China: stop using US and Israeli cybersecurity software

DeadLock uses smart contracts to hide work

Thanks to our episode sponsor, ThreatLocker

Want real Zero Trust training? Zero Trust World 2026 delivers hands-on labs and workshops that show CISOs exactly how to implement and maintain Zero Trust in real environments. Join us March 4–6 in Orlando, plus a live CISO Series episode on March 6. Get $200 off with ZTWCISO26 at ztw.com.

GoBruteforcer targets blockchain projects

Android bug causes volume key issues

Verizon to stop automatic phone unlocks

Thanks to our episode sponsor, ThreatLocker

Want real Zero Trust training? Zero Trust World 2026 delivers hands-on labs and workshops that show CISOs exactly how to implement and maintain Zero Trust in real environments. Join us March 4–6 in Orlando, plus a live CISO Series episode on March 6. Get $200 off with ZTWCISO26 at ztw.com.

Instagram denies breach post-data leak

Sweden detains consultant suspected of spying

n8n supply chain attack steals OAuth tokens

Thanks to our episode sponsor, ThreatLocker

Want real Zero Trust training? Zero Trust World 2026 delivers hands-on labs and workshops that show CISOs exactly how to implement and maintain Zero Trust in real environments. Join us March 4–6 in Orlando, plus a live CISO Series episode on March 6. Get $200 off with ZTWCISO26 at ztw.com.

Link to episode page

This week's Department of Know is hosted by Rich Stroffolino with guests Johna Till Johnson, CEO and Founder, Nemertes (check out the Nemertes substack) and Jason Shockey, CISO, Cenlar FSB. Jason will be speaking at MBA Servicing Solution26 in Texas in late February. Details here.

Thanks to our show sponsor, ThreatLocker

Want real Zero Trust training? Zero Trust World 2026 delivers hands-on labs and workshops that show CISOs exactly how to implement and maintain Zero Trust in real environments. Join us March 4–6 in Orlando, plus a live CISO Series episode on March 6. Get $200 off with ZTWCISO26 at ztw.com.

All links and the video of this episode can be found on CISO Series.com

BreachForums hacking forum database leaked exposing 324,000 accounts

Instagram breach exposes user data, creates password reset panic

UK government exempts self from flagship cyber law

Thanks to our episode sponsor, ThreatLocker

Want real Zero Trust training? Zero Trust World 2026 delivers hands-on labs and workshops that show CISOs exactly how to implement and maintain Zero Trust in real environments. Join us March 4–6 in Orlando, plus a live CISO Series episode on March 6. Get $200 off with ZTWCISO26 at ztw.com.

Find the stories behind the headlines at CISOseries.com.

Microsoft to enforce MFA for Microsoft 365 admin center sign-ins

Cisco patches ISE security vulnerability after PoC release

Illinois state agency breaches itself

Huge thanks to our sponsor, Hoxhunt

A small tip for CISOs: if you're unsure whether your security training is actually reducing phishing risk, check out what Qualcomm achieved with Hoxhunt. They took their 1,000 highest-risk users from consistent under-performers to outperforming the rest of the company, driving measurable human risk reduction and earning a CSO50 Award. See the Qualcomm case at hoxhunt.com/qualcomm

Find the stories behind the headlines at CISOseries.com.

ESA confirms new data heist

Ni8mare lets hackers hijack n8n servers

Taiwan blames 'cyber army' for intrusion attempts

Huge thanks to our sponsor, Hoxhunt

Traditional security training fails because it treats employees like the problem. Hoxhunt treats them like the solution. AI-powered simulations mirror actual attacks hitting your inbox. Instant coaching turns mistakes into learning moments. Gamified rewards make security engaging. The result? Real behavior change that measurably reduces your risk. Thousands of companies trust Hoxhunt to transform human vulnerability into human defense. Visit hoxhunt.com/cisoseries to learn more.

The UK hits reset on cybersecurity

No MFA, Know Problems

US may have coordinated cyberattacks with Maduro's arrest

Huge thanks to our sponsor, Hoxhunt

A small tip for CISOs: if you're unsure whether your security training is actually reducing phishing risk, check out what Qualcomm achieved with Hoxhunt. They took their 1,000 highest-risk users from consistent under-performers to outperforming the rest of the company, driving measurable human risk reduction and earning a CSO50 Award. See the Qualcomm case at hoxhunt.com/qualcomm