Today’s cybersecurity roundup covers a major npm supply chain attack, warnings from Czech authorities about Chinese espionage risks, and the indictment of a ransomware operator tied to LockerGoga, MegaCortex, and Nefilim. We also highlight a Plex data breach, a Microsoft anti-spam bug disrupting safe links, a FortiDDoS vulnerability, and a new Linux botnet combining cryptomining with DDoS attacks.

Cybersecurity Roundup: npm Supply Chain Breach, Ransomware Indictment, and Global Threat Alerts

In today’s cybersecurity briefing: a critical Apple CarPlay flaw leaves vehicles exposed, Microsoft battles a major Exchange outage, and a new phishing-as-a-service platform emerges. Oracle unveils AI-powered patient tools, researchers warn of the VMScape CPU attack, and Apple alerts users to state-sponsored spyware threats. Plus, ransomware surges across the Middle East, putting banking and oil sectors under siege.

Global Cybersecurity Briefing: Apple Flaws, Microsoft Outage, and Rising Ransomware Risks

In today’s cybersecurity roundup, we cover 224 malicious Android apps removed from Google Play, a new BiDi Swap vulnerability, and a supply chain attack targeting npm packages. We also look at SonicWall’s cloud portal breach, the FileFix phishing campaign, Microsoft’s takedown of the RaccoonO365 phishing service, and TA558’s use of AI-generated scripts in hotel attacks. Stay informed on the latest threats shaping the digital landscape.

Cyber Threats Uncovered: Malicious Apps, Supply Chain Attacks, and New Phishing Tactics

Today’s cybersecurity roundup covers a critical Nokia vulnerability, research showing how ChatGPT agents can be tricked into solving CAPTCHAs, and a new exploit called ShadowLeak targeting Gmail integrations. We also look at major data breaches impacting healthcare and luxury brands, a maximum-severity flaw in Fortra’s GoAnywhere MFT, and the rise of AI-powered phishing campaigns. Stay informed on the latest threats shaping the digital landscape.

AI Exploits, Critical Vulnerabilities, and Major Breaches Shake Cybersecurity Landscape

This episode delivers a sharp roundup of the week’s top cybersecurity stories, including hackers weaponizing oversized SVG files to spread AsyncRAT, malware spoofing trusted tools like ChatGPT and Microsoft Office, a critical bug in Libraesva Email Security Gateway exploited by state actors, IIS server hijacking through malicious modules, new Supermicro firmware flaws that allow malicious updates, a widespread macOS infostealer campaign using fake GitHub repositories, and Microsoft’s patch for a severe Entra ID token-validation vulnerability. Stay informed on these critical threats and the urgent fixes protecting users worldwide.

Today in Cybersecurity: New Hacks, Critical Bugs, and Emerging Threats

Today’s episode covers the latest cybersecurity news, including the Postmark MCP server code hijack, AI-generated copyright scams targeting social media, and Nimbus Manticore’s expanding cyber-espionage operations in Europe. We also discuss recent data breaches at Gaylord Specialty Healthcare and Harrods, as well as hackers spreading fake apps and weaponized Microsoft Teams installers. Stay informed on today’s top threats and learn how attackers are exploiting both individuals and organizations.

Today’s Cybersecurity Alerts: Postmark Hijack, AI Scams, Nimbus Manticore, and Major Data Breaches

October is Cybersecurity awareness month. Get ready to explore the imperative of cyber resiliency in today's digital landscape, focusing on strategies for robust data infrastructures and shared responsibility to plan and recover from cyber attacks. Join Pure Storage cyber experts Scott Taylor and Jason Walker as they delve into the critical aspects of cyber resilience. Learn best practices around how to prepare your organization for potential threats, respond effectively during an attack, and recover swiftly to maintain business continuity. We explore essential hygiene factors, the role of SIEM technology, and the importance of a layered resilience strategy, including insights from key alliance partners like Varonis and Superna.

We also cover ways that Pure Storage empowers users to withstand cyberattacks and accelerate both cyber and disaster recovery. Hear best practices on how to protect data from ransomware and cyber threats through high-performance, layered resilience, robust data security and immutability, and seamless security integrations. Scott and Jason  also tackle common myths and misconceptions about cyber resilience, providing actionable advice to help IT leaders identify and address blind spots. Tune in for hot takes on industry trends and a "Storage Confessions" segment where listeners can share their own screw-up stories.

The Cyber Guys: How to Prepare, Respond, and Recover to Keep Your Business Running

In today’s HEAL Security Dispatch Daily Digest, we cover the biggest cybersecurity developments shaping the digital landscape. From the Medusa ransomware exploiting Fortra’s GoAnywhere flaw to healthcare networks struggling with outdated infrastructure, today’s stories reveal how technology, security, and innovation intersect. We also explore BatShadow’s new Go-based malware campaign, DraftKings’ credential stuffing breach, and growing concerns over AI-driven “vibe coding.” Plus, we look at Google’s CodeMender AI, which patches vulnerabilities automatically, and Microsoft’s latest Windows 11 security changes. Stay informed and stay secure with the latest in cybersecurity intelligence.

Medusa Ransomware Exploits GoAnywhere Vulnerability

In today’s cybersecurity roundup, we cover a wave of new threats and major incidents across industries. From fake Android apps spreading ClayRat spyware to SonicWall’s cloud data breach, this episode highlights the evolving risks facing users and enterprises alike. Plus, updates on Microsoft Defender’s false alerts, a Florida clinic’s delayed breach disclosure, Discord’s ID leak, and Jaguar Land Rover’s post-attack recovery. Stay informed with the latest developments shaping the digital security landscape.

Cybersecurity Roundup: Spyware Scams, Data Breaches, and Corporate Recoveries

In this episode, Edd Hall discusses the latest developments in cybersecurity, including how AI models can be easily poisoned, the ongoing Cl0p ransomware attacks, dangerous Android malware impersonating popular apps, and critical vulnerabilities in enterprise systems like SonicWall and Oracle E-Business Suite. He also covers Apple’s $2 million bug bounty for zero-click exploits, the rapid spread of a global botnet, the discovery of malicious npm packages, Fortra’s $20 million data breach settlement, and CISA’s newest additions to the Known Exploited Vulnerabilities catalog. Edd breaks down what these threats mean for individuals and organizations, and highlights the steps needed to stay protected in today’s evolving digital landscape.

AI Risks, Ransomware Strikes, and Emerging Threats Worldwide

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

Bringing you direct access to Pure Storage thought leaders, technology experts, alliance partners, customer insights, and our latest product news.

New tracks tagged #dataprotection