2024

What Microsoft’s latest email breach says about this IT security heavyweight

What Microsoft’s latest email breach says about this IT security heavyweight 2024-01-24 at 13:16 By Jessica Lyons Hardcastle Senator Wyden tells The Reg this latest security lapse is ‘inexcusable’ Comment  For most organizations – especially security vendors – disclosing a corporate email breach, in which executives’ internal messages and attachments were stolen, would noticeably ding

What Microsoft’s latest email breach says about this IT security heavyweight Read More »

Stellar Cyber partners with Proofpoint to speed detection of email-driven cyberattacks

Stellar Cyber partners with Proofpoint to speed detection of email-driven cyberattacks 2024-01-24 at 13:02 By Industry News Stellar Cyber announced a new partnership with Proofpoint, a cybersecurity and compliance company. Through this alliance, Proofpoint and Stellar Cyber customers benefit from an out-of-the-box integration enabling swift email investigations and real-time response actions to email-driven attacks. Proofpoint

Stellar Cyber partners with Proofpoint to speed detection of email-driven cyberattacks Read More »

Amazon’s French Warehouses Fined Over Employee Surveillance

Amazon’s French Warehouses Fined Over Employee Surveillance 2024-01-24 at 12:02 By AFP France’s data protection agency fines Amazon’s French warehouses unit 32 million euros ($34.9 million) for “excessively intrusive” employee surveillance system. The post Amazon’s French Warehouses Fined Over Employee Surveillance appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

Amazon’s French Warehouses Fined Over Employee Surveillance Read More »

US, UK, Australia Sanction Russian Man Over Ransomware Attack on Healthcare Insurer 

US, UK, Australia Sanction Russian Man Over Ransomware Attack on Healthcare Insurer  2024-01-24 at 12:02 By Eduard Kovacs US, UK and Australia announce sanctions against Alexander Ermakov for his role in the 2022 ransomware attack on healthcare insurer Medibank.  The post US, UK, Australia Sanction Russian Man Over Ransomware Attack on Healthcare Insurer  appeared first

US, UK, Australia Sanction Russian Man Over Ransomware Attack on Healthcare Insurer  Read More »

The Unknown Risks of The Software Supply Chain: A Deep-Dive

The Unknown Risks of The Software Supply Chain: A Deep-Dive 2024-01-24 at 11:31 By In a world where more & more organizations are adopting open-source components as foundational blocks in their application’s infrastructure, it’s difficult to consider traditional SCAs as complete protection mechanisms against open-source threats. Using open-source libraries saves tons of coding and debugging

The Unknown Risks of The Software Supply Chain: A Deep-Dive Read More »

U.S., U.K., Australia Sanction Russian REvil Hacker Behind Medibank Breach

U.S., U.K., Australia Sanction Russian REvil Hacker Behind Medibank Breach 2024-01-24 at 11:31 By Governments from Australia, the U.K., and the U.S. have imposed financial sanctions on a Russian national for his alleged role in the 2022 ransomware attack against health insurance provider Medibank. Alexander Ermakov (aka blade_runner, GistaveDore, GustaveDore, or JimJones), 33, has been

U.S., U.K., Australia Sanction Russian REvil Hacker Behind Medibank Breach Read More »

Think tank warns North Korea uses AI for battle planning, maybe using cloudy resources

Think tank warns North Korea uses AI for battle planning, maybe using cloudy resources 2024-01-24 at 10:16 By Laura Dobberstein Calls for clouds, and scientists, to take care they’re not aiding Pyongyang North Korea is investing in its AI capacity, and a think tank has called on cloud computing service providers to do more to

Think tank warns North Korea uses AI for battle planning, maybe using cloudy resources Read More »

COVID-19 test lab accused of exposing 1.3 million patient records to open internet

COVID-19 test lab accused of exposing 1.3 million patient records to open internet 2024-01-24 at 09:32 By Brandon Vigliarolo Now that’s a Dutch crunch A password-less database containing an estimated 1.3 million sets of Dutch COVID-19 testing records was left exposed to the open internet, and it’s not clear if anyone is taking responsibility.… This

COVID-19 test lab accused of exposing 1.3 million patient records to open internet Read More »

Patch Your GoAnywhere MFT Immediately – Critical Flaw Lets Anyone Be Admin

Patch Your GoAnywhere MFT Immediately – Critical Flaw Lets Anyone Be Admin 2024-01-24 at 09:01 By A critical security flaw has been disclosed in Fortra’s GoAnywhere Managed File Transfer (MFT) software that could be abused to create a new administrator user. Tracked as CVE-2024-0204, the issue carries a CVSS score of 9.8 out of 10. “Authentication

Patch Your GoAnywhere MFT Immediately – Critical Flaw Lets Anyone Be Admin Read More »

GCHQ’s NCSC warns of ‘realistic possibility’ AI will help state-backed malware evade detection

GCHQ’s NCSC warns of ‘realistic possibility’ AI will help state-backed malware evade detection 2024-01-24 at 08:32 By Connor Jones That means Brit spies want the ability to do exactly that, huh? The idea that AI could generate super-potent and undetectable malware has been bandied about for years – and also already debunked. However, an article

GCHQ’s NCSC warns of ‘realistic possibility’ AI will help state-backed malware evade detection Read More »

The effect of omission bias on vulnerability management

The effect of omission bias on vulnerability management 2024-01-24 at 08:31 By Help Net Security Whether we’d like to admit it to ourselves or not, all humans harbor subconscious biases that powerfully influence our behavior. One of these is the omission bias, which has interesting ramifications in the world of cyber security, specifically vulnerability management.

The effect of omission bias on vulnerability management Read More »

10 USA cybersecurity conferences you should visit in 2024

10 USA cybersecurity conferences you should visit in 2024 2024-01-24 at 08:01 By Help Net Security Security BSides Security BSides offers attendees an opportunity to engage and present their ideas actively. Characterized by its intensity, these events are filled with discussions, demonstrations, and interactive participation. BSides are happening all over the USA. To find an

10 USA cybersecurity conferences you should visit in 2024 Read More »

Amid Broadcom’s subscription push, VMware killed a SaaS product

Amid Broadcom’s subscription push, VMware killed a SaaS product 2024-01-24 at 07:46 By Simon Sharwood Another 50-plus products also binned in move to big bundles Broadcom has killed off a VMware software-as-a-service product, despite also moving the virtualization giant’s other wares to subscription-only licenses – the sort of arrangement at which SaaS excels.… This article

Amid Broadcom’s subscription push, VMware killed a SaaS product Read More »

Prioritizing CIS Controls for effective cybersecurity across organizations

Prioritizing CIS Controls for effective cybersecurity across organizations 2024-01-24 at 07:32 By Mirko Zorz In this Help Net Security interview, Randy Marchany, CISO at Virginia Tech, discusses the challenges and strategies associated with implementing CIS Controls in organizations of varying sizes. Marchany explores the importance of securing top-level management support, breaking down data silos, and

Prioritizing CIS Controls for effective cybersecurity across organizations Read More »

Scroll to Top