In this episode of HEAL Security Dispatch, we delve into the latest cybersecurity developments impacting various sectors. We uncover the critical "regreSSHion" vulnerability in OpenSSH that allows remote code execution and discuss the urgent need for patches. We also highlight a major in-flight security breach where an Australian national executed an 'Evil Twin' WiFi attack. Our coverage includes innovations by NordVPN, SCYTH, and Hornetsecurity in managed security services, and we expose vulnerabilities in CocoaPods, the dependency manager for iOS and macOS. Additionally, we explore Emory Healthcare's new at-home physical therapy initiative in partnership with Luna, and the significant data breach at Landmark Admin. We conclude with insights into the Cyber Trust Mark for IoT devices in the U.S. and the newly discovered CapraRAT spyware targeting Android users. Stay informed and secure with our expert analysis and actionable insights.

HEAL Security Dispatch: OpenSSH Flaw, Emory Healthcare Therapy, Landmark Admin Breach,NordVPN Update

HEAL Security Dispatch Daily Digest is a leading podcast providing the latest insights into the dynamic world of cybersecurity, specifically focusing on the intersection with healthcare. Hosted by Richard Simmons from London, this podcast delves into contemporary cybersecurity issues, offering expert analysis and comprehensive discussions on emerging threats and vulnerabilities. In this episode, the podcast addresses several pressing cybersecurity concerns, including the emergence of the Gorilla botnet that has launched over 300,000 DDoS attacks across 100 countries. It also covers Qualcomm's recent patch for a critical zero-day vulnerability, a cyberattack on American Water Works affecting millions, and the infiltration of major U.S. telecommunications providers by Chinese cyberspies. Additionally, the episode highlights a data breach impacting Comcast customers, a scam involving counterfeit iPhones at Apple, and an inquiry into Ryanair's ID verification process potentially breaching GDPR regulations. HEAL Security Dispatch Daily Digest stands out as a critical resource for staying informed on cybersecurity developments, with a focus on how these issues impact critical sectors like healthcare and beyond. 
https://healsecurity.com/

Cybersecurity Chronicles: Gorilla Botnet, Qualcomm Vulnerabilities, and Telecom Infiltrations

In this episode, we dive deep into the cutting-edge advancements in the intersection of Federated Learning (FL) and the Internet of Things (IoT) through a discussion based on the recent paper, Self-Adaptive Federated Learning in IoT Systems: A Review. For more visit: https://iotgarage.net/researchoutputs/

Self-Adaptive Federated Learning In Internet of Things Systems: A Review

The HEAL Security Dispatch Daily Digest is your trusted source for up-to-date cybersecurity news, focusing on healthcare and technology. Hosted by Richard Simmons from London, the show provides expert insights into critical security topics. In this episode for Friday, November 8th, 2024, we explore key stories: mysterious reboots of securely stored iPhones running iOS 18 are complicating forensic access, with officials recommending isolation precautions. Mazda also faces scrutiny as unpatched vulnerabilities in its infotainment systems expose vehicles to unauthorized control, with a software update still pending.

We also cover a recent cyberattack dubbed 'Salt Typhoon,' allegedly orchestrated by Chinese hackers against a U.S. government agency, urging employees to limit phone use. Additionally, North Korea's BlueNoroff group is targeting cryptocurrency businesses on macOS through phishing, exploiting new malware to maintain control over infected systems. Lastly, AndroxGh0st malware has combined with the Mozi botnet to intensify threats to IoT and cloud devices, signaling the need for upgraded defenses. Stay informed on these stories and more at healsecurity.com.

HEAL Security Dispatch: iOS Forensic Reboots, Mazda Vulnerabilities, and New macOS Crypto Malware

In this episode, we delve into the ever-evolving landscape of cybersecurity, highlighting critical vulnerabilities, cybercrime takedowns, and emerging threats worldwide. We discuss the alarming discovery of a security flaw in OpenWrt devices, urging immediate updates, and examine the activities of Iranian hackers targeting critical infrastructure with the IOCONTROL malware. The episode details the shutdown of the Rydox cybercrime marketplace by U.S. authorities, along with arrests of its administrators, and sheds light on sophisticated malware developed by Russian cyberspies targeting Android users. From Krispy Kreme's cyberattack impacting its online platform to Dubai Police exposing a phishing app targeting UAE residents, we explore the impact of digital risks on organizations and individuals. Additionally, we cover cutting-edge advancements in healthcare through Unite Genomics’ AI platform for personalized psoriasis care, and threats like the Linux Pumakit rootkit and APT-C-60's phishing campaigns targeting East Asia. This episode reinforces the importance of vigilance, proactive defense, and innovation in combating cyber threats in a digitally interconnected world. 
https://healsecurity.com/

Cybersecurity Chronicles: OpenWrt Flaw, Iranian Malware, Rydox Bust, and Krispy Kreme Attack

In this episode of the DevReady Podcast, host Anthony Sapountzis sits down with Shantanu Bhattacharya, Founder and CEO of Siometrix, to explore the evolving landscape of cybersecurity. Shantanu shares his extensive expertise, covering his pioneering work on the TCP/IP stack and public key infrastructure technologies that shaped secure communications. Now based in Canberra, Shantanu provides cutting-edge cybersecurity consultancy to federal agencies and organisations, focusing on data-centric security and fortifying operating systems to combat today’s complex cyber threats.

Shantanu delves into the unique challenges posed by zero-day attacks, which exploit unknown vulnerabilities. Instead of playing the traditional "cat-and-mouse game" of reactive security measures, he advocates for proactive, data-centric solutions that include device and software authentication. This multi-layered approach, combined with low-level system monitoring through kernel-level software, ensures comprehensive protection. Shantanu also shares insights into obtaining code signing certification for such high-security software.

The conversation expands to the specific needs of small-to-medium businesses (SMBs) and government agencies. Shantanu highlights the challenges SMBs face, such as limited budgets and an overwhelming array of tools. He explains how Siometrix identifies vulnerabilities in IT systems, including risks from hybrid work setups and unregulated smart devices. Emphasising that effective cybersecurity is a blend of technology, secure processes, and human compliance, Shantanu provides practical advice on mitigating risks like weak passwords and unsecured networks.

Shantanu and Anthony discuss the security risks associated with IoT devices, particularly unregulated, low-cost products. They highlight how such devices can act as gateways for attackers to infiltrate broader networks. Segmenting IoT devices onto separate networks and maintaining vigilance over unexpected vulnerabilities, like home CCTVs, are key strategies for reducing risks. This discussion underscores the growing need for awareness and proactive measures in the face of expanding IoT usage.

The conversation also explores cloud-based security risks. Shantanu warns against blindly relying on cloud solutions without understanding the associated vulnerabilities, such as exposing sensitive data through poorly managed access. Comparing cloud environments to a house with multiple windows, Anthony stresses the importance of dedicated IT professionals to oversee network security. Together, they emphasise the need for businesses to map out where critical data is stored to protect it effectively.

Finally, Shantanu highlights the importance of appointing a Chief Information Security Officer (CISO) or delegating cybersecurity responsibilities to ensure robust processes are in place. He discusses the increasing accountability of company boards in managing cybersecurity risks and the dangers of oversharing personal information online. To address gaps in organisational security, he offers virtual CISO services, helping businesses implement measures like password management, network segmentation, and multi-factor authentication to fortify their defences against evolving threats.

Zero-Day Attacks & IoT Vulnerabilities: A Deep Dive with Shantanu | Ep 198 | DevReady Podcast

In this episode, Edd Hall covers a sweeping cyberattack that hit Louis Vuitton across multiple regions, a severe data breach affecting 6.5 million Co-op members, and a disruption to Air Serbia’s digital systems. He also explores BadBox 2.0 malware preinstalled on Android and IoT devices, a stealthy macOS threat abusing the Zoom SDK, and new phishing campaigns using SquidLoader in Hong Kong. Plus, we examine a critical privilege escalation flaw in Windows Server 2025 known as the Golden DMSA attack. Tune in for essential insights on emerging cyber risks and what they mean for security and infrastructure worldwide.

Malware Preloads, Luxury Breaches, and Airline Outages – Global Threats Unfold

In this episode, Edd Hall discusses a wave of major cybersecurity incidents, including the exposure of over 16 billion login credentials from top platforms, a massive cancer screening data breach in the Netherlands, and Columbia University’s 460 GB data theft. He examines critical software flaws in 7-Zip and WinRAR, the “BadCam” exploit targeting Linux webcams, and the rise of native phishing within Microsoft 365. The episode also explores the “Echo Chamber Attack” jailbreak against GPT-5 and how these evolving threats demand stronger security measures, rapid patching, and vigilant monitoring across all sectors.

Massive Credential Leak, Major Data Breaches, and Emerging Threats

Today’s cybersecurity roundup covers North Korea’s Lazarus Group expanding its malware arsenal, Cloudflare blocking a record 115 Tbps DDoS attack, and Jaguar Land Rover facing major IT outages. We also look at Ukraine’s networks hit by massive brute-force attempts, a critical ESPHome vulnerability, a Salesloft breach impacting top cybersecurity firms, and the discovery of the MystroDX backdoor.

Cybersecurity Briefing: From Record DDoS Attacks to Emerging Malware Threats

In today’s episode, we cover Cloudflare’s defense against a record-breaking DDoS attack, a Sitecore zero-day exploited by hackers, and GhostRedirector’s growing server compromises. We also look at Chess.com’s recent data breach, npm malware hidden through Ethereum smart contracts, and the evolving Tycoon phishing kit. Finally, we highlight DarkPulse’s new partnership with BX3 to expand across the Middle East, Africa, and Asia.

Global Cyber Threats: Record DDoS, Sitecore Exploit, GhostRedirector Surge, and DarkPulse Expansion

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

We started the DevReady podcast to help non-techs build better technology. We have been exposed to so many non-techs that describe the struggle, uncertainty and challenges that can come with building technology.

The objective for the DevReady podcast to share these stories and give you the tools and insights so that you to can deliver on your vision and outcomes.

You will learn from non-tech founders that have invested their time and money into developing technology. We will discuss what worked, what didn’t and how they still managed to deliver real value to their users.  These stories are inspirational – demonstrating the determination, commitment and resolve it really takes to deliver technology.

Throughout the DevReady Podcast we also invite subject matter experts to the conversation to give you proven strategies and techniques to successfully take your idea through to delivery and beyond.

Enjoy the Podcast, it will challenge you, inspire you and provide the tools you will need to deliver real value with technology.

New tracks tagged #IoTSecurity