The "HEAL Security Dispatch Daily Digest," hosted by Richard Simmons from London, is a prominent source of news and analysis in the cybersecurity landscape, with a special focus on the intersection between healthcare and cybersecurity. On this episode dated 5th of July, 2024, the podcast delves into several pressing cyber incidents and developments. Among the highlights are the significant data breaches faced by Ticketmaster and Twilio, illustrating the vulnerabilities in entertainment ticketing and telecommunications. The episode also covers a BGP hijacking incident impacting Cloudflare's services, underscoring the fragility of global internet infrastructure. Furthermore, it discusses the innovative digital platform launched by CareFirst BlueCross BlueShield and MRO to enhance healthcare data sharing, and the alarming data leaks from a Florida health department and OpenAI due to cyberattacks. Additionally, OVHcloud’s experience with a record DDoS attack and the cyber threats looming over the upcoming Euro 2024 emphasize the continuous evolution and sophistication of cybersecurity threats against both corporate and public digital infrastructures. Through its comprehensive coverage, the podcast offers crucial insights into the challenges and advancements at the forefront of cybersecurity efforts. 
https://healsecurity.com/

Cybersecurity Frontlines: From Ticketmaster's Breach to Euro 2024's Cyber Siege

The 'HEAL Security Dispatch Daily Digest' is an engaging podcast that delves into the latest trends and insights in the cybersecurity realm, with a particular focus on the critical intersection of healthcare and cybersecurity intelligence. Hosted by Richard Simmons from London, the podcast provides a detailed roundup of recent cybersecurity incidents and developments on Thursday the 29th of August 2024. Highlights from this episode include advisories about ongoing ransomware attacks by an Iranian hacking group targeting critical infrastructure, a cyber espionage campaign by the China-linked Volt Typhoon exploiting zero-day vulnerability, and the surge in RansomHub ransomware attacks. Additionally, the episode covers the introduction of the Healthcare Cybersecurity Act in the US House of Representatives, aimed at enhancing cybersecurity defenses in the healthcare sector. The podcast also sheds light on sophisticated cyber attacks and espionage operations by groups such as APT32 against human rights organizations, Russian hackers targeting web browsers like Safari and Chrome, and the exploitation of zero-day vulnerabilities in end-of-life IP cameras. Furthermore, it reports on a cyber-attack on Scottish health boards through compromised third-party software, emphasizing the ongoing challenge of securing sensitive data against modern cyber threats. This digest serves as an essential resource for keeping abreast of critical cyber threats and the evolving landscape of cybersecurity measures. 
https://healsecurity.com/

Global Cyber Threats Surge: Iranian Ransomware, Chinese Espionage, and Legislative Responses

The HEAL Security podcast provides an informative roundup of the latest developments in technology, cybersecurity, and data protection. In this episode, topics include Microsoft's Windows 11 update challenges, particularly compatibility issues with older hardware, and a report underscoring the growing cybersecurity risks posed by third-party identities, which are implicated in a significant portion of breaches. Google’s investment in neutral atom quantum technology marks a major leap in quantum computing, while cybersecurity threats from groups like Evasive Panda show the ongoing risks to cloud data. The episode also covers the data breach at French ISP Free, criminal activity involving stolen credit card data on Meta's Threads platform, and the arrest of several individuals in Italy for unauthorized access to sensitive data, illustrating the persistent threat of cybercrime. The episode closes with a reminder about HEAL Security’s free trial offering for enhanced protection of digital environments. 
https://healsecurity.com/

Tech Turmoil: Windows 11 Woes, Meta's Threads Breach, and Google’s Quantum Leap

In this episode, we delve into some of the most pressing issues in cybersecurity. We begin by discussing vulnerabilities found in Palo Alto Networks' Expedition software that could allow attackers to access sensitive data and compromise critical systems, leading CISA to issue a December 2024 deadline for federal agencies to apply mitigations. We then touch on a massive data leak involving Microsoft Power Pages and explore how cloud-based services are creating new challenges for data security. Additionally, we cover cyber-espionage campaigns targeting telecommunications providers, orchestrated by Chinese hackers, and a warning from Swiss authorities about malicious QR codes that install malware on Android devices. Iranian hackers have also been actively targeting Israeli organizations through WezRat malware in a surge of cyber-attacks driven by geopolitical tensions. We also review updates around the sentencing of the Bitfinex hacker, responsible for one of the largest cryptocurrency thefts in history. In the tech space, Microsoft faces criticism after pulling its latest Exchange Server updates due to mail delivery issues, while simultaneously signaling the end of the Windows 10 Beta Channel in favor of Windows 11. We explore concerns around 'security tool sprawl' in organizations, emphasizing the need for consolidation, and close with a discussion on how the OSC&R framework can enhance resilience against software supply chain threats. Lastly, new malware, Glove Stealer, is exploiting vulnerabilities to steal sensitive data from Chrome, highlighting the ongoing threats to browser security. 
https://healsecurity.com/

CISA Flags Palo Alto Vulnerabilities,Microsoft Data Leak, and Global Cyber Attacks Take Center Stage

🎙️Au programme aujourd'hui :
🔍 CISA alerte sur une vulnérabilité critique dans la plateforme ThreatQ
Une injection de commande permet une exécution de code arbitraire à distance. Les versions antérieures à 5.29.3 sont concernées.
Source : CISA - https://www.cisa.gov/news-events/ics-advisories/icsa-24-352-01

🛡️ La directive BOD 25-01 impose des pratiques sécurisées pour les services cloud
La CISA exige un inventaire des services cloud, une surveillance renforcée et l'implémentation obligatoire de l'authentification multifacteur (MFA).
Source : CISA - https://www.cisa.gov/news-events/directives/bod-25-01-implementing-secure-practices-cloud-services

🔒 Violation massive de données compromettant des millions d'utilisateurs
Une base de données contenant des informations personnelles a été exfiltrée et mise en vente sur des forums du dark web.
Source : CySecurity News - https://www.cysecurity.news/2024/12/massive-data-breach-puts-millions-at.html

📡 Telecom Namibia : fuite de données après un refus de rançon
Le groupe Hunters International publie des données sensibles suite au refus de négociation. Plus de 400 000 fichiers exfiltrés.
Source : The Record - https://therecord.media/namibia-state-telecom-provider-data-leaked-after-ransom-refusal

💼 Le spyware israélien Paragon racheté pour 500 millions de dollars
AE Industrial Partners acquiert Paragon, dont le logiciel espion Graphite est utilisé par les gardes-frontières américains.
Source : Clubic - https://www.clubic.com/actualite-547586-le-spyware-israelien-paragon-est-revendu-a-un-groupe-americain-pour-500-millions.html

📞 Questions ou suggestions ? Laissez-moi un message sur RadioCSIRT : 07 68 72 20 09

🎧 Écoutez-nous et abonnez-vous sur vos plateformes préférées : Apple Podcasts, Deezer, Spotify, SoundCloud, YouTube, Amazon Music.

🌐 Le site officiel de RadioCSIRT : https://www.radiocsirt.org


RadioCSIRT #129 - Vos actualités quotidiennes en cybersécurité du Mercredi 18 décembre 2024

In this episode of HEAL Security Dispatch Daily Digest, Richard Simmons reports on the latest wave of critical cybersecurity threats impacting global systems and data. Fortinet users are urged to patch immediately as a severe remote code execution flaw surfaces, while researchers track a stealthy new PHP-based Interlock RAT and the group’s malicious “FileFix” tool posing as recovery software. A tax consulting firm exposes nearly 250,000 sensitive records due to a cloud misconfiguration, and Gigabyte motherboards are found vulnerable to UEFI malware that bypasses Secure Boot. A malicious VS Code extension in Cursor IDE leads to over half a million dollars in stolen crypto, and a global data breach at Louis Vuitton compromises customer information in the UK, South Korea, and Turkey. Stay tuned for a fast-paced briefing on the critical vulnerabilities and breaches shaping today’s cyber threat landscape.

Fortinet Flaw, RAT Deception, and High-End Data Leaks: Today’s Top Cybersecurity Headlines

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

New tracks tagged #DataLeak