Today’s episode dives into a wave of emerging cyber threats shaking the digital landscape — from AI-generated Linux malware and malicious Copilot commands to steganography-based attacks hiding in innocent-looking images. We examine how fake error pages are delivering platform-specific payloads, how healthcare AI tools may be exposing sensitive data, and why open-source repositories are facing a surge in supply chain breaches. Stay informed as we break down what these threats mean for cybersecurity in healthcare and beyond.

AI Threats, Stealthy Malware & Supply Chain Risks: Today in Healthcare Cybersecurity

In today’s episode, we cover a wide range of cybersecurity threats making headlines — from exposed user chats in a popular messaging app to phishing campaigns targeting developers on PyPI. We also examine new malware tactics disguised as government apps, critical vulnerabilities in platforms like SAP NetWeaver and CodeIgniter, and the weaponization of a widely used npm package. Stay tuned as we unpack what these incidents mean for security teams, developers, and everyday users.

Exploits, Phishing Campaigns, and Data Leaks Shaping the Cybersecurity Landscape

In this episode, Mark and Diana discuss the alarming discovery of Shade, a stealthy BIOS-level malware that evades traditional security measures. They dive into reports of Chinese state-sponsored hackers breaching U.S. intelligence networks, and examine why social engineering remains the leading cause of cyber incidents. The duo also covers major data breaches affecting UnitedHealth, Microsoft 365, and multiple healthcare providers, as well as APT41’s massive Android malware campaign. To wrap up, they highlight CISA’s release of the new open-source malware analysis tool, Thorium, and explore the growing risks tied to third-party vendors and cloud platforms.

Stealth Malware, State-Sponsored Breaches, and the Rising Tide of Third-Party and Cloud Threats

In this episode, Edd Hall discusses the latest wave of cybersecurity incidents, including the emergence of the PSA Stealer malware targeting Linux users, a $40 million settlement by Cencora over a major data breach, and a stealthy Linux malware campaign stealing sensitive credentials. He also covers the NHS misconfiguration exposing hundreds of thousands of patient records, Chanel's employee data breach, and critical vulnerabilities in Android and NVIDIA’s Triton Inference Server. The episode wraps up with a look into the suspected zero-day exploit affecting SonicWall SSL VPN devices.

Breaches, Malware, and Critical Vulnerabilities Impact Major Brands

This episode covers Microsoft’s latest Patch Tuesday tackling a critical Kerberos zero-day, a Booking.com phishing scam using a sneaky Unicode trick, and the Crypto24 ransomware group’s advanced EDR evasion tools. We also look at Google’s Android pKVM earning top security certification, a surge in personalized phishing emails, and two new mobile threats — the LunaSpy spyware and PhantomCard NFC-based banking malware.

Cybersecurity Roundup: Sophisticated Phishing Scams, and Emerging Mobile Threats

Q&A with Emmy Nominated TV directors Lesli Linka Glatter (Zero Day), Nicole Kassell (Sirens), and Jessica Lee Gagné (Severance). Moderated by Mara Webster, In Creative Company.

Episode 1264: Emmy Nominated TV Directors Panel

Q&A with Emmy Nominated TV directors Lesli Linka Glatter (Zero Day) and Nicole Kassell (Sirens). 


Episode 1268: Emmy Nominated TV Directors Panel: Lesli Linka Glatter, Nicole Kassell

This episode covers the latest in cybersecurity, from the CORNFLAKE.V3 backdoor and QR code phishing scams to hackers abusing the Internet Archive and cheap VPS services. We also look at Apple’s seventh zero-day patch of the year, new DripDropper malware tactics, and how AI crawler traffic is overwhelming websites.

Cyber Threats on the Rise: New Malware, Phishing Tactics, and AI Traffic Overload

In this episode, Mark and Diana discuss the latest wave of global cybersecurity developments, including how APT36 is abusing Linux .desktop files to target Indian government and defense, Apple’s urgent zero-day patch for iOS, iPadOS, and macOS, and China-linked Murky Panda’s ongoing espionage campaigns. They also examine how cybercriminals are abusing VPS services and trusted websites through TDS, Europol’s response to false ransomware bounty claims, and Interpol’s massive “Operation Storm Makers II.” The conversation dives into healthcare’s continued struggles with ransomware following breaches at DaVita and CPAP device providers, CISA’s updated SBOM guidance, and a new Acronis report naming India as the global leader in malware attacks. Finally, Mark and Diana highlight Microsoft’s AI-driven malware detection tool and explore a proposed identity maturity model designed to strengthen fraud prevention in healthcare.

APT Campaigns, Apple Zero-Day, Healthcare Breaches, and AI in Defense

Stay updated with today’s top cybersecurity stories. From novel Linux malware techniques and a critical Docker vulnerability to a major Microsoft SharePoint attack, cybercriminals are finding new ways to exploit systems worldwide. We also cover AI-driven ClickFix threats, hackers abusing Google Classroom, the Farmers Insurance data breach affecting 1.1 million people, and a cyber incident disrupting Maryland’s paratransit services. Clear, concise, and straight to the point — your daily cybersecurity digest.

Cybersecurity Roundup: New Attacks, Breaches, and Critical Vulnerabilities

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

New tracks tagged #zeroday