WSJ: "Cyber Insurance Went Up A Whopping 92% In 2021"
KnowBe4
MAY 18, 2022
Whoa Nellie, that's getting to be real money here. This is the kind of thing that starts cutting into your whole IT budget.
Wed.May 18, 2022
126 
Conti Claims It Has 'Insiders' in Costa Rican Government
Data Breach Today
MAY 18, 2022
Ransomware Group Continues to Demand Ransom Payment From Besieged Government Ransomware group Conti, which has been holding to ransom crypto-locked Costa Rican government systems since April, has claimed on its leak site Conti News that it has "insiders" in the country's government, and that they are working toward the compromise of "other systems.
Join 31,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Trending Sources
Senators Urge FTC to Probe ID.me Over Selfie Data
Krebs on Security
MAY 18, 2022
Some of more tech-savvy Democrats in the U.S. Senate are asking the Federal Trade Commission (FTC) to investigate identity-proofing company ID.me for “deceptive statements” the company and its founder allegedly made over how they handle facial recognition data collected on behalf of the Internal Revenue Service , which until recently required anyone seeking a new IRS account online to provide a live video selfie to ID.me.
CISA: Majority of US Gov Will Be Getting EDR Later in 2022
Data Breach Today
MAY 18, 2022
EDR Deployments Will be Underway at More Than Half of Federal Agencies This Year EDR deployments will be underway at more than half of federal civilian agencies by the end of September, according to federal officials. CISA is currently in the process of deploying EDR across 26 federal civilian agencies and expects to have work underway at 53 agencies by Sept. 30, 2022.
Why You Need to Use Case Studies in Sales and Marketing (and How to Start Now)
Advertisement
Case studies are proof of successful client relations and a verifiable product or service. They persuade buyers by highlighting your customers' experiences with your company and its solution. In sales, case studies are crucial pieces of content that can be tailored to prospects' pain points and used throughout the buyer's journey. In marketing, case studies are versatile assets for generating business, providing reusable elements for ad and social media content, website material, and marketing c
MY TAKE: How ‘CAASM’ can help security teams embrace complexity – instead of trying to tame it
The Last Watchdog
MAY 18, 2022
The shift to software-defined everything and reliance on IT infrastructure scattered across the Internet has boosted corporate productivity rather spectacularly. Related: Stopping attack surface expansion. And yet, the modern attack surface continues to expand exponentially, largely unchecked. This dichotomy cannot be tolerated over the long run. Encouragingly, an emerging class of network visibility technology is gaining notable traction.
Sign up to get articles personalized to your interests!
Information Management Today brings together the best content for information management professionals from the widest variety of industry thought leaders.
More Trending
Conti Ransomware gang threatens to overthrow the government of Costa Rica
Security Affairs
MAY 18, 2022
The Conti ransomware gang is threatening to ‘overthrow’ the new government of Costa Rica after last month’s attack. Last month, the Conti ransomware gang claimed responsibility for the attack on Costa Rica government infrastructure after that the government refused to pay a ransom. “The Costa Rican state will not pay anything to these cybercriminals.” said Costa Rica President Carlos Alvarado.
North Korean IT Workers Using US Salaries to Fund Nukes
Data Breach Today
MAY 18, 2022
Scheme Results in Firms Unknowingly Financing Sanctioned Weapons Programs North Korean information technology workers have been attempting to obtain employment in public and private sectors in the United States to fund their home country's weapons of mass destruction and ballistic missiles programs, according to an advisory from U.S. federal agencies.
This Hacktivist Site Lets You Prank-Call Russian Officials
WIRED Threat Level
MAY 18, 2022
To protest the war in Ukraine, WasteRussianTime.today auto-dials Russian government officials, connects them to each other, and lets you listen in to their confusion.
Victim List in EHR Vendor Hack Grows as New Details Emerge
Data Breach Today
MAY 18, 2022
More Than 348,000 Patients at Multiple Eye Care Practices Affected So Far The list of ophthalmology practices and the number of individuals affected by a December hacking incident at a cloud-based electronic health records vendor, which resulted in deleted databases, are growing as more details about the attack slowly emerge.
Apache Cassandra® NoSQL for the Relational DBA
Advertisement
Unleash the power of NoSQL with "Apache Cassandra® NoSQL for the Relational DBA." Learn from Lewis DiFelice, an experienced Professional Services Consultant at Instaclustr, as he shares his journey transitioning from SQL to managing a 40-node Cassandra cluster. Gain insights into Cassandra's architecture, configuration strategies, and best practices.
Federal Privacy Commissioner Published Guidance on What Is “Sensitive” Personal Information
Data Protection Report
MAY 18, 2022
On May 16, 2022, the Office of the Privacy Commissioner of Canada (the “OPC”) released an Interpretation Bulletin (the “Bulletin”) on what it considers to be “sensitive” personal information under the federal Personal Information Protection and Electronic Documents Act (“PIPEDA”). The Bulletin is meant to act as a consolidated guide based on jurisprudence, regulatory findings, and various interpretations of PIPEDA’s key concepts over the years.
CISA: Majority of US Government Will Get EDR Later in 2022
Data Breach Today
MAY 18, 2022
EDR Deployments Will Be Underway at More Than Half of Federal Agencies This Year EDR deployments will be underway at more than half of federal civilian agencies by the end of September, according to federal officials. CISA is currently in the process of deploying EDR across 26 federal civilian agencies and expects to have work underway at 53 agencies by Sept. 30, 2022.
iPhone Malware that Operates Even When the Phone Is Turned Off
Schneier on Security
MAY 18, 2022
Researchers have demonstrated iPhone malware that works even when the phone is fully shut down. t turns out that the iPhone’s Bluetooth chip — which is key to making features like Find My work — has no mechanism for digitally signing or even encrypting the firmware it runs. Academics at Germany’s Technical University of Darmstadt figured out how to exploit this lack of hardening to run malicious firmware that allows the attacker to track the phone’s location or run new features whe
Five Eyes Alliance Advises on Top 10 Initial Attack Vectors
Data Breach Today
MAY 18, 2022
Cybersecurity Companies Weigh in on Pros and Cons of the Latest Alert Poor security configurations, weak controls and gaps in authentication protocols are among the common initial access vectors "routinely exploited" by threat actors, the Five Eyes cybersecurity alliance says. Firms offering cybersecurity services weigh in on the gaps and implementation challenges.
Finding The Application Modernization Strategy That Is Right For Your Business
As a business leader, you know it's important to update your apps, but it can be tough to figure out the best approach. This whitepaper helps you in upgrading your current applications using modernization strategies without any business disruptions.
Microsoft warns of attacks targeting MSSQL servers using the tool sqlps
Security Affairs
MAY 18, 2022
Microsoft warns of brute-forcing attacks targeting Microsoft SQL Server (MSSQL) database servers exposed online. Microsoft warns of a new hacking campaign aimed at MSSQL servers, threat actors are launching brute-forcing attacks against poorly protected instances. The attacks are using the legitimate tool sqlps.exe , a sort of SQL Server PowerShell file, as a LOLBin (short for living-off-the-land binary).
MITRE Creates Framework for Supply Chain Security
Dark Reading
MAY 18, 2022
System of Trust includes data-driven metrics for evaluating the integrity of software, services, and suppliers.
Microsoft warns of the rise of cryware targeting hot wallets
Security Affairs
MAY 18, 2022
Microsoft researchers warn of the rising threat of cryware targeting non-custodial cryptocurrency wallets, also known as hot wallets. Microsoft warns of the rise of cryware, malicious software used to steal info an dfunds from non-custodial cryptocurrency wallets, also known as hot wallets. Data stolen from this kind of malware includes private keys, seed phrases, and wallet addresses, that could be used by threat actors to initiate fraudulent transactions. “Cryware are information stealer
2022: The Year Zero Trust Becomes Mainstream
Dark Reading
MAY 18, 2022
It has never been more important for organizations of all sizes to prioritize securing their users and their infrastructure secrets with zero-trust network access.
From Hadoop to Data Lakehouse
Advertisement
Getting off of Hadoop is a critical objective for organizations, with data executives well aware of the significant benefits of doing so. The problem is, there are few options available that minimize the risk to the business during the migration process and that’s one of the reasons why many organizations are still using Hadoop today. By migrating to the data lakehouse, you can get immediate benefits from day one using Dremio’s phased migration approach.
IT Buyers Don’t Take Security Seriously Enough: HP
eSecurity Planet
MAY 18, 2022
Given the insane security environment we are in, it may seem weird to suggest that a tech company is too good at security. How can you be too good at something that is critical to the safety and operational resilience of companies and nations? Security is weird that way. I grew up in the security business – my family owned one of the largest tech security firms when I was a kid.
CISA orders federal agencies to fix VMware CVE-2022-22972 and CVE-2022-22973 flaws
Security Affairs
MAY 18, 2022
CISA orders federal agencies to fix VMware CVE-2022-22972 and CVE-2022-22973 vulnerabilities by May 23, 2022. The Cybersecurity and Infrastructure Security Agency (CISA) issued the Emergency Directive 22-03 to order federal agencies to fix VMware CVE-2022-22972 and CVE-2022-22973 flaws or to remove the affected products from their networks by May 23, 2022.
Log4j Vulnerability Puts Enterprise Data Lakes and AI at Risk
eSecurity Planet
MAY 18, 2022
The Apache Log4j Log4Shell bug is one of the most critical vulnerabilities in the history of cybersecurity. Hundreds of millions of devices use the Log4j component for various online services, among them government organizations, critical infrastructure, companies and individuals. Actually, pretty much all software uses this library written in Java, so it’s a very widespread risk and concern.
California Privacy Protection Agency Holds Pre-Rulemaking Stakeholder Sessions
Hunton Privacy
MAY 18, 2022
On May 4-6, 2022, the California Privacy Protection Agency (“CPPA”) held via video conference several public pre-rulemaking stakeholder sessions regarding the California Privacy Rights Act (“CPRA”). During the sessions, stakeholders ranging from privacy and cybersecurity experts to trade associations and California small business owners provided verbal comments, insights and suggestions to the CPPA as it develops the forthcoming CPRA regulations.
Finding The Application Modernization Strategy That Is Right For Your Business
As a business leader, you know it's important to update your apps, but it can be tough to figure out the best approach. This whitepaper helps you in upgrading your current applications using modernization strategies without any business disruptions.
What is Enterprise Information Archiving and Why is it Important?
Hanzo Learning Center
MAY 18, 2022
With the ever-increasing growth of enterprise data, meeting compliance guidelines from regulatory bodies regarding digital files, communications, Personal Identifiable Information (PII), financial information, and financial data can be daunting, especially with the increasingly complex and interactive elements common in today’s websites.
How Threat Actors Are a Click Away From Becoming Quasi-APTs
Dark Reading
MAY 18, 2022
As demonstrated in Ukraine and elsewhere, the battlefield for today's warriors extends to the virtual realm with cyber warfare.
VMware fixed a critical auth bypass issue in some of its products
Security Affairs
MAY 18, 2022
VMware addressed a critical authentication bypass vulnerability “affecting local domain users” in multiple products. The virtualization giant warns that a threat actor can exploit the flaw, tracked as CVE-2022-22972 (CVSSv3 base score of 9.8), to obtain admin privileges and urges customers to install patches immediately. “This critical vulnerability should be patched or mitigated immediately per the instructions in VMSA-2021-0014.
The Industry Must Better Secure Open Source Code From Threat Actors
Dark Reading
MAY 18, 2022
Build security in up front to secure open source code at the foundational level. Apply security controls, have engineering teams test, do code review, and use attacker-centric behavioral analytics to mitigate threats.
ERM Program Fundamentals for Success in the Banking Industry
Speaker: William Hord, Senior VP of Risk & Professional Services
Enterprise Risk Management (ERM) is critical for industry growth in today’s fast-paced and ever-changing risk landscape. When building your ERM program foundation, you need to answer questions like: Do we have robust board and management support? Do we understand and articulate our bank’s risk appetite and how that impacts our business units? How are we measuring and rating our risk impact, likelihood, and controls to mitigate our risk?
Experts spotted a new variant of UpdateAgent macOS malware dropper written in Swift
Security Affairs
MAY 18, 2022
Researchers spotted a new variant of the UpdateAgent macOS malware dropper that was employed in attacks in the wild. Researchers from the Jamf Threat Labs team have uncovered a new variant of the UpdateAgent macOS malware dropper. The new version is written in Swift and relies on the AWS infrastructure to host its malicious payloads. . The new variant of the malware supports common dropper features, including some minor system fingerprinting, endpoint registration, and persistence. “The se
How Pwn2Own Made Bug Hunting a Real Sport
Dark Reading
MAY 18, 2022
From a scrappy contest where hackers tried to win laptops, Pwn2Own has grown into a premier event that has helped normalize bug hunting.
RSA Conference 2022 Back to Physical - The Thrill of Meeting in Person!
Thales Cloud Protection & Licensing
MAY 18, 2022
RSA Conference 2022 Back to Physical - The Thrill of Meeting in Person! madhav. Thu, 05/19/2022 - 05:25. And just like that, RSA Conference 2022 is back in San Francisco ! However, the event will also be online for those who cannot be there in person. Initially scheduled for February this year, the conference will now take place from June 6-9. Thales is thrilled to be hosting booth #6253 in the Moscone Center.
Let's personalize your content