As cloud operations scale, how do you gain visibility across all clouds? We uncover the top cloud security trends and challenges in Asia Pacific with Sanjay Yadave. We’ll also explore the role of cloud disaster recovery in minimizing risks and ways to cut its associated costs and complexities.

Nutanix Enterprise Cloud Index www.nutanix.com/enterprise-cloud-index
Nutanix Cloud Interlock: Ask Us Anything event.nutanix.com/cloudinterlock-liveqa/podcast

Securing the cloud as it scales with Sanjay Yadave

In this episode, Edd Hall covers a sweeping cyberattack that hit Louis Vuitton across multiple regions, a severe data breach affecting 6.5 million Co-op members, and a disruption to Air Serbia’s digital systems. He also explores BadBox 2.0 malware preinstalled on Android and IoT devices, a stealthy macOS threat abusing the Zoom SDK, and new phishing campaigns using SquidLoader in Hong Kong. Plus, we examine a critical privilege escalation flaw in Windows Server 2025 known as the Golden DMSA attack. Tune in for essential insights on emerging cyber risks and what they mean for security and infrastructure worldwide.

Malware Preloads, Luxury Breaches, and Airline Outages – Global Threats Unfold

Today's episode dives into multiple Microsoft-related cybersecurity developments. We cover the active exploitation of a SharePoint vulnerability using Toolshell malware, a critical Windows Server update causing VM failures, and a new auto-recovery tool being tested in Windows 11. Plus, we examine the broader implications for healthcare IT teams and security professionals. Stay informed with the latest threats, exploits, and defense strategies shaping the cyber landscape.

SharePoint Attacks, Hospital Breach, and Zero-Days

In this episode, Edd Hall discusses the latest cybersecurity developments, including Brave’s move to block Windows Recall for user privacy, Europol’s arrest of the XSS forum admin, and the exploitation of a critical SharePoint vulnerability. He also covers major breaches at Toptal, AMEOS Group, and U.S. federal agencies, the data leak penalty faced by Haesung DS, and SonicWall’s urgent patch for a critical flaw. Stay tuned for expert insights and analysis.

Cybersecurity Update: Major Breaches, Exploits, and Global Enforcement Actions

In this episode, Edd Hall discusses the latest cybersecurity developments making headlines on July 28, 2025. Topics include the Scattered Spider ransomware group’s attack on VMware ESXi, Microsoft’s licensing controversy with national security implications, the reemergence of BlackSuit as Chaos, and major breaches affecting Allianz Life, WordPress sites, and even a CIA intelligence portal. Tune in for expert insights on evolving cyber threats, outdated defenses, and the irony of cybercriminals exposing themselves.

Ransomware Evolution, Data Breaches, and Security Gaps

In today’s episode, we cover a wide range of cybersecurity threats making headlines — from exposed user chats in a popular messaging app to phishing campaigns targeting developers on PyPI. We also examine new malware tactics disguised as government apps, critical vulnerabilities in platforms like SAP NetWeaver and CodeIgniter, and the weaponization of a widely used npm package. Stay tuned as we unpack what these incidents mean for security teams, developers, and everyday users.

Exploits, Phishing Campaigns, and Data Leaks Shaping the Cybersecurity Landscape

What happens when malware starts thinking like a red team? In this episode, we dive into the stealthy world of XWorm v6, a remote access trojan that doesn’t just evade defenses, - it fights back. From VBScript droppers to in-memory persistence and critical process crashes, we unpack the tactics behind this new era of self-aware cyber threats. Join us as we explore what this means for CISOs, SOC teams, and executives alike , - and why your next breach may already be watching you.

Bit & Being - The RAT That Fights Back: XWorm v6 and the New Era of Stealthy Cyber Threats

Our feature guest this week is Josh Peltz, VP of the West for Zero Networks. News from Eldora, COOP Rideshare, Red Canary, Optiv, zvelo and a lot more!

Come join us on the Colorado = Security Slack channel to meet old and new friends.

Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at info@colorado-security.com

This week’s news:

New Colorado area code rolls out for dozens of counties

Nederland to buy Eldora Mountain Resort with support of ski industry heavy hitters

Time to buy? Denver housing market hits highest inventory in 14 years

Colorado Driver-Owned Ridershare App Relaunches With Improved Service, Same Benefits for Drivers

More shady QR codes found on Denver parking meters

Colorado among states to pass privacy laws protecting brain data collected by devices

Trump Administration’s AI Action Plan and New Executive Orders Offer Strategic Opportunities and Legal Risks for Private Businesses

Understanding the threat landscape for MCP and AI workflows

Cybersecurity Leadership in 2025: The Strategic Role of CISOs in an AI-Driven Era

Addressing Legacy Phishing Detection Failure

Upcoming Events:

Check out the full calendar

ISSA Denver - August Chapter Meeting - 8/13

Colorado = Security Picnic - 8/23

ISSA Pikes Peak - Chapter Meeting - 8/27

ISSA Denver - AI/ML SIG: Agentic AI - 8/27

ISSA Denver -  Women in Cyber: From Crisis Response to Boardroom: Becoming a CISO the Unconventional Way - 9/3

View our events page for a full list of upcoming events

* Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at carrrladams@gmail.com. Check out his other voice work here.

* Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0

277 - 8/4 - Josh Peltz, VP West @ Zero Networks

In today’s episode, we cover a critical zero-day vulnerability in a popular WordPress theme that’s under active attack. Android malware is targeting over 60 banking apps with stealthy phishing overlays. A new redirect campaign is hijacking user traffic using advanced evasion tactics. Clearwater launches a cyber risk platform tailored for healthcare organizations. Lenovo users face firmware threats as BIOS flaws emerge. Silver Fox hackers are using Google Translate links to trick victims, and attackers breached an ATM network using a Raspberry Pi. Stay tuned for the latest in cybersecurity.

Zero-Days, Phishing Tricks, and ATM Hacks: Today in Cybersecurity

In this episode, Edd Hall discusses the latest wave of cybersecurity incidents, including the emergence of the PSA Stealer malware targeting Linux users, a $40 million settlement by Cencora over a major data breach, and a stealthy Linux malware campaign stealing sensitive credentials. He also covers the NHS misconfiguration exposing hundreds of thousands of patient records, Chanel's employee data breach, and critical vulnerabilities in Android and NVIDIA’s Triton Inference Server. The episode wraps up with a look into the suspected zero-day exploit affecting SonicWall SSL VPN devices.

Breaches, Malware, and Critical Vulnerabilities Impact Major Brands

The Nutanix Community Podcast is a weekly podcast. It is an informal and technical look at topics around Nutanix, Cloud and the online IT community. It will serve as a campfire and coffee shop for the extended Nutanix community.

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

New tracks tagged #Infosec