In this episode of Bulletproof Your Marketplace, Jeremy Gottschalk—author of the book and host of the podcast—sits down with Jimmy Toy, Chief Legal Officer at Articor Group, parent company of Redbubble and TeePublic. With platforms that receive tens of thousands of user-generated uploads every day, Jimmy brings his expertise in legal policy, governance, and trust & safety to tackle an unavoidable reality for marketplaces: incidents, threats, claims, and crises.

Together, Jeremy and Jimmy explore why these challenges are not a matter of if but when, and how founders and leadership teams can prepare effectively. From building proactive response plans and managing insurance notifications to handling media inquiries with transparency and accountability, this conversation is packed with practical lessons.

Whether you’re a founder, executive, or risk leader, this episode will help you anticipate problems, avoid costly missteps, and turn crises into opportunities to strengthen trust with your community.

Managing (the Inevitable) Incidents, Threats, Claims, and Crises

In this episode, Edd Hall discusses the latest cybersecurity news and trends, covering Chinese hackers weaponizing open-source tools, the Crimson Collective targeting AWS cloud environments, WordPress theme exploits, and a critical macOS VPN vulnerability. He also explores the Salesforce data breach, the release of a fully undetectable Android RAT, arrests linked to a London nursery breach, and OpenAI’s actions to block state-sponsored hackers using ChatGPT. Edd breaks down the impact of these incidents, the tactics used by attackers, and what organizations and individuals can do to stay protected.

From Cloud Breaches to Android Malware: 8 Major Cybersecurity Events Today

In this episode, we discuss the latest cybersecurity developments, including critical vulnerabilities in Cisco and SAP systems, widespread phishing campaigns, ransomware attacks, and regulatory actions. We also explore the growing skills gap in the cybersecurity workforce and the importance of board-level awareness to protect organizations from escalating digital threats.

Critical Exploits, Ransomware Breaches, and Rising Risk Awareness

In this episode, Edd Hall discusses the latest developments in cybersecurity, including emerging threats, critical vulnerabilities, phishing campaigns, AI-related security risks, and high-profile data breaches. He highlights key actions organizations should take to strengthen defenses, manage risks, and protect sensitive data in an increasingly complex digital landscape.

Emerging Threats, Critical Vulnerabilities, and AI Security Risks

In this episode, Edd Hall discusses the latest global cybersecurity incidents, including massive data breaches, ransomware attacks, and actively exploited vulnerabilities. He breaks down how these events impact individuals and organizations, highlights emerging threats like zero-day exploits and sophisticated APT campaigns, and explores how companies are responding with advanced security measures such as threat intelligence platforms. Listeners will gain insights into the current cyber threat landscape and practical steps to stay protected.

Worldwide Cybersecurity Breaches and Protective Measures

In today’s HEAL Security Dispatch Daily Digest, we cover Microsoft’s latest WSUS patch that unexpectedly disables hotpatching, a malicious VSX extension targeting developers, and a shocking insider ransomware case. Plus, new details on MuddyWater’s Phoenix backdoor campaign, Odyssey Cybersecurity’s expansion in Saudi Arabia, WordPress’s WP-CLI tutorial, and cybercriminals exploiting remote-management tools to hijack logistics operations. Stay informed with the latest developments shaping the cybersecurity landscape.

Today’s Cybersecurity Briefing: Malicious VSX Extension, and Insider Ransomware Scandal

In this episode, Edd Hall discusses how cybercriminals are blending AI abuse, cloud exploitation, and social engineering to launch increasingly sophisticated attacks. From Microsoft uncovering the SesameOp backdoor that used OpenAI’s API for covert communication, to the TruffleNet campaign stealing AWS credentials, this week reveals how trusted technologies are being weaponized. Edd also breaks down new CISA advisories on industrial control systems, the U.S. CFPB’s declining cybersecurity posture, a React Native supply-chain flaw, a massive Swedish data breach affecting 1.5 million people, and a ransomware group spreading fake Microsoft Teams ads. Tune in to learn how these events highlight the growing need for vigilance, patching, and smarter cloud identity protection in today’s cyber landscape.

SesameOp Backdoor, TruffleNet Attacks, and Fake Microsoft Teams Ads

In today's roundup, we cover Google’s lawsuit against a large-scale phishing network, urgent security patches from leading tech vendors, and several active exploitation cases targeting enterprise systems. Organizations are strongly advised to update affected products, review configurations, and enhance monitoring to mitigate ongoing threats.

Major Lawsuits, Critical Patches, and Active Exploits

In this episode, Edd Hall discusses a wave of significant cybersecurity developments, including a massive IoT-powered DDoS attack against Azure, new findings on Android spyware exploiting a Samsung zero-day, multiple corporate and healthcare data breaches, and the active exploitation of a critical FortiWeb vulnerability. He also examines the rise of LinkedIn-based phishing campaigns, the financial fallout from Tata Motors’ recent cyber incident, and emerging 5G-A technologies that may shape future attack surfaces.

Major Cyber Attacks, Zero-Days, and Data Breaches Shape Today’s Security Risks

In this episode, Edd Hall discusses today’s major cybersecurity developments, including active exploitation of the 7-Zip RCE flaw, CISA’s newest KEV entry, security risks from Windows 11’s upcoming autonomous AI features, the emergence of the “Gentlemen” ransomware group, widespread abuse of URL shorteners, Eurofiber’s confirmed cloud breach, new guidance on bulletproof hosting, and a WhatsApp enumeration issue impacting user privacy.

7-Zip RCE Exploited Through Malicious ZIP Symlink Attacks

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

New tracks tagged #IncidentResponse