IT Security Guru

JULY 28, 2023

Within such a disseminated environment, cybersecurity hygiene concerns businesses and organisations, especially nowadays, where highly skilled cybercriminals become more active, and their attacks are predicted to intensify further and increase the cost at a 15% annual rate.

Data breaches 95

Data breaches Risk Education Telecommunications 95

Cisco Security

FEBRUARY 3, 2022

New research shows effective and efficient vulnerability management hinges on a key ingredient: exploit intel. An expanding threat landscape. In 2021, a record-breaking 20,130 Common Vulnerabilities and Exposures (CVEs) were published in the National Vulnerability Database. The data arrives just in time.

Risk 71

Risk CISO Government Cybersecurity 71

SecureList

NOVEMBER 22, 2022

However, luckily, we did not see any sudden or catastrophic changes in the overall threat landscape – none that were difficult to handle, despite many colorful headlines in the media. Other changes in the threat landscape. As we see it, the coming year looks to be much more complicated. Developments in the APT world.

Energy and Utilities 97

Energy and Utilities Marketing Government Phishing 97

Approachable Cyber Threats

FEBRUARY 23, 2024

Category Awareness, Artificial Intelligence Risk Level Artificial Intelligence (AI) is set to be the newest ally for many companies, but it’s also set to be the newest threat. The realm of cybersecurity is undergoing a transformation, guided by the omnipresent force of Artificial Intelligence (AI).

Cybersecurity 52

Cybersecurity Artificial Intelligence Malware Phishing 52

NopSec

JULY 28, 2023

July was a busy month for vulnerability research. Researchers discovered that Adobe ColdFusion is still actively used in production environments and vulnerable to a deserialization vulnerability that results in remote command execution (RCE). There’s too many classes to safely create a denylist to cover all threat scenarios.

Authentication 52

Authentication Encryption Risk Passwords 52

The Last Watchdog

AUGUST 19, 2021

Adam Darrah , director of threat intelligence, ZeroFox. Could be weak vulnerability management and poor patching hygiene. Compromising that could make other unrelated accounts vulnerable. A determined threat actor can always find ways to circumvent security. Could be weak application security practices.

Mobile 306

Mobile Data breaches Authentication Accountability 306

SecureList

DECEMBER 14, 2022

In the modern world, it has become very difficult to launch any kind of military campaign without intelligence support in the field. The lessons learned from these events may allow predicting kinetic conflicts by monitoring new cyberattacks in potential areas of conflict. Key insights.

DDOS 131

DDOS Ransomware Government Energy and Utilities 131

NopSec

APRIL 7, 2019

Many security companies are adopting it as well, to solve security problems such as intrusion detection, malware analysis, and vulnerability prioritization. In fact, terms such as machine learning , artificial intelligence and deep learning get thrown around so much these days that you may be tempted to dismiss them as hype.

Cybersecurity 52

Cybersecurity Data breaches Malware Risk 52

The Last Watchdog

JULY 25, 2022

Having spiked during the COVID-19 pandemic, threats such as malware, ransomware, and DDoS attacks continue to accelerate. A10’s security research team recorded a significant spike in the number of potential DDoS weapons available for exploitation in 2021 and early 2022. Related: Apple tools abuse widespread. Key findings follow.

DDOS 214

DDOS Artificial Intelligence Cyber Attacks Malware 214

SecureList

AUGUST 15, 2022

IT threat evolution in Q2 2022. IT threat evolution in Q2 2022. IT threat evolution in Q2 2022. We recently published our analysis of WinDealer : malware developed by the LuoYu APT threat actor. ToddyCat: previously unknown threat actor attacks high-profile organizations in Europe and Asia. Non-mobile statistics.

Mobile 79

Mobile Ransomware Malware Encryption 79

NopSec

NOVEMBER 21, 2018

The Great News It has been recently reported that NIST, the agency hosting the National Vulnerability Database (NVD), plans to replace its manual scoring of software vulnerabilities with a new automated process that leverages IBM Watson’s artificial intelligence system.

Risk 40

Risk Artificial Intelligence Accountability Software 40

Spinone

NOVEMBER 6, 2017

Some people believe that Artificial Intelligence (AI) has the ability to amplify our natural human intelligence, as long as it remains in good hands. Artificial intelligence is progressing at a rapid pace and we often associate it with science fiction movies where we see robots performing human-like tasks.

Artificial Intelligence 40

Artificial Intelligence Cybersecurity Technology Big data 40

eSecurity Planet

DECEMBER 19, 2023

As 2023 draws to an end and cybersecurity budgeting is nearly complete, it helps to consider the year’s events and try to predict next year’s trends. In the coming year, I think we will see generative AI be used to analyze a company’s existing policies, regulatory requirements, and threat landscape to generate tailored security policies.

Cybersecurity 140

Cybersecurity CISO Government Technology 140

SecureList

DECEMBER 11, 2023

However, as the influence of artificial intelligence extends far beyond linguistic accolades, a nuanced narrative emerges, encapsulating both the marvels and challenges of our AI-infused reality. Using this understanding, we also make predictions about how AI-related threats might change in the future.

Cybersecurity 94

Cybersecurity Artificial Intelligence Technology Risk 94

Webroot

OCTOBER 1, 2021

The increased reliance on remote access provided cybercriminals with an opportunity to exploit any easily accessible vulnerability. In each of these examples, cybercriminals capitalized on the collective vulnerabilities of individuals and businesses to target critical infrastructure. Is the threat landscape more of the same?

Ransomware 113

Ransomware Backups Threat Reports Small Business 113

SecureWorld News

NOVEMBER 8, 2023

Social engineering attacks have long been a threat to businesses worldwide, statistically comprising roughly 98% of cyberattacks worldwide. What's more, the rise of artificial intelligence (AI) has made social engineering methods more complex, covert, and difficult to detect. This makes deception tactics more effective.

Social Engineering 85

Social Engineering Engineering Cyber Attacks Artificial Intelligence 85

McAfee

JUNE 21, 2021

Better productivity in exchange for deeper vulnerabilities—like man-in-the-middle attacks—wasn’t a choice many cybersecurity pros would make under normal circumstances. Among the many types of threats we’ve tracked, one of the biggest threats is viruses infecting browsers and capturing keystrokes to steal sensitive information.

CISO 100

CISO Cybersecurity CSO Risk 100

NopSec

DECEMBER 31, 2018

At this time of the year, like any other year, the security industry goes back to reflect on itself and foresee future trends in what we call the “New Year predictions”. Most of the time these predictions are meaningless and serve as nothing more than a marketing tool. With this blog post I want to take a different path.

System Administration 40

System Administration Risk Accountability Malware 40

SecureList

JUNE 20, 2022

Security researchers and private cybersecurity companies can typically analyse cyber incidents from a technical standpoint and cluster them into groups, which they then tie to particular threat actors. The end result of this process is technical attribution: intelligence that informs readers about the identity of the attackers.

Energy and Utilities 84

Energy and Utilities Data collection Malware Cybersecurity 84

SecureWorld News

OCTOBER 12, 2022

And they also realized we need to invest in threat intelligence. He spoke about protecting vulnerabilities that might not be top of mind, such as chat systems like Slack or Teams, or sensitive commands that not everyone uses. I think ransomware, they see attackers running a series of very predictable commands.

CISO 71

CISO Healthcare Government Cybersecurity 71

McAfee

FEBRUARY 5, 2021

Try to think like a stealthy attacker and predict what sources of telemetry will be necessary to detect suspicious usage of legitimate applications and trusted software solutions. Modern attacks abuse trust, not necessarily vulnerabilities. Be threat focused. Do threat modeling and identify where the risks are.

DNS 58

DNS Architecture Software Authentication 58

Jane Frankland

DECEMBER 7, 2023

Just like in previous years, 2024 is set to test practitioners’ skills as the frequency of cyber threats continues to surge leaving no room for complacency. Here are my predictions for 2024. SEO poisoning , also known as black-hat SEO, is a growing threat and will continue to scale in 2024.

Cybersecurity 130

Cybersecurity Cyber threats Insurance Artificial Intelligence 130

Herjavec Group

JULY 29, 2021

But in spite of it all, the cybersecurity industry and the professionals within it continue to step up and tirelessly work to protect organizations against cyber threats. Ransomware – the hacker’s current cyber weapon of choice. Ransomware has become the weapon of choice for many threat actors.

Cybersecurity 52

Cybersecurity Digital transformation Cyber Attacks Ransomware 52

NopSec

FEBRUARY 9, 2017

Based on current trends, NopSec has released its latest report on the 5 biggest cyber threats we expect to see this year: nation-state cyber attacks, ransomware, DDoS attacks , the Internet of Things, and social engineering & human error. Regulators, too, will struggle to keep up with the evolving threats. Ransomware The U.S.

Cybersecurity 40

Cybersecurity DDOS IoT Social Engineering 40

Webroot

MARCH 4, 2024

Let’s delve into the fascinating world of Artificial intelligence (AI), unpacking its concepts, implications, and real-world applications. Brace yourself for an extended journey through the marvels and challenges of artificial intelligence. It identifies potential candidates, predicts their efficacy, and expedites research.

Energy and Utilities 84

Energy and Utilities Artificial Intelligence Manufacturing Banking 84

SecureList

AUGUST 3, 2022

The 360 Netlab company published a report on a new zombie net named Fodcha, which expanded through brute-force attacks and by exploiting known vulnerabilities in IoT devices. The bot specializes in attacking routers and web servers that contain known vulnerabilities, including those discovered in 2022. Quarter summary.

DDOS 106

DDOS Government Marketing IoT 106

Cisco Security

JUNE 25, 2021

I now understand what Seamus Heaney called the “truth and risk” that surround us, the human procilivity for self-destruction was never more stark than when we faced weaponized disinformation and merciless ransomware attacks when millions were dying. Its about predicting issues before they become acute enough to present at the ER.

CISO 74

CISO Healthcare InfoSec Computers and Electronics 74

ForAllSecure

JUNE 9, 2020

He predicts that in 10 years there will be no demarcation between the tech industry and other industries. And while saving the world, they’ll make mistakes which eventually turn into vulnerabilities. I already have a backlog of vulnerabilities. These risks are vulnerabilities that have a CVE ID associated with them.

Risk 52

Risk Software Technology Marketing 52

ForAllSecure

JUNE 9, 2020

He predicts that in 10 years there will be no demarcation between the tech industry and other industries. And while saving the world, they’ll make mistakes which eventually turn into vulnerabilities. I already have a backlog of vulnerabilities. These risks are vulnerabilities that have a CVE ID associated with them.

Risk 52

Risk Software Technology Marketing 52

ForAllSecure

JUNE 9, 2020

He predicts that in 10 years there will be no demarcation between the tech industry and other industries. And while saving the world, they’ll make mistakes which eventually turn into vulnerabilities. I already have a backlog of vulnerabilities. These risks are vulnerabilities that have a CVE ID associated with them.

Risk 52

Risk Software Technology Marketing 52

Malwarebytes

MAY 21, 2023

ChatGPT—the much-hyped, artificial intelligence (AI) chatbot that provides human-like responses from an enormous knowledge base—has been embraced practically everywhere, from private sector businesses to K–12 classrooms. But over the last 20 years, AI has transitioned from the stuff of nightmares to mainstream adoption.

Cybersecurity 79

Cybersecurity Artificial Intelligence Social Engineering Engineering 79

CyberSecurity Insiders

DECEMBER 8, 2021

We have seen firsthand that it takes more than an individual task force to combat ransomware and other related threats such as phishing, insider threats and more. They fronted themselves as an agency selling cybersecurity services, including a predictable schedule, benefits and lunch breaks as part of their job posting.

Data breaches 142

Data breaches Ransomware Government Cybersecurity 142

Security Boulevard

JULY 19, 2021

On Monday (19JUL2021) President Biden announced that the US and its allies were joining together to condemn and expose that China was behind a set of unprecedented attacks exploiting vulnerabilities in Microsoft Exchange servers conducted earlier this year. Three HSSD Intelligence officers, Ding Xiaoyang (???), Cheng Qingmin (???)

Ransomware 98

Ransomware Technology Government Cyber Attacks 98

The Last Watchdog

JULY 25, 2019

This comes as no surprise to anyone in the military or intelligence communities. Bogachev’s searches explicitly sought out intelligence of direct strategic benefit to Russia – just prior to Russia making adversarial moves in the Republic of Georgia , the Ukraine and Turkey , respectively. Here’s what this adds up to, going forward.

IoT 171

IoT Hacking Banking Government 171