In this episode of the cybersecurity podcast, we explore a series of high-impact cyberattacks and digital threats disrupting industries worldwide. Microsoft’s cloud services and the UK’s Co-op supermarket chain have been hit by a "Category 2" systemic incident, one of the most severe cyber events the UK has ever faced. Nucor, the largest steel producer in the U.S., confirms a breach involving sensitive data, underlining the risks facing critical infrastructure. A major U.S. insurance provider reports a significant data breach affecting millions of policyholders, triggering regulatory concern and identity theft protection measures.

We also uncover a state-sponsored cyber espionage campaign by China-linked group Salt Typhoon, which infiltrated a Canadian telecom provider through Cisco equipment vulnerabilities. The NHS is under renewed cyber pressure following a second suspected ransomware attack that continues to impact patient care. Meanwhile, the U.S. Department of Homeland Security warns of rising threats from pro-Iranian hacker groups, while federal agencies brace for digital retaliation over Middle East tensions.

In one of the largest leaks ever, a massive database dubbed “RockYou2024” exposes over 16 billion login credentials, signaling a likely surge in credential-stuffing attacks. Finally, we examine the staggering global financial toll of cybercrime—now estimated in the trillions annually—and why cybersecurity must become a central focus for every organization.

Stay with us as we break down the details and discuss what these developments mean for digital resilience in an increasingly volatile cyber landscape.

Microsoft, Nucor, NHS, and More: Major Breaches Shake Global Enterprises and Infrastructure

The vast number of companies affected by ransomware attacks highlights the urgent need to ramp up educational work on cybercrime, according to a Fraud Advisory Panel trustee.

Businesses face uphill battle on cyber threat awareness

Greg Otto talks with Andrew Carney, project manager at DARPA, about the AIxCC competition. With the finals set to be held in August during DEF CON, they discuss how these autonomous systems fared in detecting and remediating vulnerabilities, as well as the key lessons learned from live exercises and the semifinals. The conversation highlights DARPA's vision to merge formal software engineering with large language models to dramatically reduce software vulnerabilities and explains the scientific and engineering advances still needed to achieve this goal at scale. We also examine the challenges of safeguarding critical infrastructure, particularly when so much depends on open-source projects maintained by volunteers, and consider the impact of AI on patch deployment, code verification, and sustainable defense.

In the reporter chat, Greg talks with Matt Kapko about a story debunking the 16 billion password hack. 

DARPA’s Andrew Carney on AIxCC’s quest for truly autonomous AI

In today’s episode of the HEAL Security Dispatch, we uncover a series of critical cybersecurity developments impacting infrastructure, healthcare, and the digital workplace. Cisco rushes to patch two maximum-severity flaws in its Identity Services Engine, while a newly discovered FileFix technique exploits Windows File Explorer to deliver stealthy payloads. The FDA urges medical manufacturers to adopt secure-by-design practices amid growing threats to patient safety, and cloud repatriation gains momentum as organizations seek control over costs and compliance. Meanwhile, a ransomware attack linked to a patient’s death shakes the UK’s NHS, Microsoft resolves Outlook crashes plaguing users across Office channels, and UK retailer Iceland draws scrutiny for deploying AI-powered facial recognition to curb store theft.

Stay tuned as we break down the risks, responses, and ripple effects shaping today’s cyber landscape.
healsecurity.com

Critical Bugs, Ransomware Fallout, and AI Surveillance in Today’s Cybersecurity

💸 Think your cheap IT service is saving you money? Think again. From weak cybersecurity & half-baked backups to surprise fees & no real strategy, budget MSPs often cost more in the long run. Don’t risk your business on cut corners—know what’s really included. 🔍🛡️

The Hidden Cost Of “Cheap” IT

🚨Small biz owners, beware! In 2025, compliance is no longer optional—even for you. From HIPAA & PCI DSS to FTC rules, skipping security measures can cost 💸thousands or even your biz's rep. Stay ahead with risk assessments, staff training, and airtight data protection. Don't wait for fines—protect your future NOW!

The Compliance Blind Spot_ What You’re Missing Could Cost You Thousands

📱 Think your phone's safe? Think again. From spyware to stalkerware, tracking your device is easier than ever—and it could expose your business to serious risk. Learn how to spot the signs and lock down your mobile command center before it’s too late. 🔐🚨

Your Phone Can Be Tracked – And It’s Easier Than You Think

AI Crackdowns, Airline Cyber Strikes, and the Evolving Landscape of Global Security Threats

In this episode, Edd Hall discusses the latest developments in cybersecurity, including Microsoft's decision to remove the Edge browser's password manager in favor of the Microsoft Authenticator app. He examines new findings that show phishing training may have only short-term effectiveness, and highlights CISA's addition of two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. Edd also covers U.S. sanctions against Aezagroup for supporting cybercriminal operations, major data breaches impacting Esse Health and Kelly Benefits, the ICC’s confirmation of a 2023 nation-state cyberattack, and new industrial control system vulnerabilities disclosed by CISA. Stay tuned for insights, expert commentary, and what these stories mean for your cybersecurity posture.

Microsoft Changes, CISA Alerts, Major Breaches, and Nation-State Attack

This week, Greg talks to Will Dixon, Senior Intelligence Collection Manager for Intel471, about the lifecycle and takedown of DanaBot — one of the most notorious malware-as-a-service (MaaS) platforms of the last decade. We'll explore how DanaBot transformed from a banking trojan into a full-featured MaaS tool, capable of serving both criminal enterprises and espionage operations. Will shares insights on its technical evolution, how it became a vital cog in the Initial Access Broker (IAB) ecosystem, and the anti-forensic tricks that kept detection teams on their toes. We'll also dig into the broader impact on the cybercrime underground: How did DanaBot’s productization and subscription model reshape the MaaS and IAB economies? Has its downfall changed how actors maintain operational security, or blurred the lines between crimeware and espionage tools? This episode is perfect for anyone interested in the inside story of a leading-edge cybercrime operation and global enforcement campaign.


Intel471’s Will Dixon goes behind the scenes on the DanaBot takedown

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

ICAEW is a professional membership organisation that provides insight and leadership to the global accountancy and finance profession.

New tracks tagged #ransomware