Podcasts · News · Technology

Cybersecurity Headlines

CISO Series

300 episodes

Daily stories from the world of information security. To delve into any daily story, head to CISOseries.com.

Episodes page 1 of 6

  1. HTTP2Shell emergency updates, PHP2Shell attacks, GitHub worm

    · 7:31

    HTTP2Shell sparks emergency patches https://www.bleepingcomputer.com/news/security/critical-http2shell-brotli-vulnerability-triggers-emergency-patches/ PHP2Shell: patch, then investigate…

  2. AI-powered phishing detection, third PHP2Shell bug, Quest medical breach

    · 8:13

    Microsoft Teams to get AI-powered, context-aware phishing detection https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-to-get-ai-powered-context-aware-phishing-detection/ Quest Diagnostics confirms data…

  3. The Department of Know: PHP2Shell strikes, EU EOL still SOL, Cairn used in cyberattacks

    · 38 min

    Read the full stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Gary Chan, CISO, SSM Health, and Doug Mayer, CISO, RXSense. Also check out Gary's work at Security…

  4. PHP vulnerabilities update, ConnectWise AI spies, Africa cybercrime takedown

    · 7:25

    Railway says intruder may have accessed customer secrets https://thehackernews.com/2026/10/railway-says-intruder-may-have-accessed.html Law enforcement disrupts nearly 11,000 cybercrime networks in Africa…

  5. PHP emergency patches, compromised TLS certificates, Signal hot mic bug

    · 7:11

    PHP rushes out emergency fixes for PHP2Shell https://www.bleepingcomputer.com/news/security/php-ships-emergency-patches-for-critical-php2shell-flaws/…

  6. Naval hack, Muse exposes secrets, Army researching offensive AI hacking

    · 7:30

    Russian-linked attacks hit naval shipbuilder https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html Muse exposes secrets when sharing chats…

  7. OpenCode keys exposed, AI agents raid websites, Rank Math backdoor

    · 7:32

    OpenCode breach exposes users' AI keys https://www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/ One hacker puts AI agents to work on 1,200 sites…

  8. Cybersecurity jobs report, ConnectWise suspends cloud backup, Drupal patches flaws

    · 6:52

    Cybersecurity jobs report reveals mixed bag https://www.securityweek.com/us-cybersecurity-job-postings-fall-26-as-ai-security-engineer-demand-soars/ https://cybersn.com/resources/reports/cybersecurity-jobs-report…

  9. The Department of Know: Hacked fridges, hiring humans to fix Mythos bugs, targeted ad spyware

    · 34 min

    See the full stories at cisoseries.com This week's Department of Know is hosted by Rich Stroffolino, with guests Dennis Pickett, vp and CISO, RTI International, and David Cross, CISO, Atlassian. Missed the live show?…

  10. Candiru spyware infects Al Jazeera, Senators AI request, Microsoft crashes phishers

    · 7:54

    CenterPoint Energy reveals data breach numbers https://www.securitymagazine.com/articles/102658-1m-impacted-by-centerpoint-energy-data-breach Zero-Click Candiru spyware infections at Al Jazeera tracked to targeted…

  11. FBI raids laptop farms, Meta loses GitHub data, Cisco gateways under attack

    · 6:58

    FBI shuts down North Korean laptop farms https://www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/ Meta's stolen credentials open GitHub repositories…

  12. Webcams go to war, Kimsuky sends invites, Anthropic blocks copycats

    · 7:06

    Webcams get drafted into war https://www.wsj.com/tech/cybersecurity/video-cameras-webcams-hacked-war-b00b8a24?st=RRCsaw Kimsuky's invitations come with malware…

  13. Supermarket freezer hack, Ahold Delhaize offline, spy chip in crypto wallets

    · 7:48

    Hackers turn up the heat on French supermarkets: https://www.infosecurity-magazine.com/news/french-supermarket-chains/ Ahold Delhaize offline after cyber attack:…

  14. Anthropic restricts Claude, Google Calendar phishing, FBI hack arrest

    · 7:39

    CISA's KEV catalog grows by five https://securityaffairs.com/200734/security/u-s-cisa-adds-proftpd-onlyoffice-docs-strapi-apache-struts-and-isc-bind-flaws-to-its-known-exploited-vulnerabilities-catalog.html Calendar…

  15. The Department of Know: South Korean bank hacks, agents target Wikipedia, ransomware recovery fraud

    · 33 min

    Read the full stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Derek Fisher, Director of the Cyber Defense and Information Assurance Program, Temple University, and…

  16. Top level domain theft, Yandex attacked, Cisco Nexus flaws

    · 8:05

    Attackers hijack three top level domains to obtain Google certificates https://www.infosecurity-magazine.com/news/attackers-hijack-cctlds-obtain/ Major Yandex data center in Russia hit by Ukrainian drone…

  17. Poetry-powered botnet, Flock hits a roadblock, Outlook blocks risky installers

    · 7:28

    Botnet takes orders from a poem https://cyberscoop.com/poellm-malware-botnet-poem-lumen-black-lotus-labs/ Flock's warrantless tracking hits a roadblock…

  18. Agents vs Wikipedia, South Korean bank hacks, ASOS breached

    · 7:59

    Agents trying to compromise Wikipedia tools https://thehackernews.com/2026/10/wikimedia-says-openai-agents-tried-to.html South Korea claims agents were used in bank hacks…

  19. Google pauses bug bounties, ATB faces extortion, Exchange flaw exposes mailboxes

    · 7:51

    Google pauses open-source bug bounties amid AI spam Ukraine's largest grocery chain hit by extortion attack Exchange flaw exposes other users' mailboxes Get the show notes here:…

  20. Warlock continues SharePoint exploits, ShinyHunters member flips China's AI espionage

    · 7:26

    Warlock ransomware continues to exploit year-old SharePoint flaws ShinyHunters member detained in Jordan China-aligned espionage group targets American AI policy experts Get the show notes here:…

  21. The Department of Know: ShinyHunters vs FBI, Kiteworks shutdown, and hundreds of orgs hit by rogue AI

    · 39 min

    Read all the stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Brett Conlon, CISO, American Century Investments, and Nick Espinosa, host, Deep Dive Radio Show.…

  22. AI readiness reports, KillSec takedown, OpenAI website scraping

    · 8:18

    Report suggests AI and quantum threat preparedness is lacking Authorities seize KillSec extortion group arrest leader Dozens more prominent websites scraped by OpenAI software Get the show notes here:…

  23. Gemini 4 enters the ring, MI5 flags research ties, Custom GPTs deliver malware

    · 7:28

    Gemini 4 starts with cybersecurity MI5 flags Chinese research funding Custom GPTs steer users into ClickFix attacks Get the show notes here: https://cisoseries.com/cybersecurity-news-october-1-2026/ Huge thanks to…

  24. Star Blizzard, Cloudflare CA, GPT-6.1 scuttled

    · 8:11

    Microsoft details new Star Blizzard and NeedyMantis activity Cloudflare to become a public certificate authority Safety concerns scuttle GPT-6.1 Get the show notes here:…

  25. GPT-6 Astra goes off script, ShinyHunters suspect arrested, Nvidia corrals rogue AI agents

    · 8:28

    GPT-6 Astra goes off script in attack simulations Dutch police arrest "reformed" hacker in ShinyHunters probe Nvidia builds a browser for AI agents Get the show notes here:…

  26. New SharePoint exploit, Australian OpenAI hack developments, Kiteworks urges stoppage

    · 7:45

    Another Microsoft SharePoint flaw now exploited Details and doubts emerge regarding OpenAI hack of Australian Health portal Kiteworks urges customers to stop using platform Get the show notes here:…

  27. The Department of Know: NCSC's AI "inconvenient truth," automated payment skimming, CISA's CVE plan

    · 34 min

    Read all the stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Dmitriy Sokolovskiy, senior vice president, information security, Semrush, and Christian Frösch, CISO,…

  28. OpenAI hacks Australia health, Astrana Health breached, TeamCity flaw exploited

    · 7:29

    OpenAI program hacks Australia's government health portal Astrana Health suffers data breach Ransomware gangs exploiting TeamCity flaw Get the show notes here:…

  29. ShinyHunters peeks at FBI assignments, WordPress flaw wastes no time, Pentagon's cyber appetite grows

    · 7:01

    ShinyHunters peeks at FBI assignments WordPress flaw wastes no time Pentagon's cyber appetite grows Get the show notes here: https://cisoseries.com/cybersecurity-news-september-24-2026/ Huge thanks to our episode…

  30. CAIRN framework, Muse zero-day, BigDiskBuster

    · 6:58

    Cisco releases open-source CAIRN framework Muse zero-day opens the door to account takeovers Microsoft can't wake up from Nightmare Eclipse Get the show notes here:…

  31. ShinyHunters hijacks Clop, fake LastPass kills security tools, trusted npm release carries malware

    · 7:18

    ShinyHunters hijacks Clop's own leak site Fake LastPass installers kill security tools Trusted npm release carries GHAPPIER malware Huge thanks to our episode sponsor, Nudge Security Here's a question that might…

  32. OpenAI Codex sandbox escape, President proposes AI Force, Cyber Command suicides

    · 8:07

    Researchers escape OpenAI Codex sandbox to run commands on host AI Force proposed to monitor technology Congress eyes new support for Cyber Command after recent suicide deaths Get the show notes here:…

  33. The Department of Know: Passkeys phished, Cisco hits root, nuclear red lines for AI

    · 35 min

    Read the full stories at CISOSeries.com. This week's Department of Know is hosted by Sarah Lane, with guests Jason Thomas, senior director of technology security, governance, and risk at the Cystic Fibrosis…

  34. Nuclear-style AI safeguards, AI legislation shelved, CISA's decoy guidance

    · 7:16

    Nuclear-style safeguards proposed for AI risks Key lawmaker suggests action on AI safety legislation will wait until 2027 CISA releases cyber decoy guidance for infrastructure defenses Get the show notes here:…

  35. Flock gets plucked, OpenAI agents arrived even earlier, inside China's AI spy shop

    · 6:30

    Flock gets plucked OpenAI agents arrived early China's AI spy shop Get the show notes here: https://cisoseries.com/cybersecurity-news-september-17-2026/ Huge thanks to our episode sponsor, Vanta Risk and…

  36. Cisco zero-day goes straight to root, BambooToken branches into Linux, CenterPoint breach claim hits 7M+

    · 7:27

    Cisco zero-day goes straight to root BambooToken branches into Linux CenterPoint breach claim hits 7M+ Get the show notes here: https://cisoseries.com/cybersecurity-news-september-16-2026/ Huge thanks to our…

  37. China hits fast-forward on AI security, Hacking Cat shows its claws, Vite servers spill cloud secrets

    · 9:35

    China hits fast-forward on AI security Hacking Cat shows its claws Vite servers spill cloud secrets Get the show notes here: https://cisoseries.com/cybersecurity-news-september-15-2026/ Huge thanks to our episode…

  38. Passkey phishing attack, Anthropic's blockbuster report, airline cybersecurity loophole

    · 7:35

    Attackers use passkey phishing to hijack Microsoft cloud accounts Anthropic blockbuster report reveals sophisticated hacks Airlines compliance with new cybersecurity regulations means fewer passenger conveniences…

  39. The Department of Know: Liquid drained, CISA urges change, agentic whistleblowers

    · 34 min

    Read the full stories at CISOSeries.com This week's Department of Know is hosted by Rich Stroffolino, with guests Alexandra Landegger, global head of cyber strategy & transformation, RTX, Mark Eggleston,…

  40. NetScaler vulnerability exploited, AdaptHealth suffers breach, new Android malware

    · 7:42

    Critical NetScaler vulnerability exploited in attacks AdaptHealth data breach impacts 4.1 million people MantaxOtax Android malware delivers ransomware and spyware together Get the show notes here:…

  41. Fortinet auth holes, China distills AI, Mythos vulnerability

    · 7:21

    Fortinet plugs two critical auth holes US says China is distilling AI at scale Mythos vulnerability hits human bottleneck Get the show notes here: https://cisoseries.com/cybersecurity-news-september-10-2026/ Huge…

  42. Florida DMV breach, zero-click WeChat worm, AI whistleblowers

    · 7:37

    ShinyHunters claimed it breached Florida DMV Zero-click WeChat worm spreads over incoming calls AI cheaters and whistleblowers emerge Get the show notes here:…

  43. PEEP browser backdoors, $320M Liquid exploit, BigBear beats MFA

    · 8:24

    PEEP turns browsers into backdoors Liquid loses $320M, hackers play hero BigBear claws past MFA Get the full show notes here: https://cisoseries.com/cybersecurity-news-september-8-2026/ Huge thanks to our episode…

  44. MikroTik routers hijacked, Russian data center threats, UK cybercrime losses surge

    · 7:45

    MikroTik routers hijacked through internet-exposed SSH Russian data centers face new security requirements UK account-hack losses surge thanks to new reporting system Get the show notes here:…

  45. The Department of Know: Astra launches, CISA cuts programs, McKesson breached

    · 35 min

    Read the full stories at CISOSeries.com This week's Department of Know is hosted by Rich Stroffolino, with guests Montez Fitzpatrick, director, information security, global head of cybersecurity, Energizer Holdings,…

  46. Court records breach, Breeze Comet hits Brazil, Aesto records breach

    · 8:49

    U.S. and Canadian court records breached in Thomson Reuters incident Cybercrime Breeze Comet causing problems in Brazil Aesto record system hit by data breach Get the full show notes here:…

  47. 153M licenses for sale, Anthropic reverses course, Astra enters the red zone

    · 7:21

    Dark web shop stocks 153 million driver's licenses Nexus, a new dark web service, claims it's selling scans of more than 153 million US and Canadian driver's licenses, plus over 10 million ID cards, three million…

  48. Fable 5.1 released, USPS "untested" IT, Exchange hijack vulnerability

    · 8:38

    Anthropic announces safety changes and new models USPS installs "untested" IT systems for mail-in ballots Thousands of Exchange servers vulnerable to hijacks Get the full show notes here:…

  49. Claude sessions hijacked, AI jolts global finance, agents get too many keys

    · 6:06

    Claude sessions get hijacked Anthropic is warning that common infostealer malware is stealing active Claude browser sessions, letting attackers get into accounts and burn through paid usage without needing a password…

  50. ServiceNow vulnerabilities warning, PaperCut zero-day, McKesson healthcare breach

    · 7:31

    ServiceNow warns of three maximum severity security vulnerabilities PaperCut zero-day exploited in attacks Healthcare giant McKesson discloses breach Get the full show notes here:…

Shows are listed from Apple Podcasts' charts and directory, and Podcast Index where it is used. Every show and episode belongs to its publisher and plays from the publisher's own feed; this site hosts none of them. Explicit shows are for adult profiles only, and children’s profiles hear only children’s shows. More about this list.