エピソード

  • Week in Review: CISA workforce cuts, AI slopsquatting risk, CVE funding saga
    2025/04/18

    Link to episode page

    This week’s Cyber Security Headlines – Week in Review is hosted by David Spark with guest Trina Ford, CISO, iHeartMedia

    Thanks to our show sponsor, Vanta

    Do you know the status of your compliance controls right now? Like…right now?
    We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta.

    Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting, and helps you get security questionnaires done 5 times faster with AI.

    Now that’s…a new way to GRC. Get started at Vanta.com/headlines.

    All links and the video of this episode can be found on CISO Series.com

    続きを読む 一部表示
    26 分
  • Cyberthreat sharing law renewal, APTs love ClickFix, GoDaddy mutes Zoom
    2025/04/18

    Bipartisan push for renewal of cyberthreat information sharing law

    ClickFix becoming a favorite amongst state-sponsored hackers

    GoDaddy puts Zoom on mute for about 90 minutes

    Thanks to this week's episode sponsor, Vanta

    Do you know the status of your compliance controls right now? Like...right now?

    We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta.

    Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting,

    And helps you get security questionnaires done 5 times faster with AI.

    Now that’s…a new way to GRC. Get started at Vanta.com/headlines.

    Find the stories behind the headlines at CISOseries.com

    続きを読む 一部表示
    9 分
  • MITRE bailout, Krebs exits SentinelOne, Apple fixes zero-days
    2025/04/17

    MITRE gets last-minute bailout from CISA

    Krebs exits SentinelOne after security clearance pulled

    Apple fixes two zero-days exploited in targeted iPhone attacks

    Thanks to this week's episode sponsor, Vanta

    Do you know the status of your compliance controls right now? Like...right now?

    We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta.

    For the stories behind the headlines, visit CISOseries.com.

    Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting,

    And helps you get security questionnaires done 5 times faster with AI.

    Now that’s…a new way to GRC. Get started at Vanta.com/headlines.

    続きを読む 一部表示
    8 分
  • BREAKING: CVE Funding Doesn't Lapse
    2025/04/16

    CISA issued a statement that it execution an option on its contract with MITRE to continue funding the CVE program.

    続きを読む 一部表示
    1 分
  • Government CVE funding set to end, 4chan down following an alleged hack, China accuses US of launching advanced cyberattacks
    2025/04/16
    Government CVE funding set to end Tuesday

    4chan, the internet's most infamous forum, is down following an alleged hack

    China accuses US of launching 'advanced' cyberattacks, names alleged NSA agents

    Thanks to this week's episode sponsor, Vanta

    Do you know the status of your compliance controls right now? Like...right now?

    We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta.

    Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting,

    And helps you get security questionnaires done 5 times faster with AI.

    Now that’s…a new way to GRC. Get started at Vanta.com/headlines.

    続きを読む 一部表示
    8 分
  • Slopsquatting risks, Morocco leak, EC ups US-based staff security
    2025/04/15

    AI code dependencies are a supply chain risk

    Morocco investigates social security leak

    European Commission increases security measures for US-bound staff

    Thanks to this week's episode sponsor, Vanta

    Do you know the status of your compliance controls right now? Like...right now?

    We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta.

    Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting,

    And helps you get security questionnaires done 5 times faster with AI.

    Now that’s…a new way to GRC. Get started at Vanta.com/headlines.

    続きを読む 一部表示
    8 分
  • CISA cuts planned, Windows ‘inetpub’ warning, health lab breach
    2025/04/14

    Major workforce cuts planned for CISA

    Microsoft warns Windows users not to delete ‘inetpub’ folder

    Data breach at testing lab affects 1.6 million people

    Thanks to this week's episode sponsor, Vanta

    Do you know the status of your compliance controls right now? Like...right now?

    We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta.

    Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting,

    And helps you get security questionnaires done 5 times faster with AI.

    Now that’s…a new way to GRC. Get started at Vanta.com/headlines.

    Find the stories behind the headlines at CISOseries.com.

    続きを読む 一部表示
    7 分
  • Week in Review: Fake ChatGPT passport, Apple appeals UK encryption, Oracle’s obsolete servers
    2025/04/11

    Link to episode page

    This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Carla Sweeney, SVP, InfoSec, Red Ventures

    Thanks to our show sponsor, Nudge Security

    Are you struggling to secure your exploding SaaS footprint? With Nudge Security, you can discover all SaaS apps and accounts, manage access, ensure secure configurations, vet unfamiliar tools, and automate daily identity security tasks.

    Start a free 14-day trial

    All links and the video of this episode can be found on CISO Series.com

    続きを読む 一部表示
    23 分