SEC Fines, WordPress Hacks, & Okta's New Security Standards | Cybersecurity Today Join host Jim Love in this episode of Cybersecurity Today, sponsored by CDW Canada Tech Talks. We delve into the SEC's $7 million fine on four companies for misleading cybersecurity disclosures, the hacking of over 6,000 WordPress sites by malicious plugins, and Okta's introduction of a new identity security standard in response to rising SaaS breaches. Get detailed insights on these key topics and more. Tune in to stay updated on the most pressing cybersecurity issues! 00:00 Introduction to Cybersecurity Today 00:28 SEC Fines for Misleading Cybersecurity Disclosures 02:39 Massive WordPress Site Hacks 04:58 Okta's New Security Standards 07:49 Conclusion and Sponsor Message

In today's episode of Cyber Security Today, sponsored by CDW Canada Tech Talks, host Jim Love dives into the latest tech news and cybersecurity updates. Key stories include the FBI arrest of Eric Council Jr. for hacking the SEC's social media, the release of VulnHuntr, an AI tool designed to detect zero-day vulnerabilities in Python, and the arrest of two Sudanese brothers running a cybercrime business. Additional updates cover a security flaw in the WordPress Jetpack plugin, ongoing attacks on the Internet Archive, and the Golden Chickens spear-phishing campaign targeting HR personnel. Tune in for these stories and more. 00:00 Introduction to Cyber Security Today 00:27 FBI Arrests in SEC Social Media Hacks 02:49 Open Source Tools for Python Vulnerabilities 05:20 Cyber Crime Arrests and Scams 07:25 Golden Chickens Spear Phishing Campaign 09:15 Show Wrap-Up and Announcements

Phishing and Cybersecurity: Evolution, Tactics, and Human Factors In this deep dive into the world of cybersecurity, join experts Jim Love and David Shipley as they unravel the ever-evolving landscape of phishing attacks and modern cyber threats. Through discussing the history and sophisticated evolution of phishing, including innovative methods like quishing, vishing, and smishing, this episode reveals the severe impacts on businesses and individuals. Discover how cybercriminals use psychological manipulation, including principles from Robert Cialdini's influence framework, to dupe unsuspecting victims. Uncover real-world examples, such as the dangers posed by AI-driven datasets, and the critical importance of Multi-Factor Authentication (MFA) in enhancing account security. The episode also delves into the human elements of cybersecurity, emphasizing the role of workplace culture, emotional intelligence Training, and assertiveness in creating a resilient defense against social engineering attacks. Join us for practical tips and insights to bolster your cybersecurity posture. 00:00 Introduction to Cybersecurity Today 00:31 Emerging Phishing Threats 01:36 Deep Dive into Phishing 03:22 History of Phishing 05:55 Types of Phishing Attacks 19:16 Social Engineering and Phishing 20:06 Research Hypothesis on Phishing 25:55 Phishing Tactics: Free Gift Card Scams 26:24 The Power of Scarcity in Phishing 28:18 Authority Figures and Phishing 29:02 Consistency: Small Requests to Big Scams 30:06 Liking and Social Proof in Phishing 32:19 The Evolution of Phishing Techniques 35:15 Fighting Back: Technical Solutions 42:57 Emotional Intelligence and Workplace Culture 46:58 Conclusion and Final Thoughts

In this episode, host Jim Love delves into sophisticated phishing attacks, cybersecurity initiatives, and significant changes in data security protocols. Listeners will learn about a national survey revealing that 53% of Canadians would switch banks after a data breach and hear insights on Apple's proposal to shorten SSL/TLS certificate lifespans. The episode also covers 23andMe's data breach and settlement, and introduces the FIDO Alliance's new protocol designed to enhance passkey portability across platforms. Emphasizing the importance of robust cybersecurity measures and user education, the discussion highlights advancements in passwordless authentication, as demonstrated by major implementations from companies like Amazon. This episode offers an in-depth look at current cybersecurity challenges and forward-thinking solutions in the realm of user authentication. 00:00 Introduction and Show Format Update 00:48 Canadian Banking Cybersecurity Concerns 01:14 Survey Insights and Financial Sector Responses 03:25 Customer Concerns and Communication Gaps 04:17 Financial Impact of Data Breaches 05:13 Apple's SSL/TLS Certificate Lifespan Proposal 06:20 Google's Push for Shorter Certificate Lifespans 07:24 23andMe Data Breach Settlement 09:55 FIDO Alliance and Passwordless Authentication 12:38 Conclusion and Show Notes

Cybersecurity Today: Wayback Machine Read-Only, AI-Driven Phishing, and Quantum Computing Breakthroughs In this episode of Cybersecurity Today, host Jim Love discusses the recent cyber incident with the Internet Archive's Wayback Machine, which is now back online in read-only mode. He outlines sophisticated AI-driven Gmail phishing schemes that are fooling even tech experts and reports on Chinese researchers' breakthrough using a Canadian quantum computer to potentially crack military-grade encryption. Jim also shares practical advice on staying vigilant against such cyber threats. 00:00 Introduction and Schedule Update 00:22 Cybersecurity News Highlights 00:44 Internet Archive's Wayback Machine Breach 02:06 Sophisticated AI-Driven Gmail Phishing Scams 05:45 Quantum Computing Breakthrough in Encryption 07:10 Conclusion and Sign-Off

Exploring IT Trends and AI Opportunities with Brian Jackson In this crossover episode of Hashtag Trending, host Jim Love interviews Brian Jackson, Principal Research Director at InfoTech Research Group, to discuss emerging IT trends and their intersection with cybersecurity. The conversation covers AI advancements, quantum computing, and digital humans, focusing on how to leverage technology for business opportunities while mitigating associated risks. Brian also emphasizes the importance of AI specialization and sovereignty, and the necessity for organizations to adapt encryption in preparation for quantum computing breakthroughs. Tune in for insights on current technology trends and strategies to harness emerging tools effectively. 00:00 Introduction and Overview 00:42 Meet Brian Jackson 01:51 Brian's Role at InfoTech 02:47 Tech Trends 2025 04:07 AI Opportunities and Risks 05:41 Quantum Computing and Cryptography 06:29 Digital Humans and Deepfakes 09:22 AI in Business Applications 22:32 AI Sovereignty and Cost Management 33:48 Quantum Computing in Practice 38:30 Conclusion and Final Thoughts

Cybersecurity Today: Data Breaches and Malware Threats In this episode of Cybersecurity Today, host Jim Love discusses the hacking incidents involving the Internet Archive and Fidelity, exposing millions of users' data. Highlights include the Internet Archive breach attributed to the Black Meta Hacktivist group, affecting 31 million users, and Fidelity's data breach impacting 77,000 customers. Additionally, the bankruptcy of National Public Data after a massive leak and North Korean cyberattacks on tech job seekers are detailed. These incidents emphasize the importance of robust cybersecurity measures and industry regulations. 00:00 Major Data Breaches: Internet Archive and Fidelity 00:26 Internet Archive Breach: Details and Impact 01:49 Fidelity Data Breach: What Happened? 03:17 National Public Data Files for Bankruptcy 05:23 North Korean Hackers Target Tech Job Seekers 07:38 Conclusion and Resources

Cybersecurity Alert: White House Urges Insurance Reform & Major Hacks Revealed In this episode of Cybersecurity Today, host Jim Love covers significant developments in cybersecurity policy and breaches. The White House, represented by U.S. Deputy National Security Advisor Ann Neuberger, calls for an end to insurance policies that incentivize ransomware payments. The episode also discusses a major ransomware attack affecting Comcast and highlights a significant breach by China-backed hackers targeting U.S. telecom providers. Additionally, American Water faces a security breach impacting its customer systems. The episode emphasizes the growing threats and debates around cybersecurity practices. 00:00 Introduction and Headlines 00:41 White House Calls to End Ransomware Payments 02:11 Comcast Data Breach Exposes 230,000 Customers 03:57 Chinese Hackers Compromise U.S. Telecom Systems 06:24 American Water Cybersecurity Incident 08:02 Conclusion and Show Notes

Cybersecurity Today: Cloudflare's DDoS Victory, Russian Hacker Arrests, and Truth Social Scams In this episode of Cybersecurity Today, host Jim Love discusses Cloudflare's successful mitigation of the largest recorded DDoS attack, showcasing the company's advanced defense capabilities. The episode also covers the arrest of nearly 100 individuals in Russia linked to illegal cryptocurrency transactions and ransomware laundering through the Crypteks crypto exchange. Additionally, it highlights Truth Social's vulnerability to pig butchering scams, where users face significant financial losses. These stories reflect ongoing cybersecurity challenges and responses from different stakeholders. 00:00 Introduction and Headlines 00:28 Cloudflare's DDoS Defense Triumph 02:57 Russia's Crackdown on Cryptex Crypto Exchange 04:57 Truth Social's Pig Butchering Scams 07:02 Conclusion and Show Notes

Unveiling the Truth: Insights into Cyber Security Awareness and Phishing In a special crossover episode of Cyber Security Today and Hashtag Trending, host Jim Love discusses the biases and challenges in technology marketing research with guest David Shipley, head of Beauceron Security. The conversation examines the significance of security awareness, focusing on phishing simulations. Shipley shares insights from his research, emphasizing the optimal frequency of monthly phishing tests and the importance of reporting rates. The episode also covers the psychological aspects of cyber security, sustainability of gamification in training, and highlights the need for balancing training demands to avoid negative impacts of overtraining. Listeners are encouraged to reflect on the insights shared and respond with their thoughts on the program's format. 00:00 Introduction and Overview 00:15 The Problem with Technology Marketing Research 00:46 Bias in Research and Media 01:33 Importance of Objective Research 02:24 Introducing David Shipley and His Research 03:08 Understanding Human Behavior in Cybersecurity 05:38 Phishing Research and Findings 07:19 Effective Phishing Simulations 15:02 Insights from Phishing Data 22:14 The Importance of Reporting and Feedback 22:32 Multi-Channel Communication Strategies 23:53 Gamification and Personal Cyber Risk Scores 25:16 Behavioral Economics in Cybersecurity 27:07 The Impact of Intrinsic Motivation 29:22 The Role of Psychology in Cybersecurity 30:15 The Framing Effect and Security Perception 32:19 Optimism Bias and Security Awareness 35:00 The Dunning-Kruger Effect in Training 37:29 Anchoring Bias and Phishing Indicators 39:03 Key Takeaways and Final Thoughts

Cybersecurity Today: NVD Backlogs & Emerging Threats Host Jim Love discusses the backlog in the National Vulnerability Database and its implications for cybersecurity, highlighting two new Linux vulnerabilities. The episode also covers a sophisticated malware, Perfctl, attacking Linux servers, vulnerabilities in CUPS, and security risks of Meta's smart glasses. Additionally, insights are provided from a CIRA study on ransomware payment trends and the challenges posed by AI in cybersecurity. The podcast ends with announcements for new vulnerability threats and a preview of upcoming research with co-host David Shipley. 00:00 Introduction and Podcast Promotion 00:45 National Vulnerability Database Backlog 02:54 Linux Vulnerabilities: Perfctl Malware 04:42 CUPS Vulnerability Alert 05:56 Privacy Concerns with Meta's Smart Glasses 07:23 Critical Vulnerabilities in Zimbra and Ivanti 08:55 CIRA's Ransomware Study Insights 12:12 AI in Cybersecurity: Survey Findings 14:02 Conclusion and Upcoming Features

Cybersecurity News: Microsoft Patch Issues, Chrome Vulnerabilities, and T-Mobile Settlement In this episode of Cybersecurity Today, Jim Love discusses several pressing issues in the tech world. Early feedback on Microsoft's Windows 11 October Patch Tuesday update reveals significant stability issues. Google Chrome receives a second major security update in ten days due to four new high severity vulnerabilities. The Canadian Internet Registration Authority (CIRA) publishes its annual cybersecurity study highlighting the costs and damages from cyberattacks on Canadian businesses. A coalition of major security agencies releases a report on detecting and mitigating Active Directory compromises. Lastly, T-Mobile agrees to a $31.5 million settlement with the FCC over multiple data breaches affecting millions of U.S. customers. Stay tuned for more insights and updates! 00:00 Introduction and Podcast Promotion 00:38 Microsoft's October Patch Tuesday Issues 02:29 Urgent Chrome Security Update 03:27 CIRA's Annual Cybersecurity Study 05:18 Active Directory Compromise Report 06:57 T-Mobile's FCC Settlement 08:38 Conclusion and Sponsor Message

New NIST Password Guidelines, Octo2 Trojan & ChatGPT Vulnerabilities | Cybersecurity Today Join Jim Love in today's episode of Cybersecurity Today as he discusses the latest password security guidelines from NIST focusing on length and usability, the emergence of the Octo2 Trojan targeting bank accounts on Android by posing as VPN and Chrome apps, and a significant vulnerability in ChatGPT allowing attackers to plant false memories. Additionally, learn about Google's new password rules for Gmail access and the recent glitch causing ChatGPT to initiate conversations on its own. Don't miss this insightful episode to stay updated on the latest cybersecurity trends and measures. 00:00 Introduction and Podcast Promotion 00:50 NIST's New Password Guidelines 02:26 Octo2 Trojan: New Android Threat 03:27 ChatGPT Vulnerability: False Memories 04:40 Google's New Password Rules for Gmail 05:35 ChatGPT's Unprompted Messaging Bug 06:54 Conclusion and Sponsor Message

Cyber Security Week in Review: Data Breaches, MFA Bypassing, and Surveillance Insights Join host Jim Love along with an expert panel featuring Terry Cutler, David Shipley, and Laura Payne to discuss this week in cybersecurity. Topics include the latest methods of bypassing MFA, data breaches and how to deal with compromised information, the implications of the FTC's report on tech company data collection, new findings on fraud affecting small businesses, and an intriguing German police technique to unmask TOR users. The episode also introduces the 'Stinkies' award for unnecessary fearmongering by cybersecurity vendors. Don't miss this in-depth analysis and practical advice for staying secure in an increasingly digital world. 00:00 Introduction and Panelist Introductions 02:55 Jessica's Question on Data Breaches 09:18 Small Business Fraud and Cybersecurity 17:44 Evilginx and MFA Vulnerabilities 22:44 MFA Security: Myths and Realities 25:26 The FTC's Staggering Surveillance Report 28:44 Surveillance Capitalism and Marketing Tactics 28:54 Tim Hortons' Data Collection Scandal 37:00 The German Police and TOR Anonymity 42:49 The Inaugural Stinky Awards 44:58 Final Thoughts and Farewell

Canadian SMBs Face Rising Fraud Threats & New AI-Powered Gmail Security In this episode of Cyber Security Today, host Jim Love discusses the increasing fraud threats faced by Canadian small and medium-sized businesses, revealing that half have experienced attempted or successful fraud in the past year. The transportation sector is hit hardest, with 61% reporting fraud attempts. Google’s new Gemini AI technology offers enhanced security for Gmail, notably for smaller businesses. InfoStealer malware developments are circumventing Google Chrome’s app-bound encryption, posing significant threats. Additionally, severe vulnerabilities have been uncovered in fuel storage tank monitoring systems, emphasizing the urgency for robust security measures in critical infrastructure. 00:00 Introduction and Overview 00:25 Fraud Threats Facing Canadian SMBs 02:15 Google's AI-Powered Security Enhancements 03:54 InfoStealer Malware Targeting Google Chrome 06:11 Critical Vulnerabilities in Fuel Storage Technology 08:28 Conclusion and Final Thoughts

Evilginx: MFA Bypass Tool, Kaspersky's Exit & FTC's Data Surveillance Report - Cyber Security Today In this episode of Cyber Security Today, host Jim Love discusses a new cyber security tool called Evilginx that bypasses multi factor authentication (MFA), Kaspersky's unexpected software replacement for North American users, ESET's patches for critical vulnerabilities, and a scathing FTC report on data collection by major tech companies. Learn about the latest cyber security threats and updates to stay informed and protected. 00:00 Introduction to Today's Cyber Security News 00:26 Evilginx: The New Threat to Multi-Factor Authentication 02:45 Kaspersky's Controversial Exit from the U.S. Market 04:36 ESET Patches Critical Vulnerabilities 06:33 FTC's Scathing Report on Big Tech's Data Practices 08:11 Conclusion and Show Notes

Security Risks with Apple's OS Update, Disney Ditches Slack, and GitHub Hack Alert In this episode of Cyber Security Today, host Jim Love discusses pressing issues in the cybersecurity landscape: Apple's latest macOS update, Sequoia version 15, causing compatibility issues with major security tools; Disney's move to scrap Slack after a significant data breach; a sophisticated GitHub phishing attack leveraging GitHub's notification system; and German police's breakthrough in unmasking anonymous Tor users. Key takeaways include advice for IT professionals on managing OS updates, the implications of corporate messaging app breaches, precautions for GitHub users, and recommendations for maintaining anonymity on the Tor network. 00:00 Introduction and Headlines 00:21 Apple's Mac OS Sequoia Update Issues 02:00 Disney Dumps Slack After Data Breach 03:13 GitHub Phishing Campaign Exploits Developers 04:44 German Police Unmask Tor Users 07:19 Conclusion and Show Notes

A Hacker's Perspective on Vulnerable Civic Infrastructure In this episode, host Jim Love explores the vulnerabilities of civic infrastructure with cybersecurity expert Nick Aleks. They discuss how hackers view and exploit city systems, the dangers of default passwords and outdated firmware, and the risks associated with smart buildings and operational technology. Nick provides insights on how bad actors can leverage these weaknesses for massive attacks and offers recommendations for improving security through collaboration, proactive measures, and the incorporation of AI technologies. This enlightening discussion highlights the urgent need for better security practices in our increasingly connected urban environments. 00:00 Introduction and Context 00:18 Meet the Expert: Nick Aleks 00:51 A Hacker's Perspective on City Infrastructure 03:20 Penetration Testing and Vulnerabilities 04:26 Targeting Civic Infrastructure 20:30 Smart Buildings and IoT Security 25:12 Defensive Strategies and Collaboration 32:29 The Role of AI in Security 35:06 Conclusion and Final Thoughts

Cybersecurity Today: Supply Chain Attacks, Data Breaches, and Botnet Threat Disruptions In this episode of 'Cybersecurity Today,' host Jim Love covers pressing issues in the cybersecurity world, including a supply chain attack in Lebanon, a major data breach at AT&T resulting in a $13 million fine, and the disruption of the Chinese botnet known as Raptor Train. The AT&T breach underscores the risks of weak vendor data protection, while the weaponization of communication devices in Lebanon signals new threats in cyber-physical warfare. The episode also highlights the resilience of the Raptor Train botnet, attributed to the Chinese state-sponsored group Flax Typhoon, and the steps taken by the FBI to mitigate this threat. Listeners are advised to enhance their cybersecurity practices to protect against these multifaceted attacks. 00:00 Introduction to Cybersecurity Today 00:23 AT&T's $13 Million Fine for Data Breach 02:03 Weaponized Communication Devices in Lebanon 03:50 Disruption of the Chinese Botnet Raptor Train 05:28 Conclusion and Sign-Off

Emerging Cyber Threats: Repellent Scorpius, TfL Cyber Attack, and Online Safety for Children In this episode, we discuss the emergence of the new ransomware group Repellent Scorpius and their use of the Ciccada 3301 ransomware. We cover the London Transport Authority's (TfL) in-person password resets following a significant cyber attack, and examine the case of Chinese national Song Wu's multi-year spear-phishing campaign. Additionally, we delve into the C community's proposal for a safe C extension to enhance memory safety and address vulnerabilities. Finally, we highlight the urgent online dangers targeting children and teens, and the measures required to combat these threats. 00:00 Emergence of Repellent Scorpius Ransomware Group 01:53 TfL's Response to Cyber Attack 02:53 Chinese National Charged in Spear Phishing Campaign 04:13 C Community's Safe C Extension Proposal 05:33 Online Dangers Targeting Children and Teens 07:19 Conclusion and Final Thoughts

Cyber Security Today: Fortinet Data Breach, Seattle Ransomware Attack, and Lazarus Targeting Developers In this episode of Cyber Security Today, host Jim Love covers Fortinet's confirmation of a data breach after a hacker claims to have stolen 440GB of data. The episode also discusses the cyber attack on Seattle Tacoma International Airport by the Rysida ransomware group and the port's refusal to pay the ransom. Additionally, North Korean hacker group Lazarus is targeting Python developers via malicious coding tests as part of the VM connect campaign. Stay tuned to learn more about these pressing cybersecurity issues. 00:00 Introduction to Cyber Security Today 00:27 Fortinet Data Breach Details 02:15 Seattle Tacoma Airport Ransomware Attack 03:41 Lazarus Group Targets Python Developers 05:30 Conclusion and Final Thoughts

Cybersecurity Insights: Vulnerabilities, Insider Threats, and the Future of Online Safety In this weekend edition of Cybersecurity Today, host Jim Love is joined by regulars Terry Cutler of Cyology Labs and David Shipley of Beauceron Security, alongside special guest Laura Payne from White Tuque. They discuss significant cybersecurity news including the new additions to CISA's known exploited vulnerabilities catalog, a hilarious yet eye-opening domain purchase incident, and the ongoing issue of insider threats. The panel also dives into the complexities surrounding recent breaches like the one at Avis and the broader implications of data vulnerabilities. Stay tuned for the latest insights and expert opinions on what's happening in the cybersecurity world. 00:00 Introduction and Panelist Introductions 01:31 Format Overview and First Cybersecurity Story 01:47 Discussion on CISA's Vulnerability Catalog 02:51 Challenges in Patch Management 06:45 Microsoft's Patch Tuesday Controversy 10:49 The $20 Domain Vulnerability 15:42 Insider Threats and Real-World Incidents 18:11 Handling Disgruntled Employees 18:51 Insider Threats: Real-Life Examples 19:41 Preventing Insider Threats 21:30 Password Management and Security 22:53 Case Study: Sales Employee Walks Out with Client List 23:42 Jurassic Park and Risk Management 24:32 Avis Data Breach: What Happened? 25:51 The Importance of Identity Theft Protection 29:44 Challenges in Cybersecurity Awareness 34:27 Microsoft's New Security Measures 35:07 Conclusion and Farewell

Cyber Security Today: TfL Data Breach, Critical Vulnerabilities, and Insider Threats Join host Jim Love in 'Cyber Security Today' as we delve into the latest cyber security incidents and updates. Learn about Transport for London's data breach affecting thousands of customers, critical vulnerabilities added to CISA's Known Exploited Vulnerabilities catalog, and the recent Microsoft Patch Tuesday addressing over 70 security flaws. We also discuss significant breaches at Avis, shocking domain purchase by a researcher highlighting internet trust issues, and insider threats exemplified by Daniel Rhyne's rogue actions against an industrial company. Stay informed with expert insights and essential recommendations! 00:00 Introduction and Breaking News 00:05 Transport for London Cyber Attack 01:04 New Vulnerabilities Added to CISA's KEV Catalog 02:38 Microsoft and Other Major Tech Companies Release Patches 04:02 Avis Data Breach 05:15 Security Researcher Buys Critical Domain 07:58 Insider Threat: The Daniel Rhyne Case 09:53 Conclusion and Final Thoughts

Cybersecurity Today: Microsoft Office 2024, Data Breach, CrowdStrike Fallout, & Ford's Privacy Concerns In this episode of Cybersecurity Today with your host Jim Love, we discuss Microsoft's decision to disable ActiveX controls by default in Office 2024 to enhance security, the data breach at SlimCD affecting 1.7 million credit card owners, CrowdStrike's ongoing response to the July IT disruption, and privacy concerns over Ford's new patent application for in-car conversation monitoring. Learn about the implications and what these developments mean for IT professionals and end-users. 00:00 Introduction and Headlines 00:24 Microsoft Office 2024 Security Changes 01:50 Major Data Breach at SlimCD 03:51 CrowdStrike's Crisis Management 05:35 Ford's Controversial Patent Application 06:54 Conclusion and Show Notes

Massive Healthcare Data Breach, Google's Move to Rust, and New Sextortion Scams - Cybersecurity Today In this episode of Cybersecurity Today, hosted by Jim Love, we discuss a major healthcare data breach at Confident Health where 5.3 terabytes of sensitive mental health data were exposed due to a misconfigured server. Google advocates for replacing legacy C and C++ code with Rust for better security and productivity. We also explore the disturbing new trend in sextortion scams that now include photos of victims' homes to enhance threats, and the importance of addressing such scams in corporate security programs. 00:00 Introduction and Headlines 00:18 Major Data Breach at Confident Health 02:08 Google's Move to Rust for Enhanced Security 03:59 The Rising Threat of Sextortion Scams 05:50 Conclusion and Resources

Toronto School Board Hack & Cybersecurity Best Practices: Expert Panel Discussion Welcome to the weekend edition of Cybersecurity Today, hosted by Jim Love! Join our expert panel featuring Terry Cutler from Cyology Labs, David Shipley of Beauceron Security, and special guest Daina Proctor from IBM Security Services Canada. This episode dives into recent cybersecurity stories including a major data breach at the Toronto District School Board and continued fallout from the MoveIT software hack. Our experts discuss the importance of robust security measures, the cultural shift needed in organizations to handle cyber threats, and the increasing role of cybersecurity insurance. We’ll also explore fascinating stories like active listening on Android phones and Disney's legal backtrack. Don't miss out on this insightful and engaging conversation! 00:00 Introduction and Panelist Welcome 01:26 Toronto School Board Cyber Attack 02:16 Challenges in School Cybersecurity 10:52 MoveIT Hack and Its Implications 15:43 Insurance and Cybersecurity 25:19 City of Columbus Data Breach 26:21 Spotting the Problem: Data Overload 26:31 Columbus Breach: Encryption and Legal Battles 27:25 The Streisand Effect and Legal Protections 28:20 Personal Story: Public Information and Security 29:19 Human Element in Cyber Attacks 34:20 Incident Response Planning and Simulations 39:13 Proactive Cybersecurity Measures 46:40 Consumer Data Privacy Concerns 54:01 Conclusion and Final Thoughts Terry referred to CyologyLab.com/start for the video and the free tools.

AI Summer Recap: OpenAI's GPT 5, GPT Next, and Beyond Join host Jim Love as he navigates through the major AI and cybersecurity stories that dominated summer 2023. From CrowdStrike's impact on Windows security to OpenAI's tantalizing announcements of GPT 4.0 Omni and the anticipated GPT Next, this episode reflects on the giant strides in AI technology. Understand the strategic buzz created by OpenAI, the unrecognized achievements by Google, and the intricate gossip surrounding futuristic AI models like QSTAR and Strawberry. This comprehensive recap highlights why the advancements in AI could significantly shape business processes and technological systems in the near future. Don't miss the rerun of the highly informative Practical AI episode featuring industry experts, plus a hint at what's to come in tech news. 00:00 Introduction and Host Welcome 00:37 Summer's Blockbuster Stories: AI and Cybersecurity 01:06 OpenAI's Strategy and GPT 4.0 Omni 03:11 The Mystery of Sora and Other Rumors 04:53 Google's AI Achievements and OpenAI's Mastery 07:27 The GPT Next Announcement 10:27 Conclusion and Future AI Developments 11:57 Practical AI Episode Rerun and Closing Remarks

Is Your Phone Spying on You? D Link Vulnerabilities & Government Data Requests In this episode of Cyber Security Today, host Jim Love discusses critical remote code execution vulnerabilities in D Link routers, impacting their discontinued DIR 846 series. These flaws, including CVE 2024 44341 and CVE 2024 44342, pose significant risks, prompting D Link to recommend users replace outdated devices. The episode also examines the considerable amount of data governments gather from big tech companies, with a study by Surfshark highlighting the increasing user data requests. Lastly, Jim covers a report from 404 Media that reveals Facebook's partner, Cox Media Group, using smartphone microphones for targeted ads, raising severe privacy concerns. Stay informed about the latest in cybersecurity by tuning in! 00:00 Introduction: Is Your Smartphone Listening? 00:15 D-Link Router Vulnerabilities Exposed 02:24 Government Data Requests from Big Tech 04:15 Tech Companies' Compliance with Data Requests 05:38 Facebook's Active Listening Scandal 08:20 Conclusion and Show Notes

  In this episode of Cyber Security Today, host Jim Love delves into recent data breaches affecting the Toronto District School Board, Texas Dow Employees Credit Union, and the city of Columbus. Discover details on the ransomware attacks, the compromised data, and the implications for the victims involved. Additionally, explore critical questions raised about cybersecurity practices and the handling of whistleblowers. Tune in for an in-depth analysis of these significant cybersecurity incidents. 00:00 Introduction and Headlines 00:22 Toronto District School Board Data Breach 01:32 MoveIT Breach: A Continuing Saga 03:19 City of Columbus Ransomware Attack 05:04 Whistleblower Controversy in Columbus 05:42 Host's Editorial and Personal Experience 07:39 Conclusion and Contact Information

Welcome to a special weekend edition of Cyber Security Today! In this long weekend episode, we delve into the world of artificial intelligence (AI) and its impact on various sectors, particularly as organizations ramp up their plans for the upcoming year. Join our host Jim Love and a distinguished panel of experts: Evgeny Koloda, Marcel Gagne, John Pinard, and Nicole Bendrich, as they explore the current state of AI, its promises, practical implementations, and the cybersecurity challenges associated with it. Discover valuable takeaways on developing an effective AI strategy and understanding the multi-modal advancements poised to revolutionize industries. 00:00 Introduction to the Special Weekend Edition 00:45 Meet the Expert Panel 02:25 The Promise and Challenges of AI 03:31 The Evolution of AI in Various Industries 06:41 Generative AI and Its Impact 07:53 AI in Cybersecurity 19:00 Human vs. AI: Decision Making and Errors 23:50 The Future of AI and Human Interaction 33:04 Expanding Human Capabilities with AI 35:04 Choosing the Right AI Model 40:09 Navigating AI in Regulated Industries 46:23 The Rise of Deepfakes and Cybersecurity Concerns 59:35 Building an Effective AI Strategy 01:04:15 Conclusion and Final Thoughts Resources: - AI Enterprise level HIPAA complaint GPT platform https://www.aivia.ai/ - EMR with AI capabilities eCW (eClinicalWorks) https://www.eclinicalworks.com/ - Digital Video Twin platform - HeyGen https://www.heygen.com/ - Canadian Digital Twin creation platform - Synthesia https://www.synthesia.io/ - Voice Cloning platform - Eleven Labs https://elevenlabs.io/ - Automation with AI - https://www.make.com Open Router https://openrouter.ai Jan.ai https://jan.ai/

In this episode of Cybersecurity Today, host Jim Love dives into the alarming rise of deepfake scams, highlighting how threat actors are using AI-generated videos to lure victims into fraudulent schemes. A notable campaign involves deepfake videos of Elon Musk promoting 'Quantum AI.' Additionally, the episode covers a sophisticated cyber attack where fake Palo Alto's Global Protect VPN is used to deploy malware. Lastly, it discusses Russia's potential threats against undersea communication cables and GPS systems, emphasizing the growing vulnerabilities in global infrastructure. Stay informed and secure with this essential update. 00:00 Introduction and Headlines 00:23 Deepfake Scams: The New Frontier 01:26 Quantum AI Scam Breakdown 02:47 Fake Palo Alto VPN: A Sophisticated Cyber Attack 04:21 Russia's Threat to Global Communications 06:35 Conclusion and Upcoming Show

Critical Cyber Security Alerts: Major Vulnerabilities and Exploits Unveiled In today's episode of Cyber Security Today, host Jim Love discusses a series of alarming cyber security incidents. Topics include a sophisticated attack exploiting a zero-day vulnerability in a popular network management platform, critical patches from SonicWall and Google addressing severe vulnerabilities, and an update on the National Public Data hack revealing deeper security issues. Learn about the latest threats and essential security measures you need to take now. 00:00 Introduction and Headlines 00:22 Sophisticated Cyber Attack on ISPs 02:43 SonicWall Firewall Vulnerability 04:29 Google Chrome Zero-Day Exploit 06:23 National Public Data Breach Update 07:58 Conclusion and Additional Resources

Cybersecurity Failures: Lawsuits, Outages, and International Threats In this episode of Cybersecurity Today, host Jim Love covers a range of critical cybersecurity issues. The U.S. sues Georgia Tech for not meeting cybersecurity standards as a Pentagon contractor. A potential cyber attack disrupts operations at Seattle’s port and airport. Microsoft plans a security summit following a major global IT outage caused by CrowdStrike. The effectiveness of publicly naming and shaming countries sponsoring cyberattacks is questioned. Join us as we delve into these pressing topics and their implications for cybersecurity policy and infrastructure resilience. 00:00 Cybersecurity Headlines: U.S. Sues Georgia Tech and Seattle Port Outage 00:24 Seattle Port and SeaTac Airport Cyber Attack Details 01:56 U.S. Government Sues Georgia Tech Over Cybersecurity Failures 03:27 Microsoft Security Summit and CrowdStrike Outage 04:11 Debate Over Microsoft's Proposed Security Changes 05:13 Effectiveness of Naming and Shaming in Cybersecurity 06:41 Challenges in Combating State-Sponsored Cyber Attacks 07:05 Conclusion and Show Notes

Join host Jim Love in this weekend edition of Cyber Security Today, featuring a distinguished panel including Terry Cutler (Cyology Labs), David Shipley (Beauceron Security), and special guest Tara Gold (Cado Security). The episode delves into key cybersecurity topics including the value of IT certifications, the rising trend in ransomware payouts, and the novel attack vectors targeting macOS systems. The show also explores the impact of poisoned search terms and the rising threats to small and medium-sized businesses. Don't miss this engaging and insightful discussion on the latest cybersecurity trends and best practices. 00:00 Welcome to Cyber Security Today 00:05 Meet the Panel and Special Guest 02:31 Introduction to Key Stories 03:04 Debate on IT Certifications 12:07 Ransomware Trends and Insights 18:46 Search Terms as Attack Vectors 23:26 Mac OS Vulnerabilities and Malware 30:17 Conclusion and Farewell

In this episode, host Jim Love delves into significant cybersecurity news, including a rise in FakeBat malware infections from malvertising campaigns, car companies selling driver data to brokers without consent, and McAfee's new deepfake detection tool. Highlights include the sophisticated methods of the FakeBat campaign, privacy concerns from automakers' data practices, and McAfee's innovative on-device solution for detecting AI-generated content. 00:00 Introduction to Cybersecurity Today 00:24 Malvertising Campaigns and FakeBat Malware 02:21 Automakers Selling Driver Data 04:22 McAfee's Deepfake Detection Tool 06:14 Show Wrap-Up and Additional Insights

Ransomware Record Highs, North Korean Exploits, Toyota Data Breach, and Mac Security Flaws - Aug 21, 2024 In this episode of Cybersecurity Today, host Jim Love discusses the latest cybersecurity threats and incidents making headlines. Topics include record-high ransomware payments in 2024, a sophisticated malware exploit by North Korean hackers, a significant data breach at Toyota, and newly uncovered vulnerabilities in Microsoft's Office Suite for Mac users. Stay informed on these critical issues and more. 00:00 Record-Breaking Ransomware Payments in 2024 02:38 North Korea's Advanced Malware Exploits Windows Zero Day 04:53 Toyota's Massive Data Breach Exposed 06:37 Mac Users Beware: Vulnerabilities in Microsoft Office Suite 09:03 Show Wrap-Up and Listener Appreciation

Cybersecurity Today: OpenAI's Action Against Iranian Disinformation & Chrome's New Privacy Features In this episode of Cybersecurity Today, host Jim Love discusses OpenAI's recent identification and neutralization of chat GPT accounts linked to Iranian disinformation campaigns, Google's upcoming privacy enhancements in Chrome for Android, and the cybersecurity concerns raised by U.S. lawmakers over Chinese-made TP Link routers. The episode also highlights a new study revealing the cybersecurity risks posed by employees using work laptops for personal activities. Tune in to stay informed about the latest developments in cybersecurity. 00:00 Introduction and Headlines 00:22 OpenAI's Battle Against Iranian Disinformation 02:05 Google Chrome's New Privacy Features 03:29 Domain Hijacking Risks Highlighted 05:14 Concerns Over Chinese-Made Routers 07:25 Risks of Using Work Laptops for Personal Use 09:29 Conclusion

In this special edition of Cybersecurity Today, your deepfake host Jim Love dives into the world of cybersecurity with new guests Marcel Gagné, an open-source guru, and Andréanne Bergeron, the director of research at GoSecure. The panel, including regular David Shipley, discusses the increasing threat of deepfakes in corporate and political spheres, the resilience required to combat modern cyber threats, and the necessity of critical thinking and education to navigate the ever-evolving landscape. From CrowdStrike's humble admission of a major security lapse to the growing concerns around AI-driven attacks, this episode offers insights and practical advice for both IT professionals and the general public. Don't miss out on this engaging discussion on how to stay ahead of cybersecurity challenges! 00:00 Introduction to Cybersecurity Today 00:22 Meet the Panel: Experts in Cybersecurity 02:08 CrowdStrike's Humility at DEF CON 03:54 Elon Musk and Infrastructure Failures 12:05 The Debate on Digital Identification 21:02 Deep Fakes: The New Frontier 23:59 The Rise of Digital Avatars 24:28 Open Source and Security Concerns 24:55 Commercial Availability and Control Issues 26:08 Media and Public Perception 26:56 Deepfakes in Politics and Business 27:29 Ease of Creating Deepfakes 27:57 Real-Time Deepfake Threats 29:12 Organizational Resilience and Culture 29:59 Human Psychology and Cybercrime 33:19 The Future of AI and Human Intelligence 35:23 Critical Thinking and Education 37:19 Balancing Technology and Human Factors 39:33 Final Thoughts and Recommendations 50:14 Closing Remarks and Acknowledgements

Cybersecurity Insights: Paris Olympics and Deepfake Technologies In this episode, host Jim Love discusses proactive cybersecurity measures taken during the Paris 2024 Olympics to combat threats such as domain abuse, counterfeit shops, unauthorized live streaming, cryptocurrency scams, and betting fraud. He highlights a report from before AI on pre-Olympic threats and emphasizes the importance of relying on official sources. Additionally, Love covers advancements in deepfake technologies, including new offerings like Hey Gen, Elon Musk's GROK, and the open-source Deep Live Cam, which raise significant concerns about digital impersonation and fraud. Simple verification strategies, like safe words, are suggested as countermeasures as these technologies become more accessible. Tune in for a Week in Review panel on these topics. 00:00 Introduction and Overview 00:23 Cybersecurity Measures for the Paris Olympics 00:53 Key Findings from the Before AI Report 01:55 Proactive Measures and Advice for Viewers 02:48 Deep Fake Technology Demonstrations at DEF CON 03:54 Concerns Over Deep Live Cam and Digital Security 05:32 Ethical Implications and Future Considerations 05:40 Conclusion and Week in Review Preview

In this episode of Cybersecurity Today, host Jim Love delves into Elon Musk's claim that a DDoS attack delayed his live interview with Donald Trump, the revelation of a massive data breach compromising most U.S. social security numbers, and CrowdStrike's president accepting the 'Most Epic Fail' award at DEF CON. The episode covers the skepticism around Musk's DDoS claim, details on the National Public Data hack, and CrowdStrike's approach to owning up to its global IT outage. Tune in for the latest updates in cybersecurity! 00:00 Introduction and Headlines 00:21 Elon Musk's DDoS Claim and Technical Issues 02:06 Trump Campaign Hacked 03:00 National Public Data Breach 05:16 CrowdStrike's Epic Fail at DEF CON 06:34 Conclusion and Show Notes

Exposing Hidden Secrets: DEF CON Revelations, Ransomware Surge & GPS Spoofing Woes Join host Jim Love in this insightful episode of Cybersecurity Today. Discover the shocking revelation of over 15,000 hard-coded secrets uncovered at DEF CON by researcher Bill Dermacapi, and learn about a new ransomware attack targeting home users. We also delve into a startling rise in GPS spoofing attacks on commercial airlines that are causing chaos in-flight. Stay informed with our latest updates and expert advice to keep you and your data secure. 00:00 Introduction and Headlines 00:22 North Korean Hackers Arrested 01:12 DEFCON Security Conference Highlights 04:05 Magniber Ransomware Attacks 05:52 GPS Spoofing Threats to Airlines 07:15 Conclusion and Listener Feedback

Cybersecurity Insights: Malvertising, Phishing Trends, and North Korean Hackers In this weekend edition of 'Cybersecurity Today,' host Jim Love brings together experts Terry Cutler from Cyology Labs, David Shipley from Beauceron Security, and Greg Monson from Trustwave. The panel explores the latest trends in cybersecurity, including a deep dive into a report on 'Malvertising,' the use of social media advertising to distribute malware. They also discuss a significant rise in phishing attempts and the challenges of detecting them, revealing a worrying leakage rate of up to 50%. The panel delves into a fascinating and concerning trend: North Korean hackers being hired as remote workers to infiltrate companies. Finally, they analyze the recent Delta lawsuit against CrowdStrike and Microsoft's involvement in the case. Tune in for expert insights, practical advice, and the latest updates in the ever-evolving field of cybersecurity. 00:00 Introduction and Panelist Introductions 01:27 Malvertising: A New Cyber Threat 04:13 The Rise of Alternative Communication Channels 07:39 Corporate Dangers of Facebook Account Takeovers 12:04 North Korean Hackers in Remote Work 20:11 Navigating Reference Checks and Hiring Challenges 20:27 The Intricacies of the Prisoner Swap 21:49 CrowdStrike's Legal Battle with Delta 24:24 The IT Professional's Dilemma 30:25 Phishing Email Statistics and Security Measures 35:59 Concluding Thoughts and Future Topics

Massive Data Breach, Outlook's Phishing Risk, and Windows Downgrade Attack Vulnerabilities In this episode of Cybersecurity Today, host Jim Love delves into one of the largest data breaches in history involving 2.9 billion records leaked without user consent by National Public Data. He also covers the backlash against Microsoft Outlook's email interface, which has inadvertently facilitated phishing attacks, and discusses a Black Hat presentation revealing vulnerabilities that allow attackers to unpatch fully updated Windows systems. Join us for insights and the latest updates in the world of cybersecurity. 00:00 Introduction and Major Data Breach Overview 00:31 Details of the National Public Data Breach 01:07 Implications and Legal Actions 02:42 Microsoft Outlook Phishing Vulnerability 04:08 Windows Security Vulnerability Exposed at Black Hat 05:57 Conclusion and Upcoming Content

Cyber Security Pros: Awareness vs. Action & The CrowdStrike Controversy Explained Join host Jim Love in this episode of 'Cyber Security Today' as he delves into a recent survey revealing a disconnect between awareness and action among global security professionals regarding unauthorized software use. Learn about the risks of shadow IT and AI applications, and the startling admittance of security pros themselves using unapproved SaaS. Additionally, explore the two latest stories from the CrowdStrike disaster, including the fallout between CrowdStrike and Delta Airlines, and the surprising involvement of Microsoft. Finally, hear about the importance of having a solid resiliency and recovery plan amidst these challenges. Tune in for these insights and more. 00:00 Introduction and Survey Findings 00:45 Shadow IT Risks and AI Concerns 02:17 CrowdStrike Controversy: Delta Airlines Incident 04:36 Microsoft's Response to Delta's Criticism 05:43 Lessons for IT Leaders 06:23 Show Conclusion and Host Announcement

In this episode of 'Cybersecurity Today: The Week in Review,' host Jim Love discusses critical cybersecurity incidents with guests Terry Cutler, CEO of Cyology Labs, and David Shipley from Beauceron Security. The panel delves into the devastating effects of a ransomware attack on the blood donation nonprofit OneBlood, emphasizing the broader implications for healthcare and emergency services. They also address the Canadian investigation into Ticketmaster's security practices and Microsoft's recent global outage, highlighting the significant challenges and necessary responses in safeguarding IT infrastructure. The discussion underscores the urgency of improving cybersecurity measures, particularly in healthcare, and the complexities of implementing effective regulations. 00:00 Introduction and Panel Introduction 00:19 Ransomware Attack on OneBlood 01:46 Healthcare System Vulnerabilities 04:05 Challenges in Cybersecurity for Healthcare 13:03 Ticketmaster Investigation and Government Inaction 20:03 Delta Airlines Lawsuit and Insurance Implications 28:38 Microsoft Global Service Interruption 35:12 Conclusion and Final Thoughts

In this episode of Cybersecurity Today, host Jim Love explores the aftermath of Microsoft's 10-hour global outage due to a DDoS attack, the Canadian Privacy Commissioner's investigation into Ticketmaster, the severe impact of a ransomware attack on U.S. blood bank OneBlood, and the cascading legal ramifications CrowdStrike faces after a disastrous software update. The episode delves into the broader implications of these cyber incidents and stresses the urgent need for robust cybersecurity measures. 00:00 Introduction and Major Headlines 00:29 Microsoft's 10-Hour Outage: Causes and Consequences 02:39 Ticketmaster Under Investigation: Privacy Concerns 03:45 OneBlood Ransomware Attack: Impact on Blood Supply 05:13 CrowdStrike Legal Battles: Fallout from Software Update 07:21 Conclusion and Upcoming Shows

Microsoft Cloud Outage, WhatsApp Vulnerability, and AI-Powered Screen Reading In today's episode of Cyber Security Today, host Jim Love covers a significant global outage affecting Microsoft's cloud services, a vulnerability in WhatsApp that allows malicious scripts to run without warning, and a new AI-powered method that can read your screen by intercepting HDMI signals. Stay informed about these pressing cybersecurity issues and learn how to protect yourself. 00:00 Microsoft Service Takes a Nosedive 00:16 Global Impact and Response 02:12 WhatsApp Vulnerability Warning 04:02 AI Decoding Screens from Afar 05:12 Show Wrap-Up and Future Episodes

Google's Password Bug Hits Millions & French Police Battle Malware - Cybersecurity Today In this episode of Cybersecurity Today, Jim Love covers Google's recent apology after a bug caused the passwords of 15 million Chrome users to vanish. The episode also dives into the French authorities' unique approach to combating the PlugX malware by deploying a disinfection solution. Lastly, it sheds light on the ongoing struggles with patch management in many organizations, particularly following the CrowdStrike disruption. Tune in for these stories and more, along with the challenges and solutions in today's cybersecurity landscape. 00:00 Google Apologizes for Password Vanishing Bug 01:55 French Authorities Combat PlugX Malware 03:44 The Unsexy Challenge of Patch Management 05:41 Conclusion and Show Notes

Cybersecurity Weekly Review: CrowdStrike, Malware, and Major IT Outages Join Jim Love and a panel of experts as they delve into the top cybersecurity stories of the week. This episode covers the major CrowdStrike incident, AT&T's February outage affecting millions of calls, a new strain of malware in Ukraine targeting industrial control systems, and much more. Listen in as experts Terry Cutler, David Shipley, and Mike Walters discuss the implications, lessons learned, and future strategies needed to tackle these cybersecurity challenges. 00:00 Introduction and Overview 00:18 CrowdStrike Dominates the Headlines 00:27 AT&T's Major Outage 01:14 New Malware in Ukraine 01:51 Whiz Startup's Bold Move 02:33 Panel Discussion Begins 02:55 Introduction of Mike Walters 03:31 Whiz's Market Valuation Debate 06:59 Modbus Protocol Vulnerabilities 07:35 Penetration Testing Insights 12:50 CrowdStrike Incident Analysis 22:24 Media Focus on Airport Chaos 22:36 The Real Impact on Patient Care 23:53 Who Pays for the Outage? 25:40 CrowdStrike's Quick Response 26:27 Future Prevention Strategies 28:27 Challenges in Cybersecurity Updates 38:14 Lessons Learned and Moving Forward 42:17 Conclusion and Acknowledgements

North Korean State Actor Infiltrates US Security Firm | Cybersecurity Today In this episode of Cybersecurity Today, host Jim Love covers two major incidents. The first is an American firm, KnowBe4, inadvertently hiring a North Korean state actor posing as a software engineer, leading to an attempted malware installation. He discusses the techniques used by the threat actor and the broader implications for cybersecurity. The second story involves CrowdStrike's post-incident review of a system crash, detailing the causes, the company's response, and criticisms of their crisis communication strategy. Tune in to learn about these pressing cybersecurity challenges and how companies are handling them. 00:00 A Shocking Cybersecurity Incident 00:20 North Korean State Actor Infiltration 01:59 CrowdStrike's Post Incident Review 05:07 CrowdStrike's Crisis Communication Failure 06:31 Conclusion and Upcoming Shows

In this episode of Cybersecurity Today, guest host Jim Love covers major events impacting the cybersecurity world, including CrowdStrike CEO George Kurtz's summons to testify before a U.S. House Committee on Homeland Security following a massive IT outage and a new malware strain, Frosty Goop, attacking critical infrastructure in Ukraine. The episode also discusses cybersecurity firm Wiz's surprising decision to decline a $23 billion acquisition offer from Google's parent company, Alphabet, opting instead to aim for an IPO. Stay informed about the latest in cybersecurity, and what these developments mean for the industry. 00:00 Introduction and Headlines 00:24 CrowdStrike CEO Summoned by U.S. House Committee 00:38 Impact and Response to the IT Outage 01:41 Frosty Goop: New Malware Threat 03:09 Wiz Rejects Alphabet's Acquisition Offer 04:45 Conclusion and Show Notes

Join Jim Love on a special edition of Cybersecurity Today and Hashtag Trending as he delves into the recent CrowdStrike incident that led to a global IT meltdown. With over 8.5 million Windows devices affected by a faulty CrowdStrike Falcon update, this event is being compared to Y2K and WannaCry. Discover the widespread impacts across key industries, the technical details behind the kernel-crashing error, and the fallout for companies and IT professionals. Learn why this disaster has created such frustration and anger in the cybersecurity community and what steps are being taken to recover. Tune in to understand the broader economic and societal implications of what is being called the 'worst cyber event in history.' 00:00 Introduction and Host Introduction 00:19 CrowdStrike Incident Overview 00:46 Community Reactions and Frustrations 02:29 Understanding CrowdStrike's Role 04:49 Technical Breakdown of the Issue 07:59 Impact and Consequences 09:04 Response and Fixes 12:33 Lessons and Future Precautions 13:20 Final Thoughts and Warnings 13:58 Conclusion

Dodging the Biggest Supply Chain Attack Ever: An Insight with JFrog's Security Research Team In this weekend edition of Cyber Security Today, host Jim Love discusses with Brian Moussalli, the Security Research Team Lead at JFrog, how potentially the biggest supply chain attack was averted. They delve into the intricacies of supply chain attacks, the risks associated with leaked tokens, and the importance of checking binary files for vulnerabilities. The conversation also touches on securing open source software and the role of JFrog in making the cyber world safer. Tune in to learn critical lessons on cybersecurity from this insightful interview. 00:00 Introduction and Host Update 00:32 Understanding Supply Chain Attacks 02:47 Interview with Brian Moussalli, the Security Research Team Lead at JFrog 06:15 The Python Token Leak Incident 17:01 Lessons Learned and Future Outlook 23:06 Conclusion and Sign-Off  

With Howard away and today's episode of Hashtag Trending being all about security stories, I took the liberty of doing a cross posting. Hope we'll have Howard back next week. In today's episode of Hashtag Trending, host Jim Love covers significant cybersecurity news. Microsoft faces criticism for mishandling a reported MSHTML browser engine vulnerability, and Disney investigates a hack by 'Null Bulge,' a group accusing the company of unethical AI use. Additionally, Kaspersky Labs announces its exit from the U.S. market due to government sanctions. The episode also discusses the FBI's swift unlocking of a shooter's phone, indicating advanced law enforcement capabilities. Tune in for these updates and more. 00:00 Introduction and Overview 00:43 Microsoft's Vulnerability Disclosure Controversy 02:28 Disney Hacked: Internal Messages Leaked 03:42 Kaspersky Exits the U.S. Market 04:59 FBI Cracks Encrypted Phones 06:54 Conclusion and Upcoming Shows

A new ransomware group that has been discovered is highlighted in this edition

This episode features an interview with a cybersecurity and privacy lawyer about responding to cyber attacks Navigating Ransomware Response: Insights from Cybersecurity Expert Imran Ahmad In this episode features an interview between Howard Solomon and Imran Ahmad, a partner at Norton Rose Fulbright, discussing effective strategies for managing ransomware attacks. Ahmad, with his extensive background in cybersecurity law, shares practical advice on incident response, the importance of having a structured plan, and the dynamic nature of cyber threats. He elucidates the common pitfalls companies face, the role of communication, and the legal nuances of dealing with cyber incidents. Ahmad also touches on the increasing sophistication of attackers, including the use of AI, and the balance organizations must strike between cybersecurity investments and other business priorities. 00:00 Introduction and Host Welcome 00:26 Meet Imran Ahmad: Cybersecurity Expert 01:37 The Reality of Ransomware Attacks 04:05 Elements of a Good Ransomware Response Plan 07:07 Inside the Incident Response Room 11:49 Legal and Communication Challenges 20:11 Government Policies and Ransomware Payments 22:29 Why Organizations Struggle with Cyber Preparedness 24:02 Conclusion and Farewell

A report on business email compromise attacks is highlighted in this edition

This episode reports on some of the new ways threat actors are bypassing phishing defences

This episode reports on new reports on vulnerabilities and software supply chain security

This episode features a discussion on the latest MOVEit vulnerability, a report on recruiting cybersecurity pros and how an API coding error is being blamed for a large cyber breach in Australia

Are attacks cybercrime or hiding espionage? Researchers investigate in this episode

This episode reports on an updated explanation of the hack of Los Angeles County's health department, an API coding error that led to a huge data breach in Australia, and more

This episode reports on a warning to patch Serv-U applications, the workings of the Rafel trojan, and more 

This episode features a discussion on an undiscovered three-year hack, the cause of Snowflake attacks and allegations of how an Australian health insurer was compromised Join Howard Solomon and David Shipley in the weekend review edition of Cybersecurity Today for insights into major cybersecurity incidents.   Topics include a three-year undetected hack by the Velvet Ant gang, major breaches involving personal data theft, the Medibank hack, misuse of Snowflake passwords, and the recent CDK Global cyberattack affecting car dealerships. Learn about the latest developments and cybersecurity lessons from these significant events.   00:00 Introduction and Overview 00:40 Weekly Headlines Recap 04:15 In-Depth Analysis: Three-Year Undetected Hack 14:27 Medibank Data Breach Investigation 25:18 Snowflake Data Breaches Update 30:04 CDK Global Cyber Attack 33:47 Conclusion and Final Thoughts    

This episode reports on how gullible employees are falling for a scam and cutting and pasting malware into their organization's IT systems, and more 

This episode reports on how outdated software played a role in a lengthy hack, the latest VMware security update, and more

This episode reports on complaints about the proposed UN cybercrime treaty, servers used by Islamic State terrorists shut, and more 

This episode includes a discussion on Microsoft and Google's offer to help U.S. rural hospitals tighten their cybersecurity, a report on top network vulnerabilities found by penetration testers and the latest news on hacks of Snowflake customers.

This episode reports on the latest ransomware news, another North Korean threat actor putting  malicious packages on the NPM registry, vulnerabilities in some open source AI apps, and more

This episode reports on the latest patches from Microsoft, Nvidia, JetBrains and ARM, as well as action by the Privacy Commissioner of Canada 

Microsoft has listened to criticism about the supposedly helpful tool, and more

This episode features a discussion of data thefts from Snowflake data stores, more on the controversy over Microsoft Recall and the Auditor-General's report on Canada's cyber fighting agencies

This episode reports on Snowflake users' credentials for sale, how Docker containers are being exploited, and more

This episode reports on vulnerabilities in unpatched versions of Progress Software's Telerik Report Server, the spread of the Remcos remote access trojan, and more

This episode reports on confirmation of cyber attacks on Ticketmaster, Santander bank, a Canadian broadcaster, and more

This week guest Terry Cutler of Cyology Labs and I discuss the controversy around Microsoft's  new Recall feature, lessons learned from the MITRE hack, and more

This episode reports on police takedowns of criminal IT infrastructure, and more

This episode reports on ransomware news, US sanctions against Chinese citizens for running a botnet, and more 

This episode reports on fake antivirus web sites to stay away from, and more

This episode features an interview with Treasury Board President Anita Anand, who announced the first cyber security strategy for the Canadian government's IT departments and agencies 

This episode reports on unwanted data your WiFi router may be giving out  and more 

This episode reports on a cyber warning to American drinking water utilities from a regulator, a ransomware attack on a prescription drug distributor and more 

This episode reports on fake WinSCP file transfer and PuTTY telnet utilities, malware that steals bank login credentials, and more 

This episode features a discussion on the FBI takedown of the BreachForums criminal marketplace, and more

This episode reports on the break up of a North Korean scheme tricking American firms into hiring who they thought were Americans app developers to work remotely, and more 

This episode reports on the Phorpiex botnet spreading LockBit ransomware, the sentencing of a man behind the Tornado Cash cryptocurrency mixer for money laundering, and more

This episode reports on a warning from security researchers about a VPN vulnerability, a suspected Russian threat actor using generative AI tools to plagiarize or modify legitimate news stories from mainstream media to pump pro-Russian themes, and more 

Join us for an interview with Francois Guay, founder of the Canadian Cyber Security Network and a new study of Canadian municipalities and how they rate in terms of attracting and retaining cybersecurity professionals.     

This episode reports on Anit-Ransomware Day , big tech companies vowing to make their products and services Secure By Design, and more

This episode reports on the RSA Conference, a Canadian ruling on whether solicitor-client privilege applies when a privacy regulator demands documents after a data breach, and more 

This episode reports on vulnerable routers, an attack on a Canadian digital library service and more

If you've ever been frustrated by how poorly you think politicians are dealing with the issues that face us in Cyber Security, maybe you've thought we should have more cyber security professionals in government.   Madison Horn, cyber security professional feels the same way.  So she's running for the a seat in the House of Representatives.  This is my interview with Madison, originally published on Hashtag Trending, the Weekend Edition. I hope you enjoy it. 

This episode reports on warnings about threats from China, Russia and North Korea, the hack of Dropbox Sign's infrastructure, and more

This episode reports on a vulnerability in the R programming language, fines against large American wireless carriers, and more

This episode reports on a job scam aimed at app developers, the latest data breach notifications and more

This episode features a discussion on the latest in the Change Healthcare ransomware attack, a vulnerability in an abandoned Apache open-source project, the next step in Canada's proposed critical infrastructure cybersecurity law and the future of TikTok

This episode reports on the malicious plugin worm that refuses to die, and more

This episode reports on the danger of using expired open-source packages, a tool used by a Russian hacking group and password advice

This episode reports on a new campaign to steal credentials from LastPass users, a warning to admits of Ivanti Avalanche mobile device management software, and more

On this episode Jen Ellis, co-chair of the Ransomware Task Force, talks about ways of fighting one of the biggest cyber threats to IT departments

This episode reports on a threat actor targeting governments in the Middle East with a novel way of hiding malware is going international, and more

This episode reports on security updates from Delinea and PuTTY, and reports on bad bots and threat actors going after Zoom meetings

This episode reports on a new anti-ransomware strategy, and more

This episode features a discussion on Microsoft's cybersecurity troubles, worries about open source, a warning about abusing IT help desks to launch attacks and more

This episode reports on a new way threat actors are planting malware on GitHub, why you should watch for the running of unexpected automated scripts on your network, and more

This episode reports on a warning to application developers using the Rust language, the need to unplug end of life D-Link NAS devices, and more

This episode reports on AI and Magento scams, and more

This episode features a discussion on a highly critical report on the hacking of Microsoft Exchange Online email accounts, a case study of a ransomware attack and the discovery of a years-long infiltration of an open source group to insert a backdoor into Linux

This episode reports on vulnerabilities in HTTP/2, RDP weaknesses a major cause of successful cyber attacks, and more

This episode reports on a data breach at OWASP, Google to delete data it collected in Incognito Mode, and more

This episode reports on a way threat actors can get around cloud-based email filtering systems, the latest information on an AT&T data theft, and more

This episode features a discussion on World Backup Day, a security awareness report and more

This episode reports on a US$10 million reward for a ransomware gang, a new Linux version of a backdoor, and more

This episode reports on a new network of 40,000 infected small and home office routers and other devices that are part of a criminal botnet, and more

This episode reports on a new campaign stealing email passwords, the latest data breaches, and more

This episode features discussion on lessons learned from the ransomware attack on the British Library, advice for managing expectations of IT/security teams, why firms are leaving Google Firebase unprotected and more

This episode reports on the discovery of a side-channel vulnerability in Apple M-series chips and more

This episode reports on new backdoors, a new paper giving advice to OT network operators and more

This episode reports on bugs, holes, data breaches, a coming cybersecurity trust mark for US wireless consumer products and more

Here's our week in review stories that David and guest host Jim Love will discuss: Cyber Pros flock to cybercrime side hustles. I covered this earlier this week. This story came out of the UK and a report that an ex-cop went undercover on the dark web and discovered that there were a lot of cybersecurity professionals who were moonlighting or offering their services the Dark Web. A second municipality fell victim to a ransomware attack.  First it was the city of Hamilton just outside of Toronto, a relatively large municipality – about 600,000 people hit by Ransomware on Feb 25th. Microsoft had to admit that those Russian state hackers were still doing damage. For those who don’t remember the story, Microsoft had a very severe breach where email accounts of senior company executives were hacked in November. The cause of the breach, if I remember it right, was a “non-production” instance that was left without two factor authentication and allowed hackers to breach that system and get into a lot more including the executive emails. Ransomware talent moves to Akira after Lockbit’s “demise”   Lockbit, a big player in ransomware got taken down very publicly by an international law enforcement group. They took Lockbit’s servers and even publicly tried humiliate the group, taking the counter that the group used to terrorize it’s victims.  It had a countdown clock that showed the time left to pay the ransom or they’d release the company’s information on the dark web.  The agencies that brought them down and took over their site put up their own countdown – only this was the time it would take them to nail the leader of Lockbit referred to as LockBitSupp.     

Google adds real time phishing protection to Chrome. A security bug is found in Kubernetes that allows attackers to remotely execute code on Windows nodes. The French government suffers an enormous cyber-attack and vulnerabilities in ChatGPT plug-ins.  Welcome to Cybersecurity Today for Friday March 15th, 2024. I’m your host Jim Love, filling in for Howard Solomon.  

A new phishing scam uses car insurance savings as to lure its victims, a report by Sophos shows that small businesses are being targeted by cybercriminals at an increasing rate.  Okta says that data claiming to be from hacking them is not their customer data.  These stories and more… Welcome to Cybersecurity Today for Wednesday March 13th, 2024. I’m your host Jim Love, filling in for Howard Solomon.

Breaking Bad in cybersecurity - UK companies are warned that cybersecurity employees may moonlight on the dark web.  Microsoft reveals that Russians hackers’ attack is still ongoing. A system used by US government states and agencies has a critical flaw and a new attack vector using fonts has been detected by marketing software Canva. Welcome to Cybersecurity Today for Monday March 11th, 2024. I’m your host Jim Love, filling in for Howard Solomon.

JIm Love, host of the daily news podcast Hashtag Trending fills in for Howard this Saturday with a replay of a show that Jim did which featured Adam Evans, CISO at RBC. It's a little different but we hope you enjoy it. 

This episode reports on a survey of IT pros on insider attacks, US sanctions on a group that markets commercial spyware, and more

This episode reports on the latest IT support scam trying to trick employees, and more

This episode features a discussion on how hard it is to kill a ransomware gang, Canada's proposed new online harms bill, why organizations still allow staff to use vulnerable software, and more

This episode reports on a recommendation that enterprises drop Ivanti Pulse Secure and Connect Secure devices because threat actors can get around mitigations for recent vulnerabilities

This episode reports on a threat actor taking advantage of abandoned subdomains once used by big brands, ransomwmare attacks and more

This episode reports on hackers using an open source tool aimed at helping network administrators, the latest data breaches in the U.S., and Australia, and more

This episode features a discussion on the takedown of the LockBit ransomware gang, and more

This episode reports on advice for protecting water utilities from cyber attacks, Avast agrees to  a settlement with FTC on allegations it wrongly sold consumer data, and more

This episode reports on a patch for a critical vulnerability in a help desk application,  threat actors using the Greatness phishing-as-a-service kit and more

This episode reports a recent fake data breach report and two real ones, a man pleads guilty to being involved in malware distribution, and more

This episode features a discussion on new cyber incident and data breach reporting obligations for American telecom companies, the progress of Canada's proposed cybersecurity law, and more 

This episode reports on mulit-million dollar rewards for information on the AlphV ransomware gang, a decryptor is available for the Rhysida ransomware strain, and more

This episode reports on the latest patches released by major IT companies, and more

This episode reports on huge data breaches in France and the US, , a new Mac backdoor and more

This episode features discussion on a deepfake video conference call that tricked an employee into wiring US$25 million to crooks, why the U.S. Federal Trade Commission called the cybersecurity of a company "shoddy,"  and more 

This episode reports on ransomware payments, a US$10 million bounty on a ransomware gang, and more

This episode reports on a sophisticated scam that cost a company big money, and more

This episode reports on a US regulator hammering Blackbaud for a data breach, a former CIA application developer jailed for 40 years and more

This episode features discussion on hacks at 23andMe, Microsoft, the Canadian government, and on the FBI's warning on the cyber threat from China

This episode reports on US government action on vulnerable Ivanti gateways and more

This episode reports on ransomware news, a survey of infosec pros in the financial sector and more

This episode reports on the need for every organization to have contact information on security issues, and more

This episode features a discussion on a hack at Microsoft, the recommendations of the Network Resilience Coalition, a report on AI and cyber threats and more

This episode reports on an investigation into why US federal IT staff pushed for the purchase of forbidden video cameras, record data breach numbers last year in the US, and more

This episode reports on ransomware attacks on a North American firm that manages water utilities ,and more

This episode reports on ransomware attacks, an undetected attack on a VMware hole and more

This episode features a discussion on cryptocurrency scammers hacking X accounts, the arrest of a Ukrainian man for using hacked cloud accounts to create 1 million virtual servers for mining cryptocurrency and how an accounting firm employee fell for a phishing email pretending to be from the CEO led to a data breach

This episode reports on firmware updates from hardware manufacturers that IT admins should be watching for, a phishing warning to Middle Eastern expets and more

This epsiode reports on the latest security updates for a range of products

This episode covers reports with warnings to application developers from Recorded Future and Gitlab; how an accounting company was victimized by a phishing message, and more

This episode features a discussion about the state of cybersecurity jobs 

This episode reports on scams aimed at employees, a report on the Medusa ransomware group, the latest on the number of data breach victims and more

This episode reports on a hole found in Bosch industrial torque wrenches, attacks on Microsoft SQL servers, and more

This episode reports on basic cybersecurity oversights that led to the hacking of a teclo, the increased number of victims of a US law firm hack, a data breach at a Canadian provider of midwives and more

Russian hackers were inside the biggest Ukrainian telecom provider for at least seven months before knocking it offline last month. This and other news are in the podcast

This episode reports on Canadian and American privacy bills before legislatures, ransomware news and more

Don't have a cybersecurity strategic plan? Here's how to start building one

This episode reports on the latest ransomware and vulnerability numbers for 2023

This episode features a discussion about the biggest cybersecurity stories of 2023, and predictions for 2024

This episode reports on a warning of a vulnerability in the SSH protocol, the latest multi-million person data breaches and more

This episode reports on the new SEC cyber attack rules that come into effect today, guidance from the NSA on creating a software bill of rights, and more

This epsiode features discussion on how much responsibility governments should shoulder to fight ransomware, why North Korea's Lazarus group is still exploiting the two-year old Log4j vulnerability and the latest on insider attacks

This episode reports on the growth of the KV-botnet, the discovery of another unprotected database on the internet, and more

This episode reports on a new phishing scam aimed at job recruiters, and more

This episode reports on a US hospital chain notifying 2.5 million patients and employees about data stolen in a ransomware attack, and more

This episode features discussion on cyber attacks against OT networks, the discovery of exposed servers with medical images and  why outdated Microsoft Exchange servers are still alive

This episode reports on how hackers break into AWS cloud instances, fake anti-Ukraine online ads  using photos of celebrities, and more

This episode reports on abuse of Go language repositories, unpatched Outlook servers targeted by Russian group, and more

This episode  reports on a campaign against critical infrastructure using PLCs, a vulnerability in PCs, and more

This episode features a discussion on ransomware, the latest explanation from Okta of a support hack and a survey of infosec pros whose firms were hacked

This episode reports on how a hotel allowed its reservation system to be abused by a crook, US hits at a cyrptocurrency mixer used by North Korea, and more

This episode reports on a company hit twice by a ransomware gang, the arrest in Ukraine of the alleged head of a ransomware gang, and more

This episode reports on the latest ransomware attacks, and details of how a gang that scams people selling used products online works

This episode features discussion on Australia's decision to not make ransomware payments illegal, huge hacks of third-party service suppliers in Canada and the U.S. and whether email and smartphone service providers are doing enough to protect customers

This episode reports on the increasing number of vulnerable Kubernetes containers online, the latest acknowledged data breaches, a browser scam aimed at Macs, and more

This episode reports on unpatched holes that are being exploited by threat actors, and more

This episode reports on ransomware attacks and 1.6 million more victims of MOVEit hacks

This episode features a discussion on lessons learned from a huge cyber attack in Denmark, and more

This episode reports on claims by a threat actor that they used a former employee's still active credentials for a data theft, and more

This episode reports on the latest ransomware news, why a sophisticated attack on Denmark's critical infrastructure providers was so effective, and more

This episode reports on a cyber attack on the operator of ports in Australia, the hack of a reporter's Experian account, the latest data breaches, and more

This episode features discussion on Okta explanation of a hack, Cloudflare's explanation of a power outage and more

This episode reports on a sophisticated OT and IT attack on Ukraine by Russia's Sandworm gang, how failing to patch a firewall fast led to a regulatory fine and more 

This episode reports on a university investigation into data brokers, new malware and how hackers could have gotten into medical software

This episode reports on the cause of a recent hack at Okta, personal data stolen from the emaill of employees at a fast food chain, a proxy botnet found and more

This episode features a discussion on changes laid by the SEC against SolarWinds, the latest meeting of the International Counter Ransomware Initiative, cyber attacks on libraries and the departure of CEO John Chen from BlackBerry.

This episode reports on threat actors going after holes in Apache ActiveMQ and Airflow, as well as Citrix NetScaler Gateway appliances

This episode reports on a huge haul of US government workers email addresses stolen in a MOVEit hack, malware in the NuGet open source code respository and more

This episode reports on the results of the latest Toronto edition of Pwn2Own contest, hacks at a US hospital, an e-commerce processor and more MOVEit victims

This episode features a discussion on the recent Okta hack, an attack on a Canadian shared services provider to five Canadian hospitals, the SecTOR conference and more.

This episode reports on a data-stealing gang that's added ransomware to its arsenal, a new UK law forcing social media platforms to police harmful content and more

This episode reports on a security update warning from VMware, the discovery of a new ransomware strain and more

This episode reports on the latest security updates from Cisco, SolarWinds and Siemens, and tricks hackers use to pass on to employees in awareness training

It's early but already experts are making cybersecurity predictions for 2024. We take a look at four of them

This episode reports on what could be a fatal mistake for a ransomware gang

This episode reports on another warning to patch Confluence servers and a WordPress plugin, an advanced threat actor leveraging Discord, and more

This episode reports on Equifax UK fined US$13 million, Microsoft paying for finding AI vulnerabilities and more

This episode features discussion on a possible SEC investigation of the MOVEit hacks, the theft of data from 23andMe, the Top 10 cybersecurity misconfigurations, and more

Hackers are trying to exploit unpatched Atlassian Confluence servers and Progress Software WS_FTP file transfer software, and more

This episode reports on the latest security updates for a wide variety of applications

This episode reports on more MOVEit hack news, a US settlement in the Blackbaud ransomware attack and more

This episode features a discussion on how to create an effective cybersecurity awareness program

This episode reports on a malware gang that wasn't completely taken out by police, a warning to admins overseeing Confluence servers and more

This episode reports on phishing email messages leveraging a hold in the Indeed job platform, warnings on poor firmware patching and on internet-connected ICS systems

For October Cyber Security Awareness Month this episode offers tips on how to build an effective awareness program

This episode features discussion on October Security Awareness Month, ransomware, teenage hackers and the start of hearings into proposed Canadian privacy and AI laws

This episode reports on a China-based group that specializes in hacking branch office routers of major companies

This episode reports on phishing campaigns against the hospitality sector, a new ransomware operator and more

This episode reports on a retaliation threat against Canadian websites, the impact of the Dallas ransomware attack, and more

This episode features discussion about the MGM Resorts ransomware attack, and on recent DDoS attacks against Canadian websites

This podcast reports on the latest number of MOVEit victims, new ransomware numbers and more

This episode reports on the possiblity that thousands of internet-facing Juniper SRX firewalls and EX switches may be at risk from a new way to exploit a recently discovered vulnerability, and more

This episode reports on a sophisticated scam, and lessons that can be taught for security awareness training

This episode features discussion on Microsoft's explanation of how the hack of one of its software developers led to one of the most amazing breaches of email security, a ransomware report from the U.K., a Business Council of Canada report on security and why the .US domain is being used so much for phishing attacks.

An alert about a group that focuses on tricking IT support staff by claiming to be an employee  who needs to reset their password, and more

This episode reports on the latest security updates, a scam aimed at IT service desk staff of American organizations that use access management solutions from Okta, and more

This episode reports on vulnerabilities that have to be dealt with in Cisco applications, the sentencing of a Russian businessman in the US to nine years in prison for his role in a nearly US$100 million stock market cheating scheme, and more

This episode features a discussion between IT World Canada CIO Jim Love and  Adam Evans, chief information and security officer of Royal Bank of Canada

This episode reports on the latest survey of boards on cybersecurity, and more 

This episode reports on what your organization might need to get and keep cyber insurance -- or whether you should self-insure by setting up a rigorous cybersecurity program

This episode offers cybersecurity and privacy advice and links to websites for parents about to send their kids back to school

This episode features discussion on International Women in Cybersecurity Day, a Canadian cybercrime report, the takedown of the Quakbot bot and the attacks on Barracuda Networks' ESG email gateways

This episode reports on more bad packages in open-source repositories, and why you shouldn't play the date game

This episode reports on QR codes being used by threat actors, statistics on ransomware and MOVEit hacks, and more

This episode reports on several newly revealed hacks, including the theft of the names and ranks of 47,000 London police and staff stolen after a hacker got into the IT systems of a firm that prints police warrant cards and staff passes

This episode features a discussion about zero trust and the cyber attack on Tesla by former employees

This episode reports on what some crooks are doing with stolen personal data, and more

This episode reports on a persistent attacker, security updates for Ivanti Sentry and more 

This episode includes reports on how much Dallas paid for a ransomware incident response, data released by the Black Basta ransomware gang after an attack on a U.S. housing authority and more

This episode features a discussion on a report into the successes of the Lapsus$ extortion gang, a ransomware attack against a Canadian non-profit, a vulnerability in the WiFi module of the infotainment system of some Ford vehicles and whether governments should mandate minimum cybersecurity standards for internet-connected devices

This episode reports on a  hole in the naming policies of modules developers can put in  Microsoft's PowerShell Gallery, lessons from a honeypot test and more

This episode reports on the most recent data breaches and an extortion campaign against LinkedIn users who lose access to their accounts

This episode reports on the hack of Hub International, advantages of honeypots, artificial intelligence and more

This episode features discussion on preventing ransomware in schools, a UK report on ransomware and insurance, the MOVEit hacks and sports teams and venues as cyber targets

This episode reports on the latest phishing attacks, attacks on unsupported and unpatched Zyxel routers and more

This episode reports on the latest trends in ransomware attacks, and security updates from Microsoft, SAP and PaperCut

This episode reports on the latest victims of MOVEit hacks, data thefts at Colorado's Department of Higher Education, and more

This repeat episode is a conversation with Aaron McIntosh, co-author of the Ransomware Task Forces' Blueprint for Ransomware Defence.

This episode looks at a recent from the UK National Cyber Security Centre on shadow IT

This episode reports on lessons from an analysis by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) on 121 assessments it did on security incidents last year

This episode reports on two alerts to admins with Linux in their environments and a caution for web site and web application developers

This episode features a discussion on the latest news in artificial intelligence, women in cybersecurity and data breach reporting 

This podcast reports on the need to patch MikroTik routers and Ivanti's Endpoint Manager Mobile and more

This episode reports on the slow adoption of DMARC protection, infected packages in open source repositories and more

This episode reports on a patch for Adobe OpenMeetings, a lack of patching of Zyxel devices, allegations that Microsoft's security breach may be worse than thought, and more

This episode features a discussion on an attacker forging a Microsoft authentication key for cloud access, developers including private keys in Docker containers, the continuing increase in ransomware attacks and more

This episode reports on the latest news in the MOVEIt hack, spyware, attribution in the JumpCloud hack and more

This episode reports on the jailing of an IT security analyst who tried leverage a cyber attack to extort money from the U.K. company he worked for, an AI chatbot for crooks, and more

This episode reports on attacks on AWS, Azure and Google Cloud environments, Russia's attempt to disconnect from the global internet and more

This episode features discussion on insider threats, the pace of cybersecurity spending by the private sector, how hackers are creating voice fakes and the responsibilities of CEOs during a cyber attack

This episode reports on ransomware statistics,  the release of the source code for the BlackLotus bootkit and the release of the implementation plan for the U.S. National Cybersecurity Strategy

This episode reports on the cyber trial of a British teen, NATO cyber strategy, how a CEO should respond to a cyber attack and more

This episode reports on the discovery of another unprotected database of personal information, an analysis of new ransomware variants and more

This episode features a discussion with Aaron McIntosh, co-author of the Ransomware Task Force's Blueprint for Ransomware Defense

How much can infosec pros learn from a honeypot? This podcast answers that question

A look back at Canadian privacy commissioners' report into problems with the Tim Hortons mobile app

This episode reports on the availability of a decryptor for Akira ransomware, a $70 million ransomware demand and more

This episode features a discussion on the Suncor cyber attack, the costs of the Indigo ransomware attack and the value of SIEMs

This episode reports on a new information-stealing malware, crooks cloning voices for virtual kidnapping and more

This episode reports on the latest victim of the MOVEit vulnerability, the impact of Europol's dismantling of an encrypted communications service used by crooks and more

This episode reports on a US insurance firm and a state employees' pension fund caught in the MOVEit hack of a supplier, pilots of two airlines caught in the hack of one of their partners, an infected USB key that led to a hospital being hacked, and more

This episode features a discussion on calls by several civil rights groups for the Canadian government to tighten up its proposed cybersecurity law, the proper way companies should notify victims of a data breach, why cybercrooks like using the Telegram Messaging service and more 

This episode reports on the increasing number of ransomware attacks, an email scam that tricks firms into switching payment bank accounts of employees and more

This episode reports on patches for Asus routers, a new Russian email server attack on Ukraine, a ransomware gang takes credit for an attack on Reddit and more

This episode reports on the latest news on MOVEit hacks, a DDoS site taken down by police in Poland and more

This episode features a discussion on paying ransomware demands, a crimeware gang whose targets include small and medium businesses and why some developers are less than careful with their API keys.

This episode reports on GitHub being abused by a threat actor, surveys of infosec pros and more

This episode reports on crime and punishment, civil fines for Microsoft and Spotify and more

This episode reports on the latest news in the MOVEit compromise saga, a successful attack on a SharePoint online customer, recent data breaches and more

This episode features a discussion on the Nova Scotia health data breach, the compromise of the MOVEit file transfer application and more

This episode looks at some of the numbers gathered from 16,000 cybersecurity incidents in the annual Verizon report

This episode looks at the traits a firm should consider if appointing a CISO to the board of directors

This episode reports on the BlackSuit ransomware strain, an expected EU privacy fine against Microsoft, a warning about an attack on web sites and more

This episode features a discussion on a report into the ransomware attack on Newfoundland's IT healthcare system, a penalty paid by a US medical billing supplier over a data breach, an Australian company's estimate of the costs of a ransomware attack and the sentencing in the U.S. of two Nigerian cyber crooks.

This episode reports on ransomware attacks, a proposed US$25 million fine against Amazon and more

This episode reports on CAPTCHA evasion, more exploits added to the Murai botnet and more

This episode reports on a new ransomware gang, new industrial control malware and advice for infosec leaders from a CISO whose firm suffered a ransomware attack

This episode features a discussion on employees who contributed to a company hack by sharing a password to an email account the spread of a fake image posted on Twitter of an explosion supposedly near the Pentagon and more

This episode reports on data breach notifications, an updated hacking tool, surveys of infosec pros and more

This episode reports on an IT security analyst convicted of trying to extort his own company, cybersecurity problems with government agencies in Utah and more

This episode reports on more financial penalties for a US firm's data breach, the PyPI registry can't keep up with added malware, Dole pays $US10.5 million to repair computers after ransomware attack and more

This episode features discussion about this week's U.S. Senate hearing on regulating artificial intelligence, the release of school schematics by a ransomware gang, a cybersecurity company fooled by a fake onboarded employee and the latest use of facial recognition software

This episode reports on how crooks are leveraging Dropbox and the new .,zip domain, offers tips for vacation travelers and more

This episode reports on a new DDoS attack tactic, a U.S. pharmaceuticals company reports a data breach of 5.8 million people, attacks on TP-Link routers and more

This episode reports on man-in-the-middle attacks, a new GitHub security tool, a warning about possibly fake MSI firmware updates and more

This week's review features a discussion between Jim Love and David Shipley on the progress in the fight against ransomware

This episode reports on lessons learned in a breach of security controls, a data breach at SchoolDude, a ransomware warning to admins with VMware hypervisors and more

This episode reports on a survey of CISOs and more

This episode reports on a new ransomware gang, an update on a ransomware attack on an American private university and more 

This episode features a discussion on the latest news about ChatGPT, data thefts of from test and decommissioned servers and whether the FBI needs more money to fight cybercrime

This episode reports on PayPal being used to send fake invoices and more

This episode reports on ransomware, a data theft at Yellow Pages Canada, ra[od Apple patches and more

This episode reports on increasingly good fake checkout pages being used on compromised e-commerce sites, malware hiding in supposedly free versions of utilities and games and more

This episode includes a discussion on the merits of the supervised super-penetration tests major Canadian banks and insurance companies will have to undergo

This episode reports on the need to update applications from Veeam, Apache, VMware, and more 

This episode reports on common factors in successful ransomware attacks, new tools used by threat actors and a call to update PaperCut servers

This episode reports on infected versions of popular business apps circulating on the internet, attackers are getting into Kubernetes access control and the impact of the X_Trader supply chain attack

This episode features a discussion on the supply chain attack that led to the 3CX supply chain attack, how organizations using Fortra's vulnerable GoAnywhere MFT platform might have stopped ransomware attacks, sensitive data found on used routers and more

This podcast looks at slips by the LockBit ransomware gang, and how one attack was helped by poor cyber hygiene

This episode reports on a new collaboration to create new malware, the latest email campaign using the QBot malware and more

This episode reports on new macOS ransomware, a warning to accounting and tax preparation firms on a scam, and more

This episode features a discussion on the alleged cyber attack against a Canadian gas pipeline, identity management, Windows patches and a new piece of commercial spyware

This episode reports on the latest data breaches, an attack on  internet-connected irrigation systems in Israel and more

This episode reports on details of a commercial spyware company, an issue in Microsoft's Azure storage accounts, how crooks try to bypass Google's Play store with malicious apps and more

This episode reports on data breaches, a Ukrainian utility compromised after an employee downloads pirated Microsoft Office, alleged dodgy  activity by Tesla and Samsung employees and more

This episode features a discussion on the 3CX supply chain hack, new ransomware, the takedown of the criminal Genesis marketplace and more.

This episode reports on an attempt to take down the IT infrastructure behind stolen versions of the Cobalt Strike tool, the emerging Styx criminal marketplace and more

This episode of the podcast reports on ransomware, a compromised US income tax web site, the exploit of a backup program and more

This episode reports on millions of Americans who took out loans being notified of a data breach, a criminal group trying to defraud companies hit by ransomware by bluffing and more

This episode features a discussion on the call for a temporary halt in developing AI applications, the future of TikTok, World Backup Day and more

This episode reports on how crooks take over Instagram accounts, a WiFI problem in Linux-based devices like access points and smartphones more

This episode reports on a warning to Okta administrators, a data breach at an Australian financial corporation grows and more

This episode reports on crooks using business email compromise tactics to steal products, the latest phishing email scam and more

This episode features a discussion on penetration testing, the cybersecurity maturing rankings of companies, rotating infosec jobs across government departments and the number of people on boards with cybersecurity experience

This episode reports on code in an online payment gateway modified to skim credit cards, a security problem with Windows' Snipping tool and more

This episode reports on a review of the latest version of ChatGPT, poor passwords are compromising Linux SSH servers and more

This episode reports on the latest news on TikTok, ransomware and a hack at an NBA provider

This episode features a discussion on a Canadian parliamentary committee report on cybersecurity, the Newfoundland healthcare system ransomware attack and the cyber implications of the Silicon Valley Bank failure

This episode reports on a huge data breach, information on the Trigona ransomware and more

This episode reports on the latest FBI cybercrime statistics, Silicon Valley Bank phishing scams and more

This episode reports on a company fined for an inaccurate ransomware report, the seizure of the NetWire remote access trojan infrastructure and more

This episode includes a discussion on a damaging Windows bootkit, law firms under attack, cybersecurity help for Canadian non-profits and the hack of a LassPass developer's home computer

This episode reports on a how a recent business email compromise unfolded in just over two hours

This episode reports on a plea by Canada's privacy commissioner to get rid of fax machines, a Russian gang's video call scam and more

This episode reports on an Oauth misconfiguration at Booking.com, data breaches at US universities, security updates for Cisco IP phones and more

This episode features a discussion about artificial intelligence and ChatGPT with a University of Calgary cybersecurity expert

This episode reports on the BlackLotus bootkit, a new backdoor found, a hack of a container and more

Breaches of security controls should be blamed on unsafe applications, not attackers, says the head of the U.S. Cybersecurity and Infrastructure Security Agency. Read why

This podcast reports on a data breach at News Corp., a report on the privacy descriptions of apps in the Google Play store, and more

This episode features a discussion on employees falling for SMS text scams, Twitter's move to make users pay for SMS 2FA and burnt-out CISOs

This episode reports on vulnerabilities in Apple devices plugged, a Russian citizen extradited to the U.S. for computer fraud and more

Hackers selling data centre logins for some of the world's largest companies, phone number recycling leads to accidental account hijacking and a ransomware gang that claims that it’s really your cyber insurance firm that blocks you from getting your data back. Spoiler alert. They lie.

This episode reports on ransomware, a coming SolarWinds Platform update, a warning from VMware of a conflict with a WinServer update and more

This edition features a discussion on who's to blame for cybersecurity problems in Canadian hospitals, and why management and infosec pros aren't communicating better

This episode reports on an attempt to fool Emsisoft protection, the continued spread of the ESXiArg ransomware and more

This episode reports on 1 million patients victimized in GoAnywhere MFT hack, phony packages found in PyPI and NPM registries, WordPress website compromises and more

This episode reports on the apparent return of the Clop extortion gang, ransomware attacks against hospital groups and the city of Oakland, Calif.,, and more

This episode features discussion on ransomware attacks on VMware servers, holes found in Toyota's supplier portal and more

This episode reports on doxing and swatting against execs, screenshots being used in attacks and more

This episode reports on ransomware, supply chain attacks and the latest consumer scams

This episode reports on third-party cybersecurity risks, a warning to managed Chromebook admins, hacks at two U.S. background checking services and more

This episode features a discussion about a ransomware attack on a US school board, new data-wiping malware, a controversy the over KeePass password manager and the take-down of the Hive ransomware gang's IT infrastructure

This episode outlines news of four recent ransomware attacks, the release by Cisco Systems of security fixes for industrial products and the guilty plea of a man who tried to extort the software company he worked for 

This episode reports on the latest DocuSign scam, YouTube channels hacked for cryptocoin fraud, another warning to open source code repositories and more

This episode reports on the need to protect Active Directory,  a patching strategy for ICS devices, a warning to VMware admins and more

This episode features a discussion on Data Privacy Week, hacks involving GoTo and Zendesk and a report that some IT departments aren't even aware of certain vulnerabilities and patches

This episode reports on DDoS attacks in Germany, 61,000 open source Python projects patched on GitHub, Porsche problem with NFTs, facial recognition being allegedly used against lawyers and more

This episode reports on the aftermath for GoTo customers after a supply chain cyberattack, vulnerabilities in Samsung's Galaxy App Store, problems with password managers and more

This episode reports on hackers using Microsoft OneNote in phishing attacks, the number of at-risk and unsupported Cisco routers and more

This episode features a discussion on the Mailchimp hack, the theft of a customer database from a Nissan software developer, the compromise at CircleCI and whether firms have to tolerate buggy applications

This episode reports on ransomware payments, another privacy fine for a Meta company and attackers disrupting a virtual Le Mans race

This episode reports on customer test data stolen from Nissan software developer, warnings to GitHub and GitLab users and holes found in GE's historian server

This episode reports on hackers trying to exploit unpatched versions of Control Web Panel, indicators of compromise for a ManageEngine bug, FortiOS VPNs being targeted and more

This episode features a discussion on fake ChatGPT apps, whether  successful ransomware attacks are decreasing, vulnerabilities found in the apps created by major car manufacturers and how fast firms should notify customers about data breaches 

This episode reports on the latest efforts of a pro-Russian hacktivist group, unpatched Exchange servers being leveraged by ransomware groups and more

This episode reports on a new ransomware survey, a warning on old backdoors, DDoS attacks with ransoms going up and more

This episode reports on new thinking about the speed of reporting data breaches to victims, the end of support for Windows 8.1, and more

This episode includes a discussion on the alleged "rules" of ransomware attackers

This episode reports on the debate in quantum computing circles, a free decryptor for firms hit by the MegaCortex ransomware strain and why cloud services platforms have to tighten their security

This episode reports on new privacy laws in California and Virginia, breach notifications sent to employees of Wabtec, security updates from Synology and more

I begin the New Year with a podcast aimed at IT and security pros in small and medium businesses on how to start a cybersecurity plan

My last show of 2022 recalls advice for infosec pros from an expert I interviewed

This episode features a feisty discussion on the important cybersecurity events of 2022, and predictions for 2023

This episode reports on ransomware number for November and trouble in open-source repositories

This episode features a discussion on the US seizure of 48 DDoS-for-hire sites, security patches for Samaba, Ukrainians fooled by free Windows 10 and more

This episode reports on protecting Exchange Servers and Exchange Online, a report on the FIN7 ransomware gang and more bad Android apps

This episode reports on malware hidden in the PyPI registry for open-source projects, a huge privacy violation penalty for Epic Games and more 

This episode reports on improved privacy for Gmail, a new business email scams, security updates for Samba and more

This episode features a discussion on the hack of an FBi contact database, session cookies, cyber war and how to punish government employees who don't patch applications 

This episode reports on the closing of 48 DDoS for hire sites, data breaches at Social Blade and an Australian email provider, and a new Facebook scam

This episode reports on patches for Windows, a suppler hack stings Uber, malware in the PyPI registry and more 

This episode reports on the results from the Toronto Pwn2Own contest, a possible way to hack air-gapped computers, a report on improving the software security supply chain and more

This episode features a discussion on the ransomware attack on Rackspace, the hack of Amnesty International Canada and a report on how threat actors are trying to get around multifactor authentication

This episode reports on another vulnerability found in Internet Explorer, a hack gets past Microsoft 365 and a vulnerability in web application firewalls

This episode reports on ransomware, the need for continued security awareness training for employees and the high cost of low software quality

This episode reports on the CryWiper malware hitting Russia, spyware and SIM swapping

This episode features a discussion on ethical hacking, fines for privacy offences and more

This episode reports on the Cuba and LockBit ransomware, a fortunate error by Akamai and advice for safer online gaming from Canada's privacy commissioner

This episode reports on an inflation benefits scam aimed at Canadians, 13 vulnerabilities found in a Lanner baseboard management controller, a con aimed at TikTok users and more

This episode reports on the latest Twitter breach numbers,  a US college victimized by ransomware, survey numbers from Dell and OpenText, and more

In this episode Terry Cutler and I discuss the theft of funds from subscribers to the DraftKings betting site, ransomware and tips for safe holiday online shopping

This episode reports on vulnerabilities still not sent to some Android smartphones, a targeted scam distributing corrupted VPNs, malware may be hiding in Docker Hub images and more

This episode reports on why Telegram may not be the text service for you, the latest version of a phone scam, a warning about a the abandoned Boa web server and more

This episode reports on four new ransomware strains, how researchers have been quietly helping victims of the Zeppelin ransomware, and patches issued for Atlassian applications

This episode features a discussion on what Sobeys' parent company should be saying about a cyber incident, the reaction to ransomware in Australia and Ontario's recent report on helping the broader public sector from cyber attacks

This episode reports on the risks of misconfigured, a warning on the Log4Shell vulnerability, ransomware reports and more

This episode reports on vulnerabilities found in applications, password variations hackers have figured out, advice for suspected deepfake audio messages, and more

This episode reports on mistakes that led to hacks in Ukraine, a wave of threatening emails, work-from-home websites shut and more

This episode features a discussion about the arrest of a ransomware suspect in Canada, a settlement in a cyber insurance case and whether scanning the internet for vulnerable devices by a government agency is a good idea

This episode reports on email attacks, ransomware, and a vulnerability in Windows credential roaming capability

This episode reports on dangerous malware, crooks imprisoned in the US, and warnings about malicious USB keys and insider thefts

Get an email from the boss asking you to buy gift cards for all the employees? It may be a scam

This episode looks at words of wisdom from IT and security workers spotted on Twitter

Learn in this episode about sophisticated phone scams and how to avoid being a victim

This episode reports on infosec leaders considering leaving their jobs, hacked company access being sold and a warning about clicking on search engine ads

This episode reports on hackers taking advantage of badly configured Windows servers, IIS logs and a VMware security update

This episode looks at highlights from the recent MapleSec cybersecurity conference

This episode reports on threats to Docker and Kubernetes containers, abuse by cryptominers of GitHub, and questions about the security awareness of employees

This episode includes advice on creating safe passwords, and more

This episode reports on a new ransomware data exfiltration, a Microsoft Azure vulnerability, a start by Google to bring order to software bills of material efforts and more

This episode features a discussion on a common mistake in using email, the risks of using real customer data when testing applications and the latest cyber incident statistics for Canada

This episode reports on an arrest in Brazil allegedly related to the Lapsus$ gang. two convictions in the US for SIM card swapping and more

This episode reports on presentations at a Mandiant conference, data breaches in Australia and more

This episode reports on the end-of-life support for two versions of ESXi hypervisors, an encryption issue with Office 365 email, a new threat to NPM libraries and more