Cybersecurity Headlines

UK power plant disabled for four days by Iran-linked hackers
Zero-click Grok and Gemini chat history theft possible through cryptographic context injection
Canada's Hospital for Sick Children suffers another cyberattack
Get the show notes here: https://cisoseries.com/cybersecurity-news-uk-power-plant-hack-ai-zero-click-childrens-hospital-breach/
Huge thanks to our episode sponsor, ThreatDown

SMBs face enterprise-level, AI-driven threats every day, often sacrificing robust security in favor of operational agility. You don't have to choose between moving fast and staying protected.
ThreatDown bridges the expertise gap, replacing fragmented, legacy tools with proactive, 24/7 MDR that scales with your business.
ThreatDown. Enterprise-grade defense. Built for businesses like yours.

Read the full sotry at CISOSeries.com
This week's Department of Know is hosted by Rich Stroffolino, with guests Bil Harmer, CISO, Supabase, and David B. Cross, CISO, Atlassian.

Missed the live show? Check it out on YouTube.

The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com.
A huge thanks to our sponsor, Vanta

 
Still stuck on the quarterly audit treadmill? Meet Calm-pliance. Vanta combines compliance, risk, and proof on one Agentic Trust Platform—and continuously monitors your controls, keeping you audit-ready all year round. Find your Calm-pliance here.

CISA warns of hackers exploiting critical MLflow vulnerability
ICS operators warned of AI-driven attacks on Siemens PLCs
Electronic health record company CareCloud confirms millions affected by breach
Get the show notes here: https://cisoseries.com/cybersecurity-news-cisa-mlflow-warning-siemens-plcs-warning-carecloud-confirms-breach/
Huge thanks to our sponsor, Vanta

Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.

OpenAI rewrites safety rules after threshold warning
US charges 17 in Iranian hacking campaign
Microsoft fixes Windows Defender crash bug
Get the show notes here: https://cisoseries.com/openai-safety-rules-iranian-hackers-defender-crashes/
Huge thanks to our sponsor, Vanta

Your GRC team is dealing with more and more frameworks, vendors, and risk.
The board wants it all in one place, but your compliance data lives all over.
Vanta's agentic trust platform connects compliance, risk, and trust at enterprise scale and delivers a 526% ROI over three years. 16,000+ companies trust Vanta, including Snowflake, Atlassian, and Ramp. Visit Vanta.com/CISO to learn more.

Persistent prompts prove potentially pernicious 
The malware is coming from inside Microsoft
Irregular releases AI sandbox escape post-mortem
Get the show notes here: https://cisoseries.com/cybersecurity-news-ai-mind-virus-living-off-azure-an-irregular-post-mortem/ 
Huge thanks to our sponsor, Vanta

Your GRC team is dealing with more and more frameworks, vendors, and risk.
The board wants it all in one place, but your compliance data lives all over.
Vanta's agentic trust platform connects compliance, risk, and trust at enterprise scale and delivers a 526% ROI over three years. 16,000+ companies trust Vanta, including Snowflake, Atlassian, and Ramp. Visit Vanta.com/CISO to learn more.