Link to the episode

This week's Department of Know is hosted by Rich Stroffolino, with guests Davi Ottenheimer, principal, Flying Penguin, and Chris Ray, field CTO, GigaOm.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.

Huge thanks to our sponsor, Vanta

Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot.

The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk, and drafting fixes for you.

Vanta is the platform used by over sixteen thousand fast-moving companies like Ramp, Cursor, and Harvey who are shaping the future with AI, AND staying ahead of AI risk.

Get started at vanta.com/headlines.

Interpol's fraud sweep goes global

China flags Claude Code

Old GitHub accounts, new tricks

Get the show notes here: https://cisoseries.com/cybersecurity-news-interpols-global-fraud-sweep-chinas-claude-code-flag-old-github-account-tricks/

Thanks to our episode sponsor, Vanta

Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot.

The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk, and drafting fixes for you.

Vanta is the platform used by over sixteen thousand fast-moving companies like Ramp, Cursor, and Harvey who are shaping the future with AI, AND staying ahead of AI risk.

Get started at vanta.com/headlines.

Mexico's first cyber test gets tested

Snoops break into Roundcube mailservers

Cash App owner pays up over lax security

Get the show notes here: https://cisoseries.com/cybersecurity-news-mexicos-big-cyber-test-roundcube-mailserver-snooped-on-cash-app-found-lax/

Thanks to our episode sponsor, Vanta

Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot.

The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk, and drafting fixes for you.

Vanta is the platform used by over sixteen thousand fast-moving companies like Ramp, Cursor, and Harvey who are shaping the future with AI, AND staying ahead of AI risk.

Get started at vanta.com/headlines.

The UK's Cyber Pledge and Cyber Shield

Millions exposed in Japanese telco attack

China looking to curb overseas model access

Get the show notes here:

Thanks to our episode sponsor, Vanta

Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot.

The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk, and drafting fixes for you.

Vanta is the platform used by over sixteen thousand fast-moving companies like Ramp, Cursor, and Harvey who are shaping the future with AI, AND staying ahead of AI risk.

Get started at vanta.com/headlines.

Suspected China-Nexus hackers use fake Indian tax filing utility to deploy DcRAT

Prompt injection attacks trick AI Agents into making crypto payments

France to stop certifying products without quantum-safe encryption

Get the show notes here: https://cisoseries.com/cybersecurity-news-india-tax-rat-prompt-injection-crypto-scam-france-pushes-quantum-safe/

Thanks to our episode sponsor, Vanta

Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot.

The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk, and drafting fixes for you.

Vanta is the platform used by over sixteen thousand fast-moving companies like Ramp, Cursor, and Harvey who are shaping the future with AI, AND staying ahead of AI risk.

Get started at vanta.com/headlines.

JadePuffer ransomware used AI agent to automate entire attack

AdaptHealth suffers cyberattack

UK's National Cyber Action Plan launch delayed by political leadership crisis

Get the show notes here: https://cisoseries.com/cybersecurity-news-first-ai-ransomware-adapthealth-suffers-cyberattack-uk-cyber-plan-delayed/

Thanks to our episode sponsor, Vanta

Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot.

The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk, and drafting fixes for you.

Vanta is the platform used by over sixteen thousand fast-moving companies like Ramp, Cursor, and Harvey who are shaping the future with AI, AND staying ahead of AI risk.

Get started at vanta.com/headlines.

This week's Department of Know is hosted by Rich Stroffolino, with guests David Cross, CISO, Atlassian; Kathleen Mullin, Director, SABSA Institute; Montez Fitzpatrick, CISO, Navvis; and Howard Holton, former CEO, GigaOm.

Get the show notes here: https://cisoseries.com/the-department-of-know-peoplesoft-exploit-ford-brings-back-gray-beards-llm-vetting/

Huge thanks to our sponsor, Silent Push

Most cybersecurity approaches are completely reactive. Victim organizations are hit with an attack and the chase ensues.

Silent Push closes this gap with its Preemptive Cyber Defense platform. Silent Push tracks adversary infrastructure and infrastructure changes across the Internet during the attack preparation phase - while attackers are still staging domains, IPs, and hosting and Silent Push turns that into Indicators of Future Attack® to defend with confidence.

For a CISO, that turns invisible risk into early warning, an average of 140 days before a campaign shows up in your environment. Time to act, and a smaller window of exposure, before a threat ever reaches your environment.

Card data theft remains top concern for U.S. consumers

OMB chief to oversee spy agency budgets

Fortibleed leads to ransomware attacks and 430,000 Fortinet firewalls exposed

Get the show notes here: https://cisoseries.com/cybersecurity-news-consumer-security-worries-vought-supervises-spy-budgets-fortibleed-exposes-fortinet/

Huge thanks to our sponsor, Silent Push

Most cybersecurity approaches are completely reactive. Victim organizations are hit with an attack and the chase ensues.

Silent Push closes this gap with its Preemptive Cyber Defense platform. Silent Push tracks adversary infrastructure and infrastructure changes across the Internet during the attack preparation phase - while attackers are still staging domains, IPs, and hosting and Silent Push turns that into Indicators of Future Attack® to defend with confidence.

For a CISO, that turns invisible risk into early warning, an average of 140 days before a campaign shows up in your environment. Time to act, and a smaller window of exposure, before a threat ever reaches your environment. Learn more at silentpush.com