Building America's Cybersecurity Infrastructure
Dark Reading
JUNE 2, 2022
The government is putting the right skills and expertise in place to fight the rising cyber threat.
Thu.Jun 02, 2022
113 
FBI: Hospital Averted 'Despicable' Iranian Cyberattack
Data Breach Today
JUNE 2, 2022
FBI Director Says Boston Children's Hospital Was Targeted Last Summer Boston Children's Hospital thwarted a cyberattack by government-backed Iranian hackers last summer after U.S. authorities received intelligence about the pending assault and alerted the hospital, says FBI Director Christopher Wray, who called Iran's planned cyberattack "despicable.
Join 55,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Trending Sources
RSAC insights: How ‘TPRM’ can help shrink security skills gap — while protecting supply chains
The Last Watchdog
JUNE 2, 2022
Third-Party Risk Management ( TPRM ) has been around since the mid-1990s – and has become something of an auditing nightmare. Related: A call to share risk assessments. Big banks and insurance companies instilled the practice of requesting their third-party vendors to fill out increasingly bloated questionnaires, called bespoke assessments, which they then used as their sole basis for assessing third-party risk.
US Confirms It Has Provided Cybersecurity Support to Ukraine
Data Breach Today
JUNE 2, 2022
Boosting Ukraine's Cyber Space Is Not a Violation of Policy, White House Says The U.S. has conducted offensive cyber activities in support of Ukraine, Cyber Command Director Gen. Paul Nakasone reportedly said on Wednesday at the NATO Cooperative Cyber Defense Center of Excellence conference. The White House says these operations do not violate historic policies with Moscow.
Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications
Speaker: Aarushi Kansal, AI Leader & Author and Tony Karrer, Founder & CTO at Aggregage
Software leaders who are building applications based on Large Language Models (LLMs) often find it a challenge to achieve reliability. It’s no surprise given the non-deterministic nature of LLMs. To effectively create reliable LLM-based (often with RAG) applications, extensive testing and evaluation processes are crucial. This often ends up involving meticulous adjustments to prompts.
RSAC insights: ‘SaaS security posture management’ — SSPM — has emerged as a networking must-have
The Last Watchdog
JUNE 2, 2022
Companies have come to depend on Software as a Service – SaaS — like never before. Related: Managed security services catch on. From Office 365 to Zoom to Salesforce.com, cloud-hosted software applications have come to make up the nerve center of daily business activity. Companies now reach for SaaS apps for clerical chores, conferencing, customer relationship management, human resources, salesforce automation, supply chain management, web content creation and much more, even security.
Sign up to get articles personalized to your interests!
Information Management Today brings together the best content for information management professionals from the widest variety of industry thought leaders.
More Trending
'Clipminer' Malware Actors Steal $1.7 Million Using Clipboard Hijackingp
Dark Reading
JUNE 2, 2022
The malware targets Windows users via Trojanized downloads of cracked or pirated software and then starts in on cryptocurrency mining and clipboard hijacking.
2022 Verizon Breach Report: Alarming Rise in Ransomware
Data Breach Today
JUNE 2, 2022
Chris Novak of Verizon Business Group on Latest Breach Investigations Report The 15th edition of the annual Verizon Data Breach Investigations Report examines the rapid growth in ransomware, along with other threat vectors. Chris Novak, global director of the Threat Research Advisory Center at Verizon Business Group, discusses key findings and reviews the security landscape.
Millions of MySQL Servers are Publicly Exposed
eSecurity Planet
JUNE 2, 2022
More than 3.6 million MySQL servers are publicly exposed on the internet, security researchers noted this week. Shadow Server Foundation researchers reported that they simply issued a MySQL connection request on default port 3306 to see if a server responded with a MySQL Server Greeting, rather than intrusive requests that pentesters use to break into databases.
Okta CEO: Hack Didn't Have Quantifiable Impact on Business
Data Breach Today
JUNE 2, 2022
Okta's Competitive Win Rates and Renewal Rates Weren't Impacted by the Lapsus$ Hack Okta's competitive win rates and renewal rates weren't measurably impacted by the Lapsus$ cyberattack that came to light in March. The company looked through hundreds opportunities with customers and prospects to see if any of the potential sales were delayed or cancelled due to the breach.
How and Why Should You Be Tracking Geopolitical Risk?
Advertisement
Geopolitical risk is now at the top of the agenda for CEOs. But tracking it can be difficult. The world is more interconnected than ever, whether in terms of economics and supply chains or technology and communication. Geopolitically, however, it is becoming increasingly fragmented – threatening the operations, financial well-being, and security of globally connected companies.
CNIL Unveils 2021 Annual Activity Report
Hunton Privacy
JUNE 2, 2022
On May 11, 2022, the French Data Protection Authority (the “CNIL”) published its Annual Activity Report for 2021 (the “Report”). The Report provides an overview of the CNIL’s enforcement activities in 2021. The report notably shows a significant increase in the CNIL’s activity. In particular, the Report revealed that: The CNIL received 14,143 complaints in 2021 (+4% compared to 2020) and closed 12,522.
Smishing and Home Delivery
KnowBe4
JUNE 2, 2022
A smishing campaign is impersonating the UK-based delivery company Evri with text messages informing recipients that their package couldn’t be delivered, according to Paul Ducklin at Naked Security. The messages state that a driver tried to deliver a package, but no one was home. The texts contain a link for the recipient to reschedule their delivery.
Conti leaked chats confirm that the gang’s ability to conduct firmware-based attacks
Security Affairs
JUNE 2, 2022
The analysis of the internal chats of the Conti ransomware group revealed the gang was working on firmware attack techniques. The analysis of Conti group’s chats , which were leaked earlier this year, revealed that the ransomware gang has been working on firmware attack techniques. An attack against firmware could give threat actors significant powers, they are hard to detect and could be very destructive, and attackers can use them to achieve long-term strategic goals.
Remotely Controlling Touchscreens
Schneier on Security
JUNE 2, 2022
Researchers have demonstrated controlling touchscreens at a distance, at least in a laboratory setting: The core idea is to take advantage of the electromagnetic signals to execute basic touch events such as taps and swipes into targeted locations of the touchscreen with the goal of taking over remote control and manipulating the underlying device. The attack, which works from a distance of up to 40mm, hinges on the fact that capacitive touchscreens are sensitive to EMI, leveraging it to inject
7 Pitfalls for Apache Cassandra in Production
Advertisement
Apache Cassandra is an open-source distributed database that boasts an architecture that delivers high scalability, near 100% availability, and powerful read-and-write performance required for many data-heavy use cases. However, many developers and administrators who are new to this NoSQL database often encounter several challenges that can impact its performance.
Engaging AR learning activities for the classroom and home
Jamf
JUNE 2, 2022
Augmented reality (AR) has enabled new learning models that can be equally effective for students studying on school campuses or isolating at home. Discover how educators at ACS International Schools have successfully integrated AR into K-12 curriculums to enhance learning and empower teachers.
LockBit ransomware attack impacted production in a Mexican Foxconn plant
Security Affairs
JUNE 2, 2022
LockBit ransomware gang claimed responsibility for an attack against the electronics manufacturing giant Foxconn that impacted production in Mexico. The electronics manufacturing giant Foxconn confirmed that its production plant in Tijuana (Mexico) has been impacted by a ransomware attack in late May. The LockBit ransomware gang claimed responsibility for an attack and announced that it will release the stolen data by 11 June, 2022 18:01:00 if the company will not pay the ransom.
Microsoft Leads in Exploited Vulnerabilities; Office is Latest Target
eSecurity Planet
JUNE 2, 2022
With nearly $200 billion in annual sales, Microsoft is the world’s largest software and information technology (IT) vendor, its products widely used by both companies and consumers. That also makes it the biggest source of vulnerabilities targeted by hackers. According to the U.S. Cybersecurity and Infrastructure Security Agency (CISA), more than a third of all actively exploited vulnerabilities so far this year have been flaws in Microsoft systems.
SideWinder Targets Pakistani Entities With Phishing Attacks
KnowBe4
JUNE 2, 2022
The India-aligned APT SideWinder is using a variety of social engineering techniques to target Pakistani government and military entities, according to researchers at Group-IB. The threat actor is using phishing emails as well as a malicious VPN app placed in the Google Play Store.
Reimagined: Building Products with Generative AI
Advertisement
“Reimagined: Building Products with Generative AI” is an extensive guide for integrating generative AI into product strategy and careers featuring over 150 real-world examples, 30 case studies, and 20+ frameworks, and endorsed by over 20 leading AI and product executives, inventors, entrepreneurs, and researchers.
Cybercriminals Expand Attack Radius and Ransomware Pain Points
Threatpost
JUNE 2, 2022
Melissa Bischoping, security researcher with Tanium and Infosec Insiders columnist, urges firms to consider the upstream and downstream impact of "triple extortion" ransomware attacks.
An international police operation dismantled FluBot spyware
Security Affairs
JUNE 2, 2022
An international law enforcement operation involving 11 countries resulted in the takedown of the FluBot Android malware. An international law enforcement operation involving 11 countries led to the takedown of the infamous FluBot Android malware. The investigation involved law enforcement authorities of Australia, Belgium, Finland, Hungary, Ireland, Spain, Sweden, Switzerland, the Netherlands and the United States, with the coordination of international activity carried out by Europol’s Europea
US Sanctions Force Evil Corp to Change Tactics
Dark Reading
JUNE 2, 2022
The threat actor behind the notorious Dridex campaign has switched from using its exclusive credential-harvesting malware to a ransomware-as-a-service model, to make attribution harder.
Celebrating Pride Month at Micro Focus
Micro Focus
JUNE 2, 2022
During the month of June, the spotlight is on Pride – and Micro Focus is proud to join the celebration to champion the cause of LGBTQ+ people around the world striving for equality. Being our real selves, and feeling confident and safe in expressing our individuality, are very important to me. I have a deep. View Article. The post Celebrating Pride Month at Micro Focus appeared first on Micro Focus Blog.
How to Migrate From DataStax Enterprise to Instaclustr Managed Apache Cassandra
Advertisement
If you’re considering migrating from DataStax Enterprise (DSE) to open source Apache Cassandra®, our comprehensive guide is tailored for architects, engineers, and IT directors. Whether you’re motivated by cost savings, avoiding vendor lock-in, or embracing the vibrant open-source community, Apache Cassandra offers robust value. Transition seamlessly to Instaclustr Managed Cassandra with our expert insights, ensuring zero downtime during migration.
Fighting Follina: Application Vulnerabilities and Detection Possibilities
Dark Reading
JUNE 2, 2022
Although organizations should perform proper risk analysis and patch as soon as practical after there's a fix for this vulnerability, defenders still have options before that's released.
ARMA International and the Information Governance Professional Board Announce Updates to the IGP Certification Exam
IG Guru
JUNE 2, 2022
Pilot Testing is Underway with New Version Available on July 15, 2022 [link]. The post ARMA International and the Information Governance Professional Board Announce Updates to the IGP Certification Exam appeared first on IG GURU.
Neutralizing Novel Trickbot Attacks With AI
Dark Reading
JUNE 2, 2022
Artificial intelligence technology can detect the latest wave of Trickbot ransomware and block the attack before it causes damage.
International Authorities Take Down Flubot Malware Network
Threatpost
JUNE 2, 2022
The info-stealing trojan used SMS messages and lifted contact credentials to spread with unprecedented speed across Android devices globally since December 2020.
Entity Resolution Checklist: What to Consider When Evaluating Options
Advertisement
Are you trying to decide which entity resolution capabilities you need? It can be confusing to determine which features are most important for your project. And sometimes key features are overlooked. Get the Entity Resolution Evaluation Checklist to make sure you’ve thought of everything to make your project a success! The list was created by Senzing’s team of leading entity resolution experts, based on their real-world experience.
Protecting the Crown Jewels: The evolution of security strategies and asset protection
Thales Cloud Protection & Licensing
JUNE 2, 2022
Protecting the Crown Jewels: The evolution of security strategies and asset protection. divya. Thu, 06/02/2022 - 10:25. Do you know what takes place at the Ceremony of the Keys at the Tower of London? During the 700-year-old ancient ceremony, footsteps echo in the darkness. The sentry cries out, 'Halt, who comes there? 'The Yeoman Warder replies, 'The keys.
Intel Chipset Firmware Actively Targeted by Conti Group
Dark Reading
JUNE 2, 2022
Conti threat actors are betting chipset firmware is updated less frequently than other software — and winning big, analysts say.
B2B Supply Chain Integration – Why it’s Better than FTP for Meeting Today’s Global Requirements and Industry Standards
Rocket Software
JUNE 2, 2022
To meet business goals, organizations worldwide link more processes, exchange more data and share more applications internally with colleagues and externally with global suppliers, partners and clients than any time in the past. . The challenges of moving files, especially product design data (CAD data), database, media, financial and other business-sensitive files in complex and expanding collaboration networks are growing as file sizes also grow.
Let's personalize your content