USA - Security Ticks

Businesses foresee major impact from new SEC cybersecurity disclosure rules

AuditBoard, Compliance, cybersecurity, Government, News, report, Risk Management, survey, USA / SecurityTicks

Businesses foresee major impact from new SEC cybersecurity disclosure rules 2024-03-01 at 07:04 By Help Net Security While 98% of security professionals and executives have started working to comply with the new U.S. Securities and Exchange Commission (SEC) cybersecurity disclosure ruling, over one-third are still in the early phases of their efforts, according to AuditBoard. […]

React to this headline:

Businesses foresee major impact from new SEC cybersecurity disclosure rules Read More »

White House: Use memory-safe programming languages to protect the nation

critical infrastructure, Don't miss, Government, Honeywell, Horizon3.ai, Hot stuff, News, programming, software development, Trail of Bits, USA / SecurityTicks

White House: Use memory-safe programming languages to protect the nation 2024-02-27 at 16:31 By Zeljka Zorz The White House is asking the technical community to switch to using memory-safe programming languages – such as Rust, Python, Swift, C#, Java, and Go – to prevent memory corruption vulnerabilities from entering the digital ecosystem. According to a

React to this headline:

White House: Use memory-safe programming languages to protect the nation Read More »

Microsoft begins broadening free cloud logging capabilities

CISA, cloud security, Don't miss, Government, Hot stuff, logging, Microsoft, News, USA / SecurityTicks

Microsoft begins broadening free cloud logging capabilities 2024-02-22 at 14:47 By Helga Labus After select US federal agencies tested Microsoft’s expanded cloud logging capabilities for six months, Microsoft is now making them available to all agencies using Microsoft Purview Audit – regardless of license tier. “This change will impact government departments & agencies who do

React to this headline:

Microsoft begins broadening free cloud logging capabilities Read More »

LockBit takedown: Infrastructure disrupted, criminals arrested, decryption keys recovered

Don't miss, Europe, Europol, extortion, FBI, Hot stuff, law enforcement, National Crime Agency, News, Ransomware, UK, USA / SecurityTicks

LockBit takedown: Infrastructure disrupted, criminals arrested, decryption keys recovered 2024-02-20 at 14:32 By Zeljka Zorz In the wake of yesterday’s surprise law enforcement takeover of LockBit’s leak site, the UK National Crime Agency (NCA) and Europol have shared more information about the extent of the takedown. “Today, after infiltrating the group’s network, the NCA has

React to this headline:

LockBit takedown: Infrastructure disrupted, criminals arrested, decryption keys recovered Read More »

AI-generated voices in robocalls now illegal

Artificial Intelligence, cybersecurity, fcc, Government, News, regulation, USA / SecurityTicks

AI-generated voices in robocalls now illegal 2024-02-09 at 14:32 By Help Net Security The FCC has revealed the unanimous adoption of a Declaratory Ruling that recognizes calls made with AI-generated voices are “artificial” under the Telephone Consumer Protection Act (TCPA). The ruling, which takes effect immediately, makes voice cloning technology used in common robocall scams

React to this headline:

AI-generated voices in robocalls now illegal Read More »

The fight against commercial spyware misuse is heating up

Don't miss, Google, Government, Hot stuff, News, policy, report, spyware, USA / SecurityTicks

The fight against commercial spyware misuse is heating up 2024-02-07 at 14:46 By Zeljka Zorz Though there are organizations out there investigating how commercial spyware is misused to target journalists, human rights defenders and dissidents, the growing market related to the development and sale of this type of software and the exploits used to deploy

React to this headline:

The fight against commercial spyware misuse is heating up Read More »

FBI disrupts Chinese botnet used for targeting US critical infrastructure

botnet, China, critical infrastructure, Don't miss, FBI, Hot stuff, News, USA / SecurityTicks

FBI disrupts Chinese botnet used for targeting US critical infrastructure 2024-02-01 at 15:17 By Helga Labus The FBI has disrupted the KV botnet, used by People’s Republic of China (PRC) state-sponsored hackers (aka “Volt Typhoon”) to target US-based critical infrastructure organizations. A botnet for probing critical infrastructure organizations The threat actors used the KV botnet

React to this headline:

FBI disrupts Chinese botnet used for targeting US critical infrastructure Read More »

10 USA cybersecurity conferences you should visit in 2024

conferences, Don't miss, Hot stuff, News, USA / SecurityTicks

10 USA cybersecurity conferences you should visit in 2024 2024-01-24 at 08:01 By Help Net Security Security BSides Security BSides offers attendees an opportunity to engage and present their ideas actively. Characterized by its intensity, these events are filled with discussions, demonstrations, and interactive participation. BSides are happening all over the USA. To find an

React to this headline:

10 USA cybersecurity conferences you should visit in 2024 Read More »

Citrix Bleed leveraged to steal data of 35+ million Comcast Xfinity customers

Citrix, Comcast, cyberattack, data breach, data theft, Don't miss, hacking, Hot stuff, News, telecommunications, USA, vulnerability, Xfinity / SecurityTicks

Citrix Bleed leveraged to steal data of 35+ million Comcast Xfinity customers 20/12/2023 at 13:32 By Helga Labus Telecommunications company Comcast has confirmed a breach that exposed personal information of more than 35.8 million of Xfinity customers. Exploiting Citrix Bleed to breach Xfinity CVE-2023-4966 (aka Citrix Bleed) – an information disclosure vulnerability in Citrix NetScaler

React to this headline:

Citrix Bleed leveraged to steal data of 35+ million Comcast Xfinity customers Read More »

Law enforcement seizes ALPHV/Blackcat sites, offers decryptor to victims

decrypter, Don't miss, Europol, extortion, FBI, Hot stuff, law enforcement, News, Ransomware, USA / SecurityTicks

Law enforcement seizes ALPHV/Blackcat sites, offers decryptor to victims 19/12/2023 at 19:04 By Zeljka Zorz The US Justice Department announced today a disruption campaign against the Blackcat/ALPHV ransomware group and let victims know that there is a decryptor they can use. FBI develops ALPHV/Blackcat decryptor Over the past 18 months, ALPHV/Blackcat has emerged as the

React to this headline:

Law enforcement seizes ALPHV/Blackcat sites, offers decryptor to victims Read More »

Mr. Cooper breach exposes sensitive info of over 14 million customers

cyberattack, data breach, data theft, Don't miss, financial industry, hacking, Hot stuff, News, USA / SecurityTicks

Mr. Cooper breach exposes sensitive info of over 14 million customers 19/12/2023 at 13:47 By Helga Labus Mortgage company Mr. Cooper has confirmed that personal information of over 14.6 million customers has been exposed in its October 2023 data breach. The breach “On October 31, 2023, Mr. Cooper detected suspicious activity in certain network systems,”

React to this headline:

Mr. Cooper breach exposes sensitive info of over 14 million customers Read More »

Fortifying cyber defenses: A proactive approach to ransomware resilience

attacks, Cigent, cybersecurity, Don't miss, Expert analysis, Expert corner, Government, Hot stuff, investment, News, opinion, Ransomware, resilience, strategy, USA / SecurityTicks

Fortifying cyber defenses: A proactive approach to ransomware resilience 15/12/2023 at 08:02 By Help Net Security Ransomware has become a pervasive threat, compromising the security and functionality of vital systems across the United States. While governmental pledges and public declarations of intent to fight cybercrime are foundational, they often lack the immediate and tangible impact

React to this headline:

Fortifying cyber defenses: A proactive approach to ransomware resilience Read More »

Photos: CyberMarketingCon 2023

conferences, News, USA / SecurityTicks

Photos: CyberMarketingCon 2023 14/12/2023 at 19:04 By Help Net Security Help Net Security sponsored and attended Cybersecurity Marketing Society’s CyberMarketingCon 2023 in Austin, TX. Over the three days of the conference, there were 35 speakers, keynotes, and 15 workshops and sessions covering all aspects of cybersecurity marketing. Here’s a closer look at the event. Photos

React to this headline:

Photos: CyberMarketingCon 2023 Read More »

Shifting data protection regulations show why businesses must put privacy at their core

Compliance, cybersecurity, data, Don't miss, EU, Expert analysis, Expert corner, framework, Hot stuff, InfoSum, News, opinion, Privacy, USA / SecurityTicks

Shifting data protection regulations show why businesses must put privacy at their core 13/12/2023 at 08:31 By Help Net Security Like it or not, data protection will be one of the biggest issues organizations face in 2024. Knowing where to focus compliance efforts will be tricky, with more and more state-level privacy laws becoming effective

React to this headline:

Shifting data protection regulations show why businesses must put privacy at their core Read More »

Hashdex tips spot Bitcoin ETFs to trade by Q2, followed by Ethereum

2024, Bitcoin ETF, bitcoin fund, BTC, crypto outlook, ETF, Hashdex, Spot Bitcoin ETF, Spot Ether ETF, US, USA / SecurityTicks

Hashdex tips spot Bitcoin ETFs to trade by Q2, followed by Ethereum 05/12/2023 at 09:04 By Cointelegraph by Jesse Coghlan Hashdex’s head of product for the U.S. and Europe says the exact timing for a spot Bitcoin ETF is unclear but predicts it to start by the second quarter of 2024. This article is an

React to this headline:

Hashdex tips spot Bitcoin ETFs to trade by Q2, followed by Ethereum Read More »

CyberAv3ngers hit Unitronics PLCs at multiple US-based water facilities

Check Point, CISA, critical infrastructure, Don't miss, Hot stuff, Israel, NCSC, News, PLC, USA / SecurityTicks

CyberAv3ngers hit Unitronics PLCs at multiple US-based water facilities 04/12/2023 at 16:48 By Helga Labus Iran-affiliated attackers CyberAv3ngers continue to exploit vulnerable Unitronics programmable logic controllers (PLCs), US and Israeli authorities have said in a joint cybersecurity advisory. CyberAv3ngers targeting Unitronics PLCs CISA has recently confirmed that Iran-affiliated attackers took over a Unitronics Vision Series

React to this headline:

CyberAv3ngers hit Unitronics PLCs at multiple US-based water facilities Read More »

CISA urges water facilities to secure their Unitronics PLCs

critical infrastructure, Don't miss, Hot stuff, News, PLC, Ransomware, tips, USA / SecurityTicks

CISA urges water facilities to secure their Unitronics PLCs 30/11/2023 at 18:02 By Zeljka Zorz News that Iran-affiliated attackers have taken over a programmable logic controller (PLC) at a water system facility in Pennsylvania has been followed by a public alert urging other water authorities to immediately secure their own PLCs. “The cyber threat actors

React to this headline:

CISA urges water facilities to secure their Unitronics PLCs Read More »

CISA offers cybersecurity services to non-federal orgs in critical infrastructure sector

CISA, critical infrastructure, cyber risk, Don't miss, Hot stuff, News, USA / SecurityTicks

CISA offers cybersecurity services to non-federal orgs in critical infrastructure sector 22/11/2023 at 12:47 By Helga Labus The Cybersecurity and Infrastructure Security Agency (CISA) has announced a pilot program that aims to offer cybersecurity services to critical infrastructure entities as they have become a common target in cyberattacks. “In alignment with CISA’s ‘Target Rich, Resource

React to this headline:

CISA offers cybersecurity services to non-federal orgs in critical infrastructure sector Read More »

Exploring the global shift towards AI-specific legislation

Artificial Intelligence, cybersecurity, data, Don't miss, EU, Features, framework, GDPR, Government, Hot stuff, Hunton Andrews Kurth, legislation, News, opinion, Privacy, regulation, UK, USA / SecurityTicks

Exploring the global shift towards AI-specific legislation 06/11/2023 at 09:01 By Mirko Zorz In this Help Net Security interview, Sarah Pearce, Partner at Hunton Andrews Kurth, offers insights into the evolving landscape of AI legislation and its global impact. Pearce explores key principles, public participation, the future of AI laws in a world of rapid

React to this headline:

Exploring the global shift towards AI-specific legislation Read More »

SolarWinds and CISO accused of fraud, control failures

CISO, Government, law, News, SolarWinds, USA / SecurityTicks

SolarWinds and CISO accused of fraud, control failures 31/10/2023 at 11:16 By Help Net Security The Securities and Exchange Commission announced charges against SolarWinds and its CISO, Timothy G. Brown, for fraud and internal control failures relating to allegedly known cybersecurity risks and vulnerabilities. The complaint alleges that, from at least its October 2018 initial

React to this headline:

SolarWinds and CISO accused of fraud, control failures Read More »