In this episode, Edd Hall discusses the latest wave of cybersecurity incidents shaking global infrastructure — from the massive AWS outage that disrupted Prime Video and Fortnite, to China’s accusations against the NSA over cyber-espionage operations. He also breaks down CISA’s addition of new exploited vulnerabilities, the discovery of 131 malicious Chrome extensions hijacking WhatsApp sessions, and the major F5 Networks breach affecting over 262,000 systems. The episode wraps up with updates on Volkswagen’s suspected ransomware attack, the active exploitation of a critical Windows SMB flaw, and the emergence of the self-spreading “GlassWorm” malware targeting developer ecosystems.

Major Cyber Incidents Expose Global Infrastructure and Supply Chain Risks

In this episode, Edd Hall discusses the latest developments in cybersecurity, including emerging threats, critical vulnerabilities, phishing campaigns, AI-related security risks, and high-profile data breaches. He highlights key actions organizations should take to strengthen defenses, manage risks, and protect sensitive data in an increasingly complex digital landscape.

Emerging Threats, Critical Vulnerabilities, and AI Security Risks

Kevin Greene, chief cybersecurity technologist for the public sector at BeyondTrust, joins Greg to unpack the fallout from the recent lapse of the CISA information sharing bill and what it means for both public and private sector cyber defenses. The conversation dives into how the threat landscape has shifted since the bill’s original passage, the limitations of relying solely on indicators of compromise, and the need for more proactive, behavior-based analytics. Kevin shares insights on identity management—including the challenges of both human and machine identities—and emphasizes that meaningful information sharing must be modernized to stay relevant.

A reset on information sharing

In this episode, Edd Hall discusses the latest cybersecurity developments shaping the global landscape — including a massive surge in DDoS attacks across the Middle East, LinkedIn’s AI data privacy deadline, and a shocking case of a U.S. defense contractor selling exploits to Russia. He also covers a major data leak from Iran’s intelligence academy, new additions to CISA’s Known Exploited Vulnerabilities catalog, malware targeting WooCommerce sites, high-severity flaws in Docker Compose, and fresh security guidance from CISA and NSA for Microsoft Exchange and industrial control systems.

DDoS Surge, AI Privacy Deadline, and New CISA Warnings

In this episode, Edd Hall discusses how cybercriminals are blending AI abuse, cloud exploitation, and social engineering to launch increasingly sophisticated attacks. From Microsoft uncovering the SesameOp backdoor that used OpenAI’s API for covert communication, to the TruffleNet campaign stealing AWS credentials, this week reveals how trusted technologies are being weaponized. Edd also breaks down new CISA advisories on industrial control systems, the U.S. CFPB’s declining cybersecurity posture, a React Native supply-chain flaw, a massive Swedish data breach affecting 1.5 million people, and a ransomware group spreading fake Microsoft Teams ads. Tune in to learn how these events highlight the growing need for vigilance, patching, and smarter cloud identity protection in today’s cyber landscape.

SesameOp Backdoor, TruffleNet Attacks, and Fake Microsoft Teams Ads

In this episode, Edd Hall discusses how hackers are exploiting Windows Hyper-V to hide malware, Google’s warning about self-modifying AI threats, and Cisco’s alert on active firewall exploits. He also covers CISA’s new industrial control system advisories, a ransomware attack on Central Jersey Medical Center, and the growing problem of weak passwords. Plus, Edd explores how generative AI is fueling applicant fraud in healthcare and how three major cybercrime groups—Scattered Spider, LAPSUS$, and ShinyHunters—have joined forces under the new alliance Scattered LAPSUS Hunters.

Hyper-V Exploits, AI-Powered Malware, and Rising Cybercrime Alliances

On this week’s Safe Mode, Greg welcomes Jason Pufahl, VP of Security Services at Vancord. Jason shares deep insights into the evolving managed security landscape, focusing on challenges faced by small and mid-sized businesses and the practical fundamentals they need for strong cybersecurity. He also discusses the evolving role of CISA and the importance of making threat intelligence and resources broadly accessible to help organizations of all sizes strengthen their cybersecurity posture.

How MSP's are dealing CISA changes

In today's roundup, we cover Google’s lawsuit against a large-scale phishing network, urgent security patches from leading tech vendors, and several active exploitation cases targeting enterprise systems. Organizations are strongly advised to update affected products, review configurations, and enhance monitoring to mitigate ongoing threats.

Major Lawsuits, Critical Patches, and Active Exploits

In this episode, Edd Hall discusses today’s major cybersecurity developments, including active exploitation of the 7-Zip RCE flaw, CISA’s newest KEV entry, security risks from Windows 11’s upcoming autonomous AI features, the emergence of the “Gentlemen” ransomware group, widespread abuse of URL shorteners, Eurofiber’s confirmed cloud breach, new guidance on bulletproof hosting, and a WhatsApp enumeration issue impacting user privacy.

7-Zip RCE Exploited Through Malicious ZIP Symlink Attacks

Microsoft faced a global Exchange Online outage affecting classic Outlook access and search functionality, while multiple new CISA ICS advisories highlighted risks to critical infrastructure. The FBI reported over $262M lost to bank-support impersonation scams, and CISA warned of advanced spyware targeting encrypted messaging-app users. Delta Dental of Virginia disclosed a breach impacting 146K individuals, and Russia arrested a young cybersecurity entrepreneur on treason charges. Jackson County suffered a cyber-attack disrupting emergency services, and new market forecasts show strong growth in healthcare cybersecurity through 2032.

Microsoft Exchange Outage Disrupts Classic Outlook Access

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

New tracks tagged #cisa