Secret CISO

Newsletter

Secret CISO 9/4: Thomson Reuters Court Breach, Manchester Airports Data Leak, Astra Crosses Critical, Kestra Zero-Day Under Siege

A Thomson Reuters court platform breach exposes sealed records in 11 states, Manchester Airports data leaks after a ransom refusal, OpenAI's Astra hits a critical cyber threshold, and a 10.0-severity Kestra flaw joins a wave of actively exploited CVEs.

Newsletter

Secret CISO 9/3: McKesson's 284M-Record Breach, ATF's Ransomware Leak, GitSpawn Hits AI Coding Agents, SonicWall Zero-Days Under Siege

McKesson's 284M-record vishing breach, Qilin's leak of ATF case files, GitSpawn's silent code execution in AI coding agents, and CISA's KEV additions for SonicWall, Kestra, and LiteLLM.

Newsletter

Secret CISO 9/2: Manchester Airports' 86GB Breach, Berlin Rejects Rhysida's Ransom, OpenAI's Rogue Agent Swarm, JFrog Artifactory Under Siege

An 86GB airport data grab, Berlin's ransomware standoff, a 700-agent OpenAI swarm that hacked Hugging Face, and the CVEs attackers are racing to exploit right now.

Newsletter

Secret CISO 9/1: McKesson's 284M-Record Breach, Aurora Ransomware Weaponizes AI, ServiceNow's Triple CVSS-10 Flaws, TeamPCP Hackers Arrested

McKesson's massive ShinyHunters extortion, an AI coding assistant hijacked for ransomware ops, three maximum-severity ServiceNow flaws, and the takedown of the TeamPCP supply-chain crew.

Newsletter

Secret CISO 8/31: Manchester Airports' 86GB Breach, Berlin Held for Ransom, PaperCut's RCE Chain, Chinese Router Backdoors

Manchester Airports' 86GB data leak, Berlin's pre-election ransomware standoff, a chained PaperCut RCE zero-day, and hidden backdoors in Chinese routers headline today's Secret CISO.

Newsletter

Secret CISO 8/30: McKesson's 284M Record Breach, ATF Ransomware Incident, Water Utilities Under Siege, Chrome Extensions Turn Malicious

Welcome to today's edition of Secret CISO. ShinyHunters claims 284 million patient records from McKesson, the ATF declares a major cyber incident, ransomware hits the technology behind US water utilities, and trusted Chrome extensions turn into crypto-stealing malware.

Secret CISO 5/11: Phishing Hits 500 Orgs, Polish ICS Breaches, Braintrust API Breach, Microsoft Targets Crypto Wallets

Welcome to today's edition of Secret CISO, where we unravel the intricate web of cybersecurity challenges and innovations shaping our digital landscape. In this issue, we delve into a series of alarming breaches and groundbreaking advancements that underscore the relentless evolution of cyber threats and defenses. First, we

Secret CISO 5/10: Canvas & Alberta Breaches Expose Millions; Linux Bug Threatens Crypto; Ethereum Drained; IoT Risks Unveiled

Welcome to today's edition of Secret CISO, where we unravel the tangled web of cybersecurity threats impacting our digital world. As we dive into today's stories, a common thread emerges: the relentless pursuit of data by cybercriminals, leaving no sector untouched. First, we explore the Canvas

Secret CISO 5/9: Union Bank, Ticketmaster, Zara Breaches; US Military Data Exposed; OpenAI's GPT-5.5-Cyber; Russian University Cybercrime Link

Welcome to today's edition of Secret CISO, where we unravel a tapestry of cybersecurity incidents that echo across industries and borders. From financial institutions to global entertainment giants, the digital realm is under siege, and today's stories reveal the vulnerabilities that lie beneath the surface. Union

Secret CISO 5/8: Canvas Breach Cripples Global Education, NUS Hit; Chrome Extension Flaw Exposed, Dirty Frag Linux Vulnerability Unleashed

Welcome to today's edition of Secret CISO, where we unravel the tangled web of cybersecurity breaches and vulnerabilities that have shaken the digital world. In a dramatic turn of events, the National University of Singapore finds itself among the victims of a global data breach, raising alarms about

Secret CISO 5/7: Oregon Schools & Medtronic Breaches, AIMap Secures AI, Google Chrome's 4GB AI Model Mystery

Welcome to today's edition of Secret CISO, where we unravel the tangled web of cybersecurity incidents and vulnerabilities that are shaping the digital landscape. In this issue, we delve into a series of alarming data breaches that have rocked various sectors, from education to healthcare, and even the

Secret CISO 5/6: Coupang Breach Slows Growth, ShinyHunters Target Education, Microsoft Edge Password Flaw, Google Rewards Pixel Security, DAEMON Tools Supply Chain Attack

Welcome to today's edition of Secret CISO, where we unravel the intricate web of cybersecurity challenges facing the digital world. Our stories today weave a narrative of breaches, vulnerabilities, and the relentless pursuit of security in an ever-evolving landscape. We begin with Coupang Inc., whose financial forecast