The Last Watchdog

JULY 1, 2024

This strategic alliance between Adaptiva and CrowdStrike makes a lot of sense. OneSite Patch leverages CrowdStrike’s rich threat intelligence and vulnerability data to prioritize and automate patch deployments. Thus it provides a smooth path for companies to patch vulnerabilities and install updates much more efficiently.

IT 279

IT Security Compliance Manufacturing 279

Data Breach Today

OCTOBER 18, 2023

In this episode of CyberEd.io's podcast series "Cybersecurity Unplugged," Alex Zeltcer of nSure.ai discusses how fraudsters access your payment information, how industrialized payment fraud attacks operate, and how nSure.ai uses discriminative AI to identify these attacks and cut their scale.

IT 293

IT Cybersecurity Access 293

KnowBe4

JULY 25, 2024

Frequently Asked Questions About KnowBe4's Fake IT Worker Blog July 23, 2024, I wrote a blog post about how KnowBe4 inadvertently hired a skillful North Korean IT worker who used the stolen identity of a US citizen. He participated in several rounds of video interviews and circumvented background check processes commonly used.

IT 101

IT Access Cloud Data breaches 101

Data Breach Today

JUNE 10, 2024

Ilionx's Trish McGill on Tackling Geopolitical Risks and Human Barriers Security leaders face significant challenges in securing OT environments, especially with increasing geopolitical disruptions and psychological barriers.

IT 173

IT Cybersecurity Risk Security 173

Krebs on Security

MAY 6, 2024

But new research suggests this is a dangerous assumption when connecting to a VPN via an untrusted network, because attackers on the same network could force a target’s traffic off of the protection provided by their VPN without triggering any alerts to the user. Image: Shutterstock.

IT 269

IT Security Encryption Passwords 269

Data Breach Today

MARCH 20, 2024

Among Those Leaving Is Zohar Alon, Who Was Hired in 2023 to Spearhead Product, R&D Cybereason is carrying out its third round of layoffs in 21 months, with dozens of senior employees expected to be let go, Among the exiting employees is Zohar Alon, the longtime Dome9 Security leader whCybereason is carrying out its third round of layoffs in 21 months, (..)

IT 288

IT Security 288

Data Breach Today

JUNE 11, 2024

Cleveland Investigating Cyber Incident that Forced City to Shutdown IT Systems The city of Cleveland, Ohio is launching an investigation into an apparent cyber event that forced a shutdown of its information technology systems throughout the start of the week, officials said Tuesday, though additional details surrounding the incident remain unclear. (..)

IT 173

IT 173

Data Breach Today

MAY 14, 2024

In Some Regions, ER Patients Still Diverted, Pharmacies Can't Fill Prescriptions U.S. hospital chain Ascension is making progress recovering from last week's ransomware attack, but it will take time to restore all its affected IT services, including electronic health records and systems supporting its pharmacy operations.

IT 182

IT Ransomware 182

Data Breach Today

AUGUST 3, 2023

BlueCharlie' Favors a New Domain Registrar and URL Structure A Russia-linked hacking group is shifting its online infrastructure likely in response to public disclosures about its activity.

IT 246

IT 246

Data Breach Today

MARCH 14, 2024

It's critical for hospitals and other firms to not only prepare for how they will respond to a cyberattack but also to consider the regional impact if a neighboring provider of services needed in the community is disrupted by a serious cyber incident, said Margie Zuk of Mitre.

IT 259

IT 259

Data Breach Today

MARCH 8, 2024

UnitedHealth Group Provides IT Restoration Timeline; AMA Is Not Impressed UnitedHealth Group expects some key IT systems and services affected by the recent cyberattack on its Change Healthcare unit to regain functionality over the next week to 10 days. Certain pharmacy services are already restored.

IT 281

IT 281

Data Breach Today

OCTOBER 19, 2023

Thousands of IT Workers Defrauded US Firms to Earn Hundreds of Millions of Dollars Thousands of North Korean IT workers hid their identities to earn hundreds of millions of dollars in IT contract work from overseas companies to help finance the country's weapons development program, U.S. and South Korean agencies said.

IT 298

IT 298

Data Breach Today

NOVEMBER 30, 2023

In the constant struggle to manage the other five pillars - identify, protect, detect, respond and recover - security leaders often do not have governance at top of mind, said Netography CEO Martin Roesch, but he added, "Good governance is the root of having good security."

Government 291

Government IT Security 291

KnowBe4

JULY 23, 2024

Incident Report Summary: Insider Threat TLDR: KnowBe4 was in need of a software engineer for our internal IT AI team. Posted the job, got resumes, did the interviews, did the background check, checked the references and hired the person. We sent the Mac and the moment it was received it immediately started to load malware.

IT 145

IT 145

Data Breach Today

NOVEMBER 9, 2023

Iranian Espionage Group Used Tactics From Previous Campaigns Security company CrowdStrike said it had observed Iranian hacker group Imperial Kitten, also known as TA456, Crimson Sandstorm and Tortoiseshell, conducting web compromise operations between 2022 and 2023 to infiltrate Israeli logistics, transportation and technology companies.

IT 279

IT Security 279

Krebs on Security

JUNE 8, 2023

It’s not often that a zero-day vulnerability causes a network security vendor to urge customers to physically remove and decommission an entire line of affected hardware — as opposed to just applying software updates. The Barracuda Email Security Gateway (ESG) 900 appliance. Campbell, Calif.

IT 310

IT Security Ransomware Encryption 310

Data Breach Today

AUGUST 29, 2023

Incident Comes as Several Other Regional Providers Recover From Recent Attacks Two organizations that operate clinics and hospitals in the Midwest are the latest medical care providers struggling with an enterprisewide IT outage affecting clinical and administrative applications.

IT 262

IT 262

Data Breach Today

FEBRUARY 11, 2023

Group Says It Has Confidential Data, Tech Docs; A10 Says Operations Not Impacted The Play ransomware group listed networking hardware manufacturer A10 Networks in its leak site, after briefly gaining access to its IT infrastructure, according to data breach notifications firm BetterCyber.

Ransomware 330

Ransomware IT Manufacturing Data breaches 330

Data Breach Today

OCTOBER 5, 2023

The Question is Also One for the Legal Team to Own, Says Uber's Former CSO Trick question for CSOs: When does a security incident qualify as being a data breach? The answer is that it's "a very complicated question" best left to the legal team, said former Uber CSO Joe Sullivan, sharing lessons learned from the U.S.

IT 298

IT Data breaches Security 298

Data Breach Today

OCTOBER 24, 2023

Nonemergency Patients Asked to Cancel or Reschedule Appointments During Outage A cyberattack on a shared IT services organization is forcing five member hospitals in Ontario to cancel or reschedule patient appointments and steer nonemergency patients to other facilities.

IT 299

IT 299

Data Breach Today

FEBRUARY 23, 2024

Breaches and Complaints Continue to Soar as Regulatory Duties Increase As the volume of major health data breaches rises, the federal agency charged with investigating those incidents told Congress this week that it lacks the needed funding to keep up with its mounting workload.

IT 238

IT Data breaches Ransomware 238

Data Breach Today

NOVEMBER 27, 2023

Gartner's Padraig Byrne on Data Challenges and Operational Excellence IT leaders are poised to employ AIOps to combat the challenges faced by ITOps teams due to vast data volumes, alert fatigue and task prioritization.

IT 214

IT 214

Data Breach Today

MAY 29, 2024

IT and OT Teams Rarely Talk and When They Do, They Rarely Agree On Anything Australian critical infrastructure organizations must enable greater convergence between their information technology and operational technology teams to better respond to cybersecurity threats to their OT infrastructure, according to a new study by Palo Alto Networks.

IT 162

IT Cybersecurity 162

Data Breach Today

FEBRUARY 16, 2024

CISO Sam Curry and CMO Red Curry discuss the chaos and disruption of cyberwar and how attacks on critical infrastructure can tactically help attackers in combat, demoralize the general population and affect critical capabilities at just the right point in time.

IT 246

IT 246

Data Breach Today

JANUARY 18, 2024

American Hospital Association Warns of Social Engineering Schemes The American Hospital Association is warning of increasingly sophisticated social engineering scams targeting hospital IT help desks with schemes involving the stolen credentials of revenue cycle and other finance employees to commit payment fraud against the institutions.

IT 282

IT 282

AIIM

FEBRUARY 27, 2024

In my role as The Info Gov Guy™, I consult with clients from up and down their organizational charts: in records, IT, legal, HR, marketing, etc.

IT 166

IT Marketing Digital transformation 166

Security Affairs

JANUARY 19, 2024

Can quantum computing break cryptography? Can it do it within a person’s lifetime? Will it be a cryptopocalypse, as some experts suggest? Can quantum computing break cryptography? Sure, it can. Can it do it within a person’s lifetime? In fact, it will likely achieve this sometime within your career.

IT 113

IT Encryption Security Cybersecurity 113

WIRED Threat Level

JUNE 15, 2024

The messaging standard promises better security and cooler features than plain old SMS. Android has had it for years, but now iPhones are getting it too.

IT 104

IT Security Privacy 104

Security Affairs

JULY 9, 2024

Avast developed and released a decryptor for the DoNex ransomware family that allows victims to recover their files for free. Avast researchers identified a cryptographic flaw in the DoNex ransomware and its predecessors that allowed them to develop a decryptor. The experts revealed the weakness during the Recon 2024 conference.

Ransomware 102

Ransomware IT Encryption Passwords 102

Security Affairs

JULY 16, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds an OSGeo GeoServer GeoTools bug to its Known Exploited Vulnerabilities catalog. GeoServer is an open-source server that allows users to share and edit geospatial data. The vulnerability impacts all GeoServer instances, as it incorrectly applies XPath evaluation to simple feature types.

IT 107

IT Libraries Cybersecurity Risk 107