This week Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss telekopye and online marketplace scams along with NIST’s publication of the first draft standards for post-quantum cryptography. Listen here:

165. Gorillas in the NIST

In this special episode of Breaking Badness, Kali Fencl and Tim Helming speak with Tony Robinson, Senior Security Researcher with the Emerging Threats team at Proofpoint. We talk about his path to #infosec, #InformationStealers, and more!

Voices From Infosec - Tony Robinson aka da_667

This week on Breaking Badness, Kali Fencl, Tim Helming, and Sean McNee speak with Sean Gallagher from Sophos X-Ops on the latest iteration in pig butchering schemes along with how AI could change the game.

[Special Report] Two Seans, a Tim, and a Pig Butchering Ring

We’re coming back with another iteration of our Book Club on the Breaking Badness podcast! Kali Fencl, Ian Campbell, and Daniel Schwalbe discuss their top cybersecurity book picks along with books outside the industry.

Breaking Badness Book Club Episode #2

The HEAL Security Dispatch Daily Digest is a leading podcast delivering the latest insights and trends in cybersecurity with a sharp focus on the healthcare sector. Hosted by Richard Simmons from London, each episode dives into major cyber threats, data breaches, and evolving attack techniques affecting the digital health landscape and beyond. In this edition, the podcast unpacks high-stakes stories such as Russian hackers deploying new malware through the MSC EvilTwin technique, the use of Morphing Meerkat phishing kits targeting global brands, and Oracle facing scrutiny over alleged data breaches. It also covers the exploitation of WordPress MU-Plugins, emerging threats in Ivanti products, the resurgence of the Qakbot malware, and a significant data breach impacting 170,000 individuals linked to Chord Specialty Dental Partners. With expert analysis and timely reporting, the HEAL Security Dispatch Daily Digest is an essential resource for staying informed on the frontlines of cybersecurity. 
https://healsecurity.com/

Russian Hackers, Oracle Breaches, and Qakbot Resurgence: Cybersecurity Warnings from HEAL Security

The HEAL Security Dispatch Daily Digest is your essential briefing on the latest developments at the intersection of cybersecurity and healthcare, hosted by Richard Simmons from London. Drawing from global threats and pioneering research, this episode covers critical updates including Microsoft’s recent security patches to address a major Windows 11 vulnerability and the shift away from ActiveX controls for safer Office 365 usage. It also explores growing cyber threats such as a malware campaign impersonating a legitimate PDF site, advanced phishing through deceptive imagery, and new espionage-linked spyware targeting macOS users in China. Further highlights include the theft of thousands of social insurance numbers from British Columbia’s Interior Health authority, and the emergence of ResolverRAT, a powerful malware specifically focused on infiltrating healthcare and pharmaceutical systems. Blending expert analysis and real-world incidents, the podcast underscores the urgent need for cyber vigilance in today's digitally driven healthcare landscape. 
https://healsecurity.com/

Microsoft Security Updates, and China-US Cyber Tensions – HEAL Security Dispatch

In this episode of Infosecurity Magazine's podcast, we delve into the critical realm of vulnerability management, exploring the pivotal roles played by two US government-funded security programs that today are under pressure as vulnerability reporting explodes. 
Join us as we discus the latest developments involving the National Vulnerability Database (NVD), operated by a dedicated team within NIST, which has been under pressure for the last 12 months. 
We’ll also touch on the recent uncertainty relating to the CVE Program, sponsored by the US Department of Homeland Security (DHS) and CISA and managed by the non-profit MITRE Corporation.
These programs serve as essential data sources for organizations worldwide, enabling them to identify, prioritize and remediate vulnerabilities effectively. 
Our discussion is enriched by insights from expert guests, including: 
•	Brian Martin, former member of the CVE Board (10:23)
•	Stephen Shaffer, a principal security engineer at a leading pharmaceutical company (26:55)
•	Rose Gupta, Cyber Exposure Management Lead at AssuredPartners (39:43)
Discover more from our sponsor, Vanta, https://www.vanta.com/demo-uk?utm_campaign=emea_generic&utm_source=info-security&utm_medium=podcast
Sing up to receive Infosecurity Magazine's weekly newsletter https://www.infosecurity-magazine.com/my-account/login/

Vulnerability Overload: The NVD and CVE Challenges Ahead

In this episode of Breaking Badness, Kali Fencl sits down with Mick Baccio, Global Security
Advisor at Splunk and former CISO for Pete Buttigieg’s 2020 presidential campaign. Mick
shares his journey from aspiring Navy nuclear engineer to leading security in some of the
highest-stakes environments, including the White House.

They explore how threat intelligence, storytelling, and mentorship shape the future of
cybersecurity. From his early days in government to his work on the Splunk SURGe team, Mick
opens up about what it takes to build secure systems, stronger teams, and more empathetic
leadership in cybersecurity.

Building Secure Campaigns and Better Humans: A Conversation with Mick Baccio

This episode covers the latest in cybersecurity, from the GPU-based “GPUGate” malware campaign and SVG image phishing kits to a major GitHub breach and hijacked npm packages with billions of downloads. We also look at new spyware enabling sextortion, phishing abuse of Amazon’s email service, and a data breach at Canadian fintech firm Wealthsimple. Stay updated on the threats shaping today’s digital landscape.

Global Cyber Threats: Malware Campaigns, Supply Chain Attacks, and Major Data Breach

In this episode, Edd Hall discusses the latest cybersecurity developments, including Microsoft’s September updates breaking SMBv1 shares, the KillSec ransomware attack on a Brazilian healthcare software provider, and an insider breach at FinWise Bank affecting nearly 700,000 customers. He also explores the clash between U.S. senators and the FBI’s cyber chief over staffing issues, the risks of threat actors misusing AI code assistants, and the newly disclosed FileFix attack method. Additionally, Edd highlights CISA’s release of eight advisories for industrial control systems and the data breach impacting luxury fashion brands Gucci, Balenciaga, and Alexander McQueen.

Ransomware, Insider Breaches, AI Risks, and Luxury Brand Hack

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

Where timely and relevant security meets puns and witty banter. Our goal is to keep defenders apprised of pertinent news and trends in under forty-five minutes.

Interested in the latest news from the Infosecurity sector and want to hear from the industry’s leading cybersecurity experts?

Listen to our monthly podcasts to hear our award-winning editorial team discuss the latest trends and issues in information security. The team is regularly joined by cybersecurity experts who take a deep dive into the most important issues of the day and provide you with solutions and practices to help your business stay secure.

New tracks tagged #InfoSecurity