News
-
"Securing The Smart Grid"Birol Yeşilada, government faculty and director of Portland State University's (PSU) Mark O. Hatfield School of Government, is the principal investigator of a new two-year $2 million grant awarded to PSU by the National Security Agency (NSA). This grant…
-
"CISA Shares Guidance on How to Prevent Ransomware Data Breaches"The U.S. Homeland Security Department's Cybersecurity and Infrastructure Security Agency (CISA) has shared guidance on how government and private sector organizations could prevent data breaches caused by ransomware attacks. CISA's guidance covers best…
-
"Fortinet Firewall Flaw Could Allow Hackers to Take Over a Device"Fortinet's Web Application Firewall (WAF) platform FortiWeb contains an Operating System (OS) command injection vulnerability that could allow hackers to take over a device and run commands on it. According to researchers at Rapid7, the bug in FortiWeb's…
-
"US Census Bureau Slammed for 2020 Breach"A government inspector has heavily criticized the US Census Bureau after a 2020 breach which could have been prevented by prompt patching. Although the attacker could not access servers used for the 2020 census, they could modify user account data…
-
"Device Complexity Leaving Schools at Heightened Risk of Ransomware Attacks"Researchers at Absolute Software conducted new research that revealed the significant management and security challenges faced by K-12 education IT teams with the rise in digital learning and widespread adoption of 1:1 device programs. The researchers…
-
"'Capture' Your IoT Devices and Improve Their Security"Most cyberattacks on Internet of Things (IoT) devices are caused by misconfigurations or weak passwords. However, security researchers are concerned about the extensive use of third-party libraries (i.e., collections of code vendors might use in their…
-
"One of Every Four Companies Suffered at Least One Email Security Breach, Hornetsecurity Survey Finds"Hornetsecurity, a cloud email security provider, surveyed more than 420 businesses that use the Microsoft 365 platform in order to gain insight into how they handle email security in a more decentralized working environment. Results from the survey…
-
"Security Researchers Reveal Staggering Magnitude of ICS Vulnerabilities in 2021 as Cyber Attacks on Critical Infrastructure Increase"The third Biannual ICS Risk and Vulnerability Report released by the industrial cybersecurity company Claroty reveals a significant increase in the disclosure of ICS vulnerabilities in the first half of 2021 compared to the previous six months. Claroty's…
-
"Indiana Contact Tracing Data Breached"It has been discovered that nearly 750,000 residents of Indiana have been impacted by the data breach involving responses collected via the Hoosier State's COVID-19 online contact tracing survey. An unnamed vulnerability-hunting company discovered…
-
"Phishing Costs Surge to $15m Annually for US Organizations"The security vendor Proofpoint commissioned the Ponemon Institute to poll nearly 600 IT and IT security practitioners to compile its latest Cost of Phishing study. The researchers found that the average cost of phishing for large US organizations…
-
"Troubling New Disk-Level Encryption Ransomware Surfaces"A new ransomware variant dubbed DeepBlueMagic has been discovered by researchers at Heimdal Security. According to the researchers, DeepBlueMagic targets different disk drives on a target organization's servers instead of encrypting files on endpoint…
-
"Mandiant, CISA Urge ThroughTek Customers to Fix Software Bug in Millions of Baby Monitors, Cameras"Researchers at FireEye's threat intelligence and incident response unit Mandiant have discovered a software flaw that leaves millions of Internet of Things (IoT) devices vulnerable to remote attacks. Hackers could use this vulnerability to intercept…