Today's episode dives into multiple Microsoft-related cybersecurity developments. We cover the active exploitation of a SharePoint vulnerability using Toolshell malware, a critical Windows Server update causing VM failures, and a new auto-recovery tool being tested in Windows 11. Plus, we examine the broader implications for healthcare IT teams and security professionals. Stay informed with the latest threats, exploits, and defense strategies shaping the cyber landscape.

SharePoint Attacks, Hospital Breach, and Zero-Days

In this episode, Edd Hall discusses the latest cybersecurity developments, including Brave’s move to block Windows Recall for user privacy, Europol’s arrest of the XSS forum admin, and the exploitation of a critical SharePoint vulnerability. He also covers major breaches at Toptal, AMEOS Group, and U.S. federal agencies, the data leak penalty faced by Haesung DS, and SonicWall’s urgent patch for a critical flaw. Stay tuned for expert insights and analysis.

Cybersecurity Update: Major Breaches, Exploits, and Global Enforcement Actions

🚨 Small businesses in Little Rock, AR are top targets for cyberattacks – and most can’t afford the $4.88M hit of a breach 💸. Enter EDR: your digital watchdog that spots threats before they strike. It's smarter than antivirus, often required for cyber insurance, and essential in 2025. Don’t wait to protect what you’ve built! 🛡️

The Average Data Breach Now Costs $4_88 Million – How Much Would It Cost You_

🌞 Summer = fun for you, but prime time for cybercriminals 😈. Phishing attacks spike in the warmer months, with fake travel & back-to-school scams on the rise 📈. One bad click on a work device can expose your whole biz. Train your team, use MFA, avoid sketchy links & ask your MSP about EDR protection. Stay sharp while you soak up the sun! ☀️💻

Why Phishing Attacks Spike In August

In this episode, Edd Hall discusses the latest cybersecurity developments making headlines on July 28, 2025. Topics include the Scattered Spider ransomware group’s attack on VMware ESXi, Microsoft’s licensing controversy with national security implications, the reemergence of BlackSuit as Chaos, and major breaches affecting Allianz Life, WordPress sites, and even a CIA intelligence portal. Tune in for expert insights on evolving cyber threats, outdated defenses, and the irony of cybercriminals exposing themselves.

Ransomware Evolution, Data Breaches, and Security Gaps

🤖 AI tools like ChatGPT & Copilot boost productivity—but if misused, they can leak sensitive data 😬. From accidental pastes to hacker-driven prompt injections, small businesses are vulnerable. Create a clear AI policy, train your team, use secure platforms & monitor usage. Don’t ban AI—manage it smartly before one click causes chaos. 🔐

Is Your Business Training AI How To Hack You_

In this episode, Edd Hall discusses recent major cybersecurity incidents affecting healthcare, retail, and software development sectors. Topics include Premier Health and Apria Healthcare data breaches, supply chain vulnerabilities highlighted by the Dollar Tree hack, and the CrowdStrike update failure. Edd also covers warnings from the FBI and CISA about the Scattered Spider threat group, phishing campaigns targeting Python developers, and the spread of Lumma Stealer malware via Facebook Ads. Stay informed on how these events impact security and what measures organizations and individuals should take.

Critical Healthcare Breaches, Supply Chain Risks, and Emerging Cyber Threats

I clicked the link, now I've got those blues, those ransomware blues

Ransomware Blues

In this episode, Mark and Diana discuss the alarming discovery of Shade, a stealthy BIOS-level malware that evades traditional security measures. They dive into reports of Chinese state-sponsored hackers breaching U.S. intelligence networks, and examine why social engineering remains the leading cause of cyber incidents. The duo also covers major data breaches affecting UnitedHealth, Microsoft 365, and multiple healthcare providers, as well as APT41’s massive Android malware campaign. To wrap up, they highlight CISA’s release of the new open-source malware analysis tool, Thorium, and explore the growing risks tied to third-party vendors and cloud platforms.

Stealth Malware, State-Sponsored Breaches, and the Rising Tide of Third-Party and Cloud Threats

Das Hacker-Kollektiv „Scattered Spider“ nutzt es und viele andere Cyberkriminelle auch: „Social Engineering“. Die Angreifer erschleichen das Vertrauen ihrer Opfer und bringen Sie dazu, vertrauliche Informationen preiszugeben. Oft mündet das dann bei Unternehmen in Datendiebstahl großen Umfangs oder in einer Erpressung mit Hilfe gekaperter IT- und Datenstrukturen. Wie alle Kriminellen, nutzen auch solche Hacker gerne die Möglichkeiten der Künstlichen Intelligenz. Nicht um technologisch Schutzmechanismen zu überwinden, sondern vor allem um Identitätsdiebstahl und Phishing-Mail-Kampagnen täuschend echt zu gestalten.

Cybercrime-Experten warnen vor den Gefahren von Angriffen auf die Firmen- und Kunden-Daten und das Allianz Risk Barometer benennt Hackerangriffe seit Jahren als das Top-Risiko für Unternehmen. Das mußte kürzlich auch die Konzerntochter Allianz Life, ein namhafter Versicherer in den USA, erleben. Kurz nachdem es bereits den Wettbewerber Aflac getroffen hatte. In beiden Fällen wird „Scattered Spider“ hinter den Angriffen vermutet.

In der neuen Episode 184 der Turtlezone Tiny Talks beleuchten Dr. Michael Gebert und Oliver Schwartz die Vorgehensweise der Cyberkriminellen und den Umfang der Bedrohung. Und sie thematisieren, wie Unternehmen sich besser wappnen können. Denn bei „Social Engineering“ stehen vor allem Mitarbeiterinnen und Mitarbeiter im Mittelpunkt. Spannende 33 Podcast-Minuten zum Wochenende.

Turtlezone Tiny Talks

Mediathek

Turtlezone Tiny Talks - Top-Risiko oder vermeidbar?

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

Just three friends trying to bring some fun to a stale industry.

Turtlezone - Der Interview Podcast mit Oliver Schwartz und spannenden Gästen aus Politik, Kultur, Sport und Gesellschaft. Turtlezone Tiny Talks - der Debatten Podcast zum Zeitgeist. Mit Dr. Michael Gebert und Oliver Schwartz.

New tracks tagged #Ransomware