News
-
"The Next Wave of Cyber Threats: Defending Your Company Against Cybercriminals Empowered by Generative AI"Personal information is increasingly under attack in the digital realm due to deepfakes, human error, vulnerabilities, and more. Security experts are continuing to explore the current landscape and how to get ahead of cybercriminals. Generative…
-
"Fortinet Patches Critical RCE Vulnerability in FortiNAC"Fortinet has recently released patches to address a critical vulnerability in its FortiNAC network access control solution. The zero-trust access solution allows organizations to view devices and users on the network and provides granular control…
-
"Southwest, American Airlines Pilot Data Exposed"A data breach faced by a third-party vendor resulted in the exposure of sensitive information on Southwest Airlines and American Airlines pilot applicants. After a third-party vendor was compromised, both US-based air carriers sent out breach…
-
"Internet Systems Consortium (ISC) Fixed Three DoS Flaws in BIND"The Internet Systems Consortium (ISC) has issued security updates to address three Denial-of-Service (DoS) flaws in the Domain Name System (DNS) software suite BIND. The vulnerabilities, tracked as CVE-2023-2828, CVE-2023-2829, and CVE-2023-2911, are…
-
"NIST Wants to Help Prevent Cyberattacks on the Water Sector"The National Institute of Standards and Technology (NIST) is working on its first-ever framework for water infrastructure cybersecurity. NIST's National Cybersecurity Center of Excellence wants input from technology vendors, water sector members, and…
-
"Hackers Steal Data of 45,000 New York City Students in MOVEit Breach"The New York City Department of Education (NYC DOE) recently discovered that hackers stole documents containing the sensitive personal information of up to 45,000 students from its MOVEit Transfer server. The managed file transfer (MFT) software…
-
"Twitter Celeb Hacker Jailed For Five Years"A Liverpool man has recently been handed a five-year jail term after a sophisticated hacking campaign in which he and others hijacked celebrity Twitter accounts in a bid to scam followers. Joseph O’Connor was extradited from Spain to the US on…
-
"Biden-Harris Administration Announces New NIST Public Working Group on AI"The US Secretary of Commerce, Gina Raimondo, recently announced that the National Institute of Standards and Technology (NIST) will launch a new public working group on Artificial Intelligence (AI) that will build on the success of the NIST AI Risk…
-
"US Authorities Seize BreachForums Domain"The US government has recently captured the surface web domains associated with notorious cybercrime marketplace BreachForums, despite the arrest of the site's owner months ago. It is currently unclear why it has taken three months to get to this…
-
"Chinese Hackers Using Never-Before-Seen Tactics for Critical Infrastructure Attacks""Volt Typhoon," a recently identified Chinese nation-state actor, has been observed to be active in the wild since at least mid-2020, with the hacking group linked to never-before-seen tradecraft aimed at maintaining remote access to targets. CrowdStrike…
-
"Deception Technologies Have a Maturity Problem"Deception technologies can provide a more effective method for detecting network attackers, but it is unclear how well security leaders understand their maturity and capabilities. Debi Ashenden, a cybersecurity professor at Adelaide University, described…
-
"Uncovering Attacker Tactics Through Cloud Honeypots"According to Orca Security, attackers typically discover exposed "secrets," or sensitive information that grants access to an enterprise cloud environment, in as little as two minutes and, in many cases, begin exploiting them almost immediately,…