US CISA Aims to Expand Automated Malware Analysis Support
Data Breach Today
APRIL 10, 2024
US Cyber Defense Agency Scales Next-Generation Malware Analysis Platform The U.S.
Analysis: President Biden's Tech Package Seeks Ukraine Aid
Data Breach Today
MARCH 15, 2022
The ISMG Security Report features an analysis of the U.S. government's request for billions of dollars in tech aid to curb the global impact of the Kremlin's campaign in Ukraine. It also examines Biden's cryptocurrency executive order and why breached organizations often don't share full details.
Government 
261
261 Join 55,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Trending Sources
Security Analysis of Threema
Schneier on Security
JANUARY 19, 2023
A group of Swiss researchers have published an impressive security analysis of Threema. We provide an extensive cryptographic analysis of Threema, a Swiss-based encrypted messaging application with more than 10 million users and 7000 corporate customers.
Security 117
117 
TikTok Editorial Analysis
Schneier on Security
JANUARY 2, 2024
(This is a serious analysis, and the methodology looks sound.) Future research should aim towards a more comprehensive analysis to determine the potential influence of TikTok on popular public narratives.
Government 104
104 
News Alert: Dasera unveils new data security and governance platform for ‘Snowflake’ users
The Last Watchdog
JUNE 23, 2023
June 22, 2023 — Dasera , the premier automated data security and governance platform for top-tier finance, healthcare, and technology enterprises, is thrilled to unveil “Ski Lift,” a complimentary platform exclusively designed for Snowflake users. Mountain View, Calif.
Government 113
113 
U.S. CISA: hackers breached a state government organization
Security Affairs
FEBRUARY 16, 2024
CISA revealed that threat actors breached an unnamed state government organization via an administrator account belonging to a former employee. The government experts conducted an incident response assessment of the state government organization after its documents were posted on the dark web.
Government 132
132 
Analysis: Using Twitter for Espionage
Data Breach Today
NOVEMBER 8, 2019
The latest edition of the ISMG Security Report offers an analysis of how Twitter allegedly was used to spy on critics of the Saudi Arabian government. Also featured: A preview of the new NIST Privacy Framework and an update on business email compromise attacks.
Privacy 170
170 
Google: China dominates government exploitation of zero-day vulnerabilities in 2023
Security Affairs
MARCH 28, 2024
Google’s Threat Analysis Group (TAG) and Mandiant reported a surge in the number of actively exploited zero-day vulnerabilities in 2023. The Chinese government made the headlines because government-linked APT groups exploited 12 zero-day vulnerabilities in 2023, which marks a notable increase from seven in 2022.
Government 113
113 
CISA publishes malware analysis reports on samples targeting Pulse Secure devices
Security Affairs
AUGUST 26, 2021
Cybersecurity and Infrastructure Security Agency (CISA) released five malware analysis reports (MARs) related to samples found on compromised Pulse Secure devices. CISA published five malware analysis reports (MARs) related to samples found on compromised Pulse Secure devices. v1: Pulse Connect Secure.
Security 125
125 
Malicious file analysis – Example 01
Security Affairs
AUGUST 9, 2022
Cyber Security Specialist Zoziel Pinto Freire shows an example of malicious file analysis presented during his lecture on BSides-Vitória 2022. My objective with this series of articles is to show examples of malicious file analysis that I presented during my lecture on BSides-Vitória 2022. Static Analysis x Dynamic Analysis.
Libraries 102
102 
Analysis: Government Policies on Huawei's 5G Role
Data Breach Today
JANUARY 31, 2020
The latest edition of the ISMG Security Report discusses the ramifications of the U.K's decision to allow limited use of Huawei's equipment in 5G networks. Plus: Updates on Wawa's stolen card offered for sale and nascent security threats from social networks and drones.
Government 147
147 
Nation-state actors exploited two zero-days in ASA and FTD firewalls to breach government networks
Security Affairs
APRIL 24, 2024
Nation-state actor UAT4356 has been exploiting two zero-days in ASA and FTD firewalls since November 2023 to breach government networks. Early in 2024, a customer contacted Cisco to report a suspicious related to its Cisco Adaptive Security Appliances (ASA). Cisco Talos researchers tracked this cyber-espionage campaign as ArcaneDoor.
Government 74
74 
Earth Krahang APT breached tens of government organizations worldwide
Security Affairs
MARCH 19, 2024
The campaign seems active since at least early 2022 and focuses primarily on government organizations. The group often exploited access to government infrastructure to target other government entities. Analysis of the backdoors uploaded on VirusTotal revealed that threat actors utilized geopolitical topics as bait.
Government 83
83 
Own Your Own Government Surveillance Van
Schneier on Security
AUGUST 31, 2023
A used government surveillance van is for sale in Chicago: So how was this van turned into a mobile spying center? Multiple Sony DVD-based video recorders store footage captured by cameras, audio recorders by high-end equipment brand Marantz capture sounds, and time and date generators sync gathered media up for accurate analysis.
Government 112
112 
Zimbra zero-day exploited to steal government emails by four groups
Security Affairs
NOVEMBER 16, 2023
Google TAG revealed that threat actors exploited a Zimbra Collaboration Suite zero-day ( CVE-2023-37580 ) to steal emails from governments. The first campaign aimed at a government organization in Greece, threat actors sent emails containing exploit urls to their targets. ” continues the report. .”
Government 118
118 
Russia-linked APT TAG-70 targets European government and military mail servers exploiting Roundcube XSS
Security Affairs
FEBRUARY 19, 2024
The nation-state actors are known to carry out cyber-espionage against targeting government, military, and national infrastructure entities in Europe and Central Asia since at least December 2020. The researchers recommend reading the detailed analysis of the recent TAG-70 campaign here.
Military 114
114 
Data Governance Makes Data Security Less Scary
erwin
OCTOBER 31, 2019
The Regulatory Rationale for Integrating Data Management & Data Governance. Now, as Cybersecurity Awareness Month comes to a close – and ghosts and goblins roam the streets – we thought it a good time to resurrect some guidance on how data governance can make data security less scary. What data do we have and where is it?
Government 105
105 
Integrating Data Governance and Enterprise Architecture
erwin
SEPTEMBER 3, 2020
Why should you integrate data governance (DG) and enterprise architecture (EA)? Data governance provides time-sensitive, current-state architecture information with a high level of quality. Automating Data Governance and Enterprise Architecture. Data Governance and Enterprise Architecture for Regulatory Compliance.
Government 144
144 
Analysis: Strong vs. Weak Encryption
Data Breach Today
JULY 5, 2019
The latest edition of the ISMG Security Report analyzes the debate over whether the government should require technology firms to use weak encryption for messaging applications. Plus, D-Link's proposed settlement with the FTC and a CISO's update on medical device security.
Encryption 170
170 
IT Governance Podcast 08.09.23: Electoral Commission (again), Meta, Pôle emploi
IT Governance
SEPTEMBER 7, 2023
This week, we discuss security issues at the Electoral Commission, Meta’s appeal against daily GDPR fines, and a breach affecting 10 million users of the French unemployment agency Pôle emploi. Transcript: Hello and welcome to the IT Governance podcast for Friday, 8 September 2023.
Government 115
115 
Analysis: The Latest Ransomware Targets
Data Breach Today
DECEMBER 20, 2019
The latest edition of the ISMG Security Report discusses the recent ransomware attacks on the city of New Orleans as well as other units of local government and schools. Also featured: discussion on security issues for IoT and legacy medical devices.
Ransomware 145
145 
Email Security Flaw Found in the Wild
Schneier on Security
NOVEMBER 21, 2023
Google’s Threat Analysis Group announced a zero-day against the Zimbra Collaboration email server that has been used against governments around the world. TAG has observed four different groups exploiting the same bug to steal email data, user credentials, and authentication tokens. The vulnerability was discovered in June.
Security 93
93 
SYS01 stealer targets critical government infrastructure
Security Affairs
MARCH 7, 2023
Researchers discovered a new info stealer dubbed SYS01 stealer targeting critical government infrastructure and manufacturing firms. ” reads the analysis published by Morphisec. to lure victims into downloading a malicious file. .”
Government 96
96 
Mastering identity security: A primer on FICAM best practices
IBM Big Data Hub
FEBRUARY 5, 2024
For federal and state governments and agencies, identity is the crux of a robust security implementation. Numerous individuals disclose confidential, personal data to commercial and public entities daily, necessitating that government institutions uphold stringent security measures to protect their assets.
Security 96
96 
Google blocked China-linked APT31’s attacks targeting U.S. Government
Security Affairs
MARCH 9, 2022
government. government. The campaign took place in February and Google Threat Analysis Group (TAG) team was not able to link it to the ongoing invasion of Ukraine. The campaign took place in February and Google Threat Analysis Group (TAG) team was not able to link it to the ongoing invasion of Ukraine. government.
Government 94
94 
Technical analysis of China-linked Earth Preta APT’s infection chain
Security Affairs
MARCH 27, 2023
China-linked Earth Preta cyberespionage group has been observed adopting new techniques to bypass security solutions. Trend Micro researchers reported that the China-linked Earth Preta group (aka Mustang Panda ) is actively changing its tools, tactics, and procedures (TTPs) to bypass security solutions.
Archiving 89
89 
Security Affairs newsletter Round 464 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs
MARCH 24, 2024
Every week the best security articles from Security Affairs are free for you in your email box. Government’s Antitrust Case Against Apple Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Ramadan ) Is it a Russia’s weapon?
Security 102
102 
Large phishing campaign targets EMEA and APAC governments
Security Affairs
SEPTEMBER 20, 2021
Security researchers uncovered a large phishing campaign targeting multiple government departments in APAC and EMEA countries. . Researchers from cybersecurity firm Cyjax uncovered a large phishing campaign targeting multiple government departments in APAC and EMEA countries. . ” concludes the analysis.
Phishing 95
95 
Exclusive: Pro-Russia group ‘Cyber Spetsnaz’ is attacking government agencies
Security Affairs
JUNE 6, 2022
Following the attacks of the Killnet Collective, the group responsible for the attacks against major government resources and law enforcement, a new group has been identified called “Cyber Spetsnaz”. Sources interviewed by Security Affairs interpreted this activity with high levels of confidence to be state-supported.
Government 139
139 
How Data Governance Protects Sensitive Data
erwin
APRIL 2, 2021
Data Security Starts with Data Governance. Lack of a solid data governance foundation increases the risk of data-security incidents. Without data governance, organizations lack the ability to connect the dots across data governance, security and privacy – and to act accordingly.
Government 106
106 
Stayin’ Alive campaign targets high-profile Asian government and telecom entities. Is it linked to ToddyCat APT?
Security Affairs
OCTOBER 13, 2023
A cyberespionage campaign, tracked as Stayin’ Alive, targeted high-profile government and telecom entities in Asia. ” reads the analysis published by Checkpoint. The analysis of the C2 allowed the researchers to discover other loader variants used by the threat actor, such as CurLu, CurCore, and CurLog.
Government 106
106 
Google Threat Analysis Group took down ten influence operations in Q2 2020
Security Affairs
AUGUST 7, 2020
Google published its second Threat Analysis Group (TAG) report which reveals the company has taken down ten coordinated operations in Q2 2020. Google has published its second Threat Analysis Group (TAG) report , a bulletin that includes coordinated influence operation campaigns tracked in Q2 of 2020. response to COVID-19.
Government 98
98 
Experts warn of a surge in NetSupport RAT attacks against education and government sectors
Security Affairs
NOVEMBER 21, 2023
Experts warn of a surge in NetSupport RAT attacks against education, government, and business services sectors. The most impacted sectors are education, government, and business services. ” reads the analysis published by Carbon Black Managed Detection & Response team.
Education 113
113 
Taiwan Government faces 5 Million hacking attempts daily
Security Affairs
NOVEMBER 10, 2021
Taiwan ‘s government agencies face around five million cyberattacks and probes every day, most of them from China. Around five million cyber attacks hit Taiwan’s government agencies every day, and most of the hacking attempts are originated from China. SecurityAffairs – hacking, Taiwan Government).
Government 127
127 
Data quality: key for government agencies with a data mesh strategy
Collibra
JANUARY 9, 2024
In today’s world, data drives many of the decisions made by federal and state government agencies. High-quality data about vaccine supplies and population densities can lead to a successful distribution strategy, saving lives and strengthening public trust in the government’s response to the crisis.
Government 104
104 
Ransomware Updates: Conti Attacks Rise, New Players Surface
Data Breach Today
SEPTEMBER 24, 2021
The latest edition of the ISMG Security Report features an analysis of how the U.S. government has been tracking an increase in the pace of attacks tied to Conti ransomware. Also featured are what "protection" means today and building a new cybersecurity operating model.
Ransomware 295
295 
Doing Cloud Migration and Data Governance Right the First Time
erwin
OCTOBER 8, 2020
And as you make this transition, you need to understand what data you have, know where it is located, and govern it along the way. As organizations look to migrate their data from legacy on-prem systems to cloud platforms, they want to do so quickly and precisely while ensuring the quality and overall governance of that data.
Cloud 145
145 
Ransomware Warning: Are Businesses Stepping Up?
Data Breach Today
OCTOBER 22, 2021
The latest edition of the ISMG Security Report features an analysis of whether businesses are stepping up their ransomware defenses in response to several warnings released by the U.S. governments highlighting the threat posed to infrastructure. Also featured are the Thingiverse data breach and airline fraud trends.
Ransomware 290
290 
Unmasking 2024’s Email Security Landscape
Security Affairs
FEBRUARY 28, 2024
Analyzing the Email Security Landscape and exploring Emerging Threats and Trends. VIPRE Security Group’s latest report, “Email Security in 2024: An Expert Insight into Email Threats,” delves into the cutting-edge tactics and technologies embraced by cybercriminals this year. million as malicious.
Security 120
120 Business Process Can Make or Break Data Governance
erwin
SEPTEMBER 19, 2019
Data governance isn’t a one-off project with a defined endpoint. Data governance, today, comes back to the ability to understand critical enterprise data within a business context, track its physical existence and lineage, and maximize its value while ensuring quality and security. Passing the Data Governance Ball.
Government 108
108 
U.S. Government White Paper to Help Companies Address the EU’s National Security Concerns in Schrems II
Data Matters
SEPTEMBER 30, 2020
government released a “White Paper” addressing how U.S. national security law did not provide equivalent privacy protections to those available in the EU. national security law protects EU personal data. On September 28, the U.S. companies might justify their continued transfer to the U.S. To make these determinations, the U.S.
Paper 128
128 
China-Linked BRONZE PRESIDENT APT targets Government officials worldwide
Security Affairs
SEPTEMBER 10, 2022
China-linked BRONZE PRESIDENT group is targeting government officials in Europe, the Middle East, and South America with PlugX malware. Secureworks researchers reported that China-linked APT group BRONZE PRESIDENT conducted a new campaign aimed at government officials in Europe, the Middle East, and South America with the PlugX malware.
Government 105
105 
Experts warn of mass exploitation of Ivanti Connect Secure VPN flaws
Security Affairs
JANUARY 16, 2024
Experts warn that recently disclosed Ivanti Connect Secure VPN and Policy Secure vulnerabilities are massively exploited in the wild. x and Ivanti Policy Secure. is a command injection vulnerability in web components of Ivanti Connect Secure (9.x, x) and Ivanti Policy Secure. reads the advisory published by Ivanti.
Security 85
85 
China-linked threat actors are targeting the government of Ukraine
Security Affairs
MARCH 18, 2022
Google’s TAG team revealed that China-linked APT groups are targeting Ukraine’s government for intelligence purposes. Below is the tweet published by TAG chief, Shane Huntley, who cited the Google TAG Security Engineer Billy Leonard. government. ” wrote Leonard. China is working hard here too. Pierluigi Paganini.
Government 101
101 
Let's personalize your content