Link to episode page

This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Bethany De Lude, CISO emeritus, The Carlyle Group

Thanks to our show sponsor, Dropzone AI

Alert investigation is eating up your security team’s day—30 to 40 minutes per alert adds up fast. Dropzone AI‘s SOC Analyst transforms this reality by investigating every alert with expert-level thoroughness at machine speed. Our AI SOC Analyst gathers evidence, connects the dots across your security tools, and delivers clear reports with recommended actions—all in minutes. No playbooks to build, no code to write. Just consistent, high-quality investigations that free your team to focus on what matters: stopping actual threats. Meet us at RSA Booth ESE-60.

All links and the video of this episode can be found on CISO Series.com

Russian army targeted by Android malware hidden in mapping app

Attackers hit security device defects hard in 2024

Critical Commvault Command Center flaw warning

Huge thanks to our sponsor, Dropzone AI

Alert investigation is eating up your security team's day—30 to 40 minutes per alert adds up fast. Dropzone AI's SOC Analyst transforms this reality by investigating every alert with expert-level thoroughness at machine speed. Our AI SOC Analyst gathers evidence, connects the dots across your security tools, and delivers clear reports with recommended actions—all in minutes. No playbooks to build, no code to write. Just consistent, high-quality investigations that free your team to focus on what matters: stopping actual threats. Meet us at RSA Booth ESE-60.

Find the stories behind the headlines at CISOseries.com.

Blue Shield of California shared private health data of millions with Google

The FBI issues its 2024 IC3 report

Ex-Army sergeant jailed for selling military secrets

Huge thanks to our sponsor, Dropzone AI

Security analysts need practical experience to build investigation skills, but getting expert guidance for every alert is impossible. That's why Dropzone AI created COACH—a free Chrome extension that serves as an AI security mentor for SOC analysts at any level. COACH reads alerts across all major security platforms, explains their context, provides alternative hypotheses, and guides analysts through industry-standard investigation methodologies. Unlike our AI SOC Analyst product, COACH doesn't do the work for you—it teaches you how to think through investigations yourself. It supplements human mentoring with always-available guidance that respects your data with zero retention. Develop your security team's skills at Dropzone.ai/coach.

For the stories behind the headlines, head to CISOseries.com.

Russian organizations targeted by backdoor masquerading as secure networking software updates

Huge thanks to our sponsor, Dropzone AI

Is your security team spending too much time chasing alerts instead of stopping threats? Dropzone AI modernizes your security operations by handling the routine investigations that consume your team's day. Our AI SOC Analyst works with your existing security tools, learns your environment, and delivers clear, actionable reports within minutes. Your human analysts can finally focus on the most critical threats. Organizations using our AI SOC Analyst handle significantly more alerts without growing their team. See how at RSA at booth ESE-60.

Google OAuth abused in DKIM replay attack

Japan warns of sharp rise in unauthorized trading

North Koreans hijacking Zoom’s Remote Control

Huge thanks to our sponsor, Dropzone AI

Security threats don't clock out at 5 PM, but your analysts need to sleep sometime. Dropzone AI delivers around-the-clock alert investigations with the same attention to detail at midnight as at noon. Our AI SOC Analyst ensures no more morning backlogs and no more off-hours blind spots. Just reliable, continuous protection that ensures every alert gets the attention it deserves, regardless of when it arrives. See how SOC teams are achieving true 24/7 coverage with our AI SOC Analyst without the staffing challenges at Dropzone.ai.

Widespread Microsoft Entra lockouts cause by new security feature rollout

Malware delivered through diplomatic wine-tasting invites

British companies told to hold in-person interviews to thwart North Korea job scammers

Huge thanks to our sponsor, Dropzone AI

Growing your MSSP client roster while your alerts are multiplying? Dropzone AI works alongside your team, investigating alerts just like your best human analysts would. Our AI SOC Analyst cuts investigation time from an hour to minutes while handling five times more alerts per analyst. Unlike complex SOAR solutions, Dropzone deploys quickly and adapts to your environment without the need for playbooks or coding. Eliminate backlogs, reduce false positives, and deliver the detailed investigations your clients expect. Ready to scale your MSSP without scaling your team? Meet us at booth ESE-60 at RSA.

Find the stories behind the headlines at CISOseries.com.

Link to episode page

This week’s Cyber Security Headlines – Week in Review is hosted by David Spark with guest Trina Ford, CISO, iHeartMedia

Thanks to our show sponsor, Vanta

Do you know the status of your compliance controls right now? Like…right now?
We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta.

Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting, and helps you get security questionnaires done 5 times faster with AI.

Now that’s…a new way to GRC. Get started at Vanta.com/headlines.

All links and the video of this episode can be found on CISO Series.com

Bipartisan push for renewal of cyberthreat information sharing law

ClickFix becoming a favorite amongst state-sponsored hackers

GoDaddy puts Zoom on mute for about 90 minutes

Thanks to this week's episode sponsor, Vanta

Do you know the status of your compliance controls right now? Like...right now?

We know that real-time visibility is critical for security, but when it comes to our GRC programs…we rely on point-in-time checks. But more than 9,000 companies have continuous visibility into their controls with Vanta.

Vanta brings automation to evidence collection across over 35 frameworks, like SOC 2 and ISO 27001. They also centralize key workflows like policies, access reviews, and reporting,

And helps you get security questionnaires done 5 times faster with AI.

Now that’s…a new way to GRC. Get started at Vanta.com/headlines.

Find the stories behind the headlines at CISOseries.com