This episode of the podcast covers a series of significant cybersecurity incidents that highlight vulnerabilities across industries and platforms. It begins with a privacy lapse in a Verizon app that exposed millions of users' call records, drawing attention to the need for stronger data protection protocols. The episode then shifts to a ransomware attack that disrupted essential services within the Red Lake Nation, followed by an analysis of malicious Python packages targeting bitcoinlib users through a software supply chain attack. Listeners also learn about a ransomware breach at the Port of Seattle affecting around 90,000 individuals, and a sophisticated supply chain compromise involving GitHub Actions and Coinbase. Additional coverage includes emerging risks from AI systems like DeepSeek-R1, which could be exploited for malware creation, as well as a mysterious Oracle credentials breach under investigation by cybersecurity firms and the FBI. The episode concludes with news of an evasive Android Trojan hidden in counterfeit devices linked to major financial theft through social engineering and cryptocurrency manipulation. 
https://healsecurity.com/

Cybersecurity Roundup: Verizon Data Breach, GitHub-Coinbase Supply Chain Intrusion & More

In this episode of the cybersecurity podcast, we dive into a wave of alarming digital threats and incidents making headlines across industries. Krispy Kreme becomes the latest victim of a data breach, exposing sensitive customer information, while Episource faces consequences of a ransomware attack affecting 5.4 million individuals through compromised healthcare data. Cloudflare reports a record-breaking DDoS assault peaking at 7.3 Tbps, illustrating the rising scale of network-based threats. Meanwhile, Aflac confirms a data breach stemming from social engineering, with investigations still underway. We also explore the troubling uptick in cyber risks to young users, as over 500 Minecraft mod repositories on GitHub are found harboring spyware designed to steal children’s login credentials. Microsoft users grapple with a major OneDrive search bug now under review, and researchers uncover a resurgence of the Prometei botnet, targeting Linux servers for crypto mining and credential theft. Stay tuned as we examine the broader implications of these events in our increasingly connected world.
healsecurity.com/

Cyberstorm: Cloudflare's DDoS Giant, Aflac and Episource Exposed, and Microsoft Glitch Hits OneDrive

In today’s episode of the HEAL Security Dispatch, we spotlight a wave of cyber incidents hitting key sectors worldwide. A critical flaw in Citrix NetScaler disrupts authentication for thousands of users, while Qantas investigates a third-party breach that exposed personal data of up to six million customers. A vulnerability in the Forminator WordPress plugin puts over 400,000 websites at risk of takeover, and 23andMe’s new owner pledges to protect genetic data amid regulatory scrutiny. Meanwhile, ransomware continues to plague U.S. government systems, and researcher mr.d0x reveals two evolving attack chains—FileFix and its browser-based variant—that bypass key Windows and browser safeguards.

Stay with us as we break down the latest threats, exploits, and defensive moves shaping the global cybersecurity landscape.
healsecurity.com

Citrix Login Chaos, Qantas Breach, the Evolving FileFix Threat

Stay updated with today’s top cybersecurity stories. From novel Linux malware techniques and a critical Docker vulnerability to a major Microsoft SharePoint attack, cybercriminals are finding new ways to exploit systems worldwide. We also cover AI-driven ClickFix threats, hackers abusing Google Classroom, the Farmers Insurance data breach affecting 1.1 million people, and a cyber incident disrupting Maryland’s paratransit services. Clear, concise, and straight to the point — your daily cybersecurity digest.

Cybersecurity Roundup: New Attacks, Breaches, and Critical Vulnerabilities

This episode covers the latest in cybersecurity, from the GPU-based “GPUGate” malware campaign and SVG image phishing kits to a major GitHub breach and hijacked npm packages with billions of downloads. We also look at new spyware enabling sextortion, phishing abuse of Amazon’s email service, and a data breach at Canadian fintech firm Wealthsimple. Stay updated on the threats shaping today’s digital landscape.

Global Cyber Threats: Malware Campaigns, Supply Chain Attacks, and Major Data Breach

In today’s cybersecurity roundup, we cover 224 malicious Android apps removed from Google Play, a new BiDi Swap vulnerability, and a supply chain attack targeting npm packages. We also look at SonicWall’s cloud portal breach, the FileFix phishing campaign, Microsoft’s takedown of the RaccoonO365 phishing service, and TA558’s use of AI-generated scripts in hotel attacks. Stay informed on the latest threats shaping the digital landscape.

Cyber Threats Uncovered: Malicious Apps, Supply Chain Attacks, and New Phishing Tactics

In this episode, we cover the latest cybersecurity threats and data breaches making headlines. Meta users face a phishing scam installing FileFix malware, while the Rhadamanthys stealer now uses AI to steal cryptocurrency seed phrases. Renault and Dacia UK customers are warned after a third-party data breach, and NHS Highland reports unauthorized disclosure of staff and patient information. We also highlight Android spyware disguised as Signal and ToTok updates, and Signal rolls out quantum-safe cryptography to protect users’ messages. Stay informed and stay safe.

Meta Scam, AI Crypto Stealer, Renault Breach, and Emerging Spyware Threats

In today’s HEAL Security Dispatch Daily Digest, we cover the biggest cybersecurity developments shaping the digital landscape. From the Medusa ransomware exploiting Fortra’s GoAnywhere flaw to healthcare networks struggling with outdated infrastructure, today’s stories reveal how technology, security, and innovation intersect. We also explore BatShadow’s new Go-based malware campaign, DraftKings’ credential stuffing breach, and growing concerns over AI-driven “vibe coding.” Plus, we look at Google’s CodeMender AI, which patches vulnerabilities automatically, and Microsoft’s latest Windows 11 security changes. Stay informed and stay secure with the latest in cybersecurity intelligence.

Medusa Ransomware Exploits GoAnywhere Vulnerability

In this episode, Edd Hall discusses the latest developments in cybersecurity, including how AI models can be easily poisoned, the ongoing Cl0p ransomware attacks, dangerous Android malware impersonating popular apps, and critical vulnerabilities in enterprise systems like SonicWall and Oracle E-Business Suite. He also covers Apple’s $2 million bug bounty for zero-click exploits, the rapid spread of a global botnet, the discovery of malicious npm packages, Fortra’s $20 million data breach settlement, and CISA’s newest additions to the Known Exploited Vulnerabilities catalog. Edd breaks down what these threats mean for individuals and organizations, and highlights the steps needed to stay protected in today’s evolving digital landscape.

AI Risks, Ransomware Strikes, and Emerging Threats Worldwide

In today’s episode, we dive into the latest cybersecurity stories shaping the digital landscape. From Cisco firewall exploits and QNAP zero-days to the rise of the Herodotus banking malware and Landfall spyware, we uncover how attackers are evolving. Plus, insights on China’s new IIS hacking campaigns, Microsoft Teams’ security concerns, and the advanced LockBit 5.0 ransomware making waves across global networks. Stay informed with this week’s top cyber threats.


This Week in Cybersecurity: From Cisco Exploits to LockBit’s New Ransomware Evolution

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

New tracks tagged #HackerNews