White House Holds First-Ever Summit on the Ransomware Crisis Plaguing the Nation’s Public Schools 08/08/2023 at 21:19 By Associated Press CISA will step up training for the K-12 sector and technology providers, including Amazon Web Services and Cloudflare, will offer grants and free software. The post White House Holds First-Ever Summit on the Ransomware Crisis […]
For TSA’s updated Pipeline Security Directive, consistency and collaboration are key 08/08/2023 at 08:03 By Help Net Security Late last month, the Transportation Security Administration renewed and updated its security directive aimed at enhancing the cybersecurity of oil and natural gas pipelines. The reissued guidance, known as Security Directive (SD) Pipeline-2021-02D Pipeline Cybersecurity Mitigation, Actions, […]
For TSA’s updated Pipeline Security Directive, consistency and collaboration are key Read More »
CISA Unveils Cybersecurity Strategic Plan for Next 3 Years 07/08/2023 at 16:20 By Eduard Kovacs CISA has unveiled its Cybersecurity Strategic Plan for the next 3 years, focusing on addressing immediate threats, hardening the terrain, and driving security. The post CISA Unveils Cybersecurity Strategic Plan for Next 3 Years appeared first on SecurityWeek. This article […]
CISA Unveils Cybersecurity Strategic Plan for Next 3 Years Read More »
Five Eyes Agencies Call Attention to Most Frequently Exploited Vulnerabilities 04/08/2023 at 12:31 By Ionut Arghire Five Eyes government agencies have published a list of the software vulnerabilities that were most frequently exploited in malicious attacks in 2022. The post Five Eyes Agencies Call Attention to Most Frequently Exploited Vulnerabilities appeared first on SecurityWeek. This […]
Five Eyes Agencies Call Attention to Most Frequently Exploited Vulnerabilities Read More »
CISA Calls Urgent Attention to UEFI Attack Surfaces 04/08/2023 at 03:03 By Ryan Naraine The US government’s cybersecurity agency describes UEFI as “critical attack surface” that requires urgent security attention. The post CISA Calls Urgent Attention to UEFI Attack Surfaces appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original […]
CISA Calls Urgent Attention to UEFI Attack Surfaces Read More »
Russian APT phished government employees via Microsoft Teams 03/08/2023 at 15:17 By Zeljka Zorz An APT group linked to Russia’s Foreign Intelligence Service has hit employees of several dozen global organizations with phishing attacks via Microsoft Teams, says Microsoft. A social engineering attack to bypass MFA protection “To facilitate their attack, the actor uses Microsoft […]
Russian APT phished government employees via Microsoft Teams Read More »
How local governments can combat cybercrime 03/08/2023 at 07:01 By Help Net Security Amid a recent uptick in cybercrime on local governments, cities have been left to recover for months after the initial attack. For example, leaders in Dallas, Texas are ready to spend months recovering from an attack that hindered the city’s 911 emergency […]
How local governments can combat cybercrime Read More »
US government outlines National Cyber Workforce and Education Strategy 01/08/2023 at 14:03 By Zeljka Zorz After the release of a National Cybersecurity Strategy and its implementation plan, the Biden-Harris Administration has unveiled the National Cyber Workforce and Education Strategy (NCWES), “aimed at addressing both immediate and long-term cyber workforce needs.” The National Cyber Workforce and […]
US government outlines National Cyber Workforce and Education Strategy Read More »
US Gov Rolls Out National Cyber Workforce, Education Strategy 01/08/2023 at 02:37 By Ryan Naraine The Biden administration on Monday announced a series of “generational investments” to address immediate and long-term cyber workforce needs. The post US Gov Rolls Out National Cyber Workforce, Education Strategy appeared first on SecurityWeek. This article is an excerpt from […]
US Gov Rolls Out National Cyber Workforce, Education Strategy Read More »
US, Australia Issue Warning Over Access Control Vulnerabilities in Web Applications 28/07/2023 at 19:17 By Ionut Arghire US and Australian government agencies provide guidance on addressing access control vulnerabilities in web applications. The post US, Australia Issue Warning Over Access Control Vulnerabilities in Web Applications appeared first on SecurityWeek. This article is an excerpt from […]
US, Australia Issue Warning Over Access Control Vulnerabilities in Web Applications Read More »
Industry Reactions to New SEC Cyber Incident Disclosure Rules: Feedback Friday 28/07/2023 at 17:47 By Eduard Kovacs Several industry professionals comment on the SEC’s new cybersecurity incident disclosure rules and their implications. The post Industry Reactions to New SEC Cyber Incident Disclosure Rules: Feedback Friday appeared first on SecurityWeek. This article is an excerpt from […]
Industry Reactions to New SEC Cyber Incident Disclosure Rules: Feedback Friday Read More »
National Cyber Strategy Implementation Plan: What you need to know 28/07/2023 at 06:31 By Help Net Security The Biden-Harris Administration’s recently released National Cybersecurity Strategy calls for two fundamental shifts in how the United States allocates roles, responsibilities, and resources in cyberspace. In this Help Net Security video, Kelly Rozumalski, a Senior VP leading Booz […]
National Cyber Strategy Implementation Plan: What you need to know Read More »
US Senator Wyden Accuses Microsoft of ‘Cybersecurity Negligence’ 27/07/2023 at 23:17 By Ryan Naraine Redmond is accused of “negligent cybersecurity practices” that enabled a successful Chinese hack of the United States government. The post US Senator Wyden Accuses Microsoft of ‘Cybersecurity Negligence’ appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed […]
US Senator Wyden Accuses Microsoft of ‘Cybersecurity Negligence’ Read More »
Head of US Cybersecurity Agency Sees Progress on Election Security, With More Work Needed for 2024 27/07/2023 at 19:16 By Associated Press CISA Director Jen Easterly says more is needed to defend the integrity and resiliency of the election process ahead of the 2024 election. The post Head of US Cybersecurity Agency Sees Progress on […]
TSA Updates Pipeline Cybersecurity Requirements 27/07/2023 at 19:16 By Eduard Kovacs The TSA has released updated cybersecurity requirements for pipeline owners and operators, instructing them to test assessment and incident response plans. The post TSA Updates Pipeline Cybersecurity Requirements appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source
TSA Updates Pipeline Cybersecurity Requirements Read More »
Companies Required by SEC to Disclose Cybersecurity Incidents in 4 Days 27/07/2023 at 12:47 By Eduard Kovacs The SEC has adopted new rules requiring public companies to disclose cybersecurity breaches that have a material impact within four days. The post Companies Required by SEC to Disclose Cybersecurity Incidents in 4 Days appeared first on SecurityWeek. […]
Companies Required by SEC to Disclose Cybersecurity Incidents in 4 Days Read More »
Cryptojacking soars as cyberattacks increase, diversify 27/07/2023 at 05:03 By Help Net Security Digital threat actors are adopting evolving tactical behaviors, opting for different types of malicious attacks compared to previous years, according to SonicWall. Overall intrusion attempts were up, led by the highest year on record for global cryptojacking volume recorded by SonicWall, as […]
Cryptojacking soars as cyberattacks increase, diversify Read More »
SEC adopts new cybersecurity incident disclosure rules for companies 26/07/2023 at 21:01 By Help Net Security The Securities and Exchange Commission (SEC) today adopted rules requiring registrants to disclose material cybersecurity incidents they experience and to disclose on an annual basis material information regarding their cybersecurity risk management, strategy, and governance. The Commission also adopted […]
SEC adopts new cybersecurity incident disclosure rules for companies Read More »
Ex-NSA Official Harry Coker Tapped for National Cyber Director Job 26/07/2023 at 20:19 By Ryan Naraine The Biden administration has nominated former Navy commander Harry Coker to replace the retired Chris Inglis. The post Ex-NSA Official Harry Coker Tapped for National Cyber Director Job appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
Ex-NSA Official Harry Coker Tapped for National Cyber Director Job Read More »
Overcoming the cybersecurity talent shortage with upskilling initiatives 26/07/2023 at 07:31 By Mirko Zorz In this Help Net Security interview, Dr. Lindsey Polley de Lopez, Director of Cyber & Space Intelligence at MACH37, proposes strategies for companies, educational institutions, and governments on how to address the ongoing shortage of cybersecurity talent through the introduction of […]
Overcoming the cybersecurity talent shortage with upskilling initiatives Read More »