Cybersecurity Headlines

CISA warns of hackers exploiting critical MLflow vulnerability
ICS operators warned of AI-driven attacks on Siemens PLCs
Electronic health record company CareCloud confirms millions affected by breach
Get the show notes here: https://cisoseries.com/cybersecurity-news-cisa-mlflow-warning-siemens-plcs-warning-carecloud-confirms-breach/
Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

OpenAI rewrites safety rules after threshold warning
US charges 17 in Iranian hacking campaign
Microsoft fixes Windows Defender crash bug
Get the show notes here: https://cisoseries.com/openai-safety-rules-iranian-hackers-defender-crashes/
Huge thanks to our sponsor, Vanta

Your GRC team is dealing with more and more frameworks, vendors, and risk.
The board wants it all in one place, but your compliance data lives all over.
Vanta's agentic trust platform connects compliance, risk, and trust at enterprise scale and delivers a 526% ROI over three years. 16,000+ companies trust Vanta, including Snowflake, Atlassian, and Ramp. Visit Vanta.com/CISO to learn more.

Persistent prompts prove potentially pernicious 
The malware is coming from inside Microsoft
Irregular releases AI sandbox escape post-mortem
Get the show notes here: https://cisoseries.com/cybersecurity-news-ai-mind-virus-living-off-azure-an-irregular-post-mortem/ 
Huge thanks to our sponsor, Vanta

Your GRC team is dealing with more and more frameworks, vendors, and risk.
The board wants it all in one place, but your compliance data lives all over.
Vanta's agentic trust platform connects compliance, risk, and trust at enterprise scale and delivers a 526% ROI over three years. 16,000+ companies trust Vanta, including Snowflake, Atlassian, and Ramp. Visit Vanta.com/CISO to learn more.

Federal agency hires North Korean IT worker
Millions of Azure records allegedly for sale
GitHub outage hits Actions and Copilot
Get the show notes here: https://cisoseries.com/cybersecurity-news-north-korean-it-worker-lands-federal-job-azure-records-go-up-for-sale-github-goes-down/
Huge thanks to our sponsor, Vanta
Your GRC team is dealing with more and more frameworks, vendors, and risk.
The board wants it all in one place, but your compliance data lives all over.
Vanta's agentic trust platform connects compliance, risk, and trust at enterprise scale and delivers a 526% ROI over three years. 16,000+ companies trust Vanta, including Snowflake, Atlassian, and Ramp. Visit Vanta.com/CISO to learn more.

Max severity SAP Commerce Cloud flaw now targeted in attacks
New Mirai variant adds stealth capabilities to botnet code
Shell investigates potential incident after Clop data theft claims
Get the show notes here: https://cisoseries.com/cybersecurity-news-sap-commerce-flaw-exploited-mirai-boosts-capabilities-shell-investigates-breach/
Huge thanks to our sponsor, Vanta

Your GRC team is dealing with more and more frameworks, vendors, and risk.
The board wants it all in one place, but your compliance data lives all over.
Vanta's agentic trust platform connects compliance, risk, and trust at enterprise scale and delivers a 526% ROI over three years. 16,000+ companies trust Vanta, including Snowflake, Atlassian, and Ramp. Visit Vanta.com/CISO to learn more.