Cybersecurity Headlines

Read the full sotry at CISOSeries.com
This week's Department of Know is hosted by Rich Stroffolino, with guests Bil Harmer, CISO, Supabase, and David B. Cross, CISO, Atlassian.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.
A huge thanks to our sponsor, Vanta

 
Still stuck on the quarterly audit treadmill? Meet Calm-pliance. Vanta combines compliance, risk, and proof on one Agentic Trust Platform—and continuously monitors your controls, keeping you audit-ready all year round. Find your Calm-pliance here.

CISA warns of hackers exploiting critical MLflow vulnerability
ICS operators warned of AI-driven attacks on Siemens PLCs
Electronic health record company CareCloud confirms millions affected by breach
Get the show notes here: https://cisoseries.com/cybersecurity-news-cisa-mlflow-warning-siemens-plcs-warning-carecloud-confirms-breach/
Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

OpenAI rewrites safety rules after threshold warning
US charges 17 in Iranian hacking campaign
Microsoft fixes Windows Defender crash bug
Get the show notes here: https://cisoseries.com/openai-safety-rules-iranian-hackers-defender-crashes/
Huge thanks to our sponsor, Vanta

Your GRC team is dealing with more and more frameworks, vendors, and risk.
The board wants it all in one place, but your compliance data lives all over.
Vanta's agentic trust platform connects compliance, risk, and trust at enterprise scale and delivers a 526% ROI over three years. 16,000+ companies trust Vanta, including Snowflake, Atlassian, and Ramp. Visit Vanta.com/CISO to learn more.

Persistent prompts prove potentially pernicious 
The malware is coming from inside Microsoft
Irregular releases AI sandbox escape post-mortem
Get the show notes here: https://cisoseries.com/cybersecurity-news-ai-mind-virus-living-off-azure-an-irregular-post-mortem/ 
Huge thanks to our sponsor, Vanta

Your GRC team is dealing with more and more frameworks, vendors, and risk.
The board wants it all in one place, but your compliance data lives all over.
Vanta's agentic trust platform connects compliance, risk, and trust at enterprise scale and delivers a 526% ROI over three years. 16,000+ companies trust Vanta, including Snowflake, Atlassian, and Ramp. Visit Vanta.com/CISO to learn more.

Federal agency hires North Korean IT worker
Millions of Azure records allegedly for sale
GitHub outage hits Actions and Copilot
Get the show notes here: https://cisoseries.com/cybersecurity-news-north-korean-it-worker-lands-federal-job-azure-records-go-up-for-sale-github-goes-down/
Huge thanks to our sponsor, Vanta
Your GRC team is dealing with more and more frameworks, vendors, and risk.
The board wants it all in one place, but your compliance data lives all over.
Vanta's agentic trust platform connects compliance, risk, and trust at enterprise scale and delivers a 526% ROI over three years. 16,000+ companies trust Vanta, including Snowflake, Atlassian, and Ramp. Visit Vanta.com/CISO to learn more.