Cybersecurity Headlines

NetScaler vulnerability exploited, AdaptHealth suffers breach, new Android malware

Critical NetScaler vulnerability exploited in attacks AdaptHealth data breach impacts 4.1 million people MantaxOtax Android malware delivers ransomware and spyware to

Fortinet auth holes, China distills AI, Mythos vulnerability

Fortinet plugs two critical auth holes US says China is distilling AI at scale Mythos vulnerability hits human bottleneck Get the show notes here: https://cisoserie

Florida DMV breach, zero-click WeChat worm, AI whistleblowers

ShinyHunters claimed it breached Florida DMV Zero-click WeChat worm spreads over incoming calls AI cheaters and whistleblowers emerge Get the show notes here: https

PEEP browser backdoors, $320M Liquid exploit, BigBear beats MFA

PEEP turns browsers into backdoors Liquid loses $320M, hackers play hero BigBear claws past MFA Get the full show notes here: https://cisoseries.com/cybersecurity-n

MikroTik routers hijacked, Russian data center threats, UK cybercrime losses surge

MikroTik routers hijacked through internet-exposed SSH Russian data centers face new security requirements UK account-hack losses surge thanks to new reporting system

The Department of Know: Astra launches, CISA cuts programs, McKesson breached

Read the full stories at CISOSeries.com This week's Department of Know is hosted by Rich Stroffolino, with guests Montez Fitzpatrick, director, information security, gl

Court records breach, Breeze Comet hits Brazil, Aesto records breach

U.S. and Canadian court records breached in Thomson Reuters incident Cybercrime Breeze Comet causing problems in Brazil Aesto record system hit by data breach Get t

153M licenses for sale, Anthropic reverses course, Astra enters the red zone

Dark web shop stocks 153 million driver's licenses Nexus, a new dark web service, claims it's selling scans of more than 153 million US and Canadian driver's licenses,

Fable 5.1 released, USPS "untested" IT, Exchange hijack vulnerability

Anthropic announces safety changes and new models USPS installs "untested" IT systems for mail-in ballots Thousands of Exchange servers vulnerable to hijacks Get th

Claude sessions hijacked, AI jolts global finance, agents get too many keys

Claude sessions get hijacked Anthropic is warning that common infostealer malware is stealing active Claude browser sessions, letting attackers get into accounts and bu

ServiceNow vulnerabilities warning, PaperCut zero-day, McKesson healthcare breach

ServiceNow warns of three maximum severity security vulnerabilities PaperCut zero-day exploited in attacks Healthcare giant McKesson discloses breach Get the full s

The Department of Know: Power plant attack, NSA hacker reunion, Hugging Face hack report

Read the full stories at CISOSeries.com.  This week's Department of Know is hosted by Rich Stroffolino, with guests Jason Elrod, CISO, MultiCare Health System, and Chri

Manchester Airports breach, ATF agency breach, clothier Carhartt breach

Manchester Airports Group suffers cyber incident ATF suffers data breach Clothing retailer Carhartt suffers data breach Get the show notes here: https://cisoseries.

Chinese hackers hit US agencies, Ring locks out police, Boston Scientific feels cyber pain

China contractor hack hits US agencies Ring throws away the key Boston Scientific feels cyber pain Get the show notes here: https://cisoseries.com/cybersecurity-ne

China's hackers pick DeepSeek, OpenAI blocks Russian influence push, webpages mess with local AI

China's hackers pick DeepSeek OpenAI blocks a Russian influence push A webpage can mess with local AI Get the show notes here: https://cisoseries.com/cybersecurity

SynkLoader throws in the kitchen sink, NIST flags multi-cloud sprawl, ReliaQuest blocks a ShinyHunters swing

SynkLoader throws in the kitchen sink NIST flags multi-cloud sprawl ReliaQuest blocks a ShinyHunters swing Get the show notes here: https://cisoseries.com/cybersec

UK power plant hack, AI zero click, children's hospital breach

UK power plant disabled for four days by Iran-linked hackers Zero-click Grok and Gemini chat history theft possible through cryptographic context injection Canada's H

The Department of Know: Living off Azure, OpenAI's "defender window," and AI-driven PLC attacks

Read the full sotry at CISOSeries.com This week's Department of Know is hosted by Rich Stroffolino, with guests Bil Harmer, CISO, Supabase, and David B. Cross, CISO, At

CISA MLFlow warning, Siemens PLCs warning, CareCloud confirms breach

CISA warns of hackers exploiting critical MLflow vulnerability ICS operators warned of AI-driven attacks on Siemens PLCs Electronic health record company CareCloud co

OpenAI rewrites safety rules, US charges 17 Iranian hackers, Defender crashes fixed

OpenAI rewrites safety rules after threshold warning US charges 17 in Iranian hacking campaign Microsoft fixes Windows Defender crash bug Get the show notes here: h