Welcome back to the Identity Theft Resource Center’s Weekly Breach Breakdown – supported by Sentilink. I’m James Lee, the ITRC’s COO and this is the episode for Friday the 13th of September, 2024.

Each week on this podcast, we look at the most recent events and trends related to data security and privacy. Let’s start this episode with an apology to all of you who suffer from Triskaidekaphobia. That’s the fear of the number 13. That’s also why we think of Friday the 13th as a bad luck day. It’s a notion that goes all the way back to the Middle Ages in Europe. But we’re here today to talk about another long-followed practice: Don’t shoot the messenger.

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on X: twitter.com/IDTheftCenter

The Weekly Breach Breakdown Podcast by ITRC - Shooting The Messenger - S5E29

In honor of Cybersecurity Awareness Month, Greg is joined this week by Brad Holton, founder of Proton Dealership IT.

Since starting Proton in 2013, Brad has seen an evolution in the nature of cyberattacks and cybersecurity. He's got a great handle on how cybercrime has changed and what we can all look out for moving forward.

Brad and Greg discuss:

-When a cyber event happens, how do you make it a 15-minute event and not a 15-day event.
-How natural disasters impact security with rises in social engineering efforts.
-A checklist of tips to help you prepare your business against an attack.

Connected Podcast Episode 153: Protecting From Changing Cyber Threats ft. Brad Holton

The HEAL Security Dispatch Daily Digest for October 2nd, 2024, highlights critical developments in the healthcare and cybersecurity sectors. The Common Unix Printing System (CUPS) is under scrutiny due to vulnerabilities that could lead to unauthorized access and arbitrary code execution on Unix-based systems. Administrators are advised to apply patches promptly to safeguard systems. In other updates, CISA has expanded its Known Exploited Vulnerabilities Catalog, underscoring a newly identified threat that demands immediate attention from relevant entities. Meanwhile, a wave of Python-based malware has been detected infiltrating systems via Visual Studio Code extensions, posing a sophisticated threat to developers.

Additionally, the healthcare sector continues to be a significant target for cybercriminals. A newly proposed U.S. bill—the Health Infrastructure Security and Accountability Act—seeks to impose mandatory cybersecurity standards for healthcare organizations, including annual audits and stricter penalties for non-compliance. This legislation follows alarming statistics from a recent survey, where 67% of healthcare entities reported ransomware attacks in 2024, an increase from the previous year. Recovery times have lengthened, and with ransom demands averaging $4 million, the healthcare sector remains a high-risk target for cyberattacks, highlighting the urgency for robust security measures.
https://healsecurity.com

From Healthcare Breaches to Critical Infrastructure Threats

The HEAL Security Dispatch Daily Digest is your trusted source for up-to-date cybersecurity news, specifically focused on healthcare and technology. Hosted by Richard Simmons from London, the show features expert insights on critical security issues. In this episode of Wednesday, October 30th, 2024, the podcast covers a range of pressing topics: from the exploitation of AI systems like ChatGPT and vulnerabilities in Microsoft Windows, to spear-phishing attacks by Russian-linked actors, and the emergence of new malware like FakeCall targeting Android devices. Significant health sector breaches, including the massive UnitedHealth data breach compromising over 100 million records, also highlight the ongoing threat landscape. Additionally, software vulnerabilities in platforms such as QNAP's storage systems and Fortinet's FortiManager product are discussed, underlining the importance of timely patches. The episode concludes by addressing a crucial gap in cybersecurity training, which often overlooks key roles in the software development life cycle, emphasizing the need for more comprehensive educational approaches to bolster defenses across industries. 
https://healsecurity.com/

HEAL Security Dispatch: AI Vulnerabilities, and New Malware Threats in Healthcare & Tech

Good evening and welcome to HEAL Security Dispatch Daily Digest, your essential source for the latest developments in cybersecurity, with a special focus on the healthcare sector. Hosted by Richard Simmons from London, this podcast dives into current cyber threats and expert insights. In today's episode for Wednesday, November 6, 2024, we discuss a range of pressing cybersecurity issues: from Schneider Electric’s ransomware attack, where hackers demanded payment in baguettes, to the proliferation of the ToxicPanda malware in Italy, affecting fraudulent banking transactions. We also cover a critical Cisco vulnerability that compromises wireless network security, and a breach of Singtel allegedly by China's Volt Typhoon. The episode continues with reports on data stolen from UK logistics software company Microlise, along with Interpol’s major cybercrime crackdown, Operation Synergia II, which secured over 1,200 arrests. We also refute recent hacking claims affecting Nokia and examine the growing concerns around VEILDrive malware exploiting Microsoft services. Stay tuned for critical updates and analysis in the fast-evolving world of cybersecurity. 
https://healsecurity.com/

Cybersecurity Roundup: Schneider Electric Hit by Ransomware, and Global Interpol Crackdown

HEAL Security Dispatch Daily Digest is your essential briefing on the intersection of healthcare and cybersecurity, expertly hosted by Richard Simmons from London. This fast-paced podcast dives into the latest developments, including UK hospitals grappling with cyberattacks that disrupted operations, and rising global threats like SmokeLoader malware exploiting Microsoft Office vulnerabilities in Taiwan. It also uncovers advanced threats such as the CleverSoar malware targeting Southeast Asia and the new BootKitty UEFI malware affecting Linux systems. Listeners gain insights into critical vulnerabilities in platforms like Zabbix, along with updates on Amazon Web Services' new incident response service designed to streamline recovery from cyber issues. With discussions on Android devices compromised by SpyLoan apps, this podcast serves as a vital guide for staying informed and protected against emerging cyber risks. 
https://healsecurity.com/

HEAL Security Dispatch: Cyberattacks on UK Hospitals, and AWS Unveils Incident Response Service

HEAL Security Dispatch Daily Digest is your comprehensive source for daily insights into the rapidly evolving world of cybersecurity, with a specific focus on the critical intersection of healthcare and digital protection. Hosted by Richard Simmons from London, the podcast covers pressing global issues in cybersecurity, including emerging threats, regulatory developments, and industry vulnerabilities. In this episode from December 19, 2024, topics include the U.S. deliberation over banning TP-Link routers due to espionage concerns, China's accusations against U.S. cyberattacks on its tech firms, and Russia-linked APT29’s sophisticated spear-phishing campaigns targeting Ukrainian entities. Other stories include Microsoft addressing audio-related update blocks in Windows 11, critical vulnerabilities in Fortinet’s FortiWLM and BeyondTrust Remote Support SaaS, as well as the Mirai botnet targeting Juniper Networks routers. Additionally, listeners learn about malware threats to industrial systems from Ramnit and Chaya_003, and the dangers of malicious npm libraries exploiting typosquatting. With timely updates and expert perspectives, the podcast provides actionable intelligence to navigate the complex cybersecurity landscape. 
https://healsecurity.com/

HEAL Security Dispatch: TP-Link Scrutiny, Microsoft Audio Issues, and BeyondTrust Breach

AI cyberattacks are surging, with 1.31M complaints expected by 2025. Explore trends, risks, and tips to stay protected in an increasingly digital world.

AI Cyberattack Statistics: 1.31 Million Complaints Predicted

Welcome to ‘The CYBERSPACE Podcast – Shedding Light on Cybercrime’.

In this second episode, Research Communications Manager Corinna Pannofino (Trilateral Research) is joined by Cybercrime Investigator Carlos Urquizo from the Basque Police to discuss the importance of reporting cybercrime.

CYBERSPACE is an EU funded project which aims to give policymakers, law enforcement, and the private sector a clearer picture of cybercrime in the EU. The project is doing so by developing better forensic tools, policy recommendations and resources for improving public awareness about cybercrime.

The project is funded by the European Union’s Internal Security Fund – Police Programme under grant agreement No 101038738

The CYBERSPACE podcast – shedding light on cybercrime - Episode 2

In this episode, Greg Otto talks with FTI Consulting’s Allie Bohan exploring the challenges organizations face in maintaining effective communication during cyberattacks. Allie and Greg uncover essential strategies for incidents, ensuring companies remain connected with stakeholders even when digital channels are compromised. We also talk on how to keep morale boosted within an organization during a time that many would consider one of the worst chapters in a business’s history. 

In our reporter chat, Greg talks with Matt Kapko about who is sending those massively annoying scam text messages about unpaid toll violations.


Allie Bohan on how to handle the non-technical side of a ransomware attack

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

New tracks tagged #CyberAttacks