Sitemap - 2025 - CISO Talk by James Azar

Hard-Bit Gang Identified After EU Airport Cyberattack, UN Telecom Plot Foiled, and JLR's Billion-Dollar Cyber Nightmare Continues

Airport Cyberattack Disrupts Flights Across Europe, Microsoft Entra ID Flaw Allowed Hijacking Any Company's Tenant, 2 Scattered Spider Suspects Arrested in UK, Russian Groups Target Ukraine

Breaking Geo-Truths: Leadership, Paradigm Shifts, and the Cyber Status Quo

This Week In Cybersecurity #20

JLR Cyber Shockwave Ripples Through Auto Sector, ShinyHunters Claims 1.5 Billion Salesforce Records Stolen, SonicWall Warns Customers to Reset Credentials After Breach

JLR Week 2 Shutdown, 40 NPM Packages Compromised, ChatGPT Calendar Abuse

Ukraine Claims DDoS Attack on Russian Election System, Data Leak Reveals 500GB of Great Firewall Information, Uvalde Texas School District Ransomware Attack, Google Confirms Fraudulent Account Created

Samsung Patches Zero-Day Exploited, New HybridPetya Ransomware Can Bypass UEFI Secure Boot, DELMIA Factory Software Vulnerability Exploited, FBI Warns of Hackers Stealing Salesforce Data

This Week in Cybersecurity #19

Remembering 9/11 & Charlie Kirk - Cyber take a backseat

Microsoft September 2025 Patch Tuesday Fixes 81 Flaws, Adobe Patches Critical SessionReaper Flaw in Magento eCommerce Platform, All Patch Tuesday News US Offers $10 Million Reward for Ukrainian Ransom

Hackers Hijack NPM Packages with 2 Billion Weekly Downloads in Attack Guest Neatsun Ziv CEO of Ox Security Joins Show, GitHub Workflows Attack Affects Hundreds of Repos, SalesLoft March Repo Breach

🚨 Breaking News: Popular npm Packages debug and chalk Compromised

China Trade Talks Raise Spy Concerns Among US Officials, Wealthsimple Supply Chain Attack Data Breach, SaaS Giant Workiva Discloses Data Breach, EU Fines Google $3.5 Billion for Anti-Competitive Ads

Ransomware, SaaS Supply Chains & the Token Time bomb

This Week in Cybersecurity #18

Google Fined $381 Million Over Gmail Ads Privacy Violations, US Sues Toy Maker for Exposing Children's Data to Chinese Developers, Hackers Exploit Sitecore Zero-Day, HexStrike AI Tool to Exploit N-Day

Cloudflare Hit by Data Breach, Pennsylvania Attorney General Confirms Ransomware Behind Outage, Jaguar Land Rover Operations Severely Disrupted by Cyberattack, Attempted $130 Million Bank Heist

Palo Alto Networks Data Breach, Zscaler Data Breach Exposes Customer Info, WhatsApp Zero-Day Exploited in Attacks Targeting Apple Users, Ukrainian Network FDN3 Launches Massive Cyberattack Campaign

Google Confirms Workspace Accounts Also Hit in SalesLoft Drift Data Theft, TransUnion Data Breach Impacts 4.4 million People, Nevada Confirms Ransomware Attack, WhatsApp Patches Zero-Day

This Week is Cybersecurity #17

Hackers Target NX Build System in First AI-Weaponized Supply Chain Attack, Hacker Used Claude AI to Automate Complex Attack Campaign, Cyberattack Impacts 200 Municipalities in Sweden

PromptLock First AI-Powered Ransomware Emerges in Wild, SalesLoft Breached to Steal OAuth Tokens for Salesforce Data Theft Attacks, Hackers Disrupted Iran's Tanker Fleet, Citrix Patches Zero-Day

Auchan Retailer Data Breach, Nevada State Offices Halt Services After Major Cyber Incident, South Korea Arrests Hacker Accused of Targeting BTS, Maryland Cyberattack Disrupts Transit Services

Farmers Insurance Data Breach, Large Interpol Cybercrime Crackdown in Africa Leads to Arrest of Over 1,200 Suspects, Colt Confirms Customer Data Stolen, DataIO Hit by Ransomware Attack

This Week in Cybersecurity #16

Belgian Telecom Says Cyberattack Compromised Data on Customers, Apple Fix New Exploited 0Day, North Korea Uses GitHub in Targeting Campaign, Russian Hackers Accused in Water Sector Cyberattacks

Intel Employee Data Exposed, Australia's TPG Telecom Investigating iiNet Hack, Organizations Hit by SharePoint Attacks, Inotiv Reports Ransomware Attack to SEC

1.1 Million Unique Records in Allianz Life Data Leak, UK Agrees to Drop Apple Encryption Legal Battle, XenoRAT Malware Campaign Hits Multiple Embassies, UK Sentences Serial Hacker to 20 Months

Workday Data Breach, Hackers Compromise Canada House of Commons Parliamentary Systems, Colt Telecom Attack, US Seizes $2.8 Million from Zeppelin Ransomware

This Week in Cybersecurity #15

PA Attorney General's Down After Cyberattack, Pro-Russian Hackers Were Likely Behind Suspected Dam Sabotage, Fortinet Warns of Pre-Auth RCE Flaw, N-able N-Central Flaws Exploited in Zero-Day Attacks

Massive Patch Tuesday Roundup as Microsoft Fixes 107 Flaws Including Zero-Day, Hackers Leak Allianz Life Data, Yes24 K-pop Ticketing Site Hit by Second Ransomware Attack, Fortinet VPNs Targeted

North Korean Kimsuky Hackers Exposed, Minnesota Ransomware Gang ID'd, Citrix NetScaler Exploited

Columbia University Data Breach Impacts 860,000 Individuals, Google Confirms Data Breach Exposed Google Ads Customers, US Judiciary Confirms Breach, Russian Hackers Exploited WinRAR Zero-Day

AI in Cybersecurity: Lessons from Hacker Summer Camp 2025 - A Month in the Trenches

This Week in Cybersecurity

Air France-KLM Confirms Breach, Bouygues Telecom France Suffers Cyberattack and Data Breach, Google Discloses Salesforce Hack, Microsoft Warns of High Severity Flaw in Hybrid Exchange Deployments

Cisco Confirms User Data Stolen in CRM Hack, Pandora Confirms Data Breach Amid Salesforce Data Theft, DaVita Dialysis Company Hit by Ransomware , PBS Confirms Data Breach After Employee Info Leak

Chanel Hit in Salesforce Breach, SonicWall Zero-Day Found, Biggest Crypto Hack Ever

Luxembourg Telecom Suffers Major Outage in Reported Cyberattack, Hackers Leak Purported Aeroflot Passenger Data Online, Russia's FSB and Turla Launch Espionage Campaign Against Foreign Embassies

When the Gatekeepers Close the Door — But the Mic Stays On

This Week in Cybersecurity

IBM Data Breach Report Shows US Losses Average $5.9 Million, SafePay Ransomware Threatens to Leak 35TB of Ingram Micro Data, ShinyHunters Behind Major Data Theft Attacks, Palo Alto $25B Play

Orange Telecom France Suffers Major Cyberattack, Minnesota Governor Activates National Guard for St. Paul Cyber Attack, FBI Seizes $24 Million in Bitcoin from Chaos Ransomware

Cyberattack on Aeroflot Causes Flight Delays Across Russia, France's Naval Group Investigates 1TB Data Breach, Critical Cisco ISE Bug Exploited in Active Attacks, Microsoft macOS Flaw Leaks Apple AI

Allianz Life Data Breach Impacts 14 Million Customers, NASCAR Confirms Major Data Breach, SharePoint Servers Targeted in Ransomware Campaigns, BlackSuit Ransomware Gang Website Taken Down

This Week in Cybersecurity

U.S. Nuclear Weapons Agency Breached in Microsoft SharePoint Attacks, Clorox Files $380 Million Lawsuit Against Cognizant Over 2023 Cyberattack, XSS.IS Mastermind Leader Captured in Ukraine

Chinese APTs Exploit ToolShell SharePoint Zero-Days Weeks Before, European Healthcare Network AMEOS Discloses Security Breach, UK Bans Public Sector Ransomware Payments, Lumma Stealer Returns

China-Linked ToolShell Zero-Days Target High-Value SharePoint Servers, Dell Confirms Test Lab Breach by World Leaks Group, Over 1,000 CrushFTP Servers Exposed to Ongoing Hijack Attacks

SharePoint Zero-Days Exploit 85+ Organizations Worldwide, Singapore Accuses Chinese Hackers of Critical Infrastructure Attacks, New CrushFTP and FortiWeb Zero-Days Exploited in Wild

This Week in Cybersecurity

United Natural Foods Projects Up to $400 Million Sales Hit from Cyberattack, Co-op Confirms Data of 6.5 Million Members Stolen in Cyberattack, Cambodia Makes 1,000 Arrests in Cybercrime Crackdown

China's Salt Typhoon Hacked US National Guard, Google Big Sleep AI Tool Found Bug Before Hackers, North Korean XORIndex Malware Hidden in 67 Malicious npm Packages

"123456" Password Exposed Chats for 64 Million McDonald's Job Applications, Railroad Train Vulnerability Could Lead to Derailments, GMX Hacker Returns Stolen Cryptocurrency After $5 Million Bounty Pay

📢 CyberHub Podcast Update — No Episode Today

This Week in Cybersecurity

AI Rubio Hoax Further Exposes Security Gaps, More Than $40 Million Stolen from GMX Crypto Platform, Four Arrested by UK Police Over Ransomware Attacks on M&S, Co-op and Harrods

Microsoft July 2025 Patch Tuesday Fixes One Zero-Day and 137 Flaws, M&S Confirms Cause Leading to Massive Ransomware Attack, US Sanctions North Korean Hacker Behind IT Worker Scheme

Employee Sold Credentials Used in $140 Million Bank Heist, Alleged Chinese Hacker Tied to Silk Typhoon Arrested for Cyberespionage, SEC and SolarWinds Agree to Settle Lawsuit

Ingram Micro Outage Caused by SafePay Ransomware Attack, Two New Pro-Russian Hacktivist Groups Target Ukraine, Police in Brazil Arrest Suspect Over $100M Banking Hack

American Exceptionalism: The Innovation Engine That Powers the World

This Week in Cybersecurity

Qantas Data Breach Impacts 6 Million Customers, DOJ Investigates Ex-Ransomware Negotiator Over Extortion Kickbacks, Columbia Hacker Steals Data for Political Agenda

Qantas Data Breach Impacts 6 Million Customers, French Government Agencies Hit by Chinese Ivanti Exploits, Critical Anthropic AI Vulnerability Exposes Developer Machines

DOJ Raids 29 North Korean Laptop Farms Across 16 States, Switzerland Government Data Stolen in Ransomware Attack, Europol Disrupts $540 Million Crypto Fraud Ring

Hawaiian Airlines Hacked by Scattered Spider Aviation Campaign, Ahold Delhaize Breach Impacts 2.2 million People, Over 1,200 Citrix Servers Unpatched

Rethinking PII: It's Time to Redefine Data Breach Notifications for a Better Future

This Week in Cybersecurity: Critical Infrastructure Under Siege

CitrixBleed 2 NIGHTMARE Returns, British Hacker "IntelBroker" CHARGED, Iran Uses AI for Cyber Warfare

FBI Warns China Typhoon Groups Still Active, Iran Exploits Israeli Security Cameras for Missile Strikes, North Korea Supply Chain Attack Hits Developers

IoT Devices as Weapons of Modern Warfare: Intelligence Gathering and Cyber Attack Vectors

740K Patient Records STOLEN, Salt Typhoon DESTROYS Canadian Telecom, NATO Summit SABOTAGED, APT28 Uses Signal Chats for Malware, WhatsApp Ban

Insurance Industry Under Attack, $225 Million Crypto Recovery, US-Israel-Iran Cyber Tensions Escalates, China Targets Russian Assets

The New Cyber Front: How Israel-Iran Cyber Warfare Mirrors the Russia-Ukraine Playbook

Weekend Cybersecurity Roundup: Global Conflicts Fuel CyberWarfare

BREAKING: China's Salt Typhoon Hits Major Telecom + $90M Crypto Heist Exposed, Chain IQ Ransomware, China, Iran and Israel’s Cyber Battleground

UBS Confirms Data Stolen in Cyberattack, Minnesota Lawmaker's Alleged Killer Had Data Broker List, SuperCard Malware Targets Banks, Asana AI Feature Exposed Data

Breaking: Iran-Israel Digital Warfare, Media Giant Breached & US Insurance Companies Under Attack, Google & Wiz Deal Under Anti-Trust Review

Daily Cyber News: WestJet Grounded by Hackers, 8.4M Zoomcar Users Exposed & 46,000 Grafana Sites at Risk, Israel & Iran at War, Russian Researcher Hacked

Erie Insurance Cyberattack, Scam Center Takedown in Singapore, Smartwatch for smartattack, UK Free Speech Fight, Fortinet & Ivanti Patches

Cybersecurity Patch Tuesday Cadence Released for June, Criminals Pose as Job Seekers, 23andme Grilled by Congress, Microsoft Zeroday, Secure Boot Malware

United Natural Foods Cyberattack, Ticketmaster Data on Sale, FBI Cyber Leadership Change, SentinelOne China Attack, NHS Blood Shortage

President Trump Cybersecurity Executive Order, China Hacking Smartphones, Wiper Malware Targets Ukraine, AT&T Data Repackaged, Optima Tax Ransomware

Can We Tame the Hacker Storm? Reflections on Identity, Cybercrime, and the Future of the Internet

Taming the Hacker Storm: A Way to Defeat Cybercriminals and Malware

Weekend Catch-Up: What Mattered in Cybersecurity This Week

Play Ransomware Hits 900 orgs, Ukraine Hacked Russian Tupolev, CISA Cuts, BidenCash Takedown, Salesforce Apps Targeted by Criminals

Cyberattacks on Gov’t in Ohio, Oklahoma, Puerto Rico, OT & ICS Malware, Vodafone Privacy Fine, Coinbase Breach Update, Lumma Stealer is Back

Cartier Data Breach, Credential Stuffing Attack on North Face, Chrome Zero-day, NSO Group Appeal, Main Street Bank Data Breach, Qualcomm GPU Zero-day

ConnectWise Breached in Nation-State Cyberattack, AVCheck Taken Down, Modern Phishing Attacks, Insider Threat at DIA

Risk Reduction, Not Risk Illusion: A CISO’s No-Nonsense Take

Weekend Catch-Up: What Mattered in Cybersecurity This Week

Victoria’s Secret Cyberattack, Lexis Nexis Risk Solutions Breach, Google Calendar Abuse, OneDrive Full Access, UK Military Cyber and Electromagnetic Command

MathWorks Ransomware, Czech Republic Blames China for Cyber Espionage, Iranian Pleads Guilty to Baltimore Ransomware, Ukraine Lists Russian Cyberattacks

Silent Ransomware Targets Law Firm, Adidas Warns of Breach, Russian Cyber Activities Target Dutch Police, Nova Scotia Couple Loses 30K due to Nova Scotia Power Hack

Nova Scotia Power Ransomware, $223 Million Crypto Heist, Cityworks Zeroday Exploited by China, SEC Disclosure Challenged

Weekend Catch-Up: What Mattered in Cybersecurity This Week

Kettering Health Ransomware Attack, Russia Targets Ukrainian Supply-Chain, Lumma Stealer Disrupted, China Targets Laid Off Worker, Cisco & GitLab Patch

Coinbase Breach Impact Revealed, Cellcom Disruption by Cyberattack, M&S Breach To Hit $402M, Delta Suit over CrowdStrike to Proceed

Food Supply Chain Under Attacks, Ivanti Exploited Again, China Targets Saudi Arabia, O2 Service Vulnerability, PyPi TikTok & Instagram Exploit

Coinbase Breach Hype, UK Legal Aid Breach, Japan Offensive Cyber Operations, Chrome Zero Day Patched after Pwn2own, Good Guy Prevail

Coinbase’s Insider Breach: What Actually Happened—No Clickbait, Just Brass Tacks

Top Cybersecurity News Weekly Summary – Week of May 12th, 2025

Supply-Chain Carnage: Chinese Hack Drone Makers, Nucor Steel Knocked Offline, Scattered Spider Mauls Retail, Chrome 0-Day & CPU Meltdown Fixes

5 Microsoft 0days Patched, Fortinet Zeroday, WeChat Money Laundering, Alabama Cyberattack, North Korea Cyber Spying on Ukraine

Apple Patches Security Flaws, Microsoft Zeroday Spy Campaign, GlobalX Breach, Co-Op Breach Remains Active Cutting Supply Chain, ClickFix Attack on Linux

$2 Billion Hijacks in Japan Trading Hack, $1.3 Billion Google Privacy Settlement, China Targets SAP, US Botnet Takedown, Ransomware Deceit

The Hidden Debt We Owe Our Kids

Top Cybersecurity News Weekly Summary – Week of May 5th, 2025

South African Airways Cyberattack, Powerschool Criminals extort school districts, Crowdstrike Layoffs, Lockbit Exposed

NSO Ordered to Pay $168 Million, iHeart Radio Breach, CISA Budget Cuts & Direction, 0 Click Attacks, Netweaver Zeroday Exploit, DDoS for Hire Takedown

Georgia School District Paralyzed by Ransomware, IT Help Desk Extortion, Wiper Malware Hidden in GitHub, Skype Retired, AI Builder Langflow Under Attack

UK Retailer Harrod’s Cyber Attack, E-Commerce Supply Chain Attacks, TikTok EU GDPR Fine, Ransomware Attacks on Food & Agriculture

Ascension Breach Linked to Cleo Hack, North Korea IT Fraud Hits Fortune 500, Claude AI Exploited, Co-Op Retailer Shuts Down, NSO WhatsApp Spyware Case

SAP Zero-Day, Nova Scotia Energy Provider Offline, SK Telecom Response, Leaked Git Secrets & Tokens, EV Battery Weaponization

🔒 CyberHub Podcast on Pause: Back LIVE April 30th!

Outage Alert: Today’s CyberHub Podcast Goes Dark

Mark & Spencer Cyber Attack, SK Telecom Hacked, Lemonade Breach, Russian Cyber Sabotage, Cookie Bite Attack, Mitre D3fend CAD Tool

Japan Trading Account Hack, Windows NTLM Vulnerability Exploited, North Korea Cyberattacks, Info Sharing Bill, Hackers Abuse Russian Bulletproof

Hertz Cleo Data Breach, Shadow AI Usage, ClickFix Goes Nation State, Apple ZeroDays Patch, Ahold Delhaize USA Ransomware, Payment Card Scams

Rebuilding Cybersecurity: A New Global Strategy Changing the Cyber Paradigm

Unmasking the Dark Truth Behind The Human Cost of Cybersecurity: Exploitation in the Digital Age

Agentic AI: The Future of Autonomous Cyber Defense and Business

What Goes Through the Mind of a Cybersecurity Leader

Top Cybersecurity News Weekly Summary - Week of April 7th, 2025

Oracle Now Denies Cloud Breach, Nissan Leaf Hacked, Interim NSA Director Hartman Appears in Senate, Wyden Blocks CISA Plankey Appointment, Chris Krebs under Fire from President Trump

Treasury Attacker Lurked Over a Year, Microsoft ZeroDay, Russian Target RDP, Patch Tuesday Breakdown

Australian Pension Fund Hack Rattles Consumers, Apple Sues the UK Government, CrushFTP Attacks, Ivanti Again

Oracle Confirms Hack, NSA Director Fired, China Targets Ivanti Again, EncryptHub Behind 618 Breachs, Woocommerce API Abuse Attack, TikTok Life line

The Geopolitical Reshaping: Cybersecurity’s Double-Edged Sword

Top Cybersecurity News Weekly Summary - Week of March 31st, 2025

KidFlix On Dark Web Shut Down, 39 Million Secrets Leaked on GitHub, Royal Mail Data Leak, March Cybersecurity M&A News, Native Tribe Cyber Attack

North Korean IT Army Expends to Europe, Nakasone Points to China as Major Threat, UK Cyber Reporting, Gmail Deploys End to End Encryption

Moscow Subway Disruption, Check Point Hack, Samsung Customer Data Leaks, Canadian Arrested for Texas GOP Hack, Ivanti Zeroday Malware

Sams Club Breach Claims, Oracle Health Breach, Solar Systems Expose Grid Hacking, Splunk Patches Vulnerabilities, UK Online Safety Act leading to Clash

Reflections from Tel Aviv: Cyber Resilience and Israel’s Post-October 7 Strength

March 24th - 27th, 2025 Top Cybersecurity News Summary

Oracle Customer Confirms Data Stolen in Breach, Supply Chain Breach Fine, Hyper V Server Ransomware

Google Chrome Sandbox Zeroday, EncryptHub Linked to ZeroDay on Windows, Malaysia Airport Ransomware

Banned Chinese Telecom Still In operations, 23andme Files Bankruptcy, Ukraine Rail Offline after Cyberattack

Cybersecurity Policy Reform, Coinbase Target of Supply Chain Attack, Veeam RCE Bug Patch Now

Corporate Spying Highlights Insider Threat Risks, Ukraine Targeted in new Attack, Whatsapp ZeroDay, Black Basta Linked to Russian Officials

AI is Turbocharging Cyber Crime, Wiz Scores $32B from Google, China Disclosing Data Breaches Now, What gives? GitHub Struggles with Attacks

Telegram CEO Durov Leaves France, LockBit & Blackbasta Ransomware News, Github OAuth Hijack

Nvidia Riva Vulnerability, GitHub Supply Chain Attack, Telecom Cyber Espionage, Superblack Ransomware

Adaptive Technologies and the Next Cybersecurity Frontier

This Week's Cybersecurity News Summary

China’s Volt Typhoon in Network for 300 Days, Chinese Router Attacks Continues, Zoom Vulnerability

6 Microsoft Zero days Patch Now, Patch Tuesday News & Recap, Apple Webkit Exploit, New CISA Director Plankey Nominated by President Trump

Massive Cyberattack on X, Exploit of PHP Vulnerability, MGM Ransomware Case Dismissed, Record Fraud

NTT Data Breach Impacts 18000 Companies, National Cyber Director Power, Army Soldiers Charged for Treason

Cybersecurity Is Not the Center of Everything—And That’s OK

This Week's Cybersecurity News Summary