In this episode, Mark and Diana discuss the alarming discovery of Shade, a stealthy BIOS-level malware that evades traditional security measures. They dive into reports of Chinese state-sponsored hackers breaching U.S. intelligence networks, and examine why social engineering remains the leading cause of cyber incidents. The duo also covers major data breaches affecting UnitedHealth, Microsoft 365, and multiple healthcare providers, as well as APT41’s massive Android malware campaign. To wrap up, they highlight CISA’s release of the new open-source malware analysis tool, Thorium, and explore the growing risks tied to third-party vendors and cloud platforms.

Stealth Malware, State-Sponsored Breaches, and the Rising Tide of Third-Party and Cloud Threats

This episode covers Microsoft’s latest Patch Tuesday tackling a critical Kerberos zero-day, a Booking.com phishing scam using a sneaky Unicode trick, and the Crypto24 ransomware group’s advanced EDR evasion tools. We also look at Google’s Android pKVM earning top security certification, a surge in personalized phishing emails, and two new mobile threats — the LunaSpy spyware and PhantomCard NFC-based banking malware.

Cybersecurity Roundup: Sophisticated Phishing Scams, and Emerging Mobile Threats

In this episode, Edd Hall discusses the latest developments across cybersecurity, technology, and industry. From the evolution of the Hook Android Trojan into a ransomware-style threat and critical Citrix NetScaler vulnerabilities already under active exploitation, to a massive cyberattack that forced Nevada state offices to close, organizations face increasing digital risks. He also covers malicious apps discovered on Google Play, a newly disclosed high-severity Git vulnerability, ModivCare’s bankruptcy, the ZipLine campaign targeting U.S. supply chains, and the Healthcare Services Group data breach affecting over 600,000 individuals. Stay tuned as we break down the key impacts and recommended actions for each of these events.

Ransomware, Exploited Vulnerabilities, and Major Data Breaches

In today’s cybersecurity roundup, we cover 224 malicious Android apps removed from Google Play, a new BiDi Swap vulnerability, and a supply chain attack targeting npm packages. We also look at SonicWall’s cloud portal breach, the FileFix phishing campaign, Microsoft’s takedown of the RaccoonO365 phishing service, and TA558’s use of AI-generated scripts in hotel attacks. Stay informed on the latest threats shaping the digital landscape.

Cyber Threats Uncovered: Malicious Apps, Supply Chain Attacks, and New Phishing Tactics

Stay up to date with today’s top cybersecurity stories. From Google’s new F‑Droid restrictions and emerging Android malware like Klopatra and MatrixPDF, to DNS-based attacks, VMware exploits, and North American data breaches exposing millions of users, we cover the latest threats and vulnerabilities affecting individuals and organizations. Tune in for a concise, journalist-style briefing on the key cyber risks you need to know today.

Malware, Android Threats, and Data Breaches – Daily Cybersecurity Update

In this episode, Edd Hall discusses the recent wave of cybersecurity events, starting with the Red Hat breach that exposed internal project data, the surge in CVEs and how insurers are reacting, and the Kodex outage caused by social engineering. He also covers the emergence of the Klopatra Android trojan, new CISA advisories and additions to the KEV catalog, along with major data breaches impacting Allianz Life and WestJet customers.

From the Red Hat Breach to the WestJet Data Leak

In this episode, Edd Hall discusses the latest cybersecurity news and trends, covering Chinese hackers weaponizing open-source tools, the Crimson Collective targeting AWS cloud environments, WordPress theme exploits, and a critical macOS VPN vulnerability. He also explores the Salesforce data breach, the release of a fully undetectable Android RAT, arrests linked to a London nursery breach, and OpenAI’s actions to block state-sponsored hackers using ChatGPT. Edd breaks down the impact of these incidents, the tactics used by attackers, and what organizations and individuals can do to stay protected.

From Cloud Breaches to Android Malware: 8 Major Cybersecurity Events Today

In this episode, Edd Hall discusses the latest developments in cybersecurity, including how AI models can be easily poisoned, the ongoing Cl0p ransomware attacks, dangerous Android malware impersonating popular apps, and critical vulnerabilities in enterprise systems like SonicWall and Oracle E-Business Suite. He also covers Apple’s $2 million bug bounty for zero-click exploits, the rapid spread of a global botnet, the discovery of malicious npm packages, Fortra’s $20 million data breach settlement, and CISA’s newest additions to the Known Exploited Vulnerabilities catalog. Edd breaks down what these threats mean for individuals and organizations, and highlights the steps needed to stay protected in today’s evolving digital landscape.

AI Risks, Ransomware Strikes, and Emerging Threats Worldwide

In today’s episode, we dive into the latest cybersecurity stories shaping the digital landscape. From Cisco firewall exploits and QNAP zero-days to the rise of the Herodotus banking malware and Landfall spyware, we uncover how attackers are evolving. Plus, insights on China’s new IIS hacking campaigns, Microsoft Teams’ security concerns, and the advanced LockBit 5.0 ransomware making waves across global networks. Stay informed with this week’s top cyber threats.


This Week in Cybersecurity: From Cisco Exploits to LockBit’s New Ransomware Evolution

In this episode, Edd Hall discusses a wave of significant cybersecurity developments, including a massive IoT-powered DDoS attack against Azure, new findings on Android spyware exploiting a Samsung zero-day, multiple corporate and healthcare data breaches, and the active exploitation of a critical FortiWeb vulnerability. He also examines the rise of LinkedIn-based phishing campaigns, the financial fallout from Tata Motors’ recent cyber incident, and emerging 5G-A technologies that may shape future attack surfaces.

Major Cyber Attacks, Zero-Days, and Data Breaches Shape Today’s Security Risks

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

New tracks tagged #AndroidMalware