.com/ai-and-ml/2026/10/07/aws-launches-open-source-ai-agent-sandbox-to-prevent-yolo-mode-disasters/5301687

Outlook closes the door on risky installers https://www.bleepingcomputer.com/news/microsoft/microsoft-outlook-to-block-msix-attachments-used-in-attacks/

Arizona court breach reaches back 30 years https://therecord.media/arizona-courts-say-hackers-stole-info-on-over-1-million

Utility customers' accounts exposed https://www.securityweek.com/georgia-power-alabama-power-data-breach-hits-400000-accounts/

FortiBleed changes the locks on VPN admins https://www.bleepingcomputer.com/news/security/fbi-ongoing-fortibleed-attacks-lock-out-fortigate-vpn-admins/

Get the show notes here: https://cisoseries.com/cybersecurity-news-october-8-2026/

Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Agents trying to compromise Wikipedia tools https://thehackernews.com/2026/10/wikimedia-says-openai-agents-tried-to.html

South Korea claims agents were used in bank hacks https://therecord.media/south-korean-bank-hacks-ai-agents

ASOS confirms data breach https://www.ft.com/content/eab7052d-6640-4928-a128-8df73455ba0a https://www.bleepingcomputer.com/news/security/asos-confirms-data-breach-after-hacked-in-app-notifications/

Contractor fired over FBI data breach https://www.reuters.com/technology/accenture-contractor-removed-fbi-following-damaging-data-breach-sources-say-2026-10-06/

Red Hat's Lightwell shows early returns https://www.infosecurity-magazine.com/news/red-hat-lightwell-remediates-400/

LibreOffice and OpenOffice flaw can run code with no warning https://thehackernews.com/2026/10/libreoffice-and-openoffice-flaws-let.html

Ransomware cancels classes at Japanese university https://therecord.media/osaka-university-cancels-classes-ransomware

ATM malware creator in court https://therecord.media/atm-malware-creator-appears-in-nebraska-court

OpenAI pledges disclosure changes after Australian attack https://www.abc.net.au/news/2026-10-06/openai-hearing-apology-key-takeaways/107235640

Get the show notes here: https://cisoseries.com/cybersecurity-news-agents-vs-wikipedia-south-korean-bank-hacks-asos-breached/

Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Google pauses open-source bug bounties amid AI spam

Ukraine's largest grocery chain hit by extortion attack

Exchange flaw exposes other users' mailboxes

Get the show notes here: https://cisoseries.com/cybersecurity-news-october-6-2026/

Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Warlock ransomware continues to exploit year-old SharePoint flaws

ShinyHunters member detained in Jordan

China-aligned espionage group targets American AI policy experts

Get the show notes here: https://cisoseries.com/cybersecurity-news-warlock-continues-sharepoint-exploits-shinyhunters-member-flips-chinas-ai-espionage/

Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Read all the stories at CISOSeries.com.

This week's Department of Know is hosted by Rich Stroffolino, with guests Brett Conlon, CISO, American Century Investments, and Nick Espinosa, host, Deep Dive Radio Show.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

Big thanks to our sponsor, Intezer.

Report suggests AI and quantum threat preparedness is lacking

Authorities seize KillSec extortion group arrest leader

Dozens more prominent websites scraped by OpenAI software

Get the show notes here: https://cisoseries.com/cybersecurity-news-ai-readiness-reports-killsec-takedown-openai-website-scraping/

Huge thanks to our episode sponsor, Intezer

Gemini 4 starts with cybersecurity

MI5 flags Chinese research funding

Custom GPTs steer users into ClickFix attacks

Get the show notes here:

https://cisoseries.com/cybersecurity-news-october-1-2026/

Huge thanks to our episode sponsor, Intezer

Microsoft details new Star Blizzard and NeedyMantis activity

Cloudflare to become a public certificate authority

Safety concerns scuttle GPT-6.1

Get the show notes here: https://cisoseries.com/cybersecurity-news-star-blizzard-cloudflare-ca-gpt-6-1-scuttled/

Huge thanks to our episode sponsor, Intezer

GPT-6 Astra goes off script in attack simulations

Dutch police arrest "reformed" hacker in ShinyHunters probe

Nvidia builds a browser for AI agents

Get the show notes here:

https://cisoseries.com/cybersecurity-news-september-29-2026/

Huge thanks to our episode sponsor, Intezer

Another Microsoft SharePoint flaw now exploited

Details and doubts emerge regarding OpenAI hack of Australian Health portal

Kiteworks urges customers to stop using platform

Get the show notes here: https://cisoseries.com/cybersecurity-news-new-sharepoint-exploit-australian-openai-hack-developments-kiteworks-urges-stoppage/

Huge thanks to our episode sponsor, Intezer

Read all the stories at CISOSeries.com.

This week's Department of Know is hosted by Rich Stroffolino, with guests Dmitriy Sokolovskiy, senior vice president, information security, Semrush, and Christian Frösch, CISO, CH Media.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

Big thanks to our sponsor, Nudge Security.

Nudge Security now includes AI Agent Discovery, in addition to Day One discovery of every other AI and SaaS app. For each agent, you'll see who created it, what it's connected to, and risks like destructive permissions. And, smart automation helps you engage the right person to fix the risk.

OpenAI program hacks Australia's government health portal

Astrana Health suffers data breach

Ransomware gangs exploiting TeamCity flaw

Get the show notes here: https://cisoseries.com/cybersecurity-news-september-25-2026/

Huge thanks to our episode sponsor, Nudge Security

Here's a question that might make you sweat…how many AI agents are running in your org right now?

Not sure? You're not alone.

But, we have good news. Nudge Security now includes AI Agent Discovery, in addition to Day One discovery of every other AI and SaaS app.

For each agent, you'll see who built it, what it's connected to, and risks like destructive permissions. And, Nudge gives you smart automation to engage the right person to fix the risk. No chasing people down for answers.

Give it a try for free at nudgesecurity.com/cisoseries

ShinyHunters peeks at FBI assignments

WordPress flaw wastes no time

Pentagon's cyber appetite grows

Get the show notes here: https://cisoseries.com/cybersecurity-news-september-24-2026/

Huge thanks to our episode sponsor, Nudge Security

Here's a question that might make you sweat…how many AI agents are running in your org right now?

Not sure? You're not alone.

But, we have good news. Nudge Security now includes AI Agent Discovery, in addition to Day One discovery of every other AI and SaaS app.

For each agent, you'll see who built it, what it's connected to, and risks like destructive permissions. And, Nudge gives you smart automation to engage the right person to fix the risk. No chasing people down for answers.

Give it a try for free at nudgesecurity.com/cisoseries

Cisco releases open-source CAIRN framework

Muse zero-day opens the door to account takeovers

Microsoft can't wake up from Nightmare Eclipse

Get the show notes here: https://cisoseries.com/cybersecurity-news-cairn-framework-muse-zero-day-bigdiskbuster/

Huge thanks to our episode sponsor, Nudge Security

Here's a question that might make you sweat…how many AI agents are running in your org right now?

Not sure? You're not alone.

But, we have good news. Nudge Security now includes AI Agent Discovery, in addition to Day One discovery of every other AI and SaaS app.

For each agent, you'll see who built it, what it's connected to, and risks like destructive permissions. And, Nudge gives you smart automation to engage the right person to fix the risk. No chasing people down for answers.

Give it a try for free at nudgesecurity.com/cisoseries

ShinyHunters hijacks Clop's own leak site

Fake LastPass installers kill security tools

Trusted npm release carries GHAPPIER malware

Huge thanks to our episode sponsor, Nudge Security

Here's a question that might make you sweat…how many AI agents are running in your org right now?

Not sure? You're not alone.

But, we have good news. Nudge Security now includes AI Agent Discovery, in addition to Day One discovery of every other AI and SaaS app.

For each agent, you'll see who built it, what it's connected to, and risks like destructive permissions. And, Nudge gives you smart automation to engage the right person to fix the risk. No chasing people down for answers.

Give it a try for free at nudgesecurity.com/cisoseries

Get the show notes here: https://cisoseries.com/cybersecurity-news-september-22-2026/

Researchers escape OpenAI Codex sandbox to run commands on host

AI Force proposed to monitor technology

Congress eyes new support for Cyber Command after recent suicide deaths

Get the show notes here: https://cisoseries.com/cybersecurity-news-openai-codex-sandbox-escape-president-proposes-ai-force-cyber-command-suicides/

Huge thanks to our episode sponsor, Nudge Security

Here's a question that might make you sweat…how many AI agents are running in your org right now?

Not sure? You're not alone.

But, we have good news. Nudge Security now includes AI Agent Discovery, in addition to Day One discovery of every other AI and SaaS app.

For each agent, you'll see who built it, what it's connected to, and risks like destructive permissions. And, Nudge gives you smart automation to engage the right person to fix the risk. No chasing people down for answers.

Give it a try for free at nudgesecurity.com/cisoseries

Read the full stories at CISOSeries.com.

This week's Department of Know is hosted by Sarah Lane, with guests Jason Thomas, senior director of technology security, governance, and risk at the Cystic Fibrosis Foundation, and Jay Wilson, CISO and CIO at Insurity.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

Big thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Nuclear-style safeguards proposed for AI risks

Key lawmaker suggests action on AI safety legislation will wait until 2027

CISA releases cyber decoy guidance for infrastructure defenses

Get the show notes here: https://cisoseries.com/cybersecurity-news-september-18-2026/

Huge thanks to our episode sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Flock gets plucked

OpenAI agents arrived early

China's AI spy shop

Get the show notes here: https://cisoseries.com/cybersecurity-news-september-17-2026/

Huge thanks to our episode sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Cisco zero-day goes straight to root

BambooToken branches into Linux

CenterPoint breach claim hits 7M+

Get the show notes here: https://cisoseries.com/cybersecurity-news-september-16-2026/

Huge thanks to our episode sponsor, Vanta

Risk and regulation are ramping up, and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure and keeps your deals moving. Learn more at vanta.com/ciso.

China hits fast-forward on AI security

Hacking Cat shows its claws

Vite servers spill cloud secrets

Get the show notes here: https://cisoseries.com/cybersecurity-news-september-15-2026/

Huge thanks to our episode sponsor, Vanta

Risk and regulation are ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Attackers use passkey phishing to hijack Microsoft cloud accounts

Anthropic blockbuster report reveals sophisticated hacks

Airlines compliance with new cybersecurity regulations means fewer passenger conveniences

Get the show notes here: https://cisoseries.com/cybersecurity-news-september-14-2026/

Huge thanks to our episode sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

Read the full stories at CISOSeries.com

This week's Department of Know is hosted by Rich Stroffolino, with guests Alexandra Landegger, global head of cyber strategy & transformation, RTX, Mark Eggleston, CISO-at-large.

Missed the live show? Check it out on YouTube.

The Department of Knowis live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

Big thanks to our sponsor, ThreatLocker

This week, we looked at how AI is making attacks faster, less predictable, and easier to execute. But an AI-generated attack still needs permission to run, access data, use trusted applications, and move through the environment. ThreatLocker helps organizations control those actions before they become incidents. Book a demo at threatlocker.com/ciso.

Critical NetScaler vulnerability exploited in attacks

AdaptHealth data breach impacts 4.1 million people

MantaxOtax Android malware delivers ransomware and spyware together

Get the show notes here: https://cisoseries.com/cybersecurity-news-netscaler-vulnerability-exploited-adapthealth-suffers-breach-new-android-malware/

Huge thanks to our episode sponsor, ThreatLocker

AI risk does not only come from attackers. Employees are adopting AI tools faster than many organizations can evaluate them. Today's tip: an AI policy should be backed by enforceable controls over what tools can access and do. See how ThreatLocker can help you govern AI use at threatlocker.com/ciso.

Fortinet plugs two critical auth holes

US says China is distilling AI at scale

Mythos vulnerability hits human bottleneck

Get the show notes here: https://cisoseries.com/cybersecurity-news-september-10-2026/

Huge thanks to our episode sponsor, ThreatLocker

AI is compressing the timeline between initial access and impact. That leaves security teams less time to identify, investigate, and contain malicious activity. Faster response helps, but prevention can remove actions from the attack chain entirely. Give your responders a more controlled environment. Book a ThreatLocker demo at threatlocker.com/ciso.

ShinyHunters claimed it breached Florida DMV

Zero-click WeChat worm spreads over incoming calls

AI cheaters and whistleblowers emerge

Get the show notes here: https://cisoseries.com/cybersecurity-news-florida-dmv-breach-zero-click-wechat-worm-ai-whistleblowers/

Huge thanks to our episode sponsor, ThreatLocker

Attackers do not always bring their own tools. AI can help them find ways to misuse software already trusted by the organization. Today's tip: approval should not mean unlimited access. Define what trusted applications can reach and what they can do. Learn how ThreatLocker applies this principle at threatlocker.com/ciso today.

PEEP turns browsers into backdoors

Liquid loses $320M, hackers play hero

BigBear claws past MFA

Get the full show notes here: https://cisoseries.com/cybersecurity-news-september-8-2026/

Huge thanks to our episode sponsor, ThreatLocker

An attacker uses AI to create a payload your security tools have never seen. Detection now has to recognize it before the payload can act. ThreatLocker approaches the problem earlier by controlling whether that code is permitted to run at all. Explore a deny by default approach for your organization at threatlocker.com/ciso.

MikroTik routers hijacked through internet-exposed SSH

Russian data centers face new security requirements

UK account-hack losses surge thanks to new reporting system

Get the show notes here: https://cisoseries.com/cybersecurity-news-mikrotik-routers-hijacked-russian-data-center-threats-uk-cybercrime-losses-surge/

Huge thanks to our episode sponsor, ThreatLocker

AI is helping attackers research targets, create malicious code, and adapt faster. But the fundamentals have not changed. Code still needs to execute, applications still need access, and attackers still need privileges. Today's tip: control those actions instead of trying to predict every threat. Learn more from ThreatLocker at threatlocker.com/ciso.

Read the full stories at CISOSeries.com

This week's Department of Know is hosted by Rich Stroffolino, with guests Montez Fitzpatrick, director, information security, global head of cybersecurity, Energizer Holdings, and Jonathan Waldrop, CISO, Acoustic.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

A huge thanks to our sponsor, KnowBe4

U.S. and Canadian court records breached in Thomson Reuters incident

Cybercrime Breeze Comet causing problems in Brazil

Aesto record system hit by data breach

Get the full show notes here: https://cisoseries.com/cybersecurity-news-court-records-breach-breeze-comet-hits-brazil-aesto-records-breach/

Huge thanks to our episode sponsor, KnowBe4

Your employees have always been the target, but the threats they face are evolving. AI empowers cybercriminals to clone a coworker's voice, fake a video call with your CEO, or personalize a phishing email using details scraped from your own website.

KnowBe4's AI-native Security Awareness Training (SAT) fights back with 12 autonomous defense agents that allow you to deliver personalized, relevant, and engaging training that adapts as fast as the threats your people face every day. More than 70,000 organizations trust KnowBe4 worldwide. Find out why at KnowBe4.com.

Dark web shop stocks 153 million driver's licenses

Nexus, a new dark web service, claims it's selling scans of more than 153 million US and Canadian driver's licenses, plus over 10 million ID cards, three million travel and international IDs, and at least 579,000 medical cards. The images appear tied to Louisiana-based IDScan.net, which provides identity verification to retailers, rental-car companies, and others. KrebsOnSecurity matched some records to licenses scanned during Hertz rentals. IDScan says it's investigating and hasn't determined the breach's nature or scope. The FBI's New Orleans office has opened an inquiry. (KrebsOnSecurity)

Anthropic puts 30-day data retention in reverse

After customer pushback, Anthropic is revising a policy that stored 30 days of traffic from its Fable and Mythos models. Under new Enterprise Frontier Safeguards, customers can keep data in their own cloud and block Anthropic employees from reviewing it while automated abuse monitoring continues. Anthropic calls that privacy equivalent to zero data retention. Developed with more than 100 customers, including Salesforce, the system is due later this year. (CNBC)

Astra enters OpenAI's cyber red zone

OpenAI says Astra is its first model to reach a "Critical" cybersecurity threshold, meaning it can find unknown flaws and build exploits across well-defended systems without step-by-step human help. It's due soon, but the advanced cyber capabilities will start with a small test group before expanding through Daybreak Blue. OpenAI says Astra refused 91.5% of cyber jailbreak requests, versus 59% for GPT-5.6 Sol, and monitoring can pause suspicious activity. The Information reports Astra's latent reasoning may hide parts of its process, raising doubts about chain-of-thought monitoring. (WIRED, The Information)

Get the full show notes here: https://cisoseries.com/153m-licenses-for-sale-anthropic-reverses-course-astra-red-zone/

Huge thanks to our episode sponsor, KnowBe4

Your employees have always been the target, but the threats they face are evolving. AI empowers cybercriminals to clone a coworker's voice, fake a video call with your CEO, or personalize a phishing email using details scraped from your own website.

KnowBe4's AI-native Security Awareness Training (SAT) fights back with 12 autonomous defense agents that allow you to deliver personalized, relevant, and engaging training that adapts as fast as the threats your people face every day. More than 70,000 organizations trust KnowBe4 worldwide. Find out why at KnowBe4.com.

Anthropic announces safety changes and new models

USPS installs "untested" IT systems for mail-in ballots

Thousands of Exchange servers vulnerable to hijacks

Get the full show notes here: https://cisoseries.com/cybersecurity-news-fable-5-1-released-usps-untested-it-exchange-hijack-vulnerability/

Huge thanks to our episode sponsor, KnowBe4

Your employees have always been the target, but the threats they face are evolving. AI empowers cybercriminals to clone a coworker's voice, fake a video call with your CEO, or personalize a phishing email using details scraped from your own website.

KnowBe4's AI-native Security Awareness Training (SAT) fights back with 12 autonomous defense agents that allow you to deliver personalized, relevant, and engaging training that adapts as fast as the threats your people face every day. More than 70,000 organizations trust KnowBe4 worldwide. Find out why at KnowBe4.com.

Claude sessions get hijacked

Anthropic is warning that common infostealer malware is stealing active Claude browser sessions, letting attackers get into accounts and burn through paid usage without needing a password or two-factor code. The company is signing affected users out, removing stored payment methods and refunding unauthorized charges. But revoking the session doesn't remove the malware, so victims still need to clean the device, change credentials and revoke other active sessions. (BleepingComputer)

AI could jolt global finance

Bank of England governor Andrew Bailey is warning G20 officials that frontier AI could destabilize the global financial system by making cyberattacks faster, cheaper and easier to scale across borders. Bailey says many countries still lack protocols for how advanced models are developed and released. He also warned that a successful attack on a small number of heavily used technology providers could undermine confidence across the entire system. (The Guardian)

AI agents get too many keys

New research from Cequence Security and Enterprise Management Associates found a sizable confidence gap around AI agent permissions. 94% of surveyed organizations believe their agents don't have more access than necessary, but only 33% actually enforce least privilege. 65% have seen an agent act outside its intended role, and 29% say that caused measurable business impact. (Security Magazine)

Get the full show notes here: https://cisoseries.com/claude-sessions-hijacked-ai-jolts-global-finance-agents-get-too-many-keys/

Huge thanks to our episode sponsor, KnowBe4

Your employees have always been the target, but the threats they face are evolving. AI empowers cybercriminals to clone a coworker's voice, fake a video call with your CEO, or personalize a phishing email using details scraped from your own website.

KnowBe4's AI-native Security Awareness Training (SAT) fights back with 12 autonomous defense agents that allow you to deliver personalized, relevant, and engaging training that adapts as fast as the threats your people face every day. More than 70,000 organizations trust KnowBe4 worldwide. Find out why at KnowBe4.com.

ServiceNow warns of three maximum severity security vulnerabilities

PaperCut zero-day exploited in attacks

Healthcare giant McKesson discloses breach

Get the full show notes here: https://cisoseries.com/cybersecurity-news-servicenow-vulnerabilities-warning-papercut-zero-day-mckesson-healthcare-breach/

Huge thanks to our episode sponsor, KnowBe4

Your employees have always been the target, but the threats they face are evolving. AI empowers cybercriminals to clone a coworker's voice, fake a video call with your CEO, or personalize a phishing email using details scraped from your own website.

KnowBe4's AI-native Security Awareness Training (SAT) fights back with 12 autonomous defense agents that allow you to deliver personalized, relevant, and engaging training that adapts as fast as the threats your people face every day. More than 70,000 organizations trust KnowBe4 worldwide. Find out why at KnowBe4.com.

Read the full stories at CISOSeries.com.

This week's Department of Know is hosted by Rich Stroffolino, with guests Jason Elrod, CISO, MultiCare Health System, and Chris Ray, field CTO, GigaOm.

Missed the live show? Check it out on YouTube.

The Department of Knowis live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

A huge thanks to our sponsor, ThreatDown

Manchester Airports Group suffers cyber incident

ATF suffers data breach

Clothing retailer Carhartt suffers data breach

Get the show notes here: https://cisoseries.com/cybersecurity-news-manchester-airports-breach-atf-agency-breach-clothier-carhartt-breach/

Huge thanks to our episode sponsor, ThreatDown

SMBs face enterprise-level, AI-driven threats every day, often sacrificing robust security in favor of operational agility. You don't have to choose between moving fast and staying protected.

ThreatDown bridges the expertise gap, replacing fragmented, legacy tools with proactive, 24/7 MDR that scales with your business.

ThreatDown. Enterprise-grade defense. Built for businesses like yours.

China contractor hack hits US agencies

Ring throws away the key

Boston Scientific feels cyber pain

Get the show notes here: https://cisoseries.com/cybersecurity-news-august-27-2026/

Huge thanks to our episode sponsor, ThreatDown

SMBs face enterprise-level, AI-driven threats every day, often sacrificing robust security in favor of operational agility. You don't have to choose between moving fast and staying protected.

ThreatDown bridges the expertise gap, replacing fragmented, legacy tools with proactive, 24/7 MDR that scales with your business.

ThreatDown. Enterprise-grade defense. Built for businesses like yours.

China's hackers pick DeepSeek

OpenAI blocks a Russian influence push

A webpage can mess with local AI

Get the show notes here: https://cisoseries.com/cybersecurity-news-august-26-2026/

Huge thanks to our episode sponsor, ThreatDown

If your current security posture is struggling to keep pace with fast-moving, identity-based threats, your business is exposed.

Today's security expertise gap is real, but it doesn't have to be a permanent vulnerability. ThreatDown helps SMBs move from reactive defense to proactive, 24/7 intelligence, delivering enterprise-grade protection without the headcount. Enterprise-grade defense. Built for businesses like yours.

SynkLoader throws in the kitchen sink

NIST flags multi-cloud sprawl

ReliaQuest blocks a ShinyHunters swing

Get the show notes here: https://cisoseries.com/cybersecurity-news-august-25-2026/

Huge thanks to our episode sponsor, ThreatDown

Managing an enterprise-sized attack surface without a dedicated SOC?

As attackers leverage AI-driven automation to target mid-size business, your legacy defenses are no longer enough. You need the expertise to detect and respond to modern threats, without the overhead of building an in-house security team. ThreatDown provides proactive, Managed Detection and Response, 24/7, so your business can scale safely.

Enterprise-grade defense. Built for businesses like yours.

UK power plant disabled for four days by Iran-linked hackers

Zero-click Grok and Gemini chat history theft possible through cryptographic context injection

Canada's Hospital for Sick Children suffers another cyberattack

Get the show notes here: https://cisoseries.com/cybersecurity-news-uk-power-plant-hack-ai-zero-click-childrens-hospital-breach/

Huge thanks to our episode sponsor, ThreatDown

SMBs face enterprise-level, AI-driven threats every day, often sacrificing robust security in favor of operational agility. You don't have to choose between moving fast and staying protected.

ThreatDown bridges the expertise gap, replacing fragmented, legacy tools with proactive, 24/7 MDR that scales with your business.

ThreatDown. Enterprise-grade defense. Built for businesses like yours.

Read the full sotry at CISOSeries.com

This week's Department of Know is hosted by Rich Stroffolino, with guests Bil Harmer, CISO, Supabase, and David B. Cross, CISO, Atlassian.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

A huge thanks to our sponsor, Vanta

CISA warns of hackers exploiting critical MLflow vulnerability

ICS operators warned of AI-driven attacks on Siemens PLCs

Electronic health record company CareCloud confirms millions affected by breach

Get the show notes here: https://cisoseries.com/cybersecurity-news-cisa-mlflow-warning-siemens-plcs-warning-carecloud-confirms-breach/

Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

OpenAI rewrites safety rules after threshold warning

US charges 17 in Iranian hacking campaign

Microsoft fixes Windows Defender crash bug

Get the show notes here: https://cisoseries.com/openai-safety-rules-iranian-hackers-defender-crashes/

Huge thanks to our sponsor, Vanta

Your GRC team is dealing with more and more frameworks, vendors, and risk.

The board wants it all in one place, but your compliance data lives all over.

Vanta's agentic trust platform connects compliance, risk, and trust at enterprise scale and delivers a 526% ROI over three years. 16,000+ companies trust Vanta, including Snowflake, Atlassian, and Ramp. Visit Vanta.com/CISO to learn more.

Persistent prompts prove potentially pernicious

The malware is coming from inside Microsoft

Irregular releases AI sandbox escape post-mortem

Get the show notes here: https://cisoseries.com/cybersecurity-news-ai-mind-virus-living-off-azure-an-irregular-post-mortem/

Huge thanks to our sponsor, Vanta

Your GRC team is dealing with more and more frameworks, vendors, and risk.

The board wants it all in one place, but your compliance data lives all over.

Vanta's agentic trust platform connects compliance, risk, and trust at enterprise scale and delivers a 526% ROI over three years. 16,000+ companies trust Vanta, including Snowflake, Atlassian, and Ramp. Visit Vanta.com/CISO to learn more.

Federal agency hires North Korean IT worker

Millions of Azure records allegedly for sale

GitHub outage hits Actions and Copilot

Get the show notes here: https://cisoseries.com/cybersecurity-news-north-korean-it-worker-lands-federal-job-azure-records-go-up-for-sale-github-goes-down/

Huge thanks to our sponsor, Vanta

Your GRC team is dealing with more and more frameworks, vendors, and risk.

The board wants it all in one place, but your compliance data lives all over.

Vanta's agentic trust platform connects compliance, risk, and trust at enterprise scale and delivers a 526% ROI over three years. 16,000+ companies trust Vanta, including Snowflake, Atlassian, and Ramp. Visit Vanta.com/CISO to learn more.

Max severity SAP Commerce Cloud flaw now targeted in attacks

New Mirai variant adds stealth capabilities to botnet code

Shell investigates potential incident after Clop data theft claims

Get the show notes here: https://cisoseries.com/cybersecurity-news-sap-commerce-flaw-exploited-mirai-boosts-capabilities-shell-investigates-breach/

Huge thanks to our sponsor, Vanta

Your GRC team is dealing with more and more frameworks, vendors, and risk.

The board wants it all in one place, but your compliance data lives all over.

Vanta's agentic trust platform connects compliance, risk, and trust at enterprise scale and delivers a 526% ROI over three years. 16,000+ companies trust Vanta, including Snowflake, Atlassian, and Ramp. Visit Vanta.com/CISO to learn more.

Read the full stories at CISOSeries.com This week's Department of Know is hosted by Sarah Lane, with guests Peter Gregory, author of over 50 books on cybersecurity, and Michael Bickford, former CISO, New York State Gaming Commission, Unisys Security Consulting.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

A huge thanks to our sponsor, ThreatLocker

Akira affiliate's innovative "crash mode" attack almost worked

WhatsApp rolls out scam alert feature

White House looks to private sector for help against offensive hacking

Show notes: https://cisoseries.com/cybersecurity-news-akiras-innovative-attack-whatsapps-scam-alert-white-house-tco-strategy/

Huge thanks to our sponsor, ThreatLocker

AI risk does not only come from attackers. Employees are adopting AI tools faster than many organizations can evaluate them. Today's tip: an AI policy should be backed by enforceable controls over what tools can access and do. See how ThreatLocker can help you govern AI use at threatlocker.com/ciso.

UK eyes AI gene-synthesis guardrails

DeadLock puts ransomware on the blockchain

An evil twin flies home from DEF CON

Episode show notes: https://cisoseries.com/uk-tackles-ai-bioweapon-risk-deadlock-goes-on-chain-evil-twin-flies-home-from-def-con/

Huge thanks to our sponsor, ThreatLocker

AI is compressing the timeline between initial access and impact. That leaves security teams less time to identify, investigate, and contain malicious activity. Faster response helps, but prevention can remove actions from the attack chain entirely. Give your responders a more controlled environment. Book a ThreatLocker demo at threatlocker.com/ciso.

Water systems get a federal cyber lifeline

Hackers jump into Polish power plant

Cyberattacks knock local governments offline

Episode show notes: https://cisoseries.com/water-systems-cyber-lifeline-hackers-polish-power-plant-local-governments-offline/

Huge thanks to our sponsor, ThreatLocker

Attackers do not always bring their own tools. AI can help them find ways to misuse software already trusted by the organization. Today's tip: approval should not mean unlimited access. Define what trusted applications can reach and what they can do. Learn how ThreatLocker applies this principle at threatlocker.com/ciso today.

OpenAI loosens cyber limits for vetted defenders

Sandworm's fake recruiters plant a poisoned VPN

Royal Navy drones phone home to China

Episode show notes: https://cisoseries.com/openai-loosens-cyber-limits-sandworms-poisoned-vpn-navy-drones-phone-china/

Huge thanks to our sponsor, ThreatLocker

An attacker uses AI to create a payload your security tools have never seen. Detection now has to recognize it before the payload can act. ThreatLocker approaches the problem earlier by controlling whether that code is permitted to run at all. Explore a deny by default approach for your organization at threatlocker.com/ciso.

OpenAI slows release of Astra model citing cyber capabilities

Irregular won't say if there were more rogue incidents

U.S. cyber ambassador nominee Cassady confirmed in Senate

Episode shownotes: https://cisoseries.com/cybersecurity-news-openai-slows-astra-irregular-wont-talk-senate-confirms-cassady/

Huge thanks to our sponsor, ThreatLocker

AI is helping attackers research targets, create malicious code, and adapt faster. But the fundamentals have not changed. Code still needs to execute, applications still need access, and attackers still need privileges. Today's tip: control those actions instead of trying to predict every threat. Learn more from ThreatLocker at threatlocker.com/ciso.

Apple's bug bounty program overwhelmed by fake AI generated reports

China launches cybersecurity review into Palo Alto Networks products

Meta AI hacks external systems during cybersecurity testing

Get the show notes here: https://cisoseries.com/cybersecurity-news-faked-bug-reports-metas-rogue-ai-china-investigates-palo-alto/

Huge thanks to our episode sponsor, ThreatLocker

AI risk does not only come from attackers. Employees are adopting AI tools faster than many organizations can evaluate them. Today's tip: an AI policy should be backed by enforceable controls over what tools can access and do. See how ThreatLocker can help you govern AI use at threatlocker.com/ciso.

AI safety tests spill onto the real internet

Private Relay flaw unmasks IP addresses

Weak telcos left door open for Salt Typhoon

Get the show notes here: https://cisoseries.com/cybersecurity-news-ai-safety-tests-reach-the-internet-private-relay-flaw-unmasks-ips-weak-telcos-invite-salt-typhoon/

Huge thanks to our episode sponsor, ThreatLocker

AI is compressing the timeline between initial access and impact. That leaves security teams less time to identify, investigate, and contain malicious activity. Faster response helps, but prevention can remove actions from the attack chain entirely. Give your responders a more controlled environment. Book a ThreatLocker demo at threatlocker.com/ciso.

ChainDrop attack hits npm

Pass-ta-key attacks target passkeys

AI accounts for most cybercrime in Africa

Get the show notes here: https://cisoseries.com/cybersecurity-news-chaindrop-hits-npm-pass-ta-key-targets-passkeys-ai-runs-amok-in-africa/

Huge thanks to our episode sponsor, ThreatLocker

Attackers do not always bring their own tools. AI can help them find ways to misuse software already trusted by the organization. Today's tip: approval should not mean unlimited access. Define what trusted applications can reach and what they can do. Learn how ThreatLocker applies this principle at threatlocker.com/ciso today.

When license plate readers become stalking tools

ExfilSquad dumps UK police contact data

China-linked hackers shrink the patch window

Get the show notes here: https://cisoseries.com/cybersecurity-news-license-plate-readers-as-stalking-tools-exfilsquad-dumps-uk-police-data-the-ever-shrinking-patch-window/

Huge thanks to our episode sponsor, ThreatLocker

An attacker uses AI to create a payload your security tools have never seen. Detection now has to recognize it before the payload can act. ThreatLocker approaches the problem earlier by controlling whether that code is permitted to run at all. Explore a deny by default approach for your organization at threatlocker.com/ciso.

UK's state investments agency suffers data breach

CISA tells utilities to remove internet-exposed PLCs following Minnesota attacks

Anthropic says its AI hacked real-world companies in three incidents

Get the show notes here: https://cisoseries.com/cybersecurity-news-cybersecurity-news-uk-investments-agency-breach-cisa-water-warning-anthropic-threesome/

Huge thanks to our episode sponsor, ThreatLocker

AI is helping attackers research targets, create malicious code, and adapt faster. But the fundamentals have not changed. Code still needs to execute, applications still need access, and attackers still need privileges. Today's tip: control those actions instead of trying to predict every threat. Learn more from ThreatLocker at threatlocker.com/ciso.

This week's Department of Know is hosted by Rich Stroffolino, with guests Janet Heins, CISO, ChenMed, and Derek Fisher, Director of the Cyber Defense and Information Assurance Program, Temple University.

Missed the live show? Check it outon YouTube.

The Department of Knowis live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

Semiconductor firm Analog Devices discloses data breach

Copilot for Word POC copies hidden prompts into new documents

Microsoft Teams vishing attacks lead to Chaos ransomware attacks

Get the show notes here: https://cisoseries.com/cybersecurity-news-analog-devices-breach-copilot-ai-worm-teams-ransomware-vishing/

Huge thanks to our sponsor, Pindrop

OpenAI agent's escape reaches a Modal customer

Hackers hit Minnesota water systems

Fake Russian companies, real stolen money

Get the show notes here: https://cisoseries.com/cybersecurity-news-openai-agent-reaches-modal-minnesota-water-systems-hacked-fake-russian-companies-steal-real-money/

Huge thanks to our sponsor, Pindrop

Thousands of server BMCs leak password hashes

Claude finds flaws in encryption

Google gives old threat actors new names

Get the show notes here: https://cisoseries.com/cybersecurity-news-leaky-bmcs-claude-finds-encryption-flaws-googles-new-names/

Huge thanks to our sponsor, Pindrop

Nvidia opens the AI security tent

Microsoft puts a cyber sprinter in MDASH

Fairlife ransomware spills data

Get the show notes here: https://cisoseries.com/cybersecurity-news-nvidia-opens-ai-security-tent-microsoft-adds-cyber-sprinter-to-mdash-fairlife-ransomware-spills-data/

Huge thanks to our sponsor, Pindrop

U.S. agencies warn of Iran-linked actors targeting water and energy control systems

ChatGPT suffered brief global outage on Saturday

Malvertising sends malware in pieces for an unsuspecting browser to build

Get the show notes here: https://cisoseries.com/cybersecurity-news-iran-infrastructure-warning-chatgpt-global-outage-self-assembling-malware/

Huge thanks to our sponsor, Pindrop

This week's Department of Know is hosted by Rich Stroffolino, with guests Nick Espinosa, host, Deep Dive Radio Show, and Dennis Pickett, vp, CISO, Westat.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

Huge thanks to our sponsor, QuilrAI

AI agents don't ask permission. They act -- moving data, triggering workflows, changing systems. QuilrAI is the permission layer they never had. Its Decision Engine evaluates the content, context, and intent of every action - before it completes. Alerts tell you later. QuilrAI decides now. Visit quilr.ai. Stay safe - Quilr it.

AI Agents become fastest growing exposed attack surface

Consumer finance company Upbound Group blames data breach for millions in losses

Dolphin X Stealer uses AI profiling to prioritize targets

Get the show notes here: https://cisoseries.com/cybersecurity-news-ai-agents-risk-upbound-group-breach-dolphin-x-stealer/

Huge thanks to our sponsor, QuilrAI

AI agents don't ask permission. They act -- moving data, triggering workflows, changing systems. QuilrAI is the permission layer they never had. Its Decision Engine evaluates the content, context, and intent of every action - before it completes.

Alerts tell you later. QuilrAI decides now. Visit quilr.ai.

OpenAI behind Hugging Face hack

TrickBot tunnels through DNS

Acrobat extension opens WhatsApp

Get the show notes here:

Huge thanks to our sponsor, QuilrAI

AI agents don't ask permission. They act -- moving data, triggering workflows, changing systems. QuilrAI is the permission layer they never had. Its Decision Engine evaluates the content, context, and intent of every action - before it completes.

Alerts tell you later. QuilrAI decides now. Visit quilr.ai.

Bit2Watt threatens power stability

All AI models cheat at cyber evaluations

US weighing Chinese LLM ban

Get the show notes here: https://cisoseries.com/cybersecurity-news-bit2watt-instability-ai-models-cheat-chinese-llm-ban/

Huge thanks to our sponsor, QuilrAI

AI agents don't ask permission. They act -- moving data, triggering workflows, changing systems. QuilrAI is the permission layer they never had. Its Decision Engine evaluates the content, context, and intent of every action - before it completes.

Alerts tell you later. QuilrAI decides now. Visit quilr.ai.

Hugging Face fights AI hacks with AI

World Cup streamers get a red card

WordPress enters a patching race

Get the show notes here:

Huge thanks to our sponsor, QuilrAI

AI agents don't ask permission. They act -- moving data, triggering workflows, changing systems. QuilrAI is the permission layer they never had. Its Decision Engine evaluates the content, context, and intent of every action - before it completes.

Alerts tell you later. QuilrAI decides now. Visit quilr.ai.

Dairy company Fairlife suffers cyberattack

Microsoft warns of surge in ACR Stealer attacks on customers

Abbott Labs investigates two cyber incidents amid extortion claims

Get the show notes here: https://cisoseries.com/cybersecurity-news-fairlife-dairy-cyberattack-acr-stealer-surge-abbott-labs-incidents/

Huge thanks to our sponsor, QuilrAI

AI agents don't ask permission. They act -- moving data, triggering workflows, changing systems. QuilrAI is the permission layer they never had. Its Decision Engine evaluates the content, context, and intent of every action - before it completes.

Alerts tell you later. QuilrAI decides now. Visit quilr.ai.

"Context Bombing" flips the script on prompt injections

Pentagon suspends CMMC Phase II requirements

Old tech, new problems

Get the show notes here: https://cisoseries.com/the-department-of-know-cmmc-suspended-sharefile-shutdown-context-bombing-strikes-back/

This week's Department of Know is hosted by Rich Stroffolino, with guests Tom Hollingsworth, networking technology advisor, Futurum Group, and Mark Eggleston, former CISO, CSC.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

Huge thanks to our sponsor, ThreatLocker

Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk?

That's the challenge behind cloud adoption.

Behind AI. Behind automation. And behind every major technology decision.

ThreatLocker helps organizations take a Zero Trust approach to that challenge—giving them greater control over what can execute, what can access their environment, and what users and applications are allowed to do.

That's why ThreatLocker is proud to support Cyber Security Headlines. Because security works best when innovation and control move together.

ClickLock stealer uses kill loops to force password entry

TELEPUZ malware uses ClickFix to steal data and run commands

1Password's new Agentic Mode lets Claude log into accounts

Notes: https://cisoseries.com/cybersecurity-news-clicklocks-kill-loops-telepuz-clickfix-tricks-1passwords-agentic-login/

Huge thanks to our sponsor, ThreatLocker

Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind cloud adoption. Behind AI. Behind automation. And behind every major technology decision. ThreatLocker helps organizations take a Zero Trust approach to that challenge—giving them greater control over what can execute, what can access their environment, and what users and applications are allowed to do. That's why ThreatLocker is proud to support Cyber Security Headlines. Because security works best when innovation and control move together.

Zoom's account takeover wake-up call

Two zero-days, one urgent SonicWall patch

23andMe's breach bill keeps growing

Show Notes: https://cisoseries.com/cybersecurity-news-zooms-wake-up-call-zero-day-sonicwall-patch-23andmes-growing-breach-bill/

Huge thanks to our sponsor, ThreatLocker

Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind cloud adoption. Behind AI. Behind automation. And behind every major technology decision. ThreatLocker helps organizations take a Zero Trust approach to that challenge—giving them greater control over what can execute, what can access their environment, and what users and applications are allowed to do. That's why ThreatLocker is proud to support Cyber Security Headlines. Because security works best when innovation and control move together.

Pentagon suspends CMMC Phase II requirements

US troop location data under attack in Iran

"Context Bombing" flips the script on prompt injections

Get the show notes here: https://cisoseries.com/cybersecurity-news-cmmc-phase-ii-suspended-tracking-troops-in-iran-defenders-turn-to-context-bombing/

Huge thanks to our sponsor, ThreatLocker

Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind cloud adoption. Behind AI. Behind automation. And behind every major technology decision. ThreatLocker helps organizations take a Zero Trust approach to that challenge—giving them greater control over what can execute, what can access their environment, and what users and applications are allowed to do. That's why ThreatLocker is proud to support Cyber Security Headlines. Because security works best when innovation and control move together.

Russia's router access routes

MemGhost haunts AI memory

DHS alert got waved off… twice

Get the show notes here: https://cisoseries.com/cybersecurity-news-russias-router-access-routes-memghost-haunts-ai-memory-dhs-alert-got-waved-off-twice/↗

Huge thanks to our sponsor, ThreatLocker

Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind cloud adoption. Behind AI. Behind automation. And behind every major technology decision. ThreatLocker helps organizations take a Zero Trust approach to that challenge—giving them greater control over what can execute, what can access their environment, and what users and applications are allowed to do. That's why ThreatLocker is proud to support Cyber Security Headlines. Because security works best when innovation and control move together.

Windows backdoor stuffs multiple wipers and ransomware code into a single package

NSA brings back Tailored Access Operations name for elite hacking unit

Progress urges ShareFile customers to shut down storage zone controllers

Show notes: https://cisoseries.com/cybersecurity-news-multifunction-windows-backdoor-nsa-revives-tao-urgent-sharefile-warning/

Huge thanks to our sponsor, ThreatLocker

Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind cloud adoption. Behind AI. Behind automation. And behind every major technology decision. ThreatLocker helps organizations take a Zero Trust approach to that challenge—giving them greater control over what can execute, what can access their environment, and what users and applications are allowed to do. That's why ThreatLocker is proud to support Cyber Security Headlines. Because security works best when innovation and control move together.

Link to the episode

This week's Department of Know is hosted by Rich Stroffolino, with guests Davi Ottenheimer, principal, Flying Penguin, and Chris Ray, field CTO, GigaOm.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

Huge thanks to our sponsor, Vanta

Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot. The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk, and drafting fixes for you. Vanta is the platform used by over sixteen thousand fast-moving companies like Ramp, Cursor, and Harvey who are shaping the future with AI, AND staying ahead of AI risk. Get started at vanta.com/headlines.

Interpol's fraud sweep goes global

China flags Claude Code

Old GitHub accounts, new tricks

Get the show notes here: https://cisoseries.com/cybersecurity-news-interpols-global-fraud-sweep-chinas-claude-code-flag-old-github-account-tricks/

Thanks to our episode sponsor, Vanta

Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot. The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk, and drafting fixes for you. Vanta is the platform used by over sixteen thousand fast-moving companies like Ramp, Cursor, and Harvey who are shaping the future with AI, AND staying ahead of AI risk. Get started at vanta.com/headlines.

Mexico's first cyber test gets tested

Snoops break into Roundcube mailservers

Cash App owner pays up over lax security

Get the show notes here: https://cisoseries.com/cybersecurity-news-mexicos-big-cyber-test-roundcube-mailserver-snooped-on-cash-app-found-lax/

Thanks to our episode sponsor, Vanta

Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot. The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk, and drafting fixes for you. Vanta is the platform used by over sixteen thousand fast-moving companies like Ramp, Cursor, and Harvey who are shaping the future with AI, AND staying ahead of AI risk. Get started at vanta.com/headlines.

The UK's Cyber Pledge and Cyber Shield

Millions exposed in Japanese telco attack

China looking to curb overseas model access

Get the show notes here:

Thanks to our episode sponsor, Vanta

Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot. The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk, and drafting fixes for you. Vanta is the platform used by over sixteen thousand fast-moving companies like Ramp, Cursor, and Harvey who are shaping the future with AI, AND staying ahead of AI risk. Get started at vanta.com/headlines.

Suspected China-Nexus hackers use fake Indian tax filing utility to deploy DcRAT

Prompt injection attacks trick AI Agents into making crypto payments

France to stop certifying products without quantum-safe encryption

Get the show notes here: https://cisoseries.com/cybersecurity-news-india-tax-rat-prompt-injection-crypto-scam-france-pushes-quantum-safe/

Thanks to our episode sponsor, Vanta

Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot. The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk, and drafting fixes for you. Vanta is the platform used by over sixteen thousand fast-moving companies like Ramp, Cursor, and Harvey who are shaping the future with AI, AND staying ahead of AI risk. Get started at vanta.com/headlines.

JadePuffer ransomware used AI agent to automate entire attack

AdaptHealth suffers cyberattack

UK's National Cyber Action Plan launch delayed by political leadership crisis

Get the show notes here: https://cisoseries.com/cybersecurity-news-first-ai-ransomware-adapthealth-suffers-cyberattack-uk-cyber-plan-delayed/

Thanks to our episode sponsor, Vanta

Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot. The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk, and drafting fixes for you. Vanta is the platform used by over sixteen thousand fast-moving companies like Ramp, Cursor, and Harvey who are shaping the future with AI, AND staying ahead of AI risk. Get started at vanta.com/headlines.

This week's Department of Know is hosted by Rich Stroffolino, with guests David Cross, CISO, Atlassian; Kathleen Mullin, Director, SABSA Institute; Montez Fitzpatrick, CISO, Navvis; and Howard Holton, former CEO, GigaOm.

Get the show notes here: https://cisoseries.com/the-department-of-know-peoplesoft-exploit-ford-brings-back-gray-beards-llm-vetting/

Huge thanks to our sponsor, Silent Push

Most cybersecurity approaches are completely reactive. Victim organizations are hit with an attack and the chase ensues. Silent Push closes this gap with its Preemptive Cyber Defense platform. Silent Push tracks adversary infrastructure and infrastructure changes across the Internet during the attack preparation phase - while attackers are still staging domains, IPs, and hosting and Silent Push turns that into Indicators of Future Attack® to defend with confidence. For a CISO, that turns invisible risk into early warning, an average of 140 days before a campaign shows up in your environment. Time to act, and a smaller window of exposure, before a threat ever reaches your environment.

Card data theft remains top concern for U.S. consumers

OMB chief to oversee spy agency budgets

Fortibleed leads to ransomware attacks and 430,000 Fortinet firewalls exposed

Get the show notes here: https://cisoseries.com/cybersecurity-news-consumer-security-worries-vought-supervises-spy-budgets-fortibleed-exposes-fortinet/

Huge thanks to our sponsor, Silent Push

Most cybersecurity approaches are completely reactive. Victim organizations are hit with an attack and the chase ensues.

Silent Push closes this gap with its Preemptive Cyber Defense platform. Silent Push tracks adversary infrastructure and infrastructure changes across the Internet during the attack preparation phase - while attackers are still staging domains, IPs, and hosting and Silent Push turns that into Indicators of Future Attack® to defend with confidence.

For a CISO, that turns invisible risk into early warning, an average of 140 days before a campaign shows up in your environment. Time to act, and a smaller window of exposure, before a threat ever reaches your environment. Learn more at silentpush.com

Hide My Email bug shows real addresses

Fable 5 gets the greenlight

DHS confirms hackers breached HSIN

Get the show notes here: https://cisoseries.com/cybersecurity-news-hide-my-email-shows-real-addresses-fable-5-gets-greenlight-microsoft-teams-hits-back-on-bots/

Huge thanks to our sponsor, Silent Push

Most cybersecurity approaches are completely reactive. Victim organizations are hit with an attack and the chase ensues.

Silent Push closes this gap with its Preemptive Cyber Defense platform. Silent Push tracks adversary infrastructure and infrastructure changes across the Internet during the attack preparation phase - while attackers are still staging domains, IPs, and hosting and Silent Push turns that into Indicators of Future Attack® to defend with confidence.

For a CISO, that turns invisible risk into early warning, an average of 140 days before a campaign shows up in your environment. Time to act, and a smaller window of exposure, before a threat ever reaches your environment. Learn more at silentpush.com