Technical Resources

Video Tutorials

About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
The Dark Side of AI: Scams, Lies, and Government Sabotage
— Learn about ISACA AAISM training: https://www.infosecinstitute.com/courses/aaism-boot-camp/?utm_source=youtube&utm_medium=video&utm_campaign=aaism — View course dates: https://www.infosecinstitute.com/courses/schedule/?Boot%20camps=ISACA+Advanced+in+AI+Security+Management+(AAISM)+Training+Boot+Camp&utm_source=youtube&utm_medium=video&utm_campaign=aaism — Download ISACA AI Policy Template: https://www.infosecinstitute.com/globalassets/downloads/isaca-ai-acceptable-use-policy.pdf One in four CISOs has already experienced an AI-generated attack this year. Even more concerning? IBM's 2025 research found 63% of breached organizations had no AI policies in place — leaving them exposed to attacks that now cost U.S. organizations an average of $10.2 million. Enter ISACA's Advanced in AI Security Management (AAISM) certification, the industry's answer to the AI security governance problem. Designed exclusively for CISM and CISSP holders, AAISM validates your ability to govern, assess and secure AI implementations at the enterprise level. Organizations with extensive AI security measures save $1.9 million in breach costs compared to those without — and this certification equips you to build that protection. Join Kirsten Lora, VP Product at ISACA, and Keatron Evans, VP of Portfolio Product and AI Strategy at Infosec, to learn: 0:00 - Introduction: AI security challenges and adoption stats 3:45 - Poll: Do you have CISM or CISSP certification? 4:21 - Why CISM or CISSP is required for AAISM 5:40 - Deep dive: ISACA's new AAISM certification explained 9:09 - Three domains covered in the certification 12:18 - The 63% problem: Organizations without AI policies 14:55 - Building AI policies: Getting stakeholders involved 16:41 - Download: Free ISACA AI policy template 17:09 - Leadership pressure: Moving fast vs. security governance 21:01 - New AI risks and how to approach them differently 23:32 - First steps: Building an AI governance program 25:21 - AI skills: Does your team need an AI specialist? 26:30 - Career paths: New opportunities in AI security 29:00 - Infosec's AAISM training program overview 32:00 - Q&A: Use cases for selling AI governance to leadership 33:09 - Real-world threats: Deepfakes, phishing, and exploit development 35:20 - Technical background needed for AAISM 37:06 - What makes Infosec's training different 39:31 - Final thoughts on AI security management's importance About Infosec Infosec's mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ's security awareness training. Learn more at infosecinstitute.com.
ISACA's New AI Security Certification: Is It Worth It? | Keatron Evans & Kirsten Lora
About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
Shocking statistics: Cybersecurity crisis in K12 schools!
— Get your free toolkit: https://www.infosecinstitute.com/form/digital-detective-campaign-kit/?utm_source=youtube&utm_medium=video&utm_campaign=cam Dive into the alarming rise of AI-enabled cyber attacks, including the jaw-dropping $25.6 million deepfake scam that fooled a finance worker in Hong Kong. Learn how criminals are using AI to create convincing video calls, voice clones and fake content to infiltrate organizations. This webinar arms you with practical detection techniques and introduces Infosec's free Digital Detective Toolkit — perfect for Cybersecurity Awareness Month and beyond. Featuring insights from cybersecurity expert Keatron Evans, you'll discover the telltale signs of AI-generated videos, audio, images and text that could save your organization from devastating losses. — More free security awareness resources: https://www.infosecinstitute.com/resources/?utm_source=youtube&utm_medium=video&utm_campaign=cam — Speak to someone about security awareness training: https://www.infosecinstitute.com/form/iq-demo/?utm_source=youtube&utm_medium=video&utm_campaign=cam 0:00 - Introduction and the $25.6M deepfake story 2:32 - Recent AI attack examples (Pin Drop Security, Ferrari, FBI warnings) 5:18 - AI threat statistics and audience poll 7:11 - How organizations are being targeted 8:37 - Digital Detective Toolkit overview 10:04 - Video: 4 types of AI detection 14:32 - Toolkit resources breakdown 17:00 - Interactive AI detection challenge 21:00 - Program plan and implementation strategies 26:00 - What makes AI attacks successful 28:06 - Infosec IQ platform features 32:21 - Budget and ROI for security awareness 35:00 - Phishing and AI's impact on attack vectors 36:49 - Engagement strategies for awareness programs 38:49 - Getting started with security awareness 40:19 - Wrap up and resources About Infosec Infosec's mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ's security awareness training. Learn more at infosecinstitute.com.
Detecting AI Deception: How to Identify Deepfakes, Voice clones & AI Scams | Free Toolkit
About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
Achieve 80% better email security in just 1 quarter!
Staff, students and parents uniting forces in an effort to safeguard both students and staff with expert insights! About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
Staff, students and parents uniting forces!
About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
Building a Human Firewall The Power of Knowledge
About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
30 Career Paths The Vast Opportunities in Today’s Industry | Jim Broome
About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
Is Higher Education Still Relevant for Today's Jobs | Jim Broome
Load More… Subscribe
Speaker Bio(s) Doug Burks started Security Onion in 2008 to provide a comprehensive platform to help folks peel back the layers of their enterprise and make their adversaries cry. Today, Security Onion has over 2,000,000 downloads and is being used by organizations around the world for threat hunting, enterprise security monitoring, and log management. In 2014, Doug started Security Onion Solutions LLC to help those organizations by providing training, professional services, and hardware appliances. Doug is a CEO, public speaker, teacher, former president of the Greater Augusta ISSA, and co-founder of BSides Augusta, but what he really likes the most is catching bad guys.
State of the Onion – You Can Just Do Things
Suricata developer Jeff Lucovsky shares all the latest and greatest features of Suricata 8
Suricata 8
In the Fall semester of 2023, I began teaching a new Cybersecurity Operations course in the graduate program at Canisius University. My goal was simple - to give students exposure to both the high-level concepts and hands-on skills that they would need to be successful blue teamers after they graduate. This talk is about how I integrated Security Onion into the class as a teaching platform to provide that experience in detection engineering, alert investigation, threat hunting, and more. Speaker Bio(s) Matthew Gracie is a defensive security specialist with fifteen years of Blue Team experience in higher education, manufacturing, financial services, and healthcare. He is currently a Senior Engineer at Security Onion Solutions, as well as an adjunct professor of Cybersecurity in the graduate school at Canisius University. Matt is also the lead organizer of Infosec 716, a monthly meetup for security enthusiasts in Western New York, and the BSides Buffalo technology conference. He enjoys good beer, mountain bikes, open source security tools, and college hockey, and can be found on Bluesky as @InfosecGoon.
Security Onion as a Teaching Platform
An informal review of recent developments in Security Onion since the last conference in 2023. Speaker Bio(s) Matthew Gracie is a defensive security specialist with fifteen years of Blue Team experience in higher education, manufacturing, financial services, and healthcare. He is currently a Senior Engineer at Security Onion Solutions, as well as an adjunct professor of Cybersecurity in the graduate school at Canisius University. Matt is also the lead organizer of Infosec 716, a monthly meetup for security enthusiasts in Western New York, and the BSides Buffalo technology conference. He enjoys good beer, mountain bikes, open source security tools, and college hockey, and can be found on Bluesky as @InfosecGoon.
Security Onion: What's New?
Investigation playbooks should never be used to replace or restrict human analysts completely, but they can augment analysts by helping them overcome the limitations of their memory, generate new ideas for specific investigation scenarios, minimize the limitations of their intuition, and consolidate individual knowledge. In this talk, we'll introduce a new framework and standard for creating Human-Centered Investigation Playbooks. The goal for these playbooks is simple: provide a structure for documenting investigative playbooks that is flexible, intuitive, and genuinely helpful to human analysts during incident investigation and response. Chris Sanders will begin by unpacking the theory behind this human-centered approach, grounded in cognitive science and investigative reasoning. You'll learn how traditional playbooks fall short, and how cognitive playbooks can improve decision-making, reduce analyst fatigue, and enable consistent, high-quality outcomes. After that, Josh Brower will demonstrate how this model has been integrated into Security Onion, showing off the new Guided Analysis feature that was recently released. He'll walk through a real-world example of a detection scenario using a playbook built into the platform, highlighting how the tool empowers analysts to make informed choices. Finally, we'll wrap up by describing some best practices for creating playbooks as an educational exercise with a practical outcome. Analysts, SOC leaders, and tool builders should walk away from this talk with a better understanding of how to effectively use investigative playbooks, and a few tools for helping them along that path. Speaker Bio(s) Dr. Chris Sanders is an information security instructor, author, and researcher focused on the intersection of cyber security, education, and cognitive psychology where he studies security analyst cognition and performance. He is the founder of Applied Network Defense, a cyber security training company, and Executive Director of the Rural Technology Fund, a non-profit that provides technology education resources to rural public schools and libraries. In previous roles, Chris worked with the US Department of Defense, InGuardians, and Mandiant. He is the author of several information security books, including Intrusion Detection Honeypots, Applied Network Security Monitoring, and Practical Packet Analysis. Chris received his doctorate in education from Baylor University. He spends his free time building things from wood and studying space rocks. Josh Brower has been crashing computers since his teens, and now he's fortunate enough to do it professionally as a Principal Engineer at Security Onion Solutions. With 17 years in Information Security, he focuses primarily on network and endpoint detection, helping defenders stay one step ahead of attackers. He's also passionate about making security more accessible, especially for non-technical audiences. Whether it's explaining how digital actions have real-world consequences or sharing practical ways to reduce risk, Josh enjoys helping others navigate the digital world more safely.
Investigation Playbooks for Humans
In this video, we'll take a sneak peek at the new Playbooks feature coming in Security Onion 2.4.160! Playbooks will turbocharge your analysis and incident response! If you have words of encouragement for the Security Onion team, please comment below. If you have questions or problems, please start a new discussion at https://securityonion.com/discuss. Thanks! Security Onion 2.4.160 is now available! https://blog.securityonion.net/2025/06/security-onion-24160-now-available.html 00:00 Introduction 00:51 Playbooks in SOC Alerts 10:23 Playbooks in SOC Detections 11:05 Outro
Sneak Peek: Security Onion Playbooks
In this video, we discuss the Notifications feature in Security Onion Pro. If you have words of encouragement for the Security Onion team, please comment below. If you have questions or problems, please start a new discussion at https://securityonion.net/discuss. Thanks! 00:00 Introduction 00:45 ElastAlert 01:16 ElastAlert Configuration 02:17 SOC Configuration 05:14 Applying Configuration 05:55 Notifications for Suricata Alerts 07:05 Example of notifications with all fields 08:02 Example of notifications with select fields 09:00 For More Information 09:39 Outro
Security Onion Pro Notifications
In this video, we'll discuss Index Lifecycle Management (ILM) in Security Onion 2.4. If you have words of encouragement to share with the Security Onion team, please post them in the comments below. If you have questions or problems, please start a new discussion at https://securityonion.com/discuss. Thanks! 00:00 Introduction to Index Lifecycle Management (ILM) 00:45 What is ILM? 03:00 What are the defaults for ILM? 05:26 Is there a safety net? 07:16 Demonstration 15:24 For More Information
Index Lifecycle Management in Security Onion
In this video, we'll go through an introduction to Security Onion 2.4 including a demo of some of its most powerful features! If you have words of encouragement to share with the Security Onion team, please post them in the comments below. If you have questions or problems, please start a new discussion at https://securityonion.com/discuss. Thanks! 00:00 Introduction 00:43 What is Security Onion? 01:33 Sample Architecture 02:34 Network Traffic Ingestion 04:21 Log File Ingestion 05:54 Analysis Tools 09:15 Installation Options 10:49 Deployment Options 12:33 Security Onion Pro 13:20 Demonstration 51:01 For More Information
Introduction to Security Onion 2.4
Load More… Subscribe
This week, our hosts ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Dave Bittner⁠⁠⁠⁠⁠ (https://www.linkedin.com/in/dave-bittner-27231a4/) , ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Joe Carrigan⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ (https://www.linkedin.com/in/joecarrigan/) , and ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Maria Varmazis⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ (https://www.linkedin.com/in/varmazis/)  (also host of the ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠T-Minus⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ (https://space.n2k.com/podcasts/t-minus?__hstc=223811332.a636bba53840b4700c929fe67723a129.1721054632698.1747145009569.1747159962459.413&__hssc=223811332.2.1747159962459&__hsfp=3690629108)  Space Daily show) are sharing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. In our follow up, our hosts respond to a listener who wrote in with an insightful question about the role of wealth in scam susceptibility. Joe's story covers how a fake AI recruiter lures developers with a GitHub “technical assessment” that, when run, unleashes a five-stage malware chain to steal credentials, wallets, and install persistent backdoors. Maria has the story on a Halloween-themed phishing scam that lured victims with a fake Home Depot giveaway, using obfuscated code, stolen email threads, and tracking pixels to trick users into handing over personal and payment information. Dave’s story is on a convincing phishing email claiming Dashlane was hacked, showing how fear and urgency—even in obvious scams—can make anyone second-guess before thinking twice. Our catch of the day is from the scams sub-Reddit thread, and is how one user received a message from their "aunt" who wanted to be nice and grab the user a present. Resources and links to stories: • ⁠ (https://www.nytimes.com/2025/10/15/world/asia/cambodia-south-korea-scams.html) How a fake AI recruiter delivers five staged malware disguised as a dream job (https://medium.com/deriv-tech/how-a-fake-ai-recruiter-delivers-five-staged-malware-disguised-as-a-dream-job-64cc68fec263) • Home Depot Halloween phish gives users a fright, not a freebie (https://www.malwarebytes.com/blog/news/2025/10/home-depot-halloween-phish-gives-users-a-fright-not-a-freebie) • Why the Obviously Fake Dashlane Hack Phishing Email Still Made Me Jump (https://www.techlicious.com/blog/why-the-obviously-fake-dashlane-hack-phishing-email-still-made-me-panic/) • ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ (https://therecord.media/fin6-recruitment-scam-malware-campaign) ⁠⁠⁠Have a Catch of the Day you'd like to share? Email it to us at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ (https://therecord.media/fin6-recruitment-scam-malware-campaign) ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠hackinghumans@n2k.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ (mailto:hackinghumans@n2k.com) .
Beware the boo-gus giveaway.
Next week, California will hold a major election on Tuesday, November 4, amid heightened cyber risk and increased exposure to potential attacks. With the ongoing government shutdown and reduced grant funding for local counties overseeing the elections, vulnerabilities are growing. Sanny Liao (https://www.linkedin.com/in/sannyliao/) , Co-Founder and CTO of Fable Security (https://www.linkedin.com/company/fable-security/) , joins to discuss the biggest cyber threats to this election, how attackers could exploit phishing or other tactics to gain access, and where counties should focus training to detect and prevent malicious activity. While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney.  Get the weekly Caveat Briefing delivered to your inbox. Like what you heard? Be sure to check out and subscribe to our ⁠⁠⁠⁠⁠⁠⁠Caveat Briefing⁠⁠⁠⁠⁠⁠⁠ (https://thecyberwire.com/newsletters/caveat-briefing) , a weekly newsletter available exclusively to ⁠⁠⁠⁠⁠⁠⁠N2K Pro⁠⁠⁠⁠⁠⁠⁠ (https://thecyberwire.com/pro)  members on ⁠⁠⁠⁠⁠⁠⁠N2K CyberWire's⁠⁠⁠⁠⁠⁠⁠ (https://thecyberwire.com/)  website. N2K Pro members receive our Thursday wrap-up covering the latest in privacy, policy, and research news, including incidents, techniques, compliance, trends, and more. This week’s ⁠⁠⁠⁠Caveat Briefing⁠⁠⁠⁠ covers the U.S. Department of Energy’s (https://www.reuters.com/business/energy/us-department-energy-forms-1-billion-supercomputer-ai-partnership-with-amd-2025-10-27/) $1 billion partnership with AMD to build two supercomputers, Lux and Discovery, aimed at fusion energy, cancer research, and national security. Lux, using AMD’s MI355X AI chips, will come online in six months and deliver three times the AI capacity of current supercomputers. Discovery, built with AMD’s MI430 chips, is expected to be operational by 2029, highlighting a major DOE-private industry collaboration to accelerate scientific breakthroughs. Curious about the details? Head over to the ⁠⁠⁠⁠⁠⁠⁠Caveat Briefing⁠⁠⁠⁠⁠⁠⁠ (https://thecyberwire.com/newsletters/caveat-briefing)  for the full scoop and additional compelling stories. Got a question you'd like us to answer on our show? You can send your audio file to ⁠⁠⁠⁠⁠⁠⁠caveat@thecyberwire.com⁠⁠⁠⁠⁠⁠⁠ (mailto:caveat@thecyberwire.com) . Hope to hear from you. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Cybersecurity on the ballot in California.
Explosions rock a shuttered Myanmar cybercrime hub. The Aisuru botnet shifts from DDoS to residential proxies. Dentsu confirms data theft at Merkle. Boston bans biometrics. Proton restores journalists’ email accounts after backlash. Memento labs admits Dante spyware is theirs. Australia accuses Microsoft of improperly forcing users into AI upgrades. CISA warns of active exploitation targeting manufacturing management software. A covert cyberattack during Trump’s first term disabled Venezuela’s intelligence network. Our guest is Ben Seri, Co-Founder and CTO of Zafran, discussing the trend of AI native attacks. New glasses deliver fashionable paranoia. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing (https://thecyberwire.com/newsletters/daily-briefing) , and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn (https://www.linkedin.com/company/10454826/admin/feed/posts/) . CyberWire Guest Today’s guest is Ben Seri (https://www.linkedin.com/in/ben-seri/) , Co-Founder and CTO of Zafran (https://www.linkedin.com/company/zafran-security/) , discussing the trend of AI native attacks and how defenders should use AI to defend and remediate. Selected Reading Stragglers from Myanmar scam center raided by army cross into Thailand as buildings are blown up (https://apnews.com/article/myanmar-scam-centers-cybercrime-thailand-border-daa90f481ea4207e7d7a891dda1161c8) (AP News) Aisuru Botnet Shifts from DDoS to Residential Proxies (https://krebsonsecurity.com/2025/10/aisuru-botnet-shifts-from-ddos-to-residential-proxies/) (Krebs on Security) Advertising giant Dentsu reports data breach at subsidiary Merkle (https://www.bleepingcomputer.com/news/security/advertising-giant-dentsu-reports-data-breach-at-subsidiary-merkle/) (Bleeping Computer) Boston Police Can No Longer Use Facial Recognition Software (https://www.builtinboston.com/articles/boston-bans-facial-recognition-software) (Built in Boston) Proton Mail Suspended Journalist Accounts at Request of Cybersecurity Agency (https://theintercept.com/2025/09/12/proton-mail-journalist-accounts-suspended/) (The Intercept) CEO of spyware maker Memento Labs confirms one of its government customers was caught using its malware (https://techcrunch.com/2025/10/28/ceo-of-spyware-maker-memento-labs-confirms-one-of-its-government-customers-was-caught-using-its-malware/) (TechCrunch) Australia sues Microsoft for forcing Copilot AI onto Office 365 customers (https://pivot-to-ai.com/2025/10/28/australia-sues-microsoft-for-forcing-copilot-ai-onto-office-365-customers/) (Pivot to AI) CISA warns of actively exploited flaws in Dassault DELMIA Apriso manufacturing software (https://beyondmachines.net/event_details/cisa-warns-of-actively-exploited-flaws-in-dassault-delmia-apriso-manufacturing-software-v-w-u-u-a/gD2P6Ple2L) (Beyond Machines) CIA cyberattacks targeting the Maduro regime didn’t satisfy Trump in his first term. Now the US is flexing its military might (https://www.cnn.com/2025/10/29/politics/maduro-cyberattack-trump-cia) (CNN Politics) Zenni’s Anti-Facial Recognition Glasses are Eyewear for Our Paranoid Age (https://www.404media.co/zennis-anti-facial-recognition-glasses-are-eyewear-for-our-paranoid-age/) (404 Media) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey (https://www.surveymonkey.com/r/NCFFCZJ) . Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com (http://sponsor.thecyberwire.com/) . The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Logging off in Myawaddy.
Japan’s HTV-X cargo spacecraft has arrived at the International Space Station for the first time ever. Japan’s SKY Perfect JSAT Corporation has signed a memorandum of understanding with Korea’s KT SAT to jointly develop and test 5G Non-Terrestrial Network (NTN) technologies. The US Federal Communications Commission (FCC) voted to kick off two proceedings that will impact satellite licensing, and more. Remember to leave us a 5-star rating and review in your favorite podcast app. Be sure to follow T-Minus on LinkedIn (https://www.linkedin.com/company/n2k-space/) and Instagram (https://www.instagram.com/n2kspace/) . Selected Reading Watch Japan's 1st HTV-X cargo craft arrive at the International Space Station today (https://www.space.com/space-exploration/international-space-station/japan-htv-x-cargo-spacecraft-first-arrival-international-space-station) KT SAT and SKY Perfect JSAT Sign MoU for Joint R&D on GEO-based 5G NTN Technologies (https://www.prnewswire.com/news-releases/kt-sat-and-sky-perfect-jsat-sign-mou-for-joint-rd-on-geo-based-5g-ntn-technologies-302596012.html) FCC Kicks Off Proceeding to Overhaul Satellite Licensing (https://www.satellitetoday.com/government-military/2025/10/28/fcc-kicks-off-proceeding-to-overhaul-satellite-licensing/) ESA - Europe turns to space to boost resilience (https://www.esa.int/About_Us/Corporate_news/Europe_turns_to_space_to_boost_resilience) Space Foundation and Space Force Association Announce New Partnership (https://www.spacefoundation.org/2025/10/28/space-force-association-new-partnership/) Pentagon Nominee Open to Consolidating Space Force and NRO (https://www.airandspaceforces.com/berkowitz-space-policy-space-force-nro/) Holy See: Space-based weaponry poses ‘genuine and grave’ threat - Vatican News (https://www.vaticannews.va/en/vatican-city/news/2025-10/holy-see-space-weapons-threat-peace-archbishop-caccia.html) Boeing Reports Third Quarter Results (https://www.prnewswire.com/news-releases/boeing-reports-third-quarter-results-302598289.html) NASA's X-59 'quiet' supersonic jet makes historic 1st flight (photos)- Space (https://www.space.com/technology/aerospace/nasas-x-59-quiet-supersonic-jet-makes-historic-1st-flight-photos) 25 years, one website: ISS in Real Time captures quarter-century on space station - Ars Technica (https://arstechnica.com/space/2025/10/25-years-one-website-iss-in-real-time-captures-quarter-century-on-space-station/) Share your feedback. What do you think about T-Minus Space Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey (https://www.surveymonkey.com/r/NJYCN2P) . Thank you for helping us continue to improve our show.  Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here’s our media kit (https://docsend.com/view/5ncb2vvpz2ntg95q) . Contact us at space@n2k.com (mailto:space@n2k.com) to request more info. Want to join us for an interview? Please send your pitch to space-editor@n2k.com (mailto:space-editor@n2k.com) and include your name, affiliation, and topic proposal. T-Minus is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Japan’s HTV-X docks with the ISS.
WSUS attacks escalate as emergency patch fails to fully contain exploited flaw. Schneider Electric and Emerson are listed among victims in the Oracle EBS cyberattack. Google debunks reports of a massive GMail breach. A new banking trojan mimics human behavior for stealth. Sweden’s power grid operator confirms a cyberattack. Italian spyware targets Russian and Belarusian organizations. The U.S. declines to sign the new UN cyber treaty. Ransomware payments fall to record lows. U.S. Cyber Chief calls for a “clean American tech stack” to counter China's global surveillance push. On today's Threat Vector segment, David Moulton⁠ speaks with two cybersecurity leaders from Palo Alto Networks:⁠ Sarit Tager⁠ and⁠ Krithivasan Mecheri⁠. AI mistakes Doritos for a deadly weapon.  Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing (https://thecyberwire.com/newsletters/daily-briefing) , and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn (https://www.linkedin.com/company/10454826/admin/feed/posts/) . Threat Vector On today's Threat Vector segment, David Moulton⁠ (https://www.linkedin.com/in/davidrmoulton/) speaks with two cybersecurity leaders from Palo Alto Networks:⁠ Sarit Tager⁠ (https://www.linkedin.com/in/sarit/) and⁠ Krithivasan Mecheri⁠ (https://www.linkedin.com/in/krithivasanmecheri) (Krithi). Together, they dive into the urgent challenges of securing modern development in the age of AI and "Shifting Security Left". You can listen to their full conversation here (https://thecyberwire.com/podcasts/threat-vector/90/notes) , and catch new episodes every Thursday on your favorite podcast app.  Selected Reading Microsoft WSUS attacks hit 'multiple' orgs, Google warns (https://www.theregister.com/2025/10/27/microsoft_wsus_attacks_multiple_orgs/) (The Register) Industrial Giants Schneider Electric and Emerson Named as Victims of Oracle Hack (https://www.securityweek.com/industrial-giants-schneider-electric-and-emerson-named-as-victims-of-oracle-hack/) (SecurityWeek) Google says talk of Gmail breach impacting millions not true (https://www.theregister.com/2025/10/28/gmail_breach_fake_news/) (The Register) 'Herodotus' Android Trojan Mimics Human Sluggishness (https://www.govinfosecurity.com/herodotus-android-trojan-mimics-human-sluggishness-a-29843) (Gov Infosecurity) Hackers Target Swedish Power Grid Operator (https://www.securityweek.com/hackers-target-swedish-power-grid-operator/)  (SecurityWeek) Italian-made spyware spotted in breaches of Russian, Belarusian systems (https://therecord.media/memento-labs-formerly-hacking-team-dante-spyware-russia-kaspersky)   (The Record) US declines to join more than 70 countries in signing UN cybercrime treaty (https://therecord.media/us-declines-signing-cybercrime-treaty) (The Record) Ransomware profits drop as victims stop paying hackers (https://www.bleepingcomputer.com/news/security/ransomware-profits-drop-as-victims-stop-paying-hackers/) (Bleeping Computer) National cyber director says U.S. needs to counter Chinese surveillance, push American tech (https://cyberscoop.com/national-cyber-director-says-u-s-needs-to-counter-chinese-surveillance-push-american-tech/) (CyberScoop) Armed police handcuff teen after AI mistakes crisp packet for gun in US (https://www.bbc.co.uk/news/articles/cgjdlx92lylo) (BBC News) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey (https://www.surveymonkey.com/r/NCFFCZJ) . Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com (http://sponsor.thecyberwire.com/) . The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Windows servers under siege
The UK Space Agency (UKSA) has selected Slingshot Aerospace for a Provision of Optical Delivery Partner contract to expand the UK’s satellite tracking capabilities. The University of Florida, in collaboration with NASA, MIT, Vanguard Automation, AIM Photonics and Germany’s Fraunhofer Heinrich Hertz Institute, have a suite of photonic AI chips en route to the International Space Station (ISS). The Philippines and Malaysia have signed the Artemis Accords, and more. Remember to leave us a 5-star rating and review in your favorite podcast app. Be sure to follow T-Minus on LinkedIn (https://www.linkedin.com/company/n2k-space/) and Instagram (https://www.instagram.com/n2kspace/) . T-Minus Guest Our guest today is Brandon Karpf (https://www.linkedin.com/in/brandon-karpf/) , friend of the show, founder of T-Minus Space Daily (https://space.n2k.com/podcasts/t-minus) , and cybersecurity expert. Selected Reading Slingshot Aerospace Advances UK Space Agency’s Satellite Tracking Amid Orbital Congestion (https://www.businesswire.com/news/home/20251028724063/en/Slingshot-Aerospace-Advances-UK-Space-Agencys-Satellite-Tracking-Amid-Orbital-Congestion) Florida engineers test photonic AI chips in space (https://news.ufl.edu/2025/10/chips-in-space/) Fact Sheet: President Donald J. Trump Secures Peace and Prosperity in Malaysia - U.S. Mission to ASEAN (https://asean.usmission.gov/fact-sheet-president-donald-j-trump-secures-peace-and-prosperity-in-malaysia/) Chinese aerospace firm completes 36-satellite separation test - CGTN (https://news.cgtn.com/news/2025-10-28/Chinese-aerospace-firm-completes-36-satellite-separation-test-1HPNnlNooow/p.html) Spacedock interfaces to link Space Robotics Workers' Smart Truss for modular in-space assembly (https://www.prnewswire.com/news-releases/spacedock-interfaces-to-link-space-robotics-workers-smart-truss-for-modular-in-space-assembly-302595542.html) Iridium Unveils Revolutionary Global GPS Device Protection on a Chip (https://investor.iridium.com/2025-10-27-Iridium-Unveils-Revolutionary-Global-GPS-Device-Protection-on-a-Chip) Compact, Radiation-Tolerant Computing with Flexible I/O for Space Missions (https://www.businesswire.com/news/home/20251028300158/en/Compact-Radiation-Tolerant-Computing-with-Flexible-IO-for-Space-Missions) AI restores James Webb telescope’s crystal-clear vision (https://www.newsbeep.com/us/255013/) Share your feedback. What do you think about T-Minus Space Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey (https://www.surveymonkey.com/r/NJYCN2P) . Thank you for helping us continue to improve our show.  Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here’s our media kit (https://docsend.com/view/5ncb2vvpz2ntg95q) . Contact us at space@n2k.com (mailto:space@n2k.com) to request more info. Want to join us for an interview? Please send your pitch to space-editor@n2k.com (mailto:space-editor@n2k.com) and include your name, affiliation, and topic proposal. T-Minus is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
UKSA adds to its space tracking capabilities.
Please enjoy this encore of Word Notes. A set of solutions for ensuring that the right users can only access the appropriate resources. CyberWire Glossary link: ⁠https://thecyberwire.com/glossary/identity-and-access-management⁠ Audio reference link: “⁠The Wrath of Khan (1982) ‘Kirk’s Response⁠ (https://www.youtube.com/watch?v=gl_y5wTeJtk) ,’” by Russell, YouTube, 16 May 2017.
Identity access management (IAM) (noun) [Word Notes]
On this episode, host Kim Jones is joined by Ethan Cook, N2K’s lead analyst and editor, for a deeper, more reflective conversation on cybersecurity regulation, privacy, and the future of policy. This episode steps back from the news cycle to connect the dots and explore where the regulatory landscape is heading — and why it matters. Ethan, who will join the show regularly this season to provide big-picture analysis after major policy conversations, shares his perspective on the evolving balance between government oversight, innovation, and individual responsibility. This episode of N2K Pro's CISO Perspectives podcast is brought to you by our sponsor, Meter. Meter provides a full-stack, enterprise-grade networking solution—wired, wireless, and cellular—designed, deployed, and managed end-to-end. From hardware to software, ISP to security, Meter delivers seamless, secure, and scalable connectivity for modern business environments. Learn more about Meter (http://meter.com/cisop) . Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Regulation takeaways with Ethan Cook. [CISO Perspectives]
Privacy is one of the most universally valued rights. Yet, despite its importance, data breaches exposing millions of people's sensitive information have become routine. Many have come to assume that their personal data has already been, or inevitably will be, compromised. Despite this reality, prioritizing privacy is more important than ever. In this episode of CISO Perspectives, host ⁠Kim Jones⁠ sits down with Kristy Westphal, the Global Security Director of Spirent Communications, to explore data privacy's impacts on cybersecurity efforts. Together, Kristy and Kim discuss why privacy cannot be an afterthought but rather must be something actively addressed through proactive security efforts, shifting security culture mindsets, and staying ahead of rapidly changing technologies. This episode of N2K Pro's CISO Perspectives podcast is brought to you by our sponsor, Meter. Meter provides a full-stack, enterprise-grade networking solution—wired, wireless, and cellular—designed, deployed, and managed end-to-end. From hardware to software, ISP to security, Meter delivers seamless, secure, and scalable connectivity for modern business environments. Learn more about ⁠Meter⁠ (http://meter.com/cisop) . Want more CISO Perspectives? Check out a companion ⁠⁠blog post⁠⁠ (https://thecyberwire.com/stories/b43484e68a394666abf7f7fb23ead0ce/the-impact-of-data-privacy-on-cyber)  by our very own Ethan Cook, where he breaks down key insights, shares behind-the-scenes context, and highlights research that complements this episode. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
The impact of data privacy on cyber. [CISO Perspectives]
Load More… Subscribe
Computer password inventor Fernando Corbato dies at 93, Serious Zoom security flaw could let websites hijack Mac cameras, Hackers' Operating System Kali Linux Released for Raspberry Pi 4, Over 1,300 Android Apps Caught Collecting Data Even If You Deny Permissions, and 25 Million Android Phones Infected With Malware That ‘Hides In WhatsApp’.
Cyber Security News Ending July 14 2019 – Android users be afraid, be very afraid. ransomware
Beware! Playing Untrusted Videos On VLC Player Could Hack Your Computer, U.S. Government Announces Critical Warning For Microsoft Windows Users, Florida city to pay $600K ransom to hacker who seized computer systems weeks ago, Confirmed: NASA Has Been Hacked and US 'launched cyber-attack on Iran weapons systems'.
Cyber Security News Ending June 23 2019 – Cyber War?
Microsoft says mandatory password changing is “ancient and obsolete”, Apple Just Patched a Modem Bug That's Been in Macs Since 1999, Unpatched Bug Let Attackers Bypass Windows Lock Screen On RDP Sessions, Google confirms that advanced backdoor came preinstalled on Android devices, and Quest Diagnostics data breach: Nearly 12 million patients had personal info exposed.
Cyber Security News ending June 8 2019
A laptop filled with six of the world’s most dangerous viruses is on sale for more than $1 million, Why you should never use phone charging stations at airports, Google Stored G Suite Users' Passwords in Plain-Text for 14 Years, Snapchat Employees Reportedly Spied on Private Snaps, and In Baltimore and Beyond, a Stolen N.S.A. Tool Wreaks Havoc.
Memorial Day Cyber Security News 2019
The Trade Secret: Firms That Promised High-Tech Ransomware Solutions Almost Always Just Pay the Hackers, Huawei has secret ‘backdoor’ into major European telecoms firm, spy agency reportedly says, Hackers breach Stack Overflow Q&A platform and compromise users' data, WhatsApp security breach may have targeted human rights groups, and What you need to know if you e-transfer money.
Cyber Security News Ending May 18 2019
How to stop Google from tracking web history, Baltimore City Hall Computer Network Infected With Ransomware Virus, Officials Say, Types of backup and five backup mistakes to avoid, Binance Security Breach Update, and Israel Neutralizes Cyber Attack by Blowing Up A Building With Hackers.
Cyber Security News Ending May 12 2019 Mothers Day Edition
Microsoft knows password-expiration policies are useless, Docker Hub Suffers a DataBreach, Asks Users to Reset Password, Over 23 million breached accounts used ‘123456’ as password, A 'Blockchain Bandit' Is Guessing Private Keys and Scoring Millions, and Fort Bragg Army cut power to thousands as cyber-attack test.
Cyber Security News ending April 27 2019
Experts: Breach at IT Outsourcing Giant Wipro, Don’t Acquire a Company Until You Evaluate Its Data Security, Microsoft reveals breachaffecting webmail users, Mueller Report Obama’s NSA Director Told U.S. CyberSecurity Team to “Stand Down” in Face of Russian Hackers, and CIA Offers Proof Huawei Has Been Funded By China's Military And Intelligence.
Cyber Security News ending April 21 2019
Mysterious safety-tampering malware infects a second critical infrastructure site, WikiLeaks Founder Julian Assange Arrested After Ecuador Withdraws Asylum, Samsung’s Galaxy S10 fingerprint sensor fooled by 3D printed fingerprint, Security Flaws in WPA3 Protocol Let Attackers Hack WiFi Password, and Secret Service agent inserted malware-infected USB drive into laptop.
Weekly Cyber Security News ending April 13 – From the Cyber Chronicle Cyber Security News Podcast
Load More… Subscribe