Podcast Episodes

Nimbus Manticore, real-time credential harvesting, the 12-hour patch

Nimbus Manticore learning new tricks

Phishing moves to real-time credential harvesting

India wants 12-hour patches

Check out your show notes here: ht…

4 months, 2 weeks ago

Megalodon infects GitHub repositories, Netherlands seizes 800 servers, Ghost CMS exploited for ClickFix attacks

'Megalodon' infects GitHub repositories

Netherlands seizes 800 servers over cyberattacks

Ghost CMS exploited for ClickFix attacks

Check out your show…

4 months, 2 weeks ago

Drupal KEV addition, Underminr revives domain fronting, Canadian KimWolf arrest

CISA adds Drupal Core flaw to KEV

Underminr hides malicious connections behind trusted domains

Canadian man charged with running KimWolf DDoS botnet

4 months, 3 weeks ago

The Department of Know: Google's CodeMender, CISA's big leak, Torvalds open-source warning

This week's Department of Know is hosted by Rich Stroffolino, with guests Kathleen Mullin, former CISO, MyCareGorithm, and Nick Espinosa, host, Deep …

4 months, 3 weeks ago

Cisco's 10.0 vulnerability, Microsoft email spammed, Chrome vulnerability surge

Cisco issues 10.0 Secure Workload admin flaw warning

Spammers abuse internal Microsoftonline account

Google's surge in Chrome vulnerability announcem…

4 months, 3 weeks ago

GitHub VS Code extension breach, Shai-Hulud npm package compromise, Huawei/Luxembourg telecom link

GitHub breach via VS Code extension

Shai-Hulud wave compromises 600 npm packages

Huawei attack behind Luxembourg telecom crash

Get the show notes her…

4 months, 3 weeks ago

Microsoft hits Fox Tempest, robotics OS flaw, CISA admins leaks keys

Microsoft disrupts malware-signing-as-a-service

Critical flaw found in industrial robot OS

CISA admin leaks keys

Get the show notes here: https://ci…

4 months, 3 weeks ago

Linus Torvalds talks AI bug hunters, 7-Eleven ransom demand, MENA's new cybercrime op

Linus Torvalds not into AI bug hunters

7-Eleven hit with ransom demand

MENA runs new cybercrime op

Get the show notes here: https://cisoseries.com/cy…

4 months, 3 weeks ago

Grafan GitHub extortion, Microsoft rejects Azure report, Funnel Builder flaw

Grafana GitHub token breach leads to extortion attempt

Microsoft rejects Azure vulnerability report, researcher disputes decision

Funnel Builder flaw…

4 months, 4 weeks ago

The Department of Know: GemStuffer attack, AI SBOMs, and AI-created zero-days

This week's Department of Know is hosted by Rich Stroffolino, with guests Gary Chan, CISO, SSM Health and Peter Liebert, CISO, Salesloft.

Missed the …

5 months ago