eSecurity Planet

JANUARY 2, 2024

4 January 1, 2024 Windows Vulnerability Allows DLL Exploitation Type of vulnerability: Bypassing privilege access requirements to exploit executables The problem: Researchers from Security Joes discovered a malicious code execution vulnerability in Windows 10 and 11. 1020000 1.26.10-gke.1235000 1235000 1.27.7-gke.1293000 1293000 1.28.4-gke.1083000

Authentication 91

Authentication Libraries Cybersecurity Security 91

The Last Watchdog

SEPTEMBER 21, 2023

21, 2023 — MxD, the Digital Manufacturing and Cybersecurity Institute, today hosted a roundtable discussion with the White House Office of the National Cyber Director. Organizations gathered to discuss courses and programs to address the critical cybersecurity workforce needs in the United States. Chicago, Ill.,

Cybersecurity 147

Cybersecurity Manufacturing Military Artificial Intelligence 147

eSecurity Planet

FEBRUARY 26, 2024

To secure sensitive data, cybersecurity specialists, software vendors, and end users should encourage collaborative efforts against malicious activities. February 19, 2024 Microsoft Exchange Servers Vulnerable to Privilege Escalation Attacks Type of vulnerability: Critical severity privilege escalation vulnerability.

Risk 110

Risk Authentication Systems administration Ransomware 110

The Last Watchdog

APRIL 2, 2024

Related: AI makes scam email look real Fresh evidence comes from Mimecast’s “The State of Email and Collaboration Security” 2024 report. The London-based supplier of email security technology, surveyed 1,100 information technology and cybersecurity professionals worldwide and found: •Human risk remains a massive exposure.

Security 171

Security Communications Risk Phishing 171

Thales Cloud Protection & Licensing

MARCH 7, 2024

Making Waves: Empowering Women in Cybersecurity madhav Fri, 03/08/2024 - 05:01 As International Women’s Day approaches, it’s a perfect moment to reflect on the pivotal role of diversity in technology, especially as this year’s theme is #InspireInclusion. In this fast-paced sector, diversity is a catalyst for innovation.

Cybersecurity 62

Cybersecurity Communications Analytics IT 62

Security Affairs

JANUARY 13, 2024

Akira ransomware targets Finnish organizations GitLab fixed a critical zero-click account hijacking flaw Juniper Networks fixed a critical RCE bug in its firewalls and switches Vast Voter Data Leaks Cast Shadow Over Indonesia ’s 2024 Presidential Election Researchers created a PoC for Apache OFBiz flaw CVE-2023-51467 Team Liquid’s wiki leak exposes (..)

Security 106

Security Ransomware Data breaches Cybersecurity 106

The Last Watchdog

SEPTEMBER 18, 2023

Omdia’s comprehensive market analysis is the first report that provides a strategic overview of RBVM and its broader evolution within cybersecurity that Omdia refers to as proactive security. Despite a reduced year-over-year growth rate of 4.8%, Omdia anticipates stronger growth, powered by the rise of RBVM, in 2023 and 2024.

Marketing 130

Marketing Risk Digital transformation Cybersecurity 130

eSecurity Planet

JANUARY 8, 2024

January 3, 2024 52% of Exposed SSH Servers Vulnerable to Terrapin Attack Type of attack: Secure Shell (SSH) vulnerability enables prefix truncation attacks. The problem: The US Cybersecurity and Infrastructure Security Agency (CISA) added two vulnerabilities to the Known Exploited Vulnerabilities (KEV) catalog. Versions 0.65

Encryption 106

Encryption Libraries Cybersecurity Communications 106

eSecurity Planet

JANUARY 29, 2024

Meanwhile, the release of proof-of-concept code starts the countdown to attack on other critical vulnerabilities, including Cisco Enterprise Communication, Fortra GoAnywhere, and GitLab. January 19, 2024 Critical VMware vCenter Server Zero-Day Under Attack Since 2021 Type of vulnerability: Remote code execution (RCE) vulnerability.

Authentication 88

Authentication Communications Passwords Access 88

Security Affairs

JANUARY 28, 2024

Korea attempts to use generative AI for hacking attacks: spy agency Cybersecurity Is artificial intelligence the solution to cyber security threats? Pro-Ukraine hackers wiped 2 petabytes of data from Russian research center Participants earned more than $1.3M

Security 94

Security Artificial Intelligence Ransomware Data breaches 94

eSecurity Planet

DECEMBER 19, 2023

As 2023 draws to an end and cybersecurity budgeting is nearly complete, it helps to consider the year’s events and try to predict next year’s trends. After receiving input from industry experts and doing my own analysis of the year’s driving forces, I identified five major cybersecurity trends. Bottom line: Prepare now based on risk.

Cybersecurity 139

Cybersecurity Cloud Ransomware Risk 139

Security Affairs

JANUARY 31, 2024

In early January 2024, software firm Ivanti reported that threat actors were exploiting two zero-day vulnerabilities ( CVE-2023-46805, CVE-2024-21887 ) in Connect Secure (ICS) and Policy Secure to remotely execute arbitrary commands on targeted gateways. The second flaw, tracked as CVE-2024-21887 (CVSS score 9.1)

Authentication 89

Authentication Military Communications Security 89

Security Affairs

MARCH 4, 2024

The cybersecurity firm added that the threat actors show an in-depth knowledge of telecommunication network architectures. HaxRob reported that the GTPDOOR backdoor uses the GPRS Tunnelling Protocol ( GTP ) for C2 communications. ” reads the analysis. “The following diagram illustrates a forseen use of GTPDOOR.

Communications 129

Communications Access Encryption Authentication 129

eSecurity Planet

APRIL 1, 2024

March 22, 2024 Emergency Out-of-Band Windows Server Security Updates Type of vulnerability (or attack): Memory leak. The US Cybersecurity & Infrastructure Security Agency (CISA) added this exploit to their vulnerability catalog indicating active exploitation in the wild. The fix: Update affected versions ASAP: FortiClient EMS 7.2:

Libraries 95

Libraries Authentication Artificial Intelligence Cloud 95

Hunton Privacy

JULY 27, 2023

Unlike the proposed rules, the final rules do not contain a quarterly disclosure requirement under Form 10-Q (though periodic amendments of Form 8-K may be required), and the final rules contain no requirement to identify a board cybersecurity expert. Form 8-K and Form 6-K Reporting Under the final rules, new Item 1.05 New Item 1.05

Cybersecurity 52

Cybersecurity Risk Communications Government 52

Hunton Privacy

NOVEMBER 21, 2023

recently published its updated Benchmark Policy Guidelines for 2024 (the “Policy”), which reflect investors’ continuing focus on corporate disclosure and board oversight of cyber risks. Glass Lewis & Co.

Cybersecurity 78

Cybersecurity Risk Communications IT 78

Security Affairs

FEBRUARY 13, 2024

“During the night of February 11 to 12, 2024, a massive cyber ransomware attack took place on the production servers on which the HIS IT system runs. Romanian Ministry of Health added that cybersecurity specialists, including cybersecurity experts from the National Cyber Security Directorate, are monitoring the situation.

Ransomware 110

Ransomware Cleanup Encryption Cybersecurity 110

IT Governance

FEBRUARY 14, 2024

GB Western Municipal Construction Source New Construction and real estate USA Yes 101 GB Tennessee Farmers Insurance Source New Insurance USA Yes 71,000 CNO ACE Source 1 ; source 2 New Healthcare USA Yes 65,195 Verizon Communications Inc. Key dates 31 March 2024 – PCI DSS v4.0 GB Signature Performance, Inc. of the Standard.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

The Last Watchdog

FEBRUARY 15, 2024

15, 2024 – Harter Secrest & Emery LLP , a full-service business law firm with offices throughout New York, is pleased to announce that it has been selected as a NetDiligence-authorized Breach Coach ® , a designation only extended to law firms that demonstrate competency and sophistication in data breach response. Rochester, N.Y.

Data breaches 100

Data breaches Financial Services Big data Retail 100

The Last Watchdog

JUNE 26, 2023

Singapore, June 26, 2023 – Hardware cybersecurity solutions pioneer Flexxon today announced the appointment of Erik Nilsen, PhD, as its Chief Technology Strategist. He holds over 14 patents and pending patents for advanced signal processing and cybersecurity applications. About Flexxon.

Cybersecurity 100

Cybersecurity Marketing Communications Government 100

eSecurity Planet

FEBRUARY 2, 2024

Teslas have plenty of vulnerabilities, as cybersecurity researchers have recently discovered. This year, electric cars were a major focal point of the 2024 event, called Pwn2Own Automotive. Rapid7 published blogs detailing the successful and failed breaches of the 2024 event.

IoT 122

IoT Cybersecurity Access Cloud 122

Thales Cloud Protection & Licensing

JANUARY 16, 2024

Key recommendations for Financial Services to improve cybersecurity and resilience in multi-clouds madhav Wed, 01/17/2024 - 05:46 The Digital Operational Resilience Act (DORA) will apply to the EU financial sector from 17 January 2025. CipherTrust Manager is a Key Management System, as required by Article 9.

Financial Services 83

Financial Services Cloud Cybersecurity Encryption 83

Security Affairs

JANUARY 30, 2024

This figure also includes historical records and new artifacts identified in January 2024, following an analysis of Command and Control (C2) servers and underground marketplaces. Resecurity has notified victims whose credentials were compromised by infostealers like Azorult , Redline , Vidar, Lumma, and Taurus and exposed on the Dark Web.

Passwords 119

Passwords Cybersecurity Cloud Access 119

Krebs on Security

MARCH 12, 2024

Last week, Apple pushed out an urgent software update to its flagship iOS platform, warning that there were at least two zero-day exploits for vulnerabilities being used in the wild (CVE-2024-23225 and CVE-2024-23296). 4, 2024, Google published Secure by Design , which lays out the company’s perspective on memory safety risks.

Authentication 228

Authentication Phishing Passwords Security 228

eSecurity Planet

FEBRUARY 16, 2024

Despite initial suspicions, encrypted communications with specific keys linked the attacks to the previous ones, indicating an organized effort. In February 2024, the CISA, NSA, and FBI warned of PRC cyber actors pre-positioning themselves again to disrupt the IT networks of U.S. critical infrastructure in the case of a major U.S.

Cybersecurity 105

Cybersecurity Access Security Data collection 105

eSecurity Planet

JULY 8, 2022

The four new security standards selected by NIST will become part of a quantum-safe cryptography standard released as soon as 2024. Also read: Top Cybersecurity Startups to Watch in 2022. Earlier in the week, Toshiba partnered with Safe Quantum to develop new quantum key distribution and quantum communications technologies.

Encryption 128

Encryption Artificial Intelligence Cloud Cybersecurity 128

Security Affairs

FEBRUARY 28, 2024

The Federal Bureau of Investigation (FBI), National Security Agency (NSA), US Cyber Command, and international partners released a joint Cybersecurity Advisory (CSA) to warn that Russia-linked threat actors are using compromised Ubiquiti EdgeRouters (EdgeRouters) to evade detection in cyber operations worldwide.

Energy and Utilities 95

Energy and Utilities Military Government Phishing 95

The Last Watchdog

APRIL 11, 2024

April 11, 2024 – Simbian today emerged from stealth mode with oversubscribed $10M seed funding to deliver on fully autonomous security. A fully autonomous security platform presents a big opportunity in the global cybersecurity market which, according to a cybersecurity market report , is to grow to $298.5 billion by 2028.

Security 100

Security Risk Marketing Cloud 100

eSecurity Planet

APRIL 12, 2024

If you or your business handles sensitive data, operates in regulated industries, or suffers from repeated cybersecurity threats, it’s time to evaluate the need for DLP strategies. Proofpoint’s 2024 data loss landscape report reveals 84.7% Encrypt data at rest with encryption algorithms and secure storage techniques.

Encryption 125

Encryption Risk Data breaches Access 125

Thales Cloud Protection & Licensing

JANUARY 29, 2024

How 5G Operators Can Prepare for The Quantum Era madhav Tue, 01/30/2024 - 05:25 The Quantum State of Play in 5G Quantum computing has found theoretical application in modern computation systems, including cellular networks like 5G. You can also visit us at Mobile World Congress 2024 taking place in Barcelona February 26 – 29.

Risk 71

Risk Encryption Cybersecurity Paper 71

Thales Cloud Protection & Licensing

FEBRUARY 19, 2024

The National Institute of Standards and Technology (NIST) has long played an active role in shaping cybersecurity best practices. Nevertheless, the standardization process has made great strides, and finalized quantum-safe algorithms will likely be released sometime in 2024. In the U.S.,

Analytics 71

Analytics Encryption Compliance Cloud 71

eSecurity Planet

NOVEMBER 1, 2021

Manufacturers will be required to adhere to the new cybersecurity safeguards when designing and producing these products. In addition, the amendment also will ensure greater privacy of personal data, prevent financial fraud, and improve resilience in European communications networks, according to EU officials. IoT Security Neglected.

IoT 100

IoT Security Manufacturing Marketing 100

IBM Big Data Hub

DECEMBER 8, 2023

Regarding vehicle operation, AI is currently applied in cybersecurity to analyze incoming security events and incidents, and on the analysis of telematics data to gain insights into driving experiences. OEMs also need to encrypt messages within a vehicle and all other communications that extend beyond it.

Computer and Electronics 75

Computer and Electronics Manufacturing Cloud Customer Experience 75

IBM Big Data Hub

APRIL 25, 2024

This can involve implementing cross-functional teams to encourage communication and knowledge sharing, adopting agile methodologies to promote iterative development and rapid prototyping, and by using technology such as product lifecycle management (PLM) software to streamline documentation and version control. Last updated 23 February 2024.

Analytics 54

Analytics Communications Marketing Manufacturing 54

Thales Cloud Protection & Licensing

NOVEMBER 28, 2022

With the NIS Directive, the EU aimed to direct its members to develop national and cross-border cybersecurity norms and regulations. In 2020, the European Commission revised the Directive, to “further strengthen overall cybersecurity in the Union” to address emerging cyber threats. NIS2 has three general objectives: 1.

IT 71

IT Encryption Cybersecurity Compliance 71

IT Governance

MARCH 11, 2024

LLC Source (New) Construction UAE Yes Unknown Cybersecurity and Infrastructure Security Agency Source (New) Cyber security USA Yes Unknown Central School District 13J Source 1 ; source 2 (New) Education USA Yes Unknown Park City School District Source (New) Education USA Yes Unknown BEM Systems, Inc. Key dates 31 March 2024 – PCI DSS v4.0

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

Hunton Privacy

MAY 17, 2023

Effective Date The FDBR would go into effect on July 1, 2024. Related Statutory Amendments in S.B. 262 In addition to the FDBR, S.B. 262 also contains provisions relating to government moderation of social media and protection of children in online spaces. Government Moderation of Social Media S.B.

Privacy 83

Privacy Personal data Sales Government 83