Uncategorized

Safeguarding Patients’ Personal Health Information: 7 Steps to Achieving HIPAA Compliance with Trustwave DbProtect 29/06/2023 at 17:18 By The Health Insurance Portability and Accountability Act, best known as HIPAA, is one of the most well-known healthcare privacy laws in the United States. The primary objective of HIPAA is to safeguard patients’ Personal Health Information (PHI). […]

React to this headline:

Enterprise SIEMs miss 76% of all MITRE ATT&CK techniques used 29/06/2023 at 15:03 By According to industry analysts, the SIEM continues to be the “operating system of the SOC” and is not going away anytime soon. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

The Right Way to Enhance CTI with AI (Hint: It’s the Data) 29/06/2023 at 14:32 By Cyber threat intelligence is an effective weapon in the ongoing battle to protect digital assets and infrastructure – especially when combined with AI. But AI is only as good as the data feeding it. Access to unique, underground sources

React to this headline:

North Korean Hacker Group Andariel Strikes with New EarlyRat Malware 29/06/2023 at 14:32 By The North Korea-aligned threat actor known as Andariel leveraged a previously undocumented malware called EarlyRat in attacks exploiting the Log4j Log4Shell vulnerability last year. “Andariel infects machines by executing a Log4j exploit, which, in turn, downloads further malware from the command-and-control

React to this headline:

Android Spy App LetMeSpy Suffers Major Data Breach, Exposing Users’ Personal Data 29/06/2023 at 14:32 By Android-based phone monitoring app LetMeSpy has disclosed a security breach that allowed an unauthorized third-party to steal sensitive data associated with thousands of Android users. “As a result of the attack, the criminals gained access to email addresses, telephone

React to this headline:

Critical Security Flaw in Social Login Plugin for WordPress Exposes Users’ Accounts 29/06/2023 at 11:18 By A critical security flaw has been disclosed in miniOrange’s Social Login and Register plugin for WordPress that could enable a malicious actor to log in as any user-provided information about email address is already known. Tracked as CVE-2023-2982 (CVSS score: 9.8),

React to this headline:

Newly Uncovered ThirdEye Windows-Based Malware Steals Sensitive Data 29/06/2023 at 08:32 By A previously undocumented Windows-based information stealer called ThirdEye has been discovered in the wild with capabilities to harvest sensitive data from infected hosts. Fortinet FortiGuard Labs, which made the discovery, said it found the malware in an executable that masqueraded as a PDF file with a Russian name

React to this headline:

Security leaders discuss NSA guide to mitigate BlackLotus threat 28/06/2023 at 19:03 By The National Security Agency (NSA) is warning of a known vulnerability in the Microsoft Windows secure startup process that malicious actors could use to bypass Secure Boot protection and execute BlackLotus malware. This article is an excerpt from Subscribe to Security Magazine’s

React to this headline:

Alert: New Electromagnetic Attacks on Drones Could Let Attackers Take Control 28/06/2023 at 18:21 By Drones that don’t have any known security weaknesses could be the target of electromagnetic fault injection (EMFI) attacks, potentially enabling a threat actor to achieve arbitrary code execution and compromise their functionality and safety. The research comes from IOActive, which found that

React to this headline:

CryptosLabs Scam Ring Targets French-Speaking Investors, Rakes in €480 Million 28/06/2023 at 17:32 By Cybersecurity researchers have exposed the workings of a scam ring called CryptosLabs that’s estimated to have made €480 million in illegal profits by targeting users in French-speaking individuals in France, Belgium, and Luxembourg since April 2018. The syndicate’s massive fake investment

React to this headline:

Las Vegas makes cybersecurity updates 28/06/2023 at 17:15 By Las Vegas is updating its cybersecurity and will switch to a hybrid multi-cloud environment to protect sensitive data and critical infrastructure. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Research reveals rise in sophisticated attacks against mobile devices 28/06/2023 at 16:47 By Research finds 187% increase in the number of compromised devices that were fully exploited, highlighting growing risks posed to mobile-powered businesses This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Financial fraud prevention strategies 28/06/2023 at 15:32 By Michael Jabbara, Vice President, Head of Global Fraud Services at Visa, covers the evolution of the financial fraud landscape and more in this episode of The Security Podcast. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

5 Things CISOs Need to Know About Securing OT Environments 28/06/2023 at 14:05 By For too long the cybersecurity world focused exclusively on information technology (IT), leaving operational technology (OT) to fend for itself. Traditionally, few industrial enterprises had dedicated cybersecurity leaders. Any security decisions that arose fell to the plant and factory managers, who

React to this headline:

8Base Ransomware Spikes in Activity, Threatens U.S. and Brazilian Businesses 28/06/2023 at 14:05 By A ransomware threat called 8Base that has been operating under the radar for over a year has been attributed to a “massive spike in activity” in May and June 2023. “The group utilizes encryption paired with ‘name-and-shame’ techniques to compel their

React to this headline:

Critical SQL Injection Flaws Expose Gentoo Soko to Remote Code Execution 28/06/2023 at 11:17 By Multiple SQL injection vulnerabilities have been disclosed in Gentoo Soko that could lead to remote code execution (RCE) on vulnerable systems. “These SQL injections happened despite the use of an Object-Relational Mapping (ORM) library and prepared statements,” SonarSource researcher Thomas

React to this headline:

Part 2: Preparing the Board of Directors for the SEC’s Upcoming Cybersecurity Compliance Regulations 27/06/2023 at 19:17 By In March 2022, the U.S. Securities and Exchange Commission (SEC) issued a proposed rule, the Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure, that, if adopted, would require companies to disclose their cybersecurity governance capabilities and the

React to this headline:

CISA releases cloud services guidance and resources 27/06/2023 at 19:01 By CISA has recently released the first series of final security guidance resources under the organization’s Secure Cloud Business Applications (SCuBA) project: This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Strawberry hotels deploys digital room keys in Apple Wallet 27/06/2023 at 18:49 By Strawberry hotels has become one of the first outside of North America to adopt digital room keys in Apple Wallet. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

New Mockingjay Process Injection Technique Could Let Malware Evade Detection 27/06/2023 at 18:02 By A new process injection technique dubbed Mockingjay could be exploited by threat actors to bypass security solutions to execute malicious code on compromised systems. “The injection is executed without space allocation, setting permissions or even starting a thread,” Security Joes researchers

React to this headline: