The UK's Cyber Pledge and Cyber Shield

Millions exposed in Japanese telco attack

China looking to curb overseas model access

Get the show notes here:

Thanks to our episode sponsor, Vanta

Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot.

The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk, and drafting fixes for you.

Vanta is the platform used by over sixteen thousand fast-moving companies like Ramp, Cursor, and Harvey who are shaping the future with AI, AND staying ahead of AI risk.

Get started at vanta.com/headlines.

Suspected China-Nexus hackers use fake Indian tax filing utility to deploy DcRAT

Prompt injection attacks trick AI Agents into making crypto payments

France to stop certifying products without quantum-safe encryption

Get the show notes here: https://cisoseries.com/cybersecurity-news-india-tax-rat-prompt-injection-crypto-scam-france-pushes-quantum-safe/

Thanks to our episode sponsor, Vanta

Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot.

The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk, and drafting fixes for you.

Vanta is the platform used by over sixteen thousand fast-moving companies like Ramp, Cursor, and Harvey who are shaping the future with AI, AND staying ahead of AI risk.

Get started at vanta.com/headlines.

JadePuffer ransomware used AI agent to automate entire attack

AdaptHealth suffers cyberattack

UK's National Cyber Action Plan launch delayed by political leadership crisis

Get the show notes here: https://cisoseries.com/cybersecurity-news-first-ai-ransomware-adapthealth-suffers-cyberattack-uk-cyber-plan-delayed/

Thanks to our episode sponsor, Vanta

Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot.

The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk, and drafting fixes for you.

Vanta is the platform used by over sixteen thousand fast-moving companies like Ramp, Cursor, and Harvey who are shaping the future with AI, AND staying ahead of AI risk.

Get started at vanta.com/headlines.

This week's Department of Know is hosted by Rich Stroffolino, with guests David Cross, CISO, Atlassian; Kathleen Mullin, Director, SABSA Institute; Montez Fitzpatrick, CISO, Navvis; and Howard Holton, former CEO, GigaOm.

Get the show notes here: https://cisoseries.com/the-department-of-know-peoplesoft-exploit-ford-brings-back-gray-beards-llm-vetting/

Huge thanks to our sponsor, Silent Push

Most cybersecurity approaches are completely reactive. Victim organizations are hit with an attack and the chase ensues.

Silent Push closes this gap with its Preemptive Cyber Defense platform. Silent Push tracks adversary infrastructure and infrastructure changes across the Internet during the attack preparation phase - while attackers are still staging domains, IPs, and hosting and Silent Push turns that into Indicators of Future Attack® to defend with confidence.

For a CISO, that turns invisible risk into early warning, an average of 140 days before a campaign shows up in your environment. Time to act, and a smaller window of exposure, before a threat ever reaches your environment.

Card data theft remains top concern for U.S. consumers

OMB chief to oversee spy agency budgets

Fortibleed leads to ransomware attacks and 430,000 Fortinet firewalls exposed

Get the show notes here: https://cisoseries.com/cybersecurity-news-consumer-security-worries-vought-supervises-spy-budgets-fortibleed-exposes-fortinet/

Huge thanks to our sponsor, Silent Push

Most cybersecurity approaches are completely reactive. Victim organizations are hit with an attack and the chase ensues.

Silent Push closes this gap with its Preemptive Cyber Defense platform. Silent Push tracks adversary infrastructure and infrastructure changes across the Internet during the attack preparation phase - while attackers are still staging domains, IPs, and hosting and Silent Push turns that into Indicators of Future Attack® to defend with confidence.

For a CISO, that turns invisible risk into early warning, an average of 140 days before a campaign shows up in your environment. Time to act, and a smaller window of exposure, before a threat ever reaches your environment. Learn more at silentpush.com

Hide My Email bug shows real addresses

Fable 5 gets the greenlight

DHS confirms hackers breached HSIN

Get the show notes here: https://cisoseries.com/cybersecurity-news-hide-my-email-shows-real-addresses-fable-5-gets-greenlight-microsoft-teams-hits-back-on-bots/

Huge thanks to our sponsor, Silent Push

Most cybersecurity approaches are completely reactive. Victim organizations are hit with an attack and the chase ensues.

Silent Push closes this gap with its Preemptive Cyber Defense platform. Silent Push tracks adversary infrastructure and infrastructure changes across the Internet during the attack preparation phase - while attackers are still staging domains, IPs, and hosting and Silent Push turns that into Indicators of Future Attack® to defend with confidence.

For a CISO, that turns invisible risk into early warning, an average of 140 days before a campaign shows up in your environment. Time to act, and a smaller window of exposure, before a threat ever reaches your environment. Learn more at silentpush.com

Bash can spell trouble GNU for AI agents

DHS to unveil critical infrastructure council

Aikido buys Root

Get the show notes here: https://cisoseries.com/cybersecurity-news-bash-hits-ai-dhs-announces-anchor-ci-aikido-buys-root/

Huge thanks to our sponsor, Silent Push

Most cybersecurity approaches are completely reactive. Victim organizations are hit with an attack and the chase ensues.

Silent Push closes this gap with its Preemptive Cyber Defense platform. Silent Push tracks adversary infrastructure and infrastructure changes across the Internet during the attack preparation phase - while attackers are still staging domains, IPs, and hosting and Silent Push turns that into Indicators of Future Attack® to defend with confidence.

For a CISO, that turns invisible risk into early warning, an average of 140 days before a campaign shows up in your environment. Time to act, and a smaller window of exposure, before a threat ever reaches your environment. Learn more at silentpush.com

US seizes illegal World Cup domains

WhatsApp offers usernames for phone number privacy

$10M reward for Russia-based cyber campaign

Get the show notes here: https://cisoseries.com/cybersecurity-news-us-seizes-illegal-world-cup-domains-whatsapp-offers-usernames-for-phone-privacy-10m-reward-for-cyber-campaign/

Huge thanks to our sponsor, Silent Push

Most cybersecurity approaches are completely reactive. Victim organizations are hit with an attack and the chase ensues.

Silent Push closes this gap with its Preemptive Cyber Defense platform. Silent Push tracks adversary infrastructure and infrastructure changes across the Internet during the attack preparation phase - while attackers are still staging domains, IPs, and hosting and Silent Push turns that into Indicators of Future Attack® to defend with confidence.

For a CISO, that turns invisible risk into early warning, an average of 140 days before a campaign shows up in your environment. Time to act, and a smaller window of exposure, before a threat ever reaches your environment. Learn more at silentpush.com