Security Affairs

FEBRUARY 21, 2024

China-linked APT group Mustang Panda targeted various Asian countries with a variant of the PlugX (aka Korplug) backdoor dubbed DOPLUGS. Trend Micro researchers uncovered a cyberespionage campaign, carried out by China-linked APT group Mustang Panda , targeting Asian countries, including Taiwan, Vietnam, and Malaysia. Mustang Panda has been active since at least 2012, it targeted American and European entities such as government organizations, think tanks, NGOs , and even Catholic organiza

Phishing 356

Phishing Government Archiving Passwords 356

The Last Watchdog

FEBRUARY 21, 2024

Achieving “ digital trust ” is not going terribly well globally. Related: How decentralized IoT boosts decarbonization Yet, more so than ever, infusing trustworthiness into modern-day digital services has become mission critical for most businesses. Now comes survey findings that could perhaps help to move things in the right direction. According to DigiCert’s 2024 State of Digital Trust Survey results, released today , companies proactively pursuing digital trust are seeing boosts in revenue, i

Energy and Utilities 289

Energy and Utilities IoT Manufacturing Encryption 289

Security Affairs

FEBRUARY 21, 2024

VMware urges customers to uninstall the deprecated Enhanced Authentication Plugin (EAP) after the disclosure of a critical flaw CVE-2024-22245. VMware is urging users to uninstall the deprecated Enhanced Authentication Plugin (EAP) after the discovery of an arbitrary authentication relay flaw CVE-2024-22245 (CVSS score: 9.6). A threat actor could trick a domain user with EAP installed in its web browser into requesting and relaying service tickets for arbitrary Active Directory Service Principal

Authentication 355

Authentication IT Ransomware Access 355

Data Breach Today

FEBRUARY 21, 2024

3 Suspects Charged With Using Sugar Ransomware, Phishing Attacks Against Russians Russian authorities have reportedly arrested three accused members of the SugarLocker ransomware-as-a-service operation. Their alleged crime? Targeting Russians, although one suspect has also been tied to a massive hack of Australian health insurer Medibank and subsequent data leak.

Insurance 276

Insurance Ransomware Phishing 276

Speaker: Frank Taliano

Document-heavy workflows slow down productivity, bury institutional knowledge, and drain resources. But with the right AI implementation, these inefficiencies become opportunities for transformation. So how do you identify where to start and how to succeed? Learn how to develop a clear, practical roadmap for leveraging AI to streamline processes, automate knowledge work, and unlock real operational gains.

IT

Security Affairs

FEBRUARY 21, 2024

A new malware campaign targets Redis servers to deploy the mining crypto miner Migo on compromised Linux hosts. Caro Security researchers have observed a new malware campaign targeting Redis servers with a crypto miner dubbed Migo. The campaign stands out for the use of several novel system weakening techniques against the data store itself. Migo is a Golang ELF binary with compile-time obfuscation, it is also able to maintain persistence on Linux hosts.

Mining 336

Mining Honeypots Cloud Ransomware 336

Security Affairs

FEBRUARY 21, 2024

U.S. government offers rewards of up to $15 million for information that could lead to the identification or location of LockBit ransomware gang members and affiliates. The U.S. Department of State is offering a reward of up to $15 million for information leading to the identification or location of members of the Lockbit ransomware gang and their affiliates. “The Department of State is announcing reward offers totaling up to $15 million for information leading to the arrest and/or convic

Energy and Utilities 333

Energy and Utilities Ransomware Agriculture Manufacturing 333

Data Breach Today

FEBRUARY 21, 2024

13,000 Users Received Incorrect Thumbnails; 1,504 Tapped on Them, Risking Privacy A glitch in Wyze home security cameras permitted thousands of users to catch glimpses inside strangers' homes as its cloud system came back online after an hourslong outage. Around 13,000 Wyze users received thumbnails from cameras that were not their own, and around 1,504 users tapped on them.

Security 244

Security Cloud Privacy Risk 244

Thales Cloud Protection & Licensing

FEBRUARY 21, 2024

How Thales and Red Hat Protect Telcos from API Attacks madhav Thu, 02/22/2024 - 04:55 Application programming interfaces (APIs) power nearly every aspect of modern applications and have become the backbone of today’s economy. Every time you send a mobile payment, search for airline flight prices, or book a restaurant reservation - you are using an API.

Encryption 139

Encryption Cloud Access Security 139

Data Breach Today

FEBRUARY 21, 2024

As Vendor Breaches Surge, Medical Practices Need 20/20 Visibility on Third Parties An Arizona firm that provides administrative services to a dozen ophthalmology practices in several states is notifying nearly 2.4 million patients of a data theft incident. The hack is among the latest recent major data breaches involving vendors of critical services to healthcare firms.

Data breaches 243

Data breaches 243

Advertiser: ZoomInfo

AI adoption is reshaping sales and marketing. But is it delivering real results? We surveyed 1,000+ GTM professionals to find out. The data is clear: AI users report 47% higher productivity and an average of 12 hours saved per week. But leaders say mainstream AI tools still fall short on accuracy and business impact. Download the full report today to see how AI is being used — and where go-to-market professionals think there are gaps and opportunities.

Sales

Schneier on Security

FEBRUARY 21, 2024

First-person account of someone who fell for a scam, that started as a fake Amazon service rep and ended with a fake CIA agent, and lost $50,000 cash. And this is not a naive or stupid person. The details are fascinating. And if you think it couldn’t happen to you, think again. Given the right set of circumstances, it can. It happened to Cory Doctorow.

IT 136

IT 136

Data Breach Today

FEBRUARY 21, 2024

Acquisition Will Allow Delinea to Detect Overprivileged Access, Company Says California privileged access management vendor Delinea announced it will acquire identity governance and administration vendor Fastpath. "We believe privilege, not just identity, is the true security perimeter," said Delinea Chief Product Officer Phil Calvin.

Government 240

Government Access Security IT 240

KnowBe4

FEBRUARY 21, 2024

QR-code attacks leveraging QR-codes are kicking into high gear and becoming a common method used in phishing attacks, according to new data from Abnormal Security.

Phishing 127

Phishing Security 127

Data Breach Today

FEBRUARY 21, 2024

Customer Accounts Were Secured by MFA, But Contractor's Credentials Exposed Data Australian telecom company Tangerine is blaming the compromise of a third-party contractor's credentials for exposing personal information of 232,000 customers, which had been stored in a legacy database. The breach exposed customers' names, birthdates, mobile numbers, addresses and account numbers.

Security 225

Security 225

Speaker: Ben Epstein, Stealth Founder & CTO | Tony Karrer, Founder & CTO, Aggregage

When tasked with building a fundamentally new product line with deeper insights than previously achievable for a high-value client, Ben Epstein and his team faced a significant challenge: how to harness LLMs to produce consistent, high-accuracy outputs at scale. In this new session, Ben will share how he and his team engineered a system (based on proven software engineering approaches) that employs reproducible test variations (via temperature 0 and fixed seeds), and enables non-LLM evaluation m

KnowBe4

FEBRUARY 21, 2024

Researchers at VIPRE Security observed a 276% increase in malware delivered by phishing between Q1 and Q4 of 2023.

Phishing 125

Phishing Security 125

Data Breach Today

FEBRUARY 21, 2024

Join us for an informative webinar with Bitsight speakers Vanessa Jankowski, SVP of Third Party Risk Management, and Greg Keshian, SVP of Security Performance

Risk 189

Risk Security 189

KnowBe4

FEBRUARY 21, 2024

I get my news from a very wide variety of sources. One is the venerable SpyTalk news that lives in Substack. They just reported something pretty astounding. Here are the first few paragraphs and at the end is the link to substack with the rest.

120

120

eSecurity Planet

FEBRUARY 21, 2024

A firewall audit is a procedure for reviewing and reconfiguring firewalls as needed so they still suit your organization’s security goals. Over time, business network needs, traffic patterns, and application access change. Auditing your firewall is one of the most important steps to ensuring it’s still equipped to protect the perimeter of your business’ network.

Compliance 113

Compliance Risk Access Security 113

Advertiser: ZoomInfo

ZoomInfo customers aren’t just selling — they’re winning. Revenue teams using our Go-To-Market Intelligence platform grew pipeline by 32%, increased deal sizes by 40%, and booked 55% more meetings. Download this report to see what 11,000+ customers say about our Go-To-Market Intelligence platform and how it impacts their bottom line. The data speaks for itself!

Marketing

KnowBe4

FEBRUARY 21, 2024

I recently read an article about a bright, sophisticated woman who fell victim to an unbelievable scam. By unbelievable, I mean most people reading or hearing about it could not believe it was successful.

Phishing 120

Phishing IT 120

eSecurity Planet

FEBRUARY 21, 2024

A circuit-level gateway (CLG) is a firewall feature that acts as a proxy and filters packets based on session information. CLGs are important because they provide specialized security filtering and prevent the discovery of IP addresses and open ports on CLG-protected devices. The best use cases stem from how CLGs work, their pros, cons, and how they function differently than other potential solutions.

Communications 109

Communications Security Cybersecurity Authentication 109

KnowBe4

FEBRUARY 21, 2024

The KnowBe4 Learner App enables your users to complete their security awareness and compliance training conveniently from their smartphones and tablets.

Security awareness 113

Security awareness Compliance Security Phishing 113

Collibra

FEBRUARY 21, 2024

Migrating to the cloud but worried your organization — or your data — isn’t up to the challenge? An enterprise data intelligence solution can accelerate and simplify your migration journey. More importantly, it lays a foundation for data governance and data quality that can fuel your organization with the trusted data that drives decision-making. To achieve data cloud migration success, we recommend a 4-step process that we explore in our helpful ebook: Four steps to successfully power your da

Cloud 104

Cloud Digital transformation Customer Experience Analytics 104

Advertisement

The DHS compliance audit clock is ticking on Zero Trust. Government agencies can no longer ignore or delay their Zero Trust initiatives. During this virtual panel discussion—featuring Kelly Fuller Gordon, Founder and CEO of RisX, Chris Wild, Zero Trust subject matter expert at Zermount, Inc., and Principal of Cybersecurity Practice at Eliassen Group, Trey Gannon—you’ll gain a detailed understanding of the Federal Zero Trust mandate, its requirements, milestones, and deadlines.

Cybersecurity

The Security Ledger

FEBRUARY 21, 2024

Paul speaks with Gary McGraw of the Berryville Institute of Machine Learning (BIML), about the risks facing large language model machine learning and artificial intelligence, and how organizations looking to leverage artificial intelligence and LLMs can insulate themselves from those risks. The post Episode 256: Recursive Pollution? Data. Read the whole entry. » Click the icon below to listen.

Artificial Intelligence 98

Artificial Intelligence Risk Military Security 98

Hunton Privacy

FEBRUARY 21, 2024

On February 16, 2024, the UK Information Commissioner’s Office (the “ICO”) published its first piece of guidance on content moderation. The ICO defines content moderation in the guidance as the analysis of user-generated content to assess whether it meets certain standards, and any action a service takes as a result of this analysis. This process includes the processing of personal data and, according to the ICO in its statement , “can cause harm if incorrect decisions are made,” for example co

Personal data 78

Personal data Communications Risk IT 78

IG Guru

FEBRUARY 21, 2024

Check out the article here. The post This tiny, tamper-proof ID tag can authenticate almost anything via MIT News first appeared on IG GURU.

Authentication 69

Authentication Information Security Security 69

OpenText Information Management

FEBRUARY 21, 2024

OpenText™ InfoArchive provides highly accessible, scalable, economical, and compliant archiving of structured and unstructured information. Whether actively archiving business information to reduce system loads or decommissioning applications to stand down outdated systems, InfoArchive is the flexible and cost-efficient way to reduce IT costs and accelerate the move to a modernized, cloud-based architecture.

Archiving 69

Archiving Cloud Access Content services 69

Speaker: Yohan Lobo and Dennis Street

In the accounting world, staying ahead means embracing the tools that allow you to work smarter, not harder. Outdated processes and disconnected systems can hold your organization back, but the right technologies can help you streamline operations, boost productivity, and improve client delivery. Dive into the strategies and innovations transforming accounting practices.

The Guardian Data Protection

FEBRUARY 21, 2024

Incident comes as data shows government sector breaches mostly caused by human error, not criminal acts Get our morning and afternoon news emails , free app or daily news podcast The finance department has accidentally shared confidential commercial information for the second time as new data reveals the number of human errors behind government data breaches.

Data breaches 69

Data breaches Government IT Privacy 69

OpenText Information Management

FEBRUARY 21, 2024

For a category that has been around for over 30 years, digital asset management (DAM) is surprisingly dynamic. However, it remains challenging to manage the increasing volume and complexity of rich media that organizations and individuals create and consume. Whether it is new formats, like 3D models, new channels, like social short-form video, or new … The post What’s new in OpenText Media Management appeared first on OpenText Blogs.

Customer Experience 64

Customer Experience IT Communications Marketing 64

Hunton Privacy

FEBRUARY 21, 2024

On February 12, 2024, a federal court in the Southern District of Ohio issued an order granting a Motion for a Preliminary Injunction, prohibiting the Ohio Attorney General from implementing and enforcing the Parental Notification by Social Media Operators Act, Ohio Rev. Code § 1349.09(B)(1) (the “Act”). The Act was signed into law in July 2023, and was set to take effect on January 15, 2024.

IT 64

IT Privacy 64