The Cyber Express
The ever-evolving landscape of cybersecurity is shaped by a dedicated group of individuals. These pioneers, through their research, entrepreneurship, and
Infosecurity News
Experts at the RSA Conference discussed what CISOs can do to protect themselves against legal pressure
CSO
Two high-risk vulnerabilities could be exploited to allow attackers to gain full administrative control on devices via leaked password hashes.
CSO
The UK’s defence minister would not confirm that the attack was conducted by an element of the Chinese state, rather blaming the “potential failings” of a partner.
Infosecurity News
CISOs share their experience of managing real-life cyber incidents provide their recommendations to survive cyber-attacks
CSO
The new addition to Google Cloud Security is designed to give security teams information to inform approaches to protecting against external threats, managing attack surfaces, and mitigating digital risks.
HACKRead
The Paris 2024 Olympics, expected to attract over 1 billion viewers, are a prime target for cyber criminality due to rising online traffic.
DarkReading
Though Olympics officials appear to have better secured their digital footprint than other major sporting events have, significant risks remain for the Paris Games.
CSO
The company has appointed new product security chiefs as well as a customer-facing CISO as it continues to respond to high-profile attacks on its products and own network.
CSO
Companion publications to NIST’s AI Risk Management Framework explore a long worry list in more detail and are likely to become essential reading for security professionals.
CSO
Tools, platforms, and services that the CSO team recommends 2024 RSA Conference attendees check out.
CSO
Attackers target flaws for a reason: Even years after they are discovered, they still work.
CyberSecurity Dive
With increased expectations and a prime position in the spotlight, AppSec teams need reliable tools that can act as a force multiplier for their AppSec programs.
Infosecurity News
This drop represents a direct threat to US national cybersecurity infrastructure, said CyberSN representatives in their report
Cyber Security News
In a digital age where information is the new currency, the recent global hack has once again highlighted the urgent need for enhanced cybersecurity measures.
Latest Hacking News
In a digital age where information is the new currency, the recent global hack has once again highlighted the urgent need for enhanced cybersecurity measures. The breach was identified as Midnight Blizzard, from the Russian state-sponsored
The Cyber Wire
N2K Networks today announced the premiere of Cyber Talent Insights, a three-part special series podcast that guides listeners through effective strategies to develop cybersecurity teams in the constantly changing landscape of the industry.
CSO
Sisense customers told to update credentials following a compromise that is under investigation.
CyberNews
A US Cyber Safety Review Board blames Microsoft for a 2023 Chinese hack of top US officials' emails citing 'preventable' cybersecurity lapses and lack of transparency.
%20--%20Supply%20Chain%20Backdoor%20(1).webp)
Cyber Security News
Fedora Linux 40 beta users have been urged to take immediate action after an Upstream supply chain attack that has compromised SSH protocol.
Cyber Security News
The European Union Agency for Cybersecurity (ENISA) has published a list of the top ten emerging threats anticipated to impact the digital.
Cyber Security News
Over the past year, macOS users, particularly those in the cryptocurrency sector, have been increasingly targeted by infostealers.
Cyber Security News
AT&T has confirmed that personal data from approximately 73 million current and former customers has been leaked on the dark web. This confirmation comes after the telecommunications giant initially denied that the leaked data originated from their systems.
Cyber Security News
An automated risk detection system identified a typosquatting campaign targeting popular Python libraries on PyPI.
Cyber Security News
Password spraying is a technique hackers often take advantage of because it enables them to gain unauthorized access to many accounts or systems. They can potentially compromise many targets with little difficulty by using the same passwords for several accounts.
.webp)
Cyber Security News
GitLab has announced the release of updated versions for both its Community Edition (CE) and Enterprise Edition (EE), addressing critical vulnerabilities that could potentially allow attackers to inject malicious scripts and cause denial of service (DoS) attacks.
CSO
The study by Diligent and Bitsight points to advanced security and strong risk or audit committees as good predictors of an enterprise’s financial success.
CyberNews
Governors are asked to identify any significant vulnerabilities, reduce cybersecurity risks, and exercise plans to respond and recover from a cyber incident.
CyberSecurity Dive
The words businesses use in cybersecurity disclosures matter. They can channel confidence in the recovery process, potential impacts and legal liabilities.
CSO
Available worldwide on April 1, Microsoft Copilot for Security uses generative AI to provide incident summaries, step-by-step remediation guidance, and reverse-engineering of scripts.
Cyber Security News
Best Network Security Solutions for CSO :1. Perimeter81 2. Cisco Systems 3. Palo Alto Networks 4. Fortinet 5. Check Point Software.
Infosecurity News
AI scientist Inma Martinez predicts governments will start requiring ‘frontier’ AI labs full disclosure on the purpose of the tools they are developing
CSO
Many TeamCity instances remain unpatched, allowing hackers to generate rogue admin accounts at a massive scale.
CyberSecurity Dive
Providers said the outage at the UnitedHealth-owned technology company has affected billing, eligibility checks, prior authorization requests and prescription fulfillment.
CyberSecurity Dive
CSO David Bradbury detailed to Cybersecurity Dive what the identity and access management company got wrong and the security pledges it's making to customers.
SecurityWeek
Shadowserver Foundation has identified roughly 28,000 Microsoft Exchange servers impacted by a recent zero-day.
DarkReading
Cyberattackers can exploit a vulnerability in JetBrain's continuous integration and delivery (CI/CD) server (APT target) to gain administrative control.
Infosecurity News
Tracked as CVE-2024-23917, the flaw carries a CVSS rating of 9.8
CyberSecurity Dive
A threat actor that previously intruded Cloudflare’s network through its Okta environment regained access with mistakenly unrotated credentials.
CyberSecurity Dive
The company is required to delete unnecessary data and inform the agency of future breaches.
CSO
Targeting time and talent challenges in security, the new Infinity AI Copilot promises integrated, intelligent smart assistant for threat management and remediation.
The Cyber Wire
N2K announced today that the Cybersecurity Marketing Society has joined N2K’s CyberWire network with their popular weekly podcast, Breaking Through in Cybersecurity Marketing.
DataBreaches
CSO reports: Zero-day exploits, supply chain attacks fuel 72% increase over previous record for incidents of compromise. Another increase is expected for 2024...
The Cyber Express
In an era where cybersecurity has become an integral part of organizations, the role of Chief Information Security Officers (CISOs)
CSO
The company says the threat actor, also believed to be behind a recent Microsoft attack, accessed a “small percentage” of corporate mailboxes.
Infosecurity News
GitHub urges customers to apply a new patch and take action if impacted by credential rotation
CSO
Keep up with news of CSO, CISO, and other senior security executive appointments.
CSO
Promises safer, streamlined logins by removing the need for devices and tokens to verify identity and store personal information, common target of hackers.
The Cyber Wire
N2K and Palo Alto Networks® Unit 42® announced today the launch of their standalone podcast, Threat Vector, on the N2K media network, building on the success of their bi-weekly segment on the CyberWire Daily podcast.
The Cyber Wire
N2K Networks, a leader in strategic cyber workforce intelligence, is proud to announce its partnership with Women in CyberSecurity (WiCyS), a nonprofit organization dedicated to the recruitment, retention, and advancement of women in cybersecurity. This collaboration will result in a comprehensive Cyber Talent Study that leverages skills data from the professional members of WiCyS, with an aim to deepen the collective understanding of cybersecurity competencies within the industry.
The Cyber Express
In 2024, the lines between reality and illusion blur as deepfake trends reshape our perception. No longer confined to playful
CSO
The CSO Hall of Fame is accepting nominations for the first time to honor exceptional security leaders with at least 10 years of executive experience.
The Cyber Wire
Reprisal and retaliation in the war of missiles, as President Putin says Ukraine is already destroyed, and that the real war is against the West. Cyber operations continue to represent the familiar mix of threat actors: intelligence services, hacktivist auxiliaries, and criminal privateers.
DarkReading
Yahoo customers suffered the largest data breaches in history by some measures. But a decade on, experts warn, we still haven't learned our lesson.
CyberNews
Contrary to popular belief, the cyber attackers did not breach all these companies individually.
DarkReading
Why Sullivan feels paying off attackers was a way of solving the problem.
CSO
Embrace of a "shift everywhere" philosophy is driving a demand for automated, event-driven software security testing.
The Cyber Wire
Drone technology improvises and adapts, but so do air defenses. Experts warn of hybrid wars' spillover into remote sections of cyberspace.
The Cyber Wire
Drone technology improvises and adapts, but so do air defenses. Experts warn of hybrid wars' spillover into remote sections of cyberspace.
Infosecurity News
Exposure is limited to names and emails for most
CyberNews
Okta data breach impacted all of its users.
CyberSecurity Dive
The single sign-on provider significantly widened the scope of the attack two months after customers first reported suspicious activity on their Okta environments.
CyberSecurity Dive
Security professionals should focus on ambiguous, dynamic problems that can’t be solved by software, Stephen Schmidt says.
CSO
DP World Australia restricted port operations for two days following the discovery of a cyber incident.
CyberSecurity Dive
The group, led by Tenable CEO Amit Yoran, raised concerns that significant cuts to the agency would undermine efforts to combat rising threats to critical infrastructure and federal systems.
CSO
Remediation guidance will help customers accelerate data risk reduction and tackle threats such as insider and toxic/dark data hazards.
Infosecurity News
Several suffered follow-on session hijacking attacks
CyberSecurity Dive
The IAM provider says the attack was most likely linked to a compromised employee’s personal Google account or personal device.
The Record
The identity management company said that from September 28, to October 17, a threat actor “gained unauthorized access to files inside Okta’s customer support system associated with 134 Okta customers.”
CyberSecurity Dive
Legal, risk management and cybersecurity experts say companies are now on notice to prioritize internal controls, investor transparency and material disclosure requirements.
The Record
Almost 5,000 Okta employees were affected by a data breach following a cyberattack on a third-party provider used by the company for healthcare services.
CyberSecurity Dive
With details scant, worries remain about how the attacks might have played out for less security-focused businesses that were impacted.
CSO
A new system based on machine learning is now available from Deep Instinct, which touts its storage protection as a new 'prevention-first' approach to security threats.
The Record
Password manager 1Password and cybersecurity and networking giant Cloudflare were targeted by hackers following the breach affecting single sign-on provider Okta, according to statements from both companies.
Infosecurity News
Threat actor accessed case management system
Ars Technica
Hackers obtained valid credentials, but Okta doesn't say how.
Bleeping Computer
Okta says attackers accessed files containing cookies and session tokens uploaded by customers to its support management system after breaching it using stolen credentials.
CyberSecurity Dive
A threat actor accessed customer support tickets and files containing sensitive data. Okta declined to say how many customers are impacted.
The Record
Hackers accessed files from customer support cases, exposing the information of an undisclosed number of people.
CSO
The AI-based risk assessment tool is the latest in a new wave of AI products sweeping into the security market.
CSO
Third parties are registering brands under the .AI domain to launch phishing attacks or other types of brand abuse.
DarkReading
Ongoing Rapid Reset DDoS flood attacks exposed organizations need to patch CVE-2023-44487 immediately to head off crippling outages and business disruption.
CyberSecurity Dive
Google, AWS and Cloudflare warned the HTTP/2 Rapid Reset attacks are beyond anything ever recorded.
CyberSecurity Dive
While it might be easier for an organization to build its core cybersecurity system from one company, that may not provide the best option.
CyberSecurity Dive
The cloud giant will start requiring users with the highest level of privileges to use MFA starting in mid-2024. Google, in response, said it will mandate MFA for certain accounts this year.
CSO
Enterprise-grade software embeds AI-driven, forensic watermarking in emails and documents to pinpoint potential insider risks
Computerworld
Having a plan in place before deploying genAI for software product development and employee assistance tools is critical, says Navan CSO Prabhath Karanth. Otherwise, the threat potential is high.
CSO
Generative AI benchmark evaluates the ability of large language models to identify and score cybersecurity threats within cloud logs and telemetries.
CyberSecurity Dive
Cyberattacks are fueled by the shortcomings of business authentication controls. Bad things happen when access falls apart and credentials land in the wrong hands.
CyberSecurity Dive
IT workers at four organizations using Okta were successfully hit by a consistent pattern of social engineering attacks.
CyberSecurity Dive
Security executives find themselves in the eye of the needle as governance and incident response come into focus.
CSO
Report claims the LockBit ransomware group has published vast amounts of stolen information on the dark web.
CSO
Bitbucket users can now access Arnica’s hardcoded secrets mitigation and code risk security features including static application security testing and software composition analysis.
CSO
Report finds businesses implementing dedicated third-party offerings see significant improvement in their ability to mitigate fraud and abuse.
SecurityWeek
As SEC cyber incident disclosure rules come into effect, organizations will be forced to consider giving security leaders a seat on boards
CSO
The enhancements are designed to better protect sensitive data, harden admin access controls, and provide more flexibility on where data is stored and processed.
CSO
The open-source framework aims to help security teams improve their governance and monitoring of generative AI and large language models.
CyberSecurity Dive
The rules, which take effect Sept. 5, encountered mixed reactions. Some champion board-level cyber accountability. Others say the rules are too big of a lift.
CSO
Here are the top cybersecurity tools, platforms, capabilities, services, and technologies launched at Black Hat USA 2023 that you need to know about.
CyberSecurity Dive
Microsoft has been dragging its feet to fully resolve the issue more than four months after it was discovered, CEO Amit Yoran said.
Loading more articles....