The HEAL Security Dispatch Daily Digest is a leading cybersecurity podcast delivering essential updates and expert analysis at the intersection of digital security and healthcare. Hosted by Richard Simmons from London, the podcast provides a comprehensive overview of the latest threats, vulnerabilities, and incidents shaping the cyber landscape. In the June 16, 2025 edition, the podcast covers critical developments including DHCP failures caused by recent Microsoft security updates, a damaging cyberattack on Freedman HealthCare, and a widespread Microsoft Outlook crash affecting virtual desktop users. It also highlights the emergence of Anubis ransomware, known for both encryption and file destruction, a massive data breach lawsuit against Kettering Health, and a high-risk Grafana vulnerability (CVE-2025-4123) affecting over 46,000 instances. Additional stories feature sophisticated phishing campaigns leveraging Discord and the long-running VexTrio operation exploiting WordPress sites for malware distribution. With timely reporting and deep insight, the HEAL Security Dispatch Daily Digest is an indispensable resource for understanding the fast-evolving world of cybersecurity. 
https://healsecurity.com/

Cybersecurity Breakdown: Microsoft Glitches, and Grafana Exploit Threaten Stability

Welcome to Cybersecurity Deep Dive! In this episode, we explore Seqrite—a leader in the cybersecurity space. We’ll break down Seqrite’s comprehensive approach to protecting businesses, including their parent company Quick Heal Technologies Ltd., and dive into their key product offerings: endpoint, network, and mobile security. You’ll also learn how Seqrite leverages machine learning for real-time threat detection, fighting off threats like ransomware and phishing.

We’ll guide you through a Short Answer Quiz to test your understanding, explore essay-style questions that challenge you to think about the importance of multi-layered security and employee training, and provide a Glossary of Key Terms to make sure you're equipped with the essential cybersecurity knowledge. Whether you're new to the field or looking to deepen your understanding, this episode has something for everyone!

Tune in to gain a thorough understanding of Seqrite’s cybersecurity expertise and why it’s crucial to stay ahead in the digital security landscape.

Stay ahead of threats: https://www.seqrite.com/endpoint-protection

Seqrite Cybersecurity Solutions – Advanced Protection for Businesses

AI Crackdowns, Airline Cyber Strikes, and the Evolving Landscape of Global Security Threats

In today’s episode of the HEAL Security Dispatch, we spotlight a wave of cyber incidents hitting key sectors worldwide. A critical flaw in Citrix NetScaler disrupts authentication for thousands of users, while Qantas investigates a third-party breach that exposed personal data of up to six million customers. A vulnerability in the Forminator WordPress plugin puts over 400,000 websites at risk of takeover, and 23andMe’s new owner pledges to protect genetic data amid regulatory scrutiny. Meanwhile, ransomware continues to plague U.S. government systems, and researcher mr.d0x reveals two evolving attack chains—FileFix and its browser-based variant—that bypass key Windows and browser safeguards.

Stay with us as we break down the latest threats, exploits, and defensive moves shaping the global cybersecurity landscape.
healsecurity.com

Citrix Login Chaos, Qantas Breach, the Evolving FileFix Threat

Welcome to the Identity Theft Resource Center’s (ITRC) Weekly Breach Breakdown for July 3, 2025. I’m Timothy Walden. Thanks to SentiLink for their support of the ITRC and this podcast. Each week, we break down the latest data security incidents making headlines. 

Today, we’re focusing on a significant lawsuit settlement— the AT&T data privacy settlement. This settlement affected millions of AT&T customers and underscores the increasing complexities of data breach litigation.  

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on Twitter: twitter.com/IDTheftCenter

The Weekly Breach Breakdown Podcast by ITRC: A Tale of Two Breaches - S6E20

Welcome back to the Identity Theft Resource Center’s (ITRC) Weekly Breach Breakdown, supported by Sentilink. I’m James E. Lee, the ITRC’s President, and this is the episode for July 18, 2025. Each week, we take a look at the latest news and trends related to data security and privacy. This week, the ITRC released our H1 2025 Data Breach Analysis that looks at what happened in the first six months of 2025 when it comes to U.S. data compromises. Let’s talk about the trends, but first, some housekeeping with some numbers: 

A total of 1,732 data compromises were reported in the first half of 2025, resulting in a little more than 165.7 million breach notices. That’s about five percent ahead of where we were at this time last year in terms of compromises. It’s also more reported compromises than at the halfway point in 2023, when we set the current high-water mark for data compromises.  

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on X: twitter.com/IDTheftCenter

The Weekly Breach Breakdown: ITRC H1 2025 Data Breach Analysis – Key Findings & Takeaways – S6E22

In Episode 6, host Jordan L. Fischer, Esq. interviews Rachael Pashkevich Koontz, Associate General Counsel of cybersecurity and data protection for a large U.S. Government Contractor in the technology space. Rachael provides key insight into her unique role as an in-house cyber attorney, and the day-to-day role she plays in shaping the cyber policy and approach within her organization. Rachael and Jordan discuss how the cybersecurity industry is changing, and how that has made in-house advising on cyber more dynamic and impactful across the business and its operations. 

For more information on Rachael Pashkevich Koontz, visit: https://www.linkedin.com/in/rachael-pashkevich-koontz-esq-8915ba48/. to contact our host, Jordan L. Fischer, Esq., regarding this podcast or to inquire into becoming a guest, please contact Ms. Fischer at jordan@jordanfischer.me.

Cyber Security and Data Privacy: S5E6: Diving into the role of an In-House Cyber Attorney

🤖 AI tools like ChatGPT & Copilot boost productivity—but if misused, they can leak sensitive data 😬. From accidental pastes to hacker-driven prompt injections, small businesses are vulnerable. Create a clear AI policy, train your team, use secure platforms & monitor usage. Don’t ban AI—manage it smartly before one click causes chaos. 🔐

Is Your Business Training AI How To Hack You_

A roundup of this week’s top cybersecurity stories, including Microsoft’s Windows 10 retirement warning, a major breach at Colt Technology Services, a critical Zoom vulnerability, the rise of AI-powered ransomware HexStrike, a massive UnitedHealth data leak affecting 192.7 million people, and a Pakistan-based malware campaign infecting millions worldwide.

Global Cybersecurity Brief: Ransomware Strikes, Data Breaches, and Emerging Threats

Today’s cybersecurity roundup covers major developments worldwide — from the UK backing down on Apple encryption demands to new exploits in Apache ActiveMQ. We dive into exposed flaws at McDonald’s, North Korean hackers leveraging GitHub, and a ClickFix attack using a fake BBC News page. Updates from Google Cloud’s 2025 Security Summit highlight stronger protections, while a cyberattack in the Netherlands has disabled dozens of speed cameras.

Global Cybersecurity Roundup: Privacy Battles, New Exploits, and Infrastructure Under Attack

The podcast episode from Secure Signal by Seqrite outlines five crucial cybersecurity trends for 2025 that businesses must address. It highlights how Artificial Intelligence (AI) is transforming both offensive and defensive cybersecurity tactics, making attacks more sophisticated while also enhancing detection capabilities. The discussion also addresses the concerning rise of "ransomware-as-a-service," simplifying launch for criminals, and the persistent vulnerability of misconfigured cloud security settings. For businesses seeking to strengthen endpoint security, Seqrite’s Endpoint Protection Cloud offers advanced defense mechanisms.

Furthermore, the source underscores the growing importance of adhering to stricter global data protection laws. To better manage these challenges, Seqrite’s Data Privacy solutions can help businesses protect sensitive information and maintain compliance. The podcast also emphasizes the shift of Zero Trust principles from theory to practical implementation for enhanced network security—an area where Seqrite’s Zero Trust Network Access (ZTNA) provides a robust framework for safeguarding organizational networks.

Ultimately, the podcast serves as a guide for businesses to understand and adapt to these evolving threats and regulatory landscapes.

Secure your network today: https://www.seqrite.com/zero-trust-network-access-ztna/

2025 Cybersecurity Trends - AI, Ransomware, Cloud, DPDP Act, ZTNA

Dr. Rick Goud brings a unique perspective to the data sovereignty conversation, combining medical informatics expertise with entrepreneurial technology innovation. As co-founder and Chief Innovation Officer of Zivver, a secure digital communications platform acquired by Kiteworks in 2025, Goud's journey began with an unexpected twist – missing out on medical school in the Netherlands' lottery system led him to medical informatics, where he discovered his passion for solving healthcare's data security challenges. His background as a strategy consultant in healthcare, where he witnessed firsthand the alarming frequency of sensitive patient data being shared through insecure channels, sparked his mission to create solutions that balance robust security with user-friendly functionality.

The podcast reveals a fundamental tension in European data sovereignty: While Europe boasts the world's strongest data protection laws like GDPR and the upcoming EU Data Act, organizations remain heavily dependent on foreign cloud infrastructure. Goud explains that the challenge extends beyond mere infrastructure – it's the absence of true European alternatives for essential software services that creates vulnerability. He highlights recent incidents, including a French Microsoft executive's court admission that Microsoft cannot prevent U.S. government access to data without customer notification, and the shocking case of a Dutch criminal court judge whose email was blocked by Microsoft at the behest of American authorities. These examples underscore how data sovereignty encompasses not just data protection, but also continuity of service and freedom from foreign interference.

When addressing the economic realities of data sovereignty, Goud advocates for a pragmatic, risk-based approach rather than wholesale abandonment of U.S. cloud services. He emphasizes that organizations should start by identifying their specific risks – whether it's human error (the leading cause of data breaches), email interception, weak passwords, or phishing attacks. The solution often lies in implementing encryption layers where organizations maintain control of their own keys, effectively rendering data unreadable even if accessed by unauthorized parties. This approach allows organizations to continue using familiar tools like Microsoft 365 and Gmail while adding crucial security layers for sensitive information, avoiding the massive costs and behavioral changes required by complete infrastructure migration.

The conversation concludes with practical advice for organizations beginning their data sovereignty journey. Goud recommends starting with "low-hanging fruit" – simple security measures that can be implemented quickly, such as activating DANE (DNS-based Authentication of Named Entities) for email encryption, which despite being available for a decade, sees adoption rates of only 15% to 20%. He stresses the importance of email and file security as the primary risk points where data leaves organizational boundaries. Rather than embarking on multi-year infrastructure overhauls, organizations should focus on immediate, achievable improvements while building partnerships with trusted vendors and peer organizations facing similar challenges. This collaborative approach ensures organizations aren't navigating the complex data sovereignty landscape alone.

LinkedIn: https://www.linkedin.com/in/rickgoud/

Rick Goud: Navigating Europe’s Data Sovereignty Challenges

In this special global edition of the HEAL Security Dispatch Daily Digest, we turn our attention to the Middle East. From rising cyber threats and regional security initiatives to groundbreaking partnerships and technological advancements, this episode explores the latest developments shaping the region’s cybersecurity landscape.

Global Edition: Middle East Cybersecurity Outlook

In this episode, Edd Hall discusses the latest cybersecurity developments, including Microsoft’s September updates breaking SMBv1 shares, the KillSec ransomware attack on a Brazilian healthcare software provider, and an insider breach at FinWise Bank affecting nearly 700,000 customers. He also explores the clash between U.S. senators and the FBI’s cyber chief over staffing issues, the risks of threat actors misusing AI code assistants, and the newly disclosed FileFix attack method. Additionally, Edd highlights CISA’s release of eight advisories for industrial control systems and the data breach impacting luxury fashion brands Gucci, Balenciaga, and Alexander McQueen.

Ransomware, Insider Breaches, AI Risks, and Luxury Brand Hack

In this episode, Edd Hall discusses Google’s urgent patch for a Chrome zero-day, a Russian disinformation network spreading fake news with AI, and a new zero-click exploit targeting ChatGPT’s Research Agent to steal Gmail secrets. He also covers the alarming rise in healthcare cyberattack losses revealed by Netwrix, CISA’s latest advisories on industrial control system vulnerabilities, and the growing financial and cyber pressures on safety-net hospitals. The episode closes with insights into a major breach affecting 850,000 Americans, highlighting the escalating risks across technology, infrastructure, and healthcare.

Zero-Days, Fake News, and Healthcare Under Siege

In Episode 7, host Jordan L. Fischer, Esq. interviews Representative Stephanie Scialabba, a state representative in the Commonwealth of Pennsylvania, who is using her experience in her prior career as a practicing attorney in data privacy and cybersecurity to advance the privacy rights of Pennsylvanians and create realistic solutions for evolving issues. In this episode, Representative Scialabba discusses her perspective on the legislative process around technology, privacy, and how she is approaching such a fast-paced and highly influential area of the law.

For more information on Representative Scialabba, visit: https://www.repscialabba.com/. To contact our host, Jordan L. Fischer, Esq., regarding this podcast or to inquire into becoming a guest, please contact Ms. Fischer at jordan@jordanfischer.me.

Cyber Security and Data Privacy: S5E7: A Pennsylvania Regulator's Perspective on Privacy Laws

Welcome to the Identity Theft Resource Center's (ITRC’s) Weekly Breach Breakdown for October 10, 2025. I'm Alex Achten, Senior Director of Communications & Media Relations for the ITRC. Thanks to Sentilink for supporting the ITRC and this podcast. Each week, we look at the most recent events and trends related to data security and privacy. Today, we will examine our Q3 2025 data breach findings.

The last time we inspected the latest data breach trends was in our H1 2025 Data Breach Report. At that time, we were on pace to track a record number of compromises in 2025. Cyberattacks were the primary cause of data breaches where personal information was stolen. Sixty-nine (69) percent of data breach notices did not include information about the root cause of the attack. What changed in the third quarter of the year? The short answer? Not much. Let’s dive into the Q3 2025 data breach numbers.

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on X: twitter.com/IDTheftCenter

The Weekly Breach Breakdown Podcast: Step Into the Breach – Q3 2025 Data Breach Analysis - S6E31

In this episode, Edd Hall discusses the latest cybersecurity developments, including hackers deploying Linux rootkits on Cisco routers, the U.S. Senate’s scrutiny of Cisco’s security practices, and active exploits targeting Adobe Experience Manager and Windows BitLocker. He also covers Integris Health’s $30 million data breach settlement, new additions to CISA’s Known Exploited Vulnerabilities catalog, and the often-overlooked hidden costs of penetration testing — highlighting how these events shape today’s digital risk landscape.

Cisco Rootkit Exploits, Adobe Zero-Day Attacks, and Integris Health Settlement

Kevin Powers, Faculty Director of the Masters of Legal Studies in Cybersecurity Risk and Governance at Boston College Law School, began his professional and academic journey when he volunteered for a task force exploring cybersecurity education at Boston College. Rather than developing a purely technical curriculum, he advocated for an interdisciplinary approach that would integrate law, business, and risk management. "Cybersecurity is not just a technical issue," Powers explained during the podcast episode. Working with stakeholders from the White House, FBI, major financial institutions, and technology companies, the team built a curriculum designed to produce well-rounded cybersecurity professionals.

The program launched in 2015 and recently transitioned to BC Law School, offering 10 courses taught entirely by practitioners actively working in the field. Students include FBI agents, financial compliance officers, and executives from Fortune 50 companies, with an average age of 33.
A central theme of Powers' program is bridging the communication divide between technical teams and business leadership. With recent SEC regulations and requirements like New York's DFS Part 500 mandating board-level cybersecurity oversight, organizations need professionals who understand both technical controls and business implications.

"Boards are recognizing cybersecurity as a core business function," Powers noted, emphasizing that every company operating on networks faces operational risk when systems go down. The program prepares students to communicate cyber risk in business terms and develop governance frameworks aligned with regulatory requirements like CMMC 2.0, FedRAMP, and the NIST Cybersecurity Framework.

The program has evolved rapidly to address artificial intelligence governance. Powers redesigned his coursework after discovering AI tools could complete assignments in minutes, shifting 70% of grading to oral presentations that emphasize critical thinking over output.
Looking ahead, Powers identified cloud security and data sovereignty as critical concerns. Many organizations mistakenly believe SaaS platforms automatically back up their data, leaving them vulnerable during incidents. The CDK Global attack on car dealerships illustrated how unprepared businesses can be when cloud services fail.

Beyond academics, Powers emphasizes creating networks. Graduates maintain connections with government agencies, financial institutions, and technology companies, facilitating collaboration across sectors. The program hosts the annual Boston Conference on Cybersecurity, which draws hundreds of attendees including CISOs from major sports franchises and law enforcement leaders.

For organizations navigating increasingly complex regulatory landscapes, Powers' message is clear: cybersecurity expertise must extend beyond technical skills to encompass governance, compliance, and strategic business alignment. As cyber threats evolve, professionals need frameworks like NIST to demonstrate reasonable security practices to regulators while protecting operational continuity.

LinkedIn: https://www.linkedin.com/in/kevin-powers-54893a8/ 
Boston College School of Law: https://www.bc.edu/bc-web/schools/law.html 


Kevin Powers: From Academic to Practical Cybersecurity

Kitecast features interviews with security, IT, compliance, and risk management leaders and influencers, highlighting best practices, trends, and strategic analysis and insights. Kitecast is cohosted by Tim Freestone and Patrick Spencer who have more than four decades of combined experience in technology and cybersecurity senior leadership roles.

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

SEQRITE, the enterprise arm of Quick Heal Technologies, stands as a premier enterprise cybersecurity solution provider dedicated to safeguarding organizations worldwide. Leveraging cutting-edge AI/ML technology, we protect over 30,000 businesses across 76 countries, ensuring robust cybersecurity solutions tailored to meet the evolving challenges of today’s digital world.

Our Expertise:

As a leading cybersecurity solutions company, we offer an extensive range of services designed to secure your enterprise’s critical assets:

Endpoint Protection Solutions: Our award-winning endpoint protection software delivers comprehensive endpoint security, safeguarding devices from advanced threats. We are recognized among the top endpoint security vendors, providing seamless integration with cloud-based endpoint security options to enhance your defenses.

Data Privacy Management Solutions: With our data privacy software, organizations can effectively manage personal data privacy and ensure compliance with the DPDP Act and global regulations. Our DPDP compliance solutions empower businesses to navigate the complexities of data privacy in India.

Managed Detection and Response (MDR): Our MDR services offer proactive monitoring and response to cyber threats, backed by industry-leading EDR security and XDR cybersecurity capabilities. Our EDR solutions provide real-time detection and response, ensuring your enterprise is fortified against breaches.

Enterprise Mobility Management: Our enterprise mobility solutions facilitate secure BYOD management, allowing your workforce to operate flexibly while maintaining stringent security protocols. Our mobility management solutions ensure data protection without compromising productivity.

Why Choose SEQRITE?

Comprehensive Security: As a full-stack cybersecurity solution provider, we align our offerings with CSMA architecture recommendations to provide integrated endpoint security solutions that are easy to deploy and seamless to integrate.

Global Recognition: We are proud to be the only Indian company collaborating with the US Government on the NIST NCCoE’s Data Classification project, establishing India's reputation on the global cybersecurity stage.

Tailored Services for Diverse Industries: From cybersecurity for financial services to healthcare, manufacturing, and education, our tailored solutions address the unique security needs of each sector, ensuring robust protection across the board.

Partner with SEQRITE today to elevate your cybersecurity posture and protect your business against evolving threats. Contact us for a consultation and explore our comprehensive cybersecurity solutions.

New tracks tagged #DataPrivacy