Uncategorized

4 ways for security to support mental health 16/05/2023 at 09:23 By Mental health support and awareness initiatives can help security leaders proactively mitigate threats and ensure the success of their teams. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Biden announces 13 actions to implement BSCA 16/05/2023 at 02:19 By Over the weekend, President Biden published an op-ed which announced new actions the administration is taking to implement the Bipartisan Safer Communities Act (BSCA). This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

90% of small business leaders underestimate cyber incident costs 15/05/2023 at 21:01 By A new report reveals that 91% of SMEs with a cyber insurance policy say that their insurance provider helped them avoid potential incidents. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

New Ransomware Gang RA Group Hits U.S. and South Korean Organizations 15/05/2023 at 17:47 By A new ransomware group known as RA Group has become the latest threat actor to leverage the leaked Babuk ransomware source code to spawn its own locker variant. The cybercriminal gang, which is said to have been operating since at least April

Industrial Cellular Routers at Risk: 11 New Vulnerabilities Expose OT Networks 15/05/2023 at 17:47 By Several security vulnerabilities have been disclosed in cloud management platforms associated with three industrial cellular router vendors that could expose operational technology (OT) networks to external attacks. The findings were presented by Israeli industrial cybersecurity firm OTORIO at the Black Hat Asia

Why High Tech Companies Struggle with SaaS Security 15/05/2023 at 17:47 By It’s easy to think high-tech companies have a security advantage over other older, more mature industries. Most are unburdened by 40 years of legacy systems and software. They draw some of the world’s youngest, brightest digital natives to their ranks, all of whom

New ‘MichaelKors’ Ransomware-as-a-Service Targeting Linux and VMware ESXi Systems 15/05/2023 at 17:47 By A new ransomware-as-service (RaaS) operation called MichaelKors has become the latest file-encrypting malware to target Linux and VMware ESXi systems as of April 2023. The development points to cybercriminal actors increasingly setting their eyes on the ESXi, cybersecurity firm CrowdStrike said in a report

Researchers Uncover Powerful Backdoor and Custom Implant in Year-Long Cyber Campaign 15/05/2023 at 17:47 By Government, aviation, education, and telecom sectors located in South and Southeast Asia have come under the radar of a new hacking group as part of a highly-targeted campaign that commenced in mid-2022 and continued into the first quarter of 2023.

Financial sector has highest password reuse rate 15/05/2023 at 17:00 By Employee exposure was measured in a report that observed a 62% password reuse rate among Fortune 1000 employees who have been exposed more than once.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Former Ubiquiti Employee Gets 6 Years in Jail for $2 Million Crypto Extortion Case 15/05/2023 at 12:11 By A former employee of Ubiquiti has been sentenced to six years in jail after he pleaded guilty to posing as an anonymous hacker and a whistleblower in an attempt to extort almost $2 million worth of cryptocurrency while working

CLR SqlShell Malware Targets MS SQL Servers for Crypto Mining and Ransomware 15/05/2023 at 12:11 By Poorly managed Microsoft SQL (MS SQL) servers are the target of a new campaign that’s designed to propagate a category of malware called CLR SqlShell that ultimately facilitates the deployment of cryptocurrency miners and ransomware. “Similar to web shell, which can

Mapping the pathway to volunteer leadership 15/05/2023 at 08:13 By Volunteer leadership opportunities for security professionals are important. This column addresses how to approach and obtain these opportunities. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Intelligence and business risk integration in corporate security 15/05/2023 at 08:13 By Intelligence-related activities found within today’s global security programs aids in the protection of people, physical assets, finances and intellectual property. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

New Phishing-as-a-Service Platform Lets Cybercriminals Generate Convincing Phishing Pages 13/05/2023 at 10:45 By A new phishing-as-a-service (PhaaS or PaaS) platform named Greatness has been leveraged by cybercriminals to target business users of the Microsoft 365 cloud service since at least mid-2022, effectively lowering the bar to entry for phishing attacks. “Greatness, for now, is only focused on

XWorm Malware Exploits Follina Vulnerability in New Wave of Attacks 13/05/2023 at 02:35 By Cybersecurity researchers have discovered an ongoing phishing campaign that makes use of a unique attack chain to deliver the XWorm malware on targeted systems. Securonix, which is tracking the activity cluster under the name MEME#4CHAN, said some of the attacks have primarily targeted manufacturing

Andrew Rallis hired as Executive VP and Chief Risk Officer 12/05/2023 at 22:14 By Andrew Rallis was hired as Executive VP & Chief Risk Officer for Lincoln Financial Group. Rallis has more than 40 years of risk management experience. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Rural hospital cybersecurity legislation introduced to Senate 12/05/2023 at 19:44 By New legislation addresses the need for skilled cybersecurity professionals and digital security enhancement protocols in rural healthcare settings. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

OSHA rules USPS wrongfully terminates employee for reporting an injury 12/05/2023 at 19:44 By Following an OSHA investigation, a Tacoma federal court determined that USPS wrongfully retaliated against an employee for reporting an injury. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Netgear Routers’ Flaws Expose Users to Malware, Remote Attacks, and Surveillance 12/05/2023 at 18:01 By As many as five security flaws have been disclosed in Netgear RAX30 routers that could be chained to bypass authentication and achieve remote code execution. “Successful exploits could allow attackers to monitor users’ internet activity, hijack internet connections, and redirect

Manual processes dominate TPRM as security incidents increase 12/05/2023 at 17:02 By A new study shows 48% of companies still depend on spreadsheets, while 41% report experiencing an impactful third-party breach in the last year. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source