In this episode, Edd Hall discusses the latest cybersecurity developments, including CISA’s malware analysis report on exploited SharePoint vulnerabilities, Microsoft’s urgent warning about CVE-2025-53786 in hybrid Exchange environments, and new additions to the KEV catalog. He also covers critical flaws found in Dell laptops, a clever evasion technique used by Akira ransomware, and recent data breaches affecting Air France and KLM. Plus, a deep dive into the alarming exposure of over 1.2 million healthcare systems online. Stay tuned for expert insights and actionable takeaways to keep your organization secure.

Patch Now or Pay Later: Today’s Critical Cyber Threats

From AI-powered phishing scams in Brazil to a major breach at Allianz Life, today’s cybersecurity roundup covers the latest threats and revelations. Learn how attackers are using generative AI tools—and how defenders are fighting back using AI-powered forensics. We dive into a privilege escalation flaw in Amazon ECS, a new malware analysis platform from CISA, and cyberattacks targeting Air France, KLM, and Allianz. Plus, find out what’s next for three Pennsylvania hospitals in a major healthcare shake-up. Stay informed and stay secure with today’s top stories in cybersecurity.

AI Scams, Cloud Flaws, and Global Breaches: This Week in Cybersecurity

In this episode, Edd Hall discusses the latest cybersecurity developments, including an actively exploited FortiSIEM remote code execution flaw, a KernelSU vulnerability granting root access on Android devices, and a Russian-linked APT campaign targeting government and energy sectors. He also covers supply chain risks from backdoored Docker Hub images, GitHub-based SmartLoader malware, and the growing threat of stealthy backdoors against public sector entities. Beyond threats, the episode explores initiatives to enhance EMS integration in healthcare interoperability and new CISA guidance to strengthen OT asset inventories for critical infrastructure.

Recent Cybersecurity Threats, Vulnerabilities, and Mitigation Updates

In this episode, we discuss a series of major cybersecurity events from mid-August 2025, including significant healthcare breaches in the U.S. and India, the arrest of a key ransomware operator linked to the Zeppelin group, and critical vulnerabilities in PostgreSQL and N-able’s N-central platform. We also cover emerging supply-chain threats from malicious Python and npm packages, as well as a ransomware attack on UK telecom provider Colt Technology Services. This episode highlights how cybercriminals are targeting healthcare, technology, and telecommunications sectors, and emphasizes the importance of proactive security measures, patching, and threat monitoring.

Healthcare Breaches, Ransomware Arrests, and Critical Vulnerabilities

In this episode, Mark and Diana discuss the latest wave of global cybersecurity developments, including how APT36 is abusing Linux .desktop files to target Indian government and defense, Apple’s urgent zero-day patch for iOS, iPadOS, and macOS, and China-linked Murky Panda’s ongoing espionage campaigns. They also examine how cybercriminals are abusing VPS services and trusted websites through TDS, Europol’s response to false ransomware bounty claims, and Interpol’s massive “Operation Storm Makers II.” The conversation dives into healthcare’s continued struggles with ransomware following breaches at DaVita and CPAP device providers, CISA’s updated SBOM guidance, and a new Acronis report naming India as the global leader in malware attacks. Finally, Mark and Diana highlight Microsoft’s AI-driven malware detection tool and explore a proposed identity maturity model designed to strengthen fraud prevention in healthcare.

APT Campaigns, Apple Zero-Day, Healthcare Breaches, and AI in Defense

In this episode, Edd Hall discusses the latest developments across cybersecurity, technology, and industry. From the evolution of the Hook Android Trojan into a ransomware-style threat and critical Citrix NetScaler vulnerabilities already under active exploitation, to a massive cyberattack that forced Nevada state offices to close, organizations face increasing digital risks. He also covers malicious apps discovered on Google Play, a newly disclosed high-severity Git vulnerability, ModivCare’s bankruptcy, the ZipLine campaign targeting U.S. supply chains, and the Healthcare Services Group data breach affecting over 600,000 individuals. Stay tuned as we break down the key impacts and recommended actions for each of these events.

Ransomware, Exploited Vulnerabilities, and Major Data Breaches

 In this episode of Safe Mode, host Greg Otto talks with Tim Starks about what would happen if the nation’s information sharing law – known as CISA 2015 – expires at the end of September. 

In our interview segment, Greg talks with Kevin Hanes, CEO of Reveal Security, exploring the critical and often overlooked world of machine identity security. From the blind spots in privileged access management that focus too heavily on human users while machines hold increasingly sensitive roles, to the operational challenges of securing identities in cloud-native, containerized, and AI-powered environments, Kevin shares practical insights on scaling visibility and maintaining accountability across fragmented teams.

What happens if CISA 2015 lapses?

In this episode, Edd Hall discusses the latest developments in cybersecurity, from government initiatives to strengthen supply chain transparency with updated SBOM guidance, to major cyber incidents impacting technology, healthcare, and finance. He covers Cloudflare’s defense against the largest-ever DDoS attack, Google’s critical Android security updates addressing zero-day vulnerabilities, breaches affecting PagerDuty and other major security vendors, as well as disruptions at Jaguar Land Rover and attempts at large-scale financial fraud in Brazil. Edd highlights the evolving nature of cyber threats and their growing impact on organizations and individuals worldwide.

From Government SBOM Guidance to Global DDoS Attacks and Enterprise Breaches

In this episode, Mark and Diana discuss the U.S. government’s $10 million bounty on Russian FSB hackers, the discovery of undetected SVG phishing files, and new warnings from the Czech Republic about technology that transmits data to China. They explore how AI could be misused for autonomous ransomware, the evolution of CastleRAT malware, and the growing abuse of X’s Grok AI to spread malicious links. The conversation also covers Microsoft’s enforcement of multi-factor authentication in Azure, Wealthsimple’s recent data breach, and ransomware attacks that hit healthcare providers. Finally, they dive into the WhatsApp flaw now listed in CISA’s Known Exploited Vulnerabilities and examine the expanding impact of the Salesforce Salesloft Drift supply chain breach affecting major cybersecurity firms.

AI Ransomware, Healthcare Breaches, and the $10M Bounty

In this episode, Mark and Diana discuss the latest wave of cybersecurity developments, from the emergence of HybridPetya ransomware that bypasses Secure Boot to Akira’s exploitation of a SonicWall flaw. They cover the critical Cursor editor vulnerability, CISA’s warning about active attacks on Dassault’s manufacturing software, and new patches from Cisco and Samsung. The conversation also explores Microsoft’s fresh security challenges—including political scrutiny and new Teams protections—alongside a major UK train operator breach, the appearance of a mysterious Chinese AI pentesting tool, and the growing cyber risks facing the pharmaceutical industry.

Ransomware Evolves, Zero-Days Exploited, and Microsoft Under Fire

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

New tracks tagged #cisa