In this episode, Edd Hall discusses the latest wave of global cyber threats — from Chinese espionage operations using NET-STAR malware to critical vulnerabilities in Palo Alto’s GlobalProtect, Google Gemini AI, and Linux sudo. He also covers CISA’s funding shift for MS-ISAC, the major cyberattack on Asahi Group, hijackings of Microsoft SQL Servers with XiebroC2, and the Harrods data breach impacting hundreds of thousands of customers.

From Chinese Espionage to Corporate Breaches

In this episode, Edd Hall discusses the recent wave of cybersecurity events, starting with the Red Hat breach that exposed internal project data, the surge in CVEs and how insurers are reacting, and the Kodex outage caused by social engineering. He also covers the emergence of the Klopatra Android trojan, new CISA advisories and additions to the KEV catalog, along with major data breaches impacting Allianz Life and WestJet customers.

From the Red Hat Breach to the WestJet Data Leak

This week on Safe Mode, we talk with Scott Montgomery, VP of Federal at Island, about the realities of achieving FedRAMP authorization. Scott demystifies the often daunting FedRAMP process, shares lessons learned from real-world experience, and reveals the biggest pitfalls organizations face. From data sensitivity requirements to the growing importance of automation in security compliance, this episode is essential listening for anyone navigating federal cloud standards or considering a move into the government tech space. In our reporter chat, Greg talks with Matt Kapko about a whirlwind week around Clop's targeting of Oracle.

What's it like to go through the FedRAMP process?

In this episode, Edd Hall discusses the latest developments in cybersecurity, including how AI models can be easily poisoned, the ongoing Cl0p ransomware attacks, dangerous Android malware impersonating popular apps, and critical vulnerabilities in enterprise systems like SonicWall and Oracle E-Business Suite. He also covers Apple’s $2 million bug bounty for zero-click exploits, the rapid spread of a global botnet, the discovery of malicious npm packages, Fortra’s $20 million data breach settlement, and CISA’s newest additions to the Known Exploited Vulnerabilities catalog. Edd breaks down what these threats mean for individuals and organizations, and highlights the steps needed to stay protected in today’s evolving digital landscape.

AI Risks, Ransomware Strikes, and Emerging Threats Worldwide

In this episode, we discuss the latest cybersecurity developments, including critical vulnerabilities in Cisco and SAP systems, widespread phishing campaigns, ransomware attacks, and regulatory actions. We also explore the growing skills gap in the cybersecurity workforce and the importance of board-level awareness to protect organizations from escalating digital threats.

Critical Exploits, Ransomware Breaches, and Rising Risk Awareness

In this episode, Edd Hall discusses the latest cybersecurity developments, including hackers deploying Linux rootkits on Cisco routers, the U.S. Senate’s scrutiny of Cisco’s security practices, and active exploits targeting Adobe Experience Manager and Windows BitLocker. He also covers Integris Health’s $30 million data breach settlement, new additions to CISA’s Known Exploited Vulnerabilities catalog, and the often-overlooked hidden costs of penetration testing — highlighting how these events shape today’s digital risk landscape.

Cisco Rootkit Exploits, Adobe Zero-Day Attacks, and Integris Health Settlement

In this episode, Edd Hall discusses the latest wave of cybersecurity incidents shaking global infrastructure — from the massive AWS outage that disrupted Prime Video and Fortnite, to China’s accusations against the NSA over cyber-espionage operations. He also breaks down CISA’s addition of new exploited vulnerabilities, the discovery of 131 malicious Chrome extensions hijacking WhatsApp sessions, and the major F5 Networks breach affecting over 262,000 systems. The episode wraps up with updates on Volkswagen’s suspected ransomware attack, the active exploitation of a critical Windows SMB flaw, and the emergence of the self-spreading “GlassWorm” malware targeting developer ecosystems.

Major Cyber Incidents Expose Global Infrastructure and Supply Chain Risks

In this episode, Edd Hall discusses the latest developments in cybersecurity, including emerging threats, critical vulnerabilities, phishing campaigns, AI-related security risks, and high-profile data breaches. He highlights key actions organizations should take to strengthen defenses, manage risks, and protect sensitive data in an increasingly complex digital landscape.

Emerging Threats, Critical Vulnerabilities, and AI Security Risks

Kevin Greene, chief cybersecurity technologist for the public sector at BeyondTrust, joins Greg to unpack the fallout from the recent lapse of the CISA information sharing bill and what it means for both public and private sector cyber defenses. The conversation dives into how the threat landscape has shifted since the bill’s original passage, the limitations of relying solely on indicators of compromise, and the need for more proactive, behavior-based analytics. Kevin shares insights on identity management—including the challenges of both human and machine identities—and emphasizes that meaningful information sharing must be modernized to stay relevant.

A reset on information sharing

In this episode, Edd Hall discusses the latest cybersecurity developments shaping the global landscape — including a massive surge in DDoS attacks across the Middle East, LinkedIn’s AI data privacy deadline, and a shocking case of a U.S. defense contractor selling exploits to Russia. He also covers a major data leak from Iran’s intelligence academy, new additions to CISA’s Known Exploited Vulnerabilities catalog, malware targeting WooCommerce sites, high-severity flaws in Docker Compose, and fresh security guidance from CISA and NSA for Microsoft Exchange and industrial control systems.

DDoS Surge, AI Privacy Deadline, and New CISA Warnings

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

New tracks tagged #CISA