Uncategorized

How proactive risk intelligence can make an impact on an organization 09/06/2023 at 16:17 By From supply chain disruption and civil unrest to gun violence, war and fear of inflation, security leaders need to prepare for rapidly evolving risk. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Incorporate intercoms into a multi-layered approach to school security 09/06/2023 at 16:17 By School shootings continue to reinforce the message that stringent security measures need to be in place to keep those in educational settings safe. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Brown & Brown, Inc. appoints Barry Hensley as CSO and Rob Burch as CISO 09/06/2023 at 16:02 By Brown & Brown, Inc. has announced the appointment of Barry Hensley as Chief Security Officer and Rob Burch as Chief Information Security Officer. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original

Report: 55% of organizations have experienced a SaaS security incident 09/06/2023 at 15:46 By A new survey found while the use of cloud services is increasing, the pace of adoption is dependent on the speed of meeting security and operational expectations. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original

5 Reasons Why Access Management is the Key to Securing the Modern Workplace 09/06/2023 at 14:32 By The way we work has undergone a dramatic transformation in recent years. We now operate within digital ecosystems, where remote work and the reliance on a multitude of digital tools is the norm rather than the exception. This

Stealth Soldier: A New Custom Backdoor Targets North Africa with Espionage Attacks 09/06/2023 at 09:59 By A new custom backdoor dubbed Stealth Soldier has been deployed as part of a set of highly-targeted espionage attacks in North Africa. “Stealth Soldier malware is an undocumented backdoor that primarily operates surveillance functions such as file exfiltration, screen and microphone

Education pathways to corporate security careers 09/06/2023 at 08:00 By Security professionals aiming to advance their careers have many educational opportunities available to them, including degree programs, certifications & more.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Assessments and comprehensive security planning in higher education 09/06/2023 at 08:00 By With the growing conversation around school safety, building security solutions within higher education requires detailed planning and routine assessments.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

48% of security leaders say distributed workforce influences spending 08/06/2023 at 21:18 By The quick development of artificial intelligence and new technologies has led security leaders to consider how to implement them in cybersecurity. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

37% of IT professionals report experiencing a data loss event 08/06/2023 at 21:01 By Best practices for data protection were analyzed in a report finding that 25% of IT professionals follow industry best practices for backing up data. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Josh DeFrain named Chief Information Security Officer at Rokt 08/06/2023 at 21:01 By Ecommerce technology company Rokt has appointed Josh DeFrain as Chief Information Security Officer (CISO) effective immediately.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Why nonprofits need to be more worried about cybersecurity 08/06/2023 at 19:22 By It can be tempting to think that a nonprofit is under the radar of any cybercriminals. But they’re the exact target cybercriminals look for. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

How to Improve Your API Security Posture 08/06/2023 at 18:15 By APIs, more formally known as application programming interfaces, empower apps and microservices to communicate and share data. However, this level of connectivity doesn’t come without major risks. Hackers can exploit vulnerabilities in APIs to gain unauthorized access to sensitive data or even take control

Clop Ransomware Gang Likely Exploiting MOVEit Transfer Vulnerability Since 2021 08/06/2023 at 18:15 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) have published a joint advisory regarding the active exploitation of a recently disclosed critical flaw in Progress Software’s MOVEit Transfer application to drop ransomware. “The Cl0p Ransomware Gang, also

Experts Unveil PoC Exploit for Recent Windows Vulnerability Under Active Exploitation 08/06/2023 at 18:15 By Details have emerged about a now-patched actively exploited security flaw in Microsoft Windows that could be abused by a threat actor to gain elevated privileges on affected systems. The vulnerability, tracked as CVE-2023-29336, is rated 7.8 for severity and concerns an

FTC charges Amazon for keeping children’s voice recordings 08/06/2023 at 17:47 By Amazon will be required to overhaul how it deletes data and implement new privacy guidelines following FTC and Department of Justice charges. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Don’t Let Complicated RFP Problems Slow Down Your Business 08/06/2023 at 16:01 By Trustwave is one of the finest pure-play cybersecurity companies in the business, capable of helping clients from almost any industry remain safe from cyberattack, but one little-known, non-cybersecurity service we offer is helping our channel partners decipher and answer request for proposals

From Admin to AdminPlusPlus: Breaking Out of Sandboxed Applications Through Recon, Being Brave and Abusing SSO Domain Account Mappings 08/06/2023 at 16:01 By I’ve been pentesting applications for nearly two decades now and throughout that time you get to see trends. This article is an excerpt from SpiderLabs Blog from Trustwave View Original Source

BBC and other organizations targeted in recent MOVEit vulnerability 08/06/2023 at 15:42 By Organizations from around the world, including the BBC and British Airways, have been warned that stolen data will be published if demands aren’t met in a recent hack. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original

Kimsuky Targets Think Tanks and News Media with Social Engineering Attacks 08/06/2023 at 08:50 By The North Korean nation-state threat actor known as Kimsuky has been linked to a social engineering campaign targeting experts in North Korean affairs with the goal of stealing Google credentials and delivering reconnaissance malware. “Further, Kimsuky’s objective extends to the theft of