In today’s episode of the HEAL Security Dispatch, we spotlight a wave of cyber incidents hitting key sectors worldwide. A critical flaw in Citrix NetScaler disrupts authentication for thousands of users, while Qantas investigates a third-party breach that exposed personal data of up to six million customers. A vulnerability in the Forminator WordPress plugin puts over 400,000 websites at risk of takeover, and 23andMe’s new owner pledges to protect genetic data amid regulatory scrutiny. Meanwhile, ransomware continues to plague U.S. government systems, and researcher mr.d0x reveals two evolving attack chains—FileFix and its browser-based variant—that bypass key Windows and browser safeguards.

Stay with us as we break down the latest threats, exploits, and defensive moves shaping the global cybersecurity landscape.
healsecurity.com

Citrix Login Chaos, Qantas Breach, the Evolving FileFix Threat

Welcome to the Identity Theft Resource Center’s (ITRC) Weekly Breach Breakdown for July 3, 2025. I’m Timothy Walden. Thanks to SentiLink for their support of the ITRC and this podcast. Each week, we break down the latest data security incidents making headlines. 

Today, we’re focusing on a significant lawsuit settlement— the AT&T data privacy settlement. This settlement affected millions of AT&T customers and underscores the increasing complexities of data breach litigation.  

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on Twitter: twitter.com/IDTheftCenter

The Weekly Breach Breakdown Podcast by ITRC: A Tale of Two Breaches - S6E20

Welcome back to the Identity Theft Resource Center’s (ITRC) Weekly Breach Breakdown, supported by Sentilink. I’m James E. Lee, the ITRC’s President, and this is the episode for July 18, 2025. Each week, we take a look at the latest news and trends related to data security and privacy. This week, the ITRC released our H1 2025 Data Breach Analysis that looks at what happened in the first six months of 2025 when it comes to U.S. data compromises. Let’s talk about the trends, but first, some housekeeping with some numbers: 

A total of 1,732 data compromises were reported in the first half of 2025, resulting in a little more than 165.7 million breach notices. That’s about five percent ahead of where we were at this time last year in terms of compromises. It’s also more reported compromises than at the halfway point in 2023, when we set the current high-water mark for data compromises.  

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on X: twitter.com/IDTheftCenter

The Weekly Breach Breakdown: ITRC H1 2025 Data Breach Analysis – Key Findings & Takeaways – S6E22

In Episode 6, host Jordan L. Fischer, Esq. interviews Rachael Pashkevich Koontz, Associate General Counsel of cybersecurity and data protection for a large U.S. Government Contractor in the technology space. Rachael provides key insight into her unique role as an in-house cyber attorney, and the day-to-day role she plays in shaping the cyber policy and approach within her organization. Rachael and Jordan discuss how the cybersecurity industry is changing, and how that has made in-house advising on cyber more dynamic and impactful across the business and its operations. 

For more information on Rachael Pashkevich Koontz, visit: https://www.linkedin.com/in/rachael-pashkevich-koontz-esq-8915ba48/. to contact our host, Jordan L. Fischer, Esq., regarding this podcast or to inquire into becoming a guest, please contact Ms. Fischer at jordan@jordanfischer.me.

Cyber Security and Data Privacy: S5E6: Diving into the role of an In-House Cyber Attorney

🤖 AI tools like ChatGPT & Copilot boost productivity—but if misused, they can leak sensitive data 😬. From accidental pastes to hacker-driven prompt injections, small businesses are vulnerable. Create a clear AI policy, train your team, use secure platforms & monitor usage. Don’t ban AI—manage it smartly before one click causes chaos. 🔐

Is Your Business Training AI How To Hack You_

A roundup of this week’s top cybersecurity stories, including Microsoft’s Windows 10 retirement warning, a major breach at Colt Technology Services, a critical Zoom vulnerability, the rise of AI-powered ransomware HexStrike, a massive UnitedHealth data leak affecting 192.7 million people, and a Pakistan-based malware campaign infecting millions worldwide.

Global Cybersecurity Brief: Ransomware Strikes, Data Breaches, and Emerging Threats

Today’s cybersecurity roundup covers major developments worldwide — from the UK backing down on Apple encryption demands to new exploits in Apache ActiveMQ. We dive into exposed flaws at McDonald’s, North Korean hackers leveraging GitHub, and a ClickFix attack using a fake BBC News page. Updates from Google Cloud’s 2025 Security Summit highlight stronger protections, while a cyberattack in the Netherlands has disabled dozens of speed cameras.

Global Cybersecurity Roundup: Privacy Battles, New Exploits, and Infrastructure Under Attack

In this episode of Bulletproof Your Marketplace, Jeremy Gottschalk is joined by Stephen Fusco, Data Privacy Officer and Senior Counsel at Danone North America, as they meet to analyze a new chapter of the book Bulletproof Your Marketplace, focusing on Data Privacy and Data Security — Policies and Practices.

Stephen shares lessons from real-world breaches and compliance challenges, offering practical guidance on data mapping, minimizing collection, building strong governance structures, and avoiding common mistakes that can lead to costly lawsuits. They also explore the fragmented U.S. regulatory landscape, consumer consent, privacy notices, cookie policies, and the risks of neglecting these essentials.

This episode delivers actionable takeaways to help marketplace operators build a safer, more resilient platform while reducing exposure to regulatory penalties, class actions, and reputational damage.

Data Privacy and Data Security — Policies and Practices

The podcast episode from Secure Signal by Seqrite outlines five crucial cybersecurity trends for 2025 that businesses must address. It highlights how Artificial Intelligence (AI) is transforming both offensive and defensive cybersecurity tactics, making attacks more sophisticated while also enhancing detection capabilities. The discussion also addresses the concerning rise of "ransomware-as-a-service," simplifying launch for criminals, and the persistent vulnerability of misconfigured cloud security settings. For businesses seeking to strengthen endpoint security, Seqrite’s Endpoint Protection Cloud offers advanced defense mechanisms.

Furthermore, the source underscores the growing importance of adhering to stricter global data protection laws. To better manage these challenges, Seqrite’s Data Privacy solutions can help businesses protect sensitive information and maintain compliance. The podcast also emphasizes the shift of Zero Trust principles from theory to practical implementation for enhanced network security—an area where Seqrite’s Zero Trust Network Access (ZTNA) provides a robust framework for safeguarding organizational networks.

Ultimately, the podcast serves as a guide for businesses to understand and adapt to these evolving threats and regulatory landscapes.

Secure your network today: https://www.seqrite.com/zero-trust-network-access-ztna/

2025 Cybersecurity Trends - AI, Ransomware, Cloud, DPDP Act, ZTNA

Dr. Rick Goud brings a unique perspective to the data sovereignty conversation, combining medical informatics expertise with entrepreneurial technology innovation. As co-founder and Chief Innovation Officer of Zivver, a secure digital communications platform acquired by Kiteworks in 2024, Goud's journey began with an unexpected twist – missing out on medical school in the Netherlands' lottery system led him to medical informatics, where he discovered his passion for solving healthcare's data security challenges. His background as a strategy consultant in healthcare, where he witnessed firsthand the alarming frequency of sensitive patient data being shared through insecure channels, sparked his mission to create solutions that balance robust security with user-friendly functionality.

The podcast reveals a fundamental tension in European data sovereignty: While Europe boasts the world's strongest data protection laws like GDPR and the upcoming EU Data Act, organizations remain heavily dependent on foreign cloud infrastructure. Goud explains that the challenge extends beyond mere infrastructure – it's the absence of true European alternatives for essential software services that creates vulnerability. He highlights recent incidents, including a French Microsoft executive's court admission that Microsoft cannot prevent U.S. government access to data without customer notification, and the shocking case of a Dutch criminal court judge whose email was blocked by Microsoft at the behest of American authorities. These examples underscore how data sovereignty encompasses not just data protection, but also continuity of service and freedom from foreign interference.

When addressing the economic realities of data sovereignty, Goud advocates for a pragmatic, risk-based approach rather than wholesale abandonment of U.S. cloud services. He emphasizes that organizations should start by identifying their specific risks – whether it's human error (the leading cause of data breaches), email interception, weak passwords, or phishing attacks. The solution often lies in implementing encryption layers where organizations maintain control of their own keys, effectively rendering data unreadable even if accessed by unauthorized parties. This approach allows organizations to continue using familiar tools like Microsoft 365 and Gmail while adding crucial security layers for sensitive information, avoiding the massive costs and behavioral changes required by complete infrastructure migration.

The conversation concludes with practical advice for organizations beginning their data sovereignty journey. Goud recommends starting with "low-hanging fruit" – simple security measures that can be implemented quickly, such as activating DANE (DNS-based Authentication of Named Entities) for email encryption, which despite being available for a decade, sees adoption rates of only 15% to 20%. He stresses the importance of email and file security as the primary risk points where data leaves organizational boundaries. Rather than embarking on multi-year infrastructure overhauls, organizations should focus on immediate, achievable improvements while building partnerships with trusted vendors and peer organizations facing similar challenges. This collaborative approach ensures organizations aren't navigating the complex data sovereignty landscape alone.

LinkedIn: https://www.linkedin.com/in/rickgoud/ 

Rick Goud: Navigating Europe’s Data Sovereignty Challenges

Kitecast features interviews with security, IT, compliance, and risk management leaders and influencers, highlighting best practices, trends, and strategic analysis and insights. Kitecast is cohosted by Tim Freestone and Patrick Spencer who have more than four decades of combined experience in technology and cybersecurity senior leadership roles.

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

SEQRITE, the enterprise arm of Quick Heal Technologies, stands as a premier enterprise cybersecurity solution provider dedicated to safeguarding organizations worldwide. Leveraging cutting-edge AI/ML technology, we protect over 30,000 businesses across 76 countries, ensuring robust cybersecurity solutions tailored to meet the evolving challenges of today’s digital world.

Our Expertise:

As a leading cybersecurity solutions company, we offer an extensive range of services designed to secure your enterprise’s critical assets:

Endpoint Protection Solutions: Our award-winning endpoint protection software delivers comprehensive endpoint security, safeguarding devices from advanced threats. We are recognized among the top endpoint security vendors, providing seamless integration with cloud-based endpoint security options to enhance your defenses.

Data Privacy Management Solutions: With our data privacy software, organizations can effectively manage personal data privacy and ensure compliance with the DPDP Act and global regulations. Our DPDP compliance solutions empower businesses to navigate the complexities of data privacy in India.

Managed Detection and Response (MDR): Our MDR services offer proactive monitoring and response to cyber threats, backed by industry-leading EDR security and XDR cybersecurity capabilities. Our EDR solutions provide real-time detection and response, ensuring your enterprise is fortified against breaches.

Enterprise Mobility Management: Our enterprise mobility solutions facilitate secure BYOD management, allowing your workforce to operate flexibly while maintaining stringent security protocols. Our mobility management solutions ensure data protection without compromising productivity.

Why Choose SEQRITE?

Comprehensive Security: As a full-stack cybersecurity solution provider, we align our offerings with CSMA architecture recommendations to provide integrated endpoint security solutions that are easy to deploy and seamless to integrate.

Global Recognition: We are proud to be the only Indian company collaborating with the US Government on the NIST NCCoE’s Data Classification project, establishing India's reputation on the global cybersecurity stage.

Tailored Services for Diverse Industries: From cybersecurity for financial services to healthcare, manufacturing, and education, our tailored solutions address the unique security needs of each sector, ensuring robust protection across the board.

Partner with SEQRITE today to elevate your cybersecurity posture and protect your business against evolving threats. Contact us for a consultation and explore our comprehensive cybersecurity solutions.

New tracks tagged #Dataprivacy