Data Breach Today

JULY 10, 2020

Phones Sold Through US Government-Subsidized Program For the second time this year, security researchers have found malware embedded in low-cost Android smartphones distributed through a U.S. government program, security firm Malwarebytes reports.

Government 328

Government Security 328

Data Breach Today

NOVEMBER 18, 2020

Learning From Difficult Recoveries and Advice in Government Alerts As ransomware attacks on the healthcare sector continue to surge, entities should heed the lessons emerging from these incidents as well as the advice provided in alerts from government agencies, security experts say.

Ransomware 321

Ransomware Government Security 321

Data Breach Today

FEBRUARY 21, 2020

Defense Information Systems Agency Has a Security Mission A U.S. Defense Department agency that's responsible for providing secure communications and IT equipment for the president and other top government officials says a data breach of one of its systems may have exposed personal data, including Social Security numbers.

Data breaches 351

Data breaches Personal data Communications Government 351

Data Breach Today

SEPTEMBER 16, 2020

Businesses, Agencies The hacking group "Pioneer Kitten," which has suspected ties to the Iranian government, is taking advantage of several unpatched vulnerabilities and using open source tools to target U.S. businesses as well as federal government agencies, according to the Cybersecurity and Infrastructure Security Agency.

Government 325

Government Cybersecurity Security 325

Data Breach Today

OCTOBER 30, 2020

Microsoft and CISA: Unpatched Flaw Could Make Government Systems Vulnerable to Hackers Microsoft and the U.S. Cybersecurity and Infrastructure Security Agency are urging local government agencies to patch the Netlogon vulnerability known as Zerologon ahead of next Tuesday's presidential election to improve security.

Government 258

Government Cybersecurity Security 258

IBM Big Data Hub

JUNE 15, 2020

In today’s digital world, there is a guiding principle when it comes to enterprise information management – data privacy. Every regulation builds around it and CIOs consider it a common-sense business practice that is built into the fiber of their IT systems.

Data Privacy 81

Data Privacy Government Cloud Privacy 81

Data Breach Today

OCTOBER 30, 2020

2 Hacking Groups Target Government Agencies U.S Cyber Command and the Cybersecurity and Infrastructure Security Agency have issued warnings about two Russian hacking groups that are using updated malware to target government agencies around the world.

Government 268

Government Cybersecurity Security 268

Data Breach Today

SEPTEMBER 30, 2020

IoT Products Would Have to Meet Minimum Security Requirements for Use by Government Legislation that establishes minimum security standards for IoT devices procured by the federal government is moving closer to becoming law.

IoT 250

IoT Government Security 250

Data Breach Today

APRIL 10, 2020

Governments, Organizations Rethink Use of Teleconference Platform As governments and organizations around the globe rethink their use of the Zoom teleconference platform as a result of ongoing privacy and security concerns, the company is making more system changes and has formed a CISO advisory board.

Privacy 269

Privacy Security Government 269

Data Breach Today

DECEMBER 24, 2020

Agency Says New Law in China Opens Door to Government Data Access The Department of Homeland Security is warning U.S. companies about data theft risks associated with the use of Chinese technology and digital services, citing a new law in China giving the government the right to access data.

Risk 269

Risk Government Access Security 269

Data Breach Today

OCTOBER 7, 2020

Yet Another Report Warns of Nation-State Influence Operations In the latest in a series of election security reports from government agencies, the U.S. Department of Homeland Security says Russia poses the most serious nation-state disruption threat to the U.S. presidential election, with China and Iran also posing threats.

Government 300

Government Security 300

Data Breach Today

NOVEMBER 24, 2020

Government Set to Enforce Minimum Security Standards for Telecommunications Networks The Telecommunications Security Bill introduced by the British government aims to set enforceable, minimum security standards for the nation's telecommunications providers, backed by penalties, including for any company that opted to use equipment from high-risk providers (..)

Security 226

Security Government Risk 226

Data Breach Today

SEPTEMBER 22, 2020

Security Experts Offer an Analysis of the Impact Will recent U.S. indictments of several alleged Iranian hackers - as well as government sanctions against an APT group - have a deterrent effect? Security experts share their opinions on the impact of these actions.

Government 287

Government Security 287

Data Breach Today

MAY 14, 2020

CISA Warns That Lazarus Group Has Added 3 New Tools A sophisticated hacking group associated with the North Korean government that's been tied to a number of high-profile attacks, including WannaCry, is using three new malware variants, according to the U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency.

Cybersecurity 294

Cybersecurity Government Security 294

Data Breach Today

AUGUST 12, 2020

Google Cloud Director, Formerly of CISA, Discusses Securing Government's Cloud Transformation Jeanette Manfra served under three presidents as one of the top U.S. government cybersecurity leaders. Now in her new role with Google Cloud, she draws upon her public sector experience to help agencies in their cloud adoption.

Compliance 258

Compliance Cloud Government Cybersecurity 258

Data Breach Today

NOVEMBER 17, 2020

Peiter Zatko Will Help Social Media Firm That Faces Security Concerns Twitter has hired network security expert Peiter Zatko to serve in the newly created position of head of security following a series of high-profile cyber incidents.

Security 286

Security Government 286

Data Breach Today

OCTOBER 29, 2020

Spear-Phishing Campaign Aimed at Potential Attendees at 2 Upcoming Events A hacking group linked to Iran's government targeted over 100 security and policy experts who are potentially attending two upcoming security conferences with phishing emails designed to steal credentials and gather intelligence, according to Microsoft.

Security 278

Security Phishing Government 278

Dark Reading

APRIL 22, 2020

Given the heterogeneous architectures of critical state and local systems, it's imperative we learn from the security exposures of other critical infrastructure and pledge to be better

Government 68

Government Security IT 68

Data Breach Today

SEPTEMBER 10, 2020

Security Experts Say Remote Workforce, Online Learning Create Opportunities The U.S. Cybersecurity and Infrastructure Security Agency is warning of an increase in targeted distributed denial-of-service attacks against financial and government organizations worldwide.

Cybersecurity 260

Cybersecurity Government Security 260

Data Breach Today

DECEMBER 24, 2020

All Network Assets' Monitored by Backdoored Orion Software May Need Rebuilding Federal, state and local governments are among the many victims of the supply chain attack that backdoored the SolarWinds' Orion network-monitoring software, and victims "may need to rebuild all network assets" being monitored by the software, the U.S.

Cybersecurity 312

Cybersecurity Government Security 312

Data Breach Today

AUGUST 14, 2020

ClearSky: Operation 'DreamJob' Lures Defense Workers With Fake Job Opportunities Hackers with suspected ties to North Korea's government are conducting a cyber espionage campaign that's circulating "job opportunity" spear-phishing emails targeting employees of defense contractors, according to the security firm ClearSky.

Phishing 286

Phishing Government Security 286

Data Breach Today

OCTOBER 7, 2020

Cybersecurity and Infrastructure Security Agency is warning about a recent spike in Emotet botnet attacks - designed to spread other malware - that are targeting state and local government agencies. Botnet Called 'One of the Most Prevalent Ongoing Threats' The U.S.

Government 279

Government Cybersecurity Security 279

Data Breach Today

MAY 13, 2020

FBI, CISA Issue Joint Warning to Organizations Conducting Research Hacking groups linked to China's government are targeting research and healthcare facilities that are working on developing vaccines, testing procedures and treatments for COVID-19, the FBI and the U.S. Cybersecurity and Infrastructure Security Agency warn in an alert.

Cybersecurity 286

Cybersecurity Government Security 286

Krebs on Security

APRIL 15, 2020

The Coronavirus has prompted thousands of information security professionals to volunteer their skills in upstart collaborative efforts aimed at frustrating cybercriminals who are seeking to exploit the crisis for financial gain. “A nurse or doctor can’t do what we do, and we can’t do what they do,” Espinosa said.

Cybersecurity 299

Cybersecurity Phishing Government Ransomware 299

Data Breach Today

DECEMBER 17, 2020

Agency Says Nation-State Hackers Used Other Methods as Well An advanced persistent threat actor used other attack vectors besides the compromised SolarWinds' Orion nework monitoring software to gain a foothold into the networks of government agencies and others, according to a Thursday alert from the U.S.

Cybersecurity 286

Cybersecurity Government Security 286

Data Breach Today

AUGUST 18, 2020

Sizing Up Efforts at the State and Local Level to Enhance Protections State and local governments are better equipped to ensure election security than they were four years ago, says Christopher Krebs, director of CISA, who calls on election officials to serve as "risk managers."

Security 286

Security Cybersecurity Risk Government 286

Data Breach Today

APRIL 14, 2020

As Medical Data Collaborations Kick Off, Privacy and Security Concerns Emerge In the effort to develop COVID-19 medical insights, some healthcare and technology firms are reportedly partnering to collect coronavirus patient information to assist government and academic researchers.

Risk 249

Risk Privacy Government Security 249

Data Breach Today

MARCH 6, 2020

Expanse CTO Matt Kraning on Meeting New Demands for Cloud Security The good news is: Organizations are embracing the cloud, and that's a boon to velocity and digital transformation. The bad news: Visibility and governance take a huge hit.

Cloud 226

Cloud Government Digital transformation Security 226

Data Breach Today

DECEMBER 8, 2020

Security Vendor Believes No Customer Data Was Exfiltrated FireEye, one of the world's top cybersecurity firms, says in a striking announcement on Tuesday that attackers stole its penetration testing tools and sought information about its government clients. However, FireEye doesn't believe the attackers exfiltrated data.

Cybersecurity 269

Cybersecurity Government Security IT 269

Data Breach Today

JULY 21, 2020

Parliament Panel's Report Slams Government for Not Investigating Russian Activities The British government was underprepared for Russia's alleged attempts to influence the outcomes of the Brexit referendum in 2016 and the 2017 general election and failed to conduct adequate investigations, according to a report by the U.K.

Government 217

Government Security 217

Data Breach Today

MARCH 9, 2020

Prosecutors Allege They Tried to Resell Software Back to Government A former acting inspector general of the Department of Homeland Security and another official have been indicted for allegedly stealing DHS proprietary software and databases and then attempting to resell the technology back to the government.

Government 214

Government Security 214

Data Breach Today

APRIL 7, 2020

Zero-Day Vulnerabilities in VPN Servers Exploited, Quihoo 360 Reports Hackers are targeting Chinese government agencies and their employees by taking advantage of zero-day vulnerabilities in VPN servers to plant backdoors and other malware, researchers at the Chinese security firm Qihoo 360 report.

Government 262

Government Security 262

Data Breach Today

DECEMBER 9, 2020

Also, UK Cyber Official Urges Businesses to Build a Safety-Focused 'Reporting Culture' Government leaders are increasingly calling on cybersecurity researchers to better inform policymakers and are urging businesses to pay more attention to their in-house security teams, according to presenters at this week's Black Hat Europe virtual conference.

Education 263

Education Cybersecurity Government Security 263

Data Breach Today

FEBRUARY 26, 2020

McAfee and Microsoft Analysts Review 'Ransomware as a Service' Trends Targeted ransomware attacks against enterprises and government agencies are likely to surge in the coming months as "ransomware as a service" continues to evolve into a lucrative model for cybercriminals, security experts interviewed at RSA 2020 warn.

Ransomware 259

Ransomware Government Security 259

Data Breach Today

MAY 27, 2020

Turla Group Targeted Agencies in Eastern Europe, ESET Researchers Say Turla, a sophisticated hacking group with suspected ties to the Russian government, recently used a revamped version of its malware to target government entities in Eastern Europe, according to new research from the security firm ESET.

Government 202

Government Security IT 202

Data Breach Today

JULY 15, 2020

Researchers: 'GoldenHelper' Backdoor Designed to Access Corporate Networks Malware designed to provide backdoor access to corporate networks, gain administrative privileges and deliver additional payloads was hidden in tax software the Chinese government requires companies doing business in the nation to use, researchers at the security firm Trustwave (..)

Government 253

Government Access Security 253

Data Breach Today

FEBRUARY 17, 2020

Researchers Say Groups With Apparent Ties to Iran Exploiting VPN Vulnerabilities Since August, security researchers have warned that attackers are targeting unpatched VPN servers with known vulnerabilities.

Government 230

Government Security 230