US CISA Aims to Expand Automated Malware Analysis Support
Data Breach Today
APRIL 10, 2024
US Cyber Defense Agency Scales Next-Generation Malware Analysis Platform The U.S.
Analysis Cybersecurity Government Security 
U.S. CISA: hackers breached a state government organization
Security Affairs
FEBRUARY 16, 2024
CISA revealed that threat actors breached an unnamed state government organization via an administrator account belonging to a former employee. The government experts conducted an incident response assessment of the state government organization after its documents were posted on the dark web.
Government 
135
135 Join 55,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Trending Sources
CISA publishes malware analysis reports on samples targeting Pulse Secure devices
Security Affairs
AUGUST 26, 2021
Cybersecurity and Infrastructure Security Agency (CISA) released five malware analysis reports (MARs) related to samples found on compromised Pulse Secure devices. CISA published five malware analysis reports (MARs) related to samples found on compromised Pulse Secure devices. v1: Pulse Connect Secure.
Security 129
129 
Cybersecurity Services combat an APT with NDR
OpenText Information Management
MARCH 28, 2024
Environmental Protection Agency and National Security Agency have requested that each U.S. State carry out comprehensive assessments of their cybersecurity services and practices. DNS Exfil, SCADA controls, DGA), but also need the additional layer of security that may be missed by using only endpoint protection (e.g.
SHARED INTEL: VCs pumped $21.8 billion into cybersecurity in 2021 — why there’s more to come
The Last Watchdog
JUNE 13, 2022
At the start of this year, analysts identified a number of trends driving the growth of cybersecurity. Among them: an expanding digital footprint, growing attack surfaces, and increasing government regulation. billion in venture capital poured into cybersecurity companies globally. Securing APIs. Leveraging data science.
Cybersecurity 257
257 
Ransomware Updates: Conti Attacks Rise, New Players Surface
Data Breach Today
SEPTEMBER 24, 2021
The latest edition of the ISMG Security Report features an analysis of how the U.S. government has been tracking an increase in the pace of attacks tied to Conti ransomware. Also featured are what "protection" means today and building a new cybersecurity operating model.
Ransomware 298
298 
Government Shutdown Hampers Cybersecurity
Adam Levin
JANUARY 9, 2019
Government has impacted federal cybersecurity according to several reports. The roughly 800,000 federal workers currently on furlough include: 45% of staff from the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency , which is tasked with defending critical infrastructure from cyber and physical threats.
Newly Proposed SEC Cybersecurity Risk Management and Governance Rules and Amendments for Public Companies
Data Matters
MARCH 11, 2022
Securities and Exchange Commission (SEC) proposed new cybersecurity rules to enhance and standardize disclosures regarding cybersecurity risk management, strategy, governance, and incident reporting by public companies. Reporting material cybersecurity incidents within four days. On March 9, 2022, the U.S.
NYDFS releases major update to Part 500 cybersecurity requirements for financial services companies
Data Protection Report
NOVEMBER 8, 2023
On November 1, 2023, the New York Department of Financial Services (“NYDFS”) released the finalized amendments of Part 500 of its cybersecurity regulations. This notice requirement explicitly applies to cybersecurity incidents occurring to the covered entity itself, its affiliates, or a third-party service provider.
Cybersecurity agencies published a joint LockBit ransomware advisory
Security Affairs
JUNE 15, 2023
According to a joint advisory published by cybersecurity agencies, the LockBit ransomware group has successfully extorted roughly $91 million in about 1,700 attacks against U.S. 16% of the State, Local, Tribal, and Tribunal (SLTT) government ransomware incidents reported to the MS-ISAC is 2022 were LockBit attacks. law enforcement).
Ransomware 92
92 
NEW TECH SNAPSHOT: The role of ‘MSSPs’ in helping businesses manage cybersecurity
The Last Watchdog
SEPTEMBER 6, 2022
Network security has been radically altered, two-plus years into the global pandemic. Security teams are on a mission to push network defenses to the perimeter edges of an open, highly interconnected digital landscape; the defenders are under assault and running hard to stay one step ahead. 7) in a LW news analysis column and podcast.
Cybersecurity 203
203 
NYDFS Proposes Updated Second Amendment to Its Cybersecurity Regulation
Hunton Privacy
JULY 5, 2023
On June 28, 2023, the New York Department of Financial Services (“NYDFS”) published an updated proposed Second Amendment (“Amendment”) to its Cybersecurity Regulation, 23 NYCRR Part 500. As described below, senior governing bodies would have new oversight responsibilities under the amendments.
Cybersecurity 113
113 
GUEST ESSAY: Preparing for the dire cybersecurity consequences of Russia’s invasion of Ukraine
The Last Watchdog
APRIL 13, 2022
These Russian cyber actors are government organizations and include other parties who take their orders from the Russian military or intelligence organizations – while not technically under government control. Cybersecurity and Infrastructure Security Agency (CISA) has started a campaign to increase awareness of these risks to U.S.
Cybersecurity 214
214 
Exclusive: Pro-Russia group ‘Cyber Spetsnaz’ is attacking government agencies
Security Affairs
JUNE 6, 2022
Following the attacks of the Killnet Collective, the group responsible for the attacks against major government resources and law enforcement, a new group has been identified called “Cyber Spetsnaz”. Sources interviewed by Security Affairs interpreted this activity with high levels of confidence to be state-supported.
Government 141
141 
15 Top Cybersecurity Certifications for 2022
eSecurity Planet
JUNE 21, 2022
An IT security certification can provide a key boost for your career, but with so many different certifications available (and so many organizations more than happy to take your money for training and testing), it’s important to make sure that the time and investment are well spent. How to Choose a Security Certification.
Cybersecurity 119
119 
SYS01 stealer targets critical government infrastructure
Security Affairs
MARCH 7, 2023
Researchers discovered a new info stealer dubbed SYS01 stealer targeting critical government infrastructure and manufacturing firms. ” reads the analysis published by Morphisec. to lure victims into downloading a malicious file. .”
Government 96
96 
News alert: ThreatHunter.ai stops hundreds of ransomware attacks, nation-state threats in 48 hours
The Last Watchdog
FEBRUARY 27, 2024
27, 2024 — The current large surge in cyber threats has left many organizations grappling for security so ThreatHunter.ai is now offering their cutting-edge cybersecurity services free of charge to all organizations for 30 days, irrespective of their current cybersecurity measures. is taking decisive action.
Ransomware 130
130 
Data Governance Makes Data Security Less Scary
erwin
OCTOBER 31, 2019
The Regulatory Rationale for Integrating Data Management & Data Governance. Now, as Cybersecurity Awareness Month comes to a close – and ghosts and goblins roam the streets – we thought it a good time to resurrect some guidance on how data governance can make data security less scary. Where Are the Skeletons?
Government 105
105 
Security Affairs newsletter Round 464 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs
MARCH 24, 2024
Every week the best security articles from Security Affairs are free for you in your email box. Cybersecurity US holds conference on military AI use with dozens of allies to determine ‘responsible’ use DFSA’s Cyber Risk Management Guidelines: A Blueprint for Cyber Resilience? Is it a Russia’s weapon?
Security 105
105 
CISA guidelines to protect critical infrastructure against AI-based threats
Security Affairs
APRIL 30, 2024
The US government’s cybersecurity agency CISA published a series of guidelines to protect critical infrastructure against AI-based attacks. The analysis categorized AI risks into three categories: Attacks Using AI; Attacks Targeting AI Systems; Failures in AI Design and Implementation. ” read the guidelines.
Risk 109
109 
Large phishing campaign targets EMEA and APAC governments
Security Affairs
SEPTEMBER 20, 2021
Security researchers uncovered a large phishing campaign targeting multiple government departments in APAC and EMEA countries. . Researchers from cybersecurity firm Cyjax uncovered a large phishing campaign targeting multiple government departments in APAC and EMEA countries. . ” concludes the analysis.
Phishing 97
97 
Stayin’ Alive campaign targets high-profile Asian government and telecom entities. Is it linked to ToddyCat APT?
Security Affairs
OCTOBER 13, 2023
A cyberespionage campaign, tracked as Stayin’ Alive, targeted high-profile government and telecom entities in Asia. ” reads the analysis published by Checkpoint. The analysis of the C2 allowed the researchers to discover other loader variants used by the threat actor, such as CurLu, CurCore, and CurLog.
Government 109
109 
New SEC Cybersecurity Rules Could Affect Private Companies Too
eSecurity Planet
SEPTEMBER 23, 2022
Securities and Exchange Commission (SEC) strongly advised public companies to improve their cybersecurity. However, after minimal corporate adoption of stronger cybersecurity, the SEC has drafted rules to require more formal cybersecurity reporting and disclosure. See the top Governance, Risk & Compliance (GRC) tools.
Cybersecurity 111
111 
Security Affairs newsletter Round 452 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs
DECEMBER 31, 2023
Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.
Security 108
108 
Security Buyers Are Consolidating Vendors: Gartner Security Summit
eSecurity Planet
JUNE 7, 2023
IT security buyers are consolidating vendors at an overwhelming rate, according to a speaker at this week’s Gartner Security & Risk Management Summit. ” Security Products Merge Into Platforms As part of that trend, security products are consolidating too, MacDonald said.
Security 81
81 
Mastering identity security: A primer on FICAM best practices
IBM Big Data Hub
FEBRUARY 5, 2024
For federal and state governments and agencies, identity is the crux of a robust security implementation. Numerous individuals disclose confidential, personal data to commercial and public entities daily, necessitating that government institutions uphold stringent security measures to protect their assets.
Security 95
95 
Security Affairs newsletter Round 435 by Pierluigi Paganini – International edition
Security Affairs
SEPTEMBER 3, 2023
Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Being Used to Phish So Many of Us?
Security 110
110 
SEC Proposes Cybersecurity Rules for Public Companies
Hunton Privacy
MARCH 11, 2022
On March 9, 2022, the Securities and Exchange Commission (“SEC”) held an open meeting and proposed new cybersecurity disclosure rules for public companies by a 3-1 vote. In proposing the rules, the SEC hopes to improve the consistency and comparability of cybersecurity disclosures among public companies. Key Definitions.
Cybersecurity 108
108 
MY TAKE: Sophos X-Ops advances internal, external threat intelligence sharing to the next level
The Last Watchdog
NOVEMBER 14, 2023
Related: How ‘Internet Access Brokers’ fuel ransomware I happened to be in the audience at Stanford University when President Obama took to the stage to issue an executive order challenging the corporate sector and federal government to start collaborating as true allies. Yet, there remains much leeway for improvements.
Ransomware 260
260 
Raspberry Robin malware used in attacks against Telecom and Governments
Security Affairs
DECEMBER 24, 2022
The Raspberry Robin worm attacks aimed at telecommunications and government office systems across Latin America, Australia, and Europe. Researchers from Trend Micro have uncovered a Raspberry Robin worm campaign targeting telecommunications and government office systems across Latin America, Australia, and Europe. Pierluigi Paganini.
Government 95
95 
Resecurity Released a 2024 Cyber Threat Landscape Forecast
Security Affairs
DECEMBER 26, 2023
Cybersecurity company Resecurity has published the 2024 Cyber Threat Landscape Forecast. Resecurity, a Los Angeles-based cybersecurity company protecting Fortune 100 and government agencies worldwide, has compiled a comprehensive forecast outlining the imminent threats and novel security challenges anticipated in the upcoming year.
Sandboxing: Advanced Malware Analysis in 2021
eSecurity Planet
APRIL 23, 2021
To fill this gap and aid in the analysis, detection, and testing of malware, sandboxing is widely used to give organizations the setting, isolation, and security tools needed to preserve the integrity of the host network. In 2021, sandboxes are now a fundamental part of an organization’s cybersecurity architecture. Automation.
GUEST ESSAY: What it will take to train the next generation of cybersecurity analysts
The Last Watchdog
OCTOBER 4, 2021
It is no secret that there is, and has been for some time, a shortage of trained cyber security professionals in corporate IT Security teams. The Wharton School of the University of Pennsylvania observed that “nowhere is the workforce-skills gap more pronounced than in cybersecurity.”.
Cybersecurity 140
140 
Cybercriminals Deliver IRS Tax Scams & Phishing Campaigns By Mimicking Government Vendors
Security Affairs
APRIL 21, 2022
Threat intelligence firm Resecurity details how crooks are delivering IRS tax scams and phishing attacks posing as government vendors. Further analysis uncovered embedded scenarios detecting the victim’s IP (using GEO2IP module, deployed on a third-party WEB-site), likely done to selectively choose targets or to filter by region.
Phishing 111
111 
Pulse Secure fixes zero-day in Pulse Connect Secure (PCS) SSL VPN actively exploited
Security Affairs
MAY 3, 2021
Pulse Secure has fixed a zero-day flaw in the Pulse Connect Secure (PCS) SSL VPN appliance that threat actors are actively exploiting in the wild. The vulnerability is a buffer overflow issue in Pulse Connect Secure Collaboration Suite prior b9.1R11.4 A vulnerability was discovered under Pulse Connect Secure (PCS).
Security 113
113 
Pegasus Project – how governments use Pegasus spyware against journalists
Security Affairs
JULY 19, 2021
Pegasus is a surveillance malware developed by the Israeli surveillance NSO Group that could infect both iPhones and Android devices, it is sold exclusively to the governments and law enforcement agencies. The evidence demonstrates that governments used Pegasus to intimidate journalists and critical media. Pierluigi Paganini.
Government 118
118 
MITRE revealed that nation-state actors breached its systems via Ivanti zero-days
Security Affairs
APRIL 19, 2024
In April 2024, MITRE disclosed a security breach in one of its research and prototyping networks. The security team at the organization promptly launched an investigation, logged out the threat actor, and engaged third-party forensics Incident Response teams to conduct independent analysis in collaboration with internal experts.
IT 117
117 
Albania Prime Minister apologizes over the recent massive leak of government data
Security Affairs
DECEMBER 27, 2021
Albania’s prime minister Edi Rama apologized for the massive leak of personal records from a government database of state. Albania’s prime minister this week apologized for the massive leak of personal records from a government database of state. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.
Government 94
94 GUEST ESSAY: The story behind how DataTribe is helping to seed ‘Cybersecurity Valley’ in Maryland
The Last Watchdog
JUNE 4, 2019
With the largest concentration of cybersecurity expertise –– the “oil” — in the world, Maryland is fast changing from the Old Line State into “Cybersecurity Valley.” The state counts approximately 109,000 cyber engineers. Two notable examples are Sourcefire, acquired by Cisco for $2.7B
Cybersecurity 193
193 
Greylock McKinnon Associates data breach exposed DOJ data of 341650 people
Security Affairs
APRIL 8, 2024
Greylock McKinnon Associates (GMA) provides expert economic analysis and litigation support to a diverse group of domestic and international clients in the legal profession, the business community, and government agencies, including the Department of Justice (DoJ). ” reads the data breach notification.
Data breaches 116
116 
Hundreds of network operators’ credentials found circulating in Dark Web
Security Affairs
JANUARY 30, 2024
This figure also includes historical records and new artifacts identified in January 2024, following an analysis of Command and Control (C2) servers and underground marketplaces. Resecurity has notified victims whose credentials were compromised by infostealers like Azorult , Redline , Vidar, Lumma, and Taurus and exposed on the Dark Web.
Passwords 126
126 
What is a Managed Security Service Provider? MSSPs Explained
eSecurity Planet
AUGUST 22, 2023
Cybersecurity can be difficult to implement, and to make matters worse, the security professionals needed to do it right are in short supply. Managed IT security service providers (MSSPs) make life easier for organizations by providing outsourced expertise and tools at a fraction of the cost, time, and trouble of doing it yourself.
Security 84
84 
China-linked APT groups targets orgs via Pulse Secure VPN devices
Security Affairs
MAY 28, 2021
Researchers from FireEye warn that China-linked APT groups continue to target Pulse Secure VPN devices to compromise networks. Cybersecurity researchers from FireEye warn once again that Chinese APT groups continue to target Pulse Secure VPN devices to penetrate target networks and deliver malicious web shells to steal sensitive information.
Security 132
132 
SHARED INTEL Q&A: My thoughts and opinions about cyber threats — as discussed with OneRep
The Last Watchdog
OCTOBER 5, 2023
Editor’s note: I recently had the chance to participate in a discussion about the overall state of privacy and cybersecurity with Erin Kapczynski, OneRep’s senior vice president of B2B marketing. Byron is the founder and editor-in-chief of The Last Watchdog on Privacy & Security. Erin: So, let’s get started.
Cybersecurity 203
203 
Let's personalize your content