Uncategorized

Urgent Security Updates: Cisco and VMware Address Critical Vulnerabilities 08/06/2023 at 08:50 By VMware has released security updates to fix a trio of flaws in Aria Operations for Networks that could result in information disclosure and remote code execution. The most critical of the three vulnerabilities is a command injection vulnerability tracked as CVE-2023-20887 (CVSS score: 9.8) that could […]

Five steps to enhance digital risk management practices 08/06/2023 at 07:10 By Enhancing a digital risk management program starts with enterprise leadership. Cybersecurity leaders can get buy-in through strong incident response programs. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AI can crack your password 08/06/2023 at 07:10 By How cybercriminals can utilize AI to crack employee passwords. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Barracuda Urges Immediate Replacement of Hacked ESG Appliances 08/06/2023 at 07:10 By Enterprise security company Barracuda is now urging customers who were impacted by a recently disclosed zero-day flaw in its Email Security Gateway (ESG) appliances to immediately replace them. “Impacted ESG appliances must be immediately replaced regardless of patch version level,” the company said in an

To keep or replace: IoMT security hinges on assessing device risk 07/06/2023 at 23:46 By Security leaders face a strategic quandary: when should medical devices with known security flaws be replaced, and when is a change unnecessary?  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

82% of security leaders believe cloud automation critical 07/06/2023 at 22:46 By A recent survey from NetApp looks at how IT decision makers feel about the ways their organizations are working to optimize their environments. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Microsoft settles FTC charges for violating COPPA 07/06/2023 at 21:50 By Following Federal Trade Commission (FTC) charges, Microsoft will bay $20 million to settle Children’s Online Protection Act (COPPA) violations.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Security leaders expected to expand threat management budgets 07/06/2023 at 20:47 By To better navigate emerging risks and the current threat landscape, security leaders are expanding cybersecurity budgets to protect organizations.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Verizon 2023 Data Breach Report shows rising cost of ransomware 07/06/2023 at 18:23 By A new report reveals ransomware remains one of the top cyberattack methods making up 24% of all breaches. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Part 2: Federal Cybersecurity Posture is Improving, but Additional Work Remains 07/06/2023 at 17:04 By Former Texas Congressman William “Mac” Thornberry and Trustwave Government Services President Bill Rucker recently sat down to discuss several pressing issues impacting the federal government’s cybersecurity preparedness, the impact the Russia-Ukraine War has had on cyber, and what remains to

Microsoft to Pay $20 Million Penalty for Illegally Collecting Kids’ Data on Xbox 07/06/2023 at 16:47 By Microsoft has agreed to pay a penalty of $20 million to settle U.S. Federal Trade Commission (FTC) charges that the company illegally collected and retained the data of children who signed up to use its Xbox video game

Mitigating workplace violence through duty of care 07/06/2023 at 16:19 By Each year, more than 2 million people in the United States alone fall victim to some sort of workplace violence, according to the Occupational Safety and Health Administration. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Winning the Mind Game: The Role of the Ransomware Negotiator 07/06/2023 at 14:31 By Get exclusive insights from a real ransomware negotiator who shares authentic stories from network hostage situations and how he managed them. The Ransomware Industry Ransomware is an industry. As such, it has its own business logic: organizations pay money, in crypto-currency,

New PowerDrop Malware Targeting U.S. Aerospace Industry 07/06/2023 at 07:52 By An unknown threat actor has been observed targeting the U.S. aerospace industry with a new PowerShell-based malware called PowerDrop. “PowerDrop uses advanced techniques to evade detection such as deception, encoding, and encryption,” according to Adlumin, which found the malware implanted in an unnamed domestic aerospace defense

Prioritizing workplace safety for healthcare professionals 07/06/2023 at 07:08 By How the U.S. government is taking steps to protect employees in the healthcare sector. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Product spotlight on mobile and touchless security 07/06/2023 at 07:08 By Security magazine highlights mobile and touchless security solutions for access control and identity management. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

CISA releases joint guide to securing remote access software 06/06/2023 at 23:02 By CISA has released a joint guide that informs organizations how to detect and defend against malicious actors abusing remote access software. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

New vulnerabilities published in 2022 increased 25% 06/06/2023 at 23:02 By A report from Skybox Security found a 25% increase in new vulnerabilities published within 2022, a year-over-year rise the biggest seen since 2017. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

57% of financial organizations use multiple cloud service providers 06/06/2023 at 22:16 By Cloud adoption continues to increase within the financial services sector with the majority reporting that they’re using some form of cloud computing. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

New Malware Campaign Leveraging Satacom Downloader to Steal Cryptocurrency 06/06/2023 at 22:07 By A recent malware campaign has been found to leverage Satacom downloader as a conduit to deploy stealthy malware capable of siphoning cryptocurrency using a rogue extension for Chromium-based browsers. “The main purpose of the malware that is dropped by the Satacom downloader is to