News
-
"Divide Between IT and OT Teams Stops Businesses Having a Unified Security Strategy"According to a report released by Dragos and the Ponemon Institute, over 63 percent of organizations have faced an ICS/OT cybersecurity incident in the past two years, but only 21 percent of organizations have a mature ICS/OT cybersecurity program in…
-
"CDSL Data Breach Exposes Sensitive Details of 44 Million Indian Investors"The Central Depository Services Limited (CDSL), India's popular securities depository services provider, experienced a data breach at its subsidiary CDSL Ventures Limited (CVL). According to CyberX9's research team, the data breach exposed personal and…
-
"Over 80% of CNI Firms Have Been Breached in Past 36 Months"Security researchers at Skybox Security stated that most IT and security leaders in critical infrastructure (CNI) organizations are underestimating the scale of the cyberthreat, despite having suffered breaches over the past three years. The…
-
A Proclamation on Critical Infrastructure Security and Resilience Month, 2021OCTOBER 29, 2021 | PRESIDENTIAL ACTIONS For generations, American infrastructure — from the Erie Canal and the Transcontinental Railroad to the Hoover Dam — has been a cornerstone of our economic power, providing jobs, facilitating transportation,…
-
"Gravitational Force of Ransomware Black Hole Pulls in Other Cyberthreats to Create One Massive, Interconnected Ransomware Delivery System"The Sophos 2022 Threat Report covers the gravitational force of the ransomware black hole that is pulling in other cyber threats to form one interconnected ransomware delivery system. The report analyzes the growing modularity of the ransomware…
-
"Kudos, Not Consequences, Are an Ideal Tactic for Security Training Engagement"It is essential to continue finding strategies that could help companies ensure employee engagement in security awareness training programs. According to panelists who spoke at CyberRisk Alliance's 2021 InfoSec World conference, giving out punishments…
-
"These Vulnerabilities Could Leave Millions of Connected Medical Devices Open to Attack"Cybersecurity researchers at Forescout and Medigate released details pertaining to critical vulnerabilities contained by millions of connected devices in hospital networks that could allow malicious actors to interfere with medical equipment and patient…
-
"Passport Scammers Spoof Texas HSI"Officials at the United States Immigration and Customs Enforcement’s (ICE) Homeland Security Investigations (HSI) department in Texas have issued a warning about a new phone scam. Threat actors carrying out the malicious campaign have been…
-
"Robinhood Says Millions of Customer Names and Email Addresses Taken in Data Breach"Online stock trading platform Robinhood has confirmed it was hacked last week. More than five million customer email addresses and two million customer names were taken during the breach. The company said that a malicious hacker had socially…
-
"CISA Urges Vendors To Patch BrakTooth Bugs After Exploits Release"Researchers from the Singapore University of Technology and Design (SUTD) released public exploit code and a proof of concept (POC) tool to test Bluetooth devices for a set of 16 System-on-a-Chip (SoC) flaws known as BrakTooth. The researchers discovered…
-
"Phishing: Attackers Use DocuSign to Send Malicious Links"Attackers are using the electronic agreement management company DocuSign to distribute malicious phishing links. The phishing attack involves a malicious actor registering an account with DocuSign or compromising another user's account. From there,…