Data Breach Today

MAY 3, 2024

Also: Insights From Verizon's Data Breach Investigations Report; Investment Trends In the latest weekly update, ISMG editors discussed what the thousands of attendees at RSA Conference 2024 can expect this year, key insights from Verizon's Data Breach Investigations Report, and how significant funding rounds are shaping the cybersecurity industry.

Data breaches 283

Data breaches Cybersecurity 283

Data Breach Today

JANUARY 18, 2024

No 'Magic Solution' to Prevent Malicious Use of AI in Elections, OSTP Chief Says Arati Prabhakar, director of the White House's Office of Science and Technology Policy, said during an event at the 2024 World Economic Forum that generative artificial intelligence has the potential to "dramatically accelerate and amplify the erosion of information integrity." (..)

Artificial Intelligence 311

Artificial Intelligence Risk 311

Data Breach Today

JUNE 5, 2024

Panel Discusses Trends in Ransomware, Application Security and Generative AI Information Security Media Group editors are live at InfoSecurity Europe Conference 2024 in London with an overview of opening-day activities and hot topics including the latest ransomware trends, software security, election security and artificial intelligence risks.

Artificial Intelligence 295

Artificial Intelligence Ransomware Information Security Risk 295

Krebs on Security

OCTOBER 8, 2024

One of the zero-day flaws — CVE-2024-43573 — stems from a security weakness in MSHTML , the proprietary engine of Microsoft’s Internet Explorer web browser. If that sounds familiar it’s because this is the fourth MSHTML vulnerability found to be exploited in the wild so far in 2024.

Systems administration 235

Systems administration Cybersecurity Phishing Security 235

Krebs on Security

JUNE 11, 2024

CVE-2024-30080 is a flaw in the Microsoft Message Queuing (MSMQ) service that can allow attackers to execute code of their choosing. CVE-2024-30080 has been assigned a CVSS vulnerability score of 9.8 (10 CVE-2024-30078 is a remote code execution weakness in the Windows WiFi Driver , which also has a CVSS score of 9.8.

Mining 253

Mining Cybersecurity Security Access 253

Data Breach Today

OCTOBER 25, 2024

Examining Cyberthreats, Foreign Tactics Aimed at 2024 U.S. Election In the latest weekly update, election security expert Annie Fixler joined ISMG editors to discuss the urgent challenges of safeguarding U.S. election infrastructure, countering cyberthreats and preventing foreign interference as Election Day approaches.

Security 274

Security 274

Data Breach Today

MAY 6, 2024

Ransomware, AI Technology and the Art of the Possible Are Hot Topics This Year ISMG editors are live at RSA Conference 2024 in San Francisco with an overview of opening-day speakers and hot topics including the dismal ransomware landscape, the unbridled growth of AI, security product innovation and deals, and regulatory trends.

Ransomware 286

Ransomware Security 286

Data Breach Today

FEBRUARY 9, 2024

Joe Sullivan Also Discusses Identity Management, AI, State of Information Sharing In the latest weekly update, Joe Sullivan, CEO of Ukraine Friends, joins three editors at ISMG to discuss the challenges of being a CISO in 2024, growing threats from disinformation, vulnerabilities in MFA, AI's role in cybersecurity, and the obstacles to public-private (..)

Cybersecurity 270

Cybersecurity 270

Krebs on Security

NOVEMBER 12, 2024

The zero-day flaw tracked as CVE-2024-49039 is a bug in the Windows Task Scheduler that allows an attacker to increase their privileges on a Windows machine. Narang notes that CVE-2024-43451 is the third NTLM zero-day so far this year. Microsoft credits Google’s Threat Analysis Group with reporting the flaw. 10 is the worst).

Authentication 236

Authentication Passwords Access Cybersecurity 236

Data Breach Today

DECEMBER 15, 2023

CISO Liability, AI, Ransomware and Shadow IT Attorney Jonathan Armstrong examines four cybersecurity legal trends that will shape 2024: heightened personal liability for security leaders, the impact of ransomware, legal and ethical concerns about AI, and the influence of shadow IT, especially regarding messaging apps.

Ransomware 269

Ransomware Cybersecurity Security IT 269

Data Breach Today

DECEMBER 20, 2023

US Cyber Agency to Begin 2-Year Major Overhaul of Its Legacy AIS Program The Cybersecurity and Infrastructure Security Agency announced plans to launch a two-year effort beginning in 2024 to modernize its legacy Automated Indicator Sharing program as part of an effort to enhance collaboration with the private sector and provide more actionable data (..)

Cybersecurity 296

Cybersecurity Security IT 296

The Last Watchdog

AUGUST 12, 2024

LAS VEGAS – Here’s what I discovered last week here at Black Hat USA 2024 : GenAI is very much in the mix as a potent X-factor in cybersecurity. After strolling the exhibits floor at Black Hat USA 2024 and speaking with the solution providers, I jotted down two categories of cybersecurity advancements: ‘coding level’ and ‘operational level.’

Cybersecurity 290

Cybersecurity Systems administration Security Data Privacy 290

Krebs on Security

DECEMBER 10, 2024

The zero-day seeing exploitation involves CVE-2024-49138 , a security weakness in the Windows Common Log File System (CLFS) driver — used by applications to write transaction logs — that could let an authenticated attacker gain “system” level privileges on a vulnerable Windows device. .”

Authentication 211

Authentication Ransomware Access Security 211

The Last Watchdog

DECEMBER 12, 2023

What should I be most concerned about – and focus on – in 2024? In 2024, we will see more targeted, sophisticated business email compromise (BEC) attacks, including VIP impersonation, vendor email compromise (VEC), and autonomous agents used for malicious purposes. For 2024, it will take a village!

Cybersecurity 258

Cybersecurity Phishing Authentication Analytics 258

The Last Watchdog

DECEMBER 13, 2023

We drilled down on a few significant developments expected to play out in 2024 and beyond. DigiCert recently released the DigiCert PQC Playground —a part of DigiCert Labs designed to let security code writers and tech enthusiasts experiment with the NIST-endorsed PQC algorithms which are slated to go into effect in 2024.

Encryption 311

Encryption IoT Authentication Security 311

The Last Watchdog

DECEMBER 14, 2023

What should I be most concerned about – and focus on – in 2024? In 2024, security teams will need to focus on developing automated tooling to shrink the range of issues that they need to address. Doug Dooley , COO, Data Theorem Dooley 2024 will be the year of full-stack visualization.

Cybersecurity 234

Cybersecurity Encryption Marketing Risk 234

Data Breach Today

MAY 9, 2024

How Attacks Have Changed; New Insights Into How an Attack Affects the Business The fifth annual Sophos State of Ransomware Report combines year-on-year insights with brand-new areas of study. It includes a deep dive into ransom demands and ransom payments and shines new light on the role of law enforcement in ransomware remediation.

Ransomware 287

Ransomware IT 287

AIIM

DECEMBER 31, 2024

As we reflect on the transformative developments in AI and automation throughout 2024, several key trends have emerged that are shaping the future of information management.

149

149

Data Breach Today

APRIL 8, 2024

Linda Gray Martin and Britta Glade on What to Expect and What's New This Year "The Art of Possible" is the theme of RSA Conference 2024, and event organizers Linda Gray Martin and Britta Glade say they may have put together the best agenda yet - featuring sessions and speakers on red-hot topics such as identity security, cloud, gen AI and operational (..)

Cloud 182

Cloud Security 182

The Last Watchdog

DECEMBER 16, 2024

Continuing our look back at 2024, part two of Last Watchdogs year-ender roundtable turns its focus to emerging threats vs. evolving defense tactics. This has fueled rapid adoption of autonomous AI agents, which matured significantly in 2024 and will become mainstream in 2025. The drivers are intensifying. million (NIST, WEF).

Security 264

Security Phishing IoT Cloud 264

Data Breach Today

JULY 11, 2024

Midyear Analysis of HHS OCR 'Wall of Shame' Shows Hacks, Vendor Breaches Top List Hacks and vendor incidents continue to dominate major health data breach trends in 2024, but a handful of large incidents involving "unauthorized access or disclosure" also top the list of major health data breaches reported to federal regulators so far this year.

Data breaches 182

Data breaches Access 182

Data Breach Today

DECEMBER 20, 2024

Looking Back on the Ransomware Attacks, Resilience Lessons and Tech Trends In the latest weekly update, ISMG editors discussed defining cybersecurity moments of 2024, from the CrowdStrike outage and its implications for vendor resilience to ransomware's continued evolution, and the shifting dynamics in the tech industry affecting startups and M&A activity. (..)

Cybersecurity 147

Cybersecurity Ransomware IT 147

Krebs on Security

AUGUST 27, 2024

26, Versa urged customers to deploy a patch for the vulnerability ( CVE-2024-39717 ), which the company said is fixed in Versa Director 22.1.4 ISP on June 12, 2024. In January 2024, the U.S. In a security advisory published Aug. Versa said the weakness allows attackers to upload a file of their choosing to vulnerable systems.

Communications 312

Communications Information Security Cybersecurity Security 312

Data Breach Today

FEBRUARY 1, 2024

Also: US Courts Announce Guilty Pleas and Hand Out Sentences in Crypto-Linked Cases This week, a Ripple co-founder and a karaoke platform were hacked, Mexican crypto banks were targeted, authorities seized crypto in the U.S.

278

278

Krebs on Security

SEPTEMBER 10, 2024

By far the most curious security weakness Microsoft disclosed today has the snappy name of CVE-2024-43491 , which Microsoft says is a vulnerability that led to the rolling back of fixes for some vulnerabilities affecting “optional components” on certain Windows 10 systems produced in 2015.

Artificial Intelligence 250

Artificial Intelligence Security Privacy IT 250

Data Breach Today

AUGUST 15, 2024

Compendium Features Dozens of In-Depth Interviews With CEOs, CISOs and Researchers Welcome to Information Security Media Group's Infosecurity Europe 2024 Compendium featuring cybersecurity insights from industry's top researchers, CEOs, CISOs, government leaders and more.

Cybersecurity 147

Cybersecurity Information Security Government Security 147

Data Breach Today

JANUARY 25, 2024

Also: Ivanti Exploitation Continues; Apple Fixes First Zero-Day of 2024 This week, U.S.

Ransomware 289

Ransomware 289

Data Breach Today

MARCH 22, 2024

Also: US Regulators Backtrack on Web Tracker Privacy; ISMG's RSA 2024 Coverage In the latest weekly update, four editors discussed ISMG's plans for in-depth and diverse coverage at the 2024 RSA conference, the latest guidance on web trackers from federal regulators and the latest forecasts on quantum computing - and why security teams should care.

Cybersecurity 288

Cybersecurity Privacy Security 288

Data Breach Today

SEPTEMBER 13, 2024

ISMG Compendium Showcases More Than 50 Interviews on Threats, Emerging Solutions Welcome to Information Security Media Group's Black Hat and DEF CON 2024 Compendium featuring latest insights from the industry's top cybersecurity researchers and ethical hackers, as well as perspectives from CEOs, CISOs and government officials on the latest trends in (..)

Security 162

Security Cybersecurity Information Security Government 162

Security Affairs

OCTOBER 22, 2024

VMware failed to fully address a remote code execution flaw, tracked as CVE-2024-38812 (CVSS score: 9.8), in its vCenter Server platform. In September, Broadcom released security updates to the vulnerability CVE-2024-38812. During the 2024 Matrix Cup hacking contest in China, zbl & srs of team TZL demonstrated the vulnerability.

Government 141

Government Cloud Access IT 141