Today’s cybersecurity roundup covers North Korea’s Lazarus Group expanding its malware arsenal, Cloudflare blocking a record 115 Tbps DDoS attack, and Jaguar Land Rover facing major IT outages. We also look at Ukraine’s networks hit by massive brute-force attempts, a critical ESPHome vulnerability, a Salesloft breach impacting top cybersecurity firms, and the discovery of the MystroDX backdoor.

Cybersecurity Briefing: From Record DDoS Attacks to Emerging Malware Threats

In this episode, Edd Hall discusses the latest developments in cybersecurity, from government initiatives to strengthen supply chain transparency with updated SBOM guidance, to major cyber incidents impacting technology, healthcare, and finance. He covers Cloudflare’s defense against the largest-ever DDoS attack, Google’s critical Android security updates addressing zero-day vulnerabilities, breaches affecting PagerDuty and other major security vendors, as well as disruptions at Jaguar Land Rover and attempts at large-scale financial fraud in Brazil. Edd highlights the evolving nature of cyber threats and their growing impact on organizations and individuals worldwide.

From Government SBOM Guidance to Global DDoS Attacks and Enterprise Breaches

In this episode, Greg Otto talks with Cynthia Kaiser Sr. Vice President of Halcyon’s Ransomware Research Center, discussing the latest ransomware operations and exploring the latest shifts in the cyber threat landscape. Greg and Cynthia discuss the rise of new groups like DragonForce, SafePay, and Fog, and the decline of once-dominant names such as LockBit and BlackBasta. They also discuss unique tactics and tools employed by emerging players, discuss the impact of law enforcement and internal group dynamics, and examine why certain industries are now prime targets. Learn how attackers choose their victims, the early warning signs organizations should watch for, and the most frequent pitfalls in ransomware defense. 


In our reporter chat, Greg talks with Matt Kapko about the deep drive into an accused ransomware affiliate that has been given a long leash by law enforcement while he awaits trial. 

Halcyon’s Cynthia Kaiser on the state of ransomware

In today’s episode, we cover Cloudflare’s defense against a record-breaking DDoS attack, a Sitecore zero-day exploited by hackers, and GhostRedirector’s growing server compromises. We also look at Chess.com’s recent data breach, npm malware hidden through Ethereum smart contracts, and the evolving Tycoon phishing kit. Finally, we highlight DarkPulse’s new partnership with BX3 to expand across the Middle East, Africa, and Asia.

Global Cyber Threats: Record DDoS, Sitecore Exploit, GhostRedirector Surge, and DarkPulse Expansion

In this episode, Mark and Diana discuss the U.S. government’s $10 million bounty on Russian FSB hackers, the discovery of undetected SVG phishing files, and new warnings from the Czech Republic about technology that transmits data to China. They explore how AI could be misused for autonomous ransomware, the evolution of CastleRAT malware, and the growing abuse of X’s Grok AI to spread malicious links. The conversation also covers Microsoft’s enforcement of multi-factor authentication in Azure, Wealthsimple’s recent data breach, and ransomware attacks that hit healthcare providers. Finally, they dive into the WhatsApp flaw now listed in CISA’s Known Exploited Vulnerabilities and examine the expanding impact of the Salesforce Salesloft Drift supply chain breach affecting major cybersecurity firms.

AI Ransomware, Healthcare Breaches, and the $10M Bounty

This episode covers the latest in cybersecurity, from the GPU-based “GPUGate” malware campaign and SVG image phishing kits to a major GitHub breach and hijacked npm packages with billions of downloads. We also look at new spyware enabling sextortion, phishing abuse of Amazon’s email service, and a data breach at Canadian fintech firm Wealthsimple. Stay updated on the threats shaping today’s digital landscape.

Global Cyber Threats: Malware Campaigns, Supply Chain Attacks, and Major Data Breach

Today’s cybersecurity roundup covers a major npm supply chain attack, warnings from Czech authorities about Chinese espionage risks, and the indictment of a ransomware operator tied to LockerGoga, MegaCortex, and Nefilim. We also highlight a Plex data breach, a Microsoft anti-spam bug disrupting safe links, a FortiDDoS vulnerability, and a new Linux botnet combining cryptomining with DDoS attacks.

Cybersecurity Roundup: npm Supply Chain Breach, Ransomware Indictment, and Global Threat Alerts

In this episode, Greg Otto talks with Sonu Shankar, President at Phosphorus, to discuss the unique security challenges facing today’s rapidly expanding Internet of Things landscape, where traditional endpoint protections are ineffective. The episode explores how everyday devices with default passwords and outdated firmware open organizations up to significant risk. Shankar highlights the tactics of groups like Salt Typhoon, who exploit these weak spots to infiltrate and persist within networks. The conversation underscores the pressing need for deeper asset inventory and active discovery in critical environments.

In our reporter chat, Greg talks with Matt Kapko about a supply-chain attack on npm that turned out to be pretty close to a false alarm. 

Phosphorus’ Sonu Shankar on IoT Vulnerabilities and Salt Typhoon Tactics

In today’s cybersecurity briefing: a critical Apple CarPlay flaw leaves vehicles exposed, Microsoft battles a major Exchange outage, and a new phishing-as-a-service platform emerges. Oracle unveils AI-powered patient tools, researchers warn of the VMScape CPU attack, and Apple alerts users to state-sponsored spyware threats. Plus, ransomware surges across the Middle East, putting banking and oil sectors under siege.

Global Cybersecurity Briefing: Apple Flaws, Microsoft Outage, and Rising Ransomware Risks

In this episode, Mark and Diana discuss the latest wave of cybersecurity developments, from the emergence of HybridPetya ransomware that bypasses Secure Boot to Akira’s exploitation of a SonicWall flaw. They cover the critical Cursor editor vulnerability, CISA’s warning about active attacks on Dassault’s manufacturing software, and new patches from Cisco and Samsung. The conversation also explores Microsoft’s fresh security challenges—including political scrutiny and new Teams protections—alongside a major UK train operator breach, the appearance of a mysterious Chinese AI pentesting tool, and the growing cyber risks facing the pharmaceutical industry.

Ransomware Evolves, Zero-Days Exploited, and Microsoft Under Fire

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

New tracks tagged #Ransomware