IT Governance

JANUARY 26, 2023

The post IT Governance Podcast 2023-2: Mailchimp, fast food, T-Mobile, ice rinks, iOS update and ISO 27001 appeared first on IT Governance UK Blog. We also talk to the ISO 27001 expert Steve Watkins about his new pocket guide to the Standard. Now available on Spotify , Amazon Music , Apple Podcasts and SoundCloud.

Government 104

Government IT Data breaches Ransomware 104

Security Affairs

NOVEMBER 20, 2023

The Canadian government discloses a data breach after threat actors hacked two of its contractors. Data belonging to current and former Government of Canada employees, members of the Canadian Armed Forces and Royal Canadian Mounted Police personnel have been also exposed. Both contractors suffered a security breach in October.

Data breaches 113

Data breaches Government IT Ransomware 113

The Last Watchdog

DECEMBER 14, 2023

Last Watchdog posed two questions: •What should be my biggest takeaway from 2023, with respect to mitigating cyber risks at my organization? Rebecca Krauthamer , Co-founder and CPO, QuSecure Krauthamer As new standards for quantum-resilient cryptography come into effect, many government agencies will move toward quantum-readiness.

Cybersecurity 234

Cybersecurity Encryption Marketing Risk 234

Schneier on Security

APRIL 9, 2024

US Cyber Safety Review Board released a report on the summer 2023 hack of Microsoft Exchange by China. It was a serious attack by the Chinese government that accessed the emails of senior U.S. government officials. From the executive summary: The Board finds that this intrusion was preventable and should never have occurred.

Government 103

Government Cloud Access Security 103

Security Affairs

MARCH 13, 2024

Threat actors behind the ransomware attacks that hit Stanford University in 2023 gained access to 27,000 people. Stanford University confirmed that threat actors behind the September 2023 ransomware attack had access to 27,000 people. 27, 2023. . Stanford was breached last year by Clop Ransomware.

Ransomware 110

Ransomware Data breaches Passwords Access 110

Security Affairs

NOVEMBER 16, 2023

Google TAG revealed that threat actors exploited a Zimbra Collaboration Suite zero-day ( CVE-2023-37580 ) to steal emails from governments. Zimbra addressed the vulnerability CVE-2023-37580 in July 2023. A second threat actor exploited the vulnerability since July 11 before the official patch became available on July 25.

Government 117

Government Authentication Phishing IT 117

Security Affairs

OCTOBER 2, 2023

Experts warn of threat actors actively exploiting CVE-2023-40044 flaw in recently disclosed flaw in Progress Software’s WS_FTP products. Most of these online assets belong to large enterprises, governments and educational institutions.” The vulnerability was discovered by researchers at the cybersecurity firm Assetnote.

Authentication 114

Authentication Cybersecurity Education Government 114

IT Governance

SEPTEMBER 7, 2023

Transcript: Hello and welcome to the IT Governance podcast for Friday, 8 September 2023. The Cyber Essentials scheme is a government-backed framework supported by the National Cyber security Centre. The Cyber Essentials scheme is a government-backed framework supported by the National Cyber security Centre.

Government 115

Government IT Personal data GDPR 115

Data Breach Today

MARCH 10, 2024

Committee Chairs Accuses UK of Favoring an 'Ostrich Strategy' For Ransomware The Conservative government of British Prime Minister Rishi Sunak says it won't champion a reinsurance plan for cyber insurance similar to flood insurance, telling a parliamentary committee it doesn't want to "damage competition."

Insurance 267

Insurance Ransomware Government IT 267

Data Breach Today

APRIL 24, 2024

Networking Giant Dubs Campaign Against Government Customers 'Arcane Door' Probable nation-state hackers targeted Cisco firewall appliances in a campaign dating to late 2023, the networking giant disclosed Wednesday while releasing three patches, two of them rated critical. Cisco doesn't connect the hackers with a specific country.

Government 184

Government IT 184

Security Affairs

APRIL 24, 2024

Nation-state actor UAT4356 has been exploiting two zero-days in ASA and FTD firewalls since November 2023 to breach government networks. Cisco Talos researchers tracked this cyber-espionage campaign as ArcaneDoor. Cisco Talos researchers tracked this cyber-espionage campaign as ArcaneDoor.

Government 105

Government Authentication Communications Access 105

IG Guru

MAY 19, 2023

a global leader in business-to-business information governance and records management solutions, is pleased to announce the newest flagship product in its Versatile lineup, Versatile 2023. The soon-to-be-released software includes all of Zasio’s industry-changing information governance solutions under a singular umbrella suite.

Records Management 81

Records Management Information governance Government IT 81

Security Affairs

OCTOBER 25, 2023

Citrix warned of attacks actively exploiting the vulnerability CVE-2023-4966 in NetScaler ADC and Gateway appliances. Citrix is urging administrators to secure all NetScaler ADC and Gateway appliances against the CVE-2023-4966 vulnerability, which is actively exploited in attacks. reported Citrix. reported Citrix. NetScaler ADC 13.1-FIPS

Authentication 118

Authentication Access Communications Cloud 118

IT Governance

APRIL 5, 2023

IT Governance Podcast 2023-7: Capita, ChatGPT and TikTok (yet again) 5th April 2023 How to Prevent Malware Attacks: 8 Tips for 2023 5th April 2023 List of Data Breaches and Cyber Attacks in March 2023 – 41.9 Million Records Breached 3rd April 2023 GDPR Article 17: What Is the Right to Erasure?

Encryption 126

Encryption Data breaches Phishing Government 126

Security Affairs

OCTOBER 30, 2023

Canada banned the Chinese messaging app WeChat and Kaspersky antivirus on government mobile devices due to privacy and security risks. The Government of Canada announced a ban on the use of the WeChat and Kaspersky applications on government-issued mobile devices due to privacy and security risks.

Government 120

Government Privacy Risk Data collection 120

IT Governance

OCTOBER 24, 2023

Publicly disclosed data breaches and cyber attacks City of Philadelphia discloses data breach after five months Date of breach: 24 May 2023 ( notice issued 20 October 2023). Breached organisation: BHI Energy, providing staffing solutions to the nuclear, fossil, wind, hydro and government energy markets.

Data Privacy 107

Data Privacy Privacy Security Data breaches 107

Security Affairs

FEBRUARY 19, 2024

The nation-state actors are known to carry out cyber-espionage against targeting government, military, and national infrastructure entities in Europe and Central Asia since at least December 2020. “TAG70 has demonstrated a high level of sophistication in its attack methods. . ESET researchers also detailed the same attack chain.

Military 113

Military Government Access Risk 113

OpenText Information Management

JANUARY 5, 2023

As we move into 2023, FSIs will need to focus their increasing IT spend and direct their attention to delivering on the total experience for their customers and employees and on environmental, social and governance initiatives … The post Top predictions for financial services in 2023 appeared first on OpenText Blogs.

Financial Services 103

Financial Services Government Customer Experience Content services 103

Security Affairs

JANUARY 16, 2024

VMware Aria Automation (formerly vRealize Automation ) is a modern cloud automation platform that simplifies and streamlines the deployment, management, and governance of cloud infrastructure and applications. VMware addressed a critical vulnerability, tracked as CVE-2023-34063 (CVSS score 9.9), that impacted its Aria Automation platform.

IT 118

IT Cloud Authentication Access 118

Security Affairs

MARCH 19, 2024

The campaign seems active since at least early 2022 and focuses primarily on government organizations. The group often exploited access to government infrastructure to target other government entities. “Earth Krahang abuses the trust between governments to conduct their attacks.

Government 83

Government Phishing Access Passwords 83

eSecurity Planet

JANUARY 5, 2023

After a year that saw massive ransomware attacks and open cyber warfare, the biggest question in cybersecurity for 2023 will likely be how much of those attack techniques get commoditized and weaponized. 2023, he predicted, “will not be any easier when it comes to keeping users’ data safe and private.”

Security 145

Security Ransomware Cybersecurity Privacy 145

Collibra

JUNE 21, 2023

Today, OpenAI has one of the most popular websites in the world, with nearly 2B people visiting their site in May 2023 (footnote 3). Businesses everywhere are seeking ways to leverage LLMs as fast as governments are talking about ways to regulate them. What you need is a governance model for AI. You need AI governance.

Government 95

Government IT Risk Privacy 95

Security Affairs

SEPTEMBER 23, 2023

The Government of Bermuda believes that the recent cyberattack against its IT infrastructure was launched by Russian threat actors. This week a cyber attack hit the Government of Bermuda causing the interruption of internet/email and phone services. The attack impacted all the government departments. ” said Burt.

Government 118

Government IT Security Information Security 118

Data Protection Report

MARCH 6, 2023

According to a recent briefing to the Legislative Council, the Privacy Commissioner for Personal Data (the PCPD ) reported that she is working closely with the government to comprehensively review the PDPO to formulate concrete proposals for legislative amendments.

Data Privacy 136

Data Privacy Privacy Paper Personal data 136

eSecurity Planet

DECEMBER 7, 2022

But for 2023, cybersecurity will be a “key pillar” of the company’s focus – particularly data compliance and protection. An area that Kakran is bullish on for 2023 is Kubernetes security and observability. It has certainly been a rough year for the tech industry. billion between September 2021 and September 2022.

Cybersecurity 145

Cybersecurity Compliance Risk Ransomware 145

IG Guru

NOVEMBER 22, 2023

The post Cybersecurity and Infrastructure Security Agency released today its Roadmap for Artificial Intelligence 2023-2024 first appeared on IG GURU. Check out the post here.

Artificial Intelligence 82

Artificial Intelligence Cybersecurity IT Security 82

IT Governance

SEPTEMBER 15, 2023

Welcome to our September 2023 catches of the month feature, which examines recent phishing scams and the tactics criminals use to trick people into compromising their data. More recently, it has mainly distributed the JSSLoader malware for the Sangria Tempest group. It appears, however, in the target inbox as a file, not a link.”

Phishing 110

Phishing Mining Education Passwords 110

IT Governance

NOVEMBER 6, 2023

When MOVEit was hacked by the Russian Cl0p ransomware gang in May, email addresses and links to government employee surveys were compromised. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks.

Data Privacy 97

Data Privacy Privacy Libraries Security 97

Security Affairs

AUGUST 8, 2023

Microsoft Patch Tuesday security updates for August 2023 addressed 74 vulnerabilities, including two actively exploited flaws. Microsoft has released an Office Defense in Depth update ( ADV230003 ) to address a patch bypass of the actively exploited RCE vulnerability CVE-2023-36884. ” reads the report published by ZDI.

Phishing 91

Phishing Security Government IT 91

IT Governance

NOVEMBER 13, 2023

million patient visits stolen in ransomware attack Date of breach: 23 October 2023 Breached organisation: Bluewater Health and Chatham-Kent Health Alliance Incident details: A database containing information about 5.6 Records breached: 79,582 Ontario hospitals update: information relating to 5.6

Data Privacy 85

Data Privacy Privacy Security Data breaches 85

IT Governance

JULY 4, 2023

IT Governance found 79 publicly disclosed security incidents in June 2023, accounting for 14,353,113 breached records. Also be sure to check out our new page, which provides a complete list of data breaches and cyber attacks for 2023.

Data breaches 96

Data breaches Ransomware Government Insurance 96

The Last Watchdog

JUNE 23, 2023

June 22, 2023 — Dasera , the premier automated data security and governance platform for top-tier finance, healthcare, and technology enterprises, is thrilled to unveil “Ski Lift,” a complimentary platform exclusively designed for Snowflake users. Mountain View, Calif.

Government 113

Government Security Compliance Risk 113

The Last Watchdog

OCTOBER 31, 2023

31, 2023 – Traceable AI , the industry’s leading API security company, proudly announces its continued recognition in the cybersecurity industry, with the latest accolade being the prestigious SINET16 Innovator Award for 2023. San Francisco, Calif.,

Cybersecurity 100

Cybersecurity Cloud Security Risk 100

eSecurity Planet

NOVEMBER 6, 2023

30, 2023 NGINX Ingress Controller for Kubernetes Flaws Can Lead to Credential Theft Type of Attack: Path sanitization bypass and injection vulnerabilities discovered in the NGINX Ingress controller can allow for credential theft, arbitrary command execution, and critical data access. CVE-2023-5044 (Code Injection): This CVSS score 7.6

Ransomware 112

Ransomware Authentication Cybersecurity Education 112

Security Affairs

SEPTEMBER 25, 2023

A stealthy APT group tracked as Gelsemium was observed targeting a Southeast Asian government between 2022 and 2023. Palo Alto Unit42 researchers an APT group tracked as Gelsemium targeting a Southeast Asian government. Gelsemium is a group focused on cyberespionage that has been active since at least 2014.

Government 106

Government Manufacturing Education Access 106

IT Governance

JANUARY 5, 2024

IT Governance’s research found the following for December 2023: 1,351 publicly disclosed security incidents. Both these figures are a significant increase on what we found for November 2023 : 470 incidents and 519,111,354 records – 187% and 332% increases respectively. In November 2023, this was 227 incidents (48%).

Data breaches 97

Data breaches Insurance Manufacturing Ransomware 97

The Last Watchdog

DECEMBER 20, 2022

As a result, in 2023, specific industries that normally experience healthy levels of trust will see major declines in trust that will take years to repair. This honeymoon is coming to an end, however; expect to see trust in consumer technology companies declining by 15 percent in 2023. Privacy continues to be a critical consumer value.

Privacy 145

Privacy Risk Government Compliance 145