In today’s cybersecurity news… Iranian hackers ramping up U.S. election interference Microsoft has issued a new report stating that Iranian hackers have “increased their efforts to influence the upcoming U.S. […] The post Cybersecurity News: Iran election interference, AMD SinkClose…
Tag: CISO Series
Cybersecurity Headlines: Chameleon malware reappears, Rhysida hospital attack, Blacksuit’s $500m tally
In today’s cybersecurity news… Chameleon reappears targeting Canadian restaurant chain The malware originally known for attacking banks has now begun targeting hospitality workers in Canada and Europe, including “an unnamed […] The post Cybersecurity Headlines: Chameleon malware reappears, Rhysida hospital…
Should Deny By Default Be the Cornerstone of Zero Trust?
How far can we extend a deny-by-default approach as we build out our zero-trust architecture? Can that aggressive security tactic work for the business without disrupting productivity? Conventional wisdom says […] The post Should Deny By Default Be the Cornerstone…
Cybersecurity Headlines: McLaren hospitals disrupted, CrowdStrike improves processes, Ronin Network hacked
In today’s cybersecurity news… McLaren hospitals disruption linked to INC ransomware attack On Tuesday, IT and phone systems at McLaren Health Care hospitals were disrupted following a cyber attack. The […] The post Cybersecurity Headlines: McLaren hospitals disrupted, CrowdStrike improves…
How NetSPI Built a Proactive Security Platform
Jumping from penetration testing to a full proactive security platform isn’t an easy move. But as organizations need to address the critical needs of IT organizations, InfoSec teams, and CISOs, […] The post How NetSPI Built a Proactive Security Platform…
Join Us 08-23-24 for “Hacking the Future of Pentesting” – Super Cyber Friday
Please join us on Friday August 23, 2024 for Super Cyber Friday. Our topic of discussion will be “Hacking the Future of Pentesting: An hour of critical thinking about how […] The post Join Us 08-23-24 for “Hacking the Future…
Cybersecurity Headlines: Google kernel zero-day, voter portal flaw, ransomware as terrorism
Google patches Android kernel zero-day As part of its Android security update for August, Google patched 46 vulnerabilities. This included a use-after-free vulnerability in the Android network route management stack […] The post Cybersecurity Headlines: Google kernel zero-day, voter portal…
Cybersecurity Headlines: CrowdStrike strikes back against Delta, Keytronic loses millions to ransomware, Flaw in Apache OFBiz
CrowdStrike strikes back against Delta’s claims of negligence The finger-pointing continues as CrowdStrike responds to Delta’s lawsuit threats with attorneys from CrowdStrike rejecting Delta’s claims that the company failed to […] The post Cybersecurity Headlines: CrowdStrike strikes back against Delta,…
We Make Threat Actors Read Our Resiliency Policy Before Attacking Us
Many businesses realize that cyberattacks are inevitable and a sound business policy, led by the security department, is one of resiliency. Business continuity planning and disaster recovery are understood goals, […] The post We Make Threat Actors Read Our Resiliency…
Cybersecurity Headlines: Software update malware, investors sue CrowdStrike, cybercriminals in prisoner swap
Hackers use ISP to send malware through software updates The hacking group known as both StormBamboo and Evasive Panda has been observed exploiting an internet service provider in order to […] The post Cybersecurity Headlines: Software update malware, investors sue…
Cybersecurity News: Cencora patient breach, OneDrive phishing campaign, Argentina’s crime predictions
In today’s cybersecurity news… Cencora confirms patient data stolen in February cyberattack Following up on cyberattack on pharmaceutical supplier Cencora, the company has now confirmed, in an updated filing to […] The post Cybersecurity News: Cencora patient breach, OneDrive phishing…
Cybersecurity News: Elections and DDoS, dating apps leak locations, Germany blames China
In today’s cybersecurity news… DDoS attacks won’t impact US elections CISA and the FBI issued a joint statement to this effect, saying that DDoS activity could at best make accessing […] The post Cybersecurity News: Elections and DDoS, dating apps…
What Is a Field CISO?
We’re increasingly seeing the industry fill up with Field CISOs. Why is the CISO out in the field? What does that role entail? Check out this post for the discussion […] The post What Is a Field CISO? appeared first…
The Challenges and Responsibilities of CISOs with Halcyon
We’re seeing increasing pressure and anxiety put on the CISO role, as legal and regulatory pressure seems to single out people in these positions. This leaves CISOs with a lot […] The post The Challenges and Responsibilities of CISOs with…
Join Us 08-16-24 for “Hacking the Demo” – Super Cyber Friday
Please join us on Friday August 16, 2024 for Super Cyber Friday. Our topic of discussion will be “Hacking the Demo: An hour of critical thinking about how to be […] The post Join Us 08-16-24 for “Hacking the Demo”…
Cybersecurity News: Delta’s legal maneuver, Record-breaking ransom, Meta $1.4B settlement
In today’s cybersecurity news… Delta enlists Microsoft’s legal nemesis over CrowdStrike losses Delta Air Lines suffered an estimated $500 million in operational losses due the CrowdStrike update that caused a […] The post Cybersecurity News: Delta’s legal maneuver, Record-breaking ransom,…
Incident Response Is So Important We Might Try Getting Good At It
If incident response’s mission statement is so clear, why do so many companies struggle when delivering on it? Often the fault lies with communications. The business and its divisions are […] The post Incident Response Is So Important We Might…
Cybersecurity News: HealthEquity data breach, CrowdStrike impact grows, Proofpoint exploit
4.3 million impacted by HealthEquity data breach One of the largest HSA providers in the U.S., HealthEquity, is in the process of notifying 4.3 million people that their personal and […] The post Cybersecurity News: HealthEquity data breach, CrowdStrike impact…
Cybersecurity News: PyPi package targets MacOS, Columbus, Ohio suffers cyber incident, Windows July update problems
In today’s cybersecurity news… PyPi package targets MacOS Researchers from Checkmarx have discovered a malicious package on the Python Package Index (PyPI) focused on Apple macOS systems. Its goal is […] The post Cybersecurity News: PyPi package targets MacOS, Columbus,…
Cybersecurity News: Microsoft Defender exploited, assassin’s encryption frustration, NK elite hackers
In today’s cybersecurity news… Hackers exploiting Microsoft Defender SmartScreen bug Researchers at Fortinet FortiGuard Labs have observed a new campaign that exploits an Internet Shortcut Files Security Feature Bypass vulnerability […] The post Cybersecurity News: Microsoft Defender exploited, assassin’s encryption…