Cybersecurity Headlines

Microsoft details new Star Blizzard and NeedyMantis activity
Cloudflare to become a public certificate authority
Safety concerns scuttle GPT-6.1
Get the show notes here: https://cisoseries.com/cybersecurity-news-star-blizzard-cloudflare-ca-gpt-6-1-scuttled/ 
Huge thanks to our episode sponsor, Intezer

Today's tip: when an AI calls an alert benign, ask for the evidence. The file, the memory, the command line. If it can't show its work, it's guessing. Intezer shows its work, and your team can argue with it. Intezer. The AI SOC trusted by Salesforce, MGM Resorts and Nvidia. See it yourself at intezer.com/headlines.

GPT-6 Astra goes off script in attack simulations
Dutch police arrest "reformed" hacker in ShinyHunters probe
Nvidia builds a browser for AI agents
Get the show notes here:
https://cisoseries.com/cybersecurity-news-september-29-2026/
Huge thanks to our episode sponsor, Intezer

Today's tip: time how long an employee-reported phish waits for a verdict. If it's a day, someone already clicked. Salesforce's incident response team got that down to minutes with Intezer. At their size, one click is plenty. Intezer. The AI SOC trusted by Salesforce, MGM Resorts and Nvidia. See it yourself at intezer.com/headlines.

Another Microsoft SharePoint flaw now exploited
Details and doubts emerge regarding OpenAI hack of Australian Health portal
Kiteworks urges customers to stop using platform
Get the show notes here: https://cisoseries.com/cybersecurity-news-new-sharepoint-exploit-australian-openai-hack-developments-kiteworks-urges-stoppage/
Huge thanks to our episode sponsor, Intezer

Today's tip: pull your low-severity alerts and count how many got opened. That's where attackers hide. Intezer investigates every alert, boring ones included, in under a minute. MGM Resorts' CTO has talked about nation-state threats turning up right there. Intezer. The AI SOC trusted by Salesforce, MGM Resorts and Nvidia. See it yourself at intezer.com/headlines.

Read all the stories at CISOSeries.com.
This week's Department of Know is hosted by Rich Stroffolino, with guests Dmitriy Sokolovskiy, senior vice president, information security, Semrush, and Christian Frösch, CISO, CH Media.
Missed the live show? Check it out on YouTube.
The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.
Big thanks to our sponsor, Nudge Security.

Nudge Security now includes AI Agent Discovery, in addition to Day One discovery of every other AI and SaaS app. For each agent, you'll see who created it, what it's connected to, and risks like destructive permissions. And, smart automation helps you engage the right person to fix the risk.

OpenAI program hacks Australia's government health portal
Astrana Health suffers data breach
Ransomware gangs exploiting TeamCity flaw
Get the show notes here: https://cisoseries.com/cybersecurity-news-september-25-2026/
Huge thanks to our episode sponsor, Nudge Security

Here's a question that might make you sweat…how many AI agents are running in your org right now?
Not sure? You're not alone.
But, we have good news. Nudge Security now includes AI Agent Discovery, in addition to Day One discovery of every other AI and SaaS app.
For each agent, you'll see who built it, what it's connected to, and risks like destructive permissions. And, Nudge gives you smart automation to engage the right person to fix the risk. No chasing people down for answers.
Give it a try for free at nudgesecurity.com/cisoseries