CSO Magazine

MARCH 1, 2023

Known vulnerabilities, compromise of legitimate package, and name confusion attacks are expected to be among the top ten open source software risks in 2023, according to a report by Endor Labs.

Software 113

Software Risk 113

CSO Magazine

JULY 14, 2022

As CISOs look to prepare their 2023 security budgets, some might be asking themselves, “where do I begin?” There are such varied and rapidly changing facets of defending organizations against cyber threats that the task of sorting out which risks need the most attention can seem overwhelming.

Cybersecurity 117

Cybersecurity CISO Cyber threats Risk 117

CSO Magazine

FEBRUARY 22, 2023

In its newly released annual State of Malware report , cybersecurity firm Malwarebytes selected five threats that they consider to be archetypes for some of the most common malware families observed in 2022: LockBit ransomware The Emotet botnet The SocGholish drive-by download Android droppers macOS Genio adware "Protecting your business for the rest (..)

Adware 122

Adware Scams Malware Ransomware 122

CSO Magazine

JANUARY 24, 2023

US financial institutions see peer-to-peer fraud and other digital fraud as the biggest cybersecurity concern in 2023. It was cited by 29% of respondents in a survey by Computer Systems Inc. CSI), followed by data breaches (23%), ransomware (20%) and a breach at a third party (15%).

Cyber threats 111

Cyber threats Identity Theft Cyber Insurance Insurance 111

CSO Magazine

JANUARY 2, 2023

The ransomware ecosystem has changed significantly in 2022, with attackers shifting from large groups that dominated the landscape toward smaller ransomware-as-a-service (RaaS) operations in search of more flexibility and drawing less attention from law enforcement.

Ransomware 126

Ransomware Marketing 126

CSO Magazine

NOVEMBER 11, 2022

The problems cybersecurity startups attempt to solve are often a bit ahead of the mainstream. They can move faster than most established companies to fill gaps or emerging needs. Startups can often innovative faster because they are unfettered by an installed base. The downside, of course, is that startups often lack resources and maturity.

Cybersecurity 118

Cybersecurity Risk 118

CSO Magazine

FEBRUARY 10, 2023

Uncertainty and instability marked the end of 2022 for many in the tech sector, a trend that bled into the beginning of 2023. Global concern over cybersecurity has never been higher, with attacks coming fast and furious and in ever-growing numbers , and 65% of organizations planned to increase cybersecurity spending in 2023.

Cybersecurity 71

Cybersecurity CISO 71

CSO Magazine

DECEMBER 6, 2022

As the frequency and severity of ransomware, phishing, and denial of service attacks has increased, so has demand for cyber insurance. billion in direct written premiums were recorded in 2021, a 61% increase over the prior year, according to an October 2022 memorandum from the National Association of Insurance Commissioners.

Cyber Insurance 121

Cyber Insurance Insurance Phishing Ransomware 121

CSO Magazine

FEBRUARY 6, 2023

Cybersecurity insurance firm Coalition has predicted that there will be 1,900 average monthly critical Common Vulnerabilities and Exposures ( CVEs ) in 2023, a 13% increase over 2022. billion IP addresses.

Insurance 81

Insurance Cyber threats Internet Internet 81

CSO Magazine

MARCH 28, 2023

The ODNI minced no words as they addressed China, Russia, North Korea, and Iran as the key nation-states responsible for cyber threats and then continued to highlight other non-state actors that are equally worthy of our attention in the 2023 Threat Assessment. To read this article in full, please click here

Cyber threats 86

Cyber threats 86

SecureWorld News

JULY 17, 2023

A California judge made the decision just as the original July 1, 2023, deadline was to hit. A California judge made the decision just as the original July 1, 2023, deadline was to hit. Additionally, the March 29, 2023, regulations are the ones that are being delayed.

CSO 98

CSO 98

Duo's Security Blog

NOVEMBER 20, 2023

“It took nearly 11 months (328 days) to identity and contain data breaches resulting from stolen or compromised credentials.” – IBM’s Cost of Data Breach Report 2023 I recently came across a 2012 article from CSO Online , and realized that it has been more than 11 years since the phrase “Identity is the new perimeter” was coined!

Threat Detection 138

Threat Detection Authentication Accountability Data breaches 138

CSO Magazine

MAY 4, 2022

The world’s leading development platform said it will require all code-contributing users to enroll in 2FA by the end of 2023 to enhance the security of developer accounts and bolster security within the software supply chain. GitHub has announced its largest-ever push toward two-factor authentication (2FA).

Authentication 74

Authentication Software Accountability Risk 74

CSO Magazine

FEBRUARY 22, 2023

In its newly released annual State of Malware report , cybersecurity firm Malwarebytes selected five threats that they consider to be archetypes for some of the most common malware families observed in 2022: LockBit ransomware The Emotet botnet The SocGholish drive-by download Android droppers macOS Genio adware "Protecting your business for the rest (..)

Adware 74

Adware Scams Malware Ransomware 74

SecureWorld News

APRIL 6, 2023

Genova Burns shared in a letter to affected drivers some information about the breach: "On January 31, 2023, Genova Burns became aware of suspicious activity relating to our internal information systems. In response, we engaged outside forensic and data security specialists to investigate the nature and scope of the activity.

Data breaches 98

Data breaches CSO Phishing Risk 98

eSecurity Planet

JANUARY 29, 2024

“The most significant risk for enterprises isn’t the speed at which they are applying critical patches; it comes from not applying the patches on every asset,” noted Brian Contos, CSO of Sevco Security. The fix: Deploy the Apache security upgrades available since November 2023. The fix: Apply the patches released in December 2023 ASAP.

Software 114

Software Authentication CSO Accountability 114

BH Consulting

OCTOBER 15, 2023

A companion to Europol’s IOCTA 2023 report , it digs deeper into malware – ransomware in particular – and DDoS attacks. MORE Joe Sullivan, Uber’s CSO during its data breach, shares his perspective. Sign up here The post Security Roundup October 2023 appeared first on BH Consulting.

Ransomware 52

Ransomware Data breaches CSO Cyber Attacks 52

CSO Magazine

JANUARY 4, 2023

By now, many small and mid-sized organizations have transitioned to the cloud and are running hybrid environments. Not surprisingly, as the adoption of cloud technology grows, it has also become a more attractive target for cybercriminals.

Technology 114

Technology 114

CSO Magazine

FEBRUARY 21, 2023

Despite the billions of dollars poured annually into cybersecurity by investors, organizations, academia, and government, adequate and reliable cybersecurity remains an ever-elusive goal.

Risk 108

Risk Cybersecurity Government Technology 108

Security Boulevard

FEBRUARY 14, 2025

CISA and the FBI also highlighted these buffer overflow vulnerabilities: CVE-2025-21333 CVE-2025-0282 CVE-2024-49138 CVE-2024-38812 CVE-2023-6549 CVE-2022-0185 For more information about buffer overflow attacks and vulnerabilities: Buffer Overflow (OWASP) What is Buffer Overflow? Mike Rounds (R-S.D.) who introduced the bill along with Sen.

Banking 64

Banking Cybercrime Cybersecurity Ransomware 64

CSO Magazine

APRIL 18, 2023

This year’s RSA Conference showcases promising startups from all over the world, many of which are making their first public appearance. Most will be exhibiting in the Early Stage Expo , which features 50 new security solution providers. Other startup exhibitors are finalists in RSA’s Innovation Sandbox competition.

92

92

SecureWorld News

MAY 23, 2024

And the recent clarifications—focusing on material cybersecurity incidents—is a step in the right direction," said Glenn Kapetansky , CSO, Trexin Group. "In See the December 2023 statement for more details on each of the three questions that need to be answered.

CISO 108

CISO CSO Risk Cybersecurity 108

CSO Magazine

MARCH 23, 2023

The ongoing cybersecurity talent shortage presents challenges for organizations everywhere. As critical roles remain vacant far too long, already overburdened IT and security teams are grappling with a long list of responsibilities to safeguard their corporate networks, and that’s just the tip of the iceberg.

Cyber threats 98

Cyber threats Cybersecurity 98

SecureWorld News

DECEMBER 11, 2023

December 15, 2023, marks a significant shift in the cybersecurity landscape for publicly traded companies. The SEC announced its new cyber incident disclosure rules on July 26, 2023, when it appeared the rules were effective immediately. Immediately or not, Dec. 15 is now here, and the new rules will be in effect.

CISO 104

CISO Risk CSO Government 104

CSO Magazine

DECEMBER 26, 2022

On January 1, 2023, 20, the California Privacy Rights Act (CPRA) will go into effect. Approved by ballot measure as Proposition 24 in November 2020, it created a new consumer data privacy agency and put California another step ahead of other states in terms of privacy productions for consumers—and data security requirements for enterprises.

Data privacy 133

Data privacy 133

eSecurity Planet

SEPTEMBER 9, 2024

The problem: RansomHub, a ransomware-as-a-service group, targeted security vulnerabilities in Apache ActiveMQ ( CVE-2023-46604 ), Atlassian Confluence ( CVE-2023-22515 ), Citrix ADC ( CVE-2023-3519 ), and Fortinet devices ( CVE-2023-27997 ).

Firmware 110

Firmware Backups Firewall Risk 110

CSO Magazine

FEBRUARY 21, 2023

IT security leaders at three-out-of-four global businesses expect an email-borne attack will have serious consequences for their organization in the coming year, with the increasing sophistication of attacks a top concern, according to the 2023 State of Email Security (SOES) report.

Technology 124

Technology Malware 124

CSO Magazine

MAY 15, 2023

The high-severity vulnerability, CVE-2023-30777 that affects the WordPress Advanced Custom Fields plugin, was identified by a Patchstack researcher on May 2. To read this article in full, please click here

122

122

CSO Magazine

MARCH 29, 2023

For the first time, over a dozen cybersecurity companies have come together to produce an agnostic study titled LATAM CISO Report 2023: Insights from Industry Leaders. The 2023 LATAM CISO Report offers different cybersecurity perspectives of industry leaders in Latin America. Duke University conducted the survey.

Government 108

Government Cybersecurity CISO Banking 108

CSO Magazine

MARCH 5, 2021

In a referendum last fall, California citizens voted to amend the CCPA by approving the California Privacy Rights and Enforcement Act (CPRA) , which will mostly go into effect on January 1, 2023. To read this article in full, please click here

Data privacy 122

Data privacy Government 122

CSO Magazine

MAY 22, 2023

Cybersecurity activity around business email compromise (BEC) spiked between April 2022 and April 2023, with over 150,000 daily attempts, on average, detected by the Microsoft Microsoft’s Digital Crimes Unit (DCU).

Social Engineering 126

Social Engineering Cybercrime Engineering Cybersecurity 126

CSO Magazine

APRIL 18, 2023

To read this article in full, please click here

Manufacturing 125

Manufacturing Healthcare Data collection Internet 125

CSO Magazine

FEBRUARY 9, 2023

It’s that time of year again when many of your favorite security professionals and vendors roll out their predictions for the coming year. Although not all of us have clairvoyant abilities, seasoned pros can spot a trend early and inform the rest of us before we’re caught off guard.

DDOS 65

DDOS Internet Internet 65

CSO Magazine

FEBRUARY 28, 2023

These techniques have been used in targeted attacks for years, but 2020 saw them deployed at scale.” To read this article in full, please click here

Ransomware 123

Ransomware Phishing Authentication Cybersecurity 123

CSO Magazine

MARCH 22, 2023

That’s according to Continuity’s State of Storage and Backup Security Report 2023 , which revealed a significant gap in the state of enterprise storage and backup security compared to other layers of IT and network security.

Backups 118

Backups Risk Network Security 118

CSO Magazine

DECEMBER 15, 2022

Inhofe National Defense Authorization Act for Fiscal Year 2023, the legislation clocks in at over 4,408 pages. Each year the NDAA contains a wealth of primarily military cybersecurity provisions, delivering hundreds of millions, if not billions, in new cybersecurity funding to the federal government. This year’s bill is no exception.

Cybersecurity 120

Cybersecurity Government 120

CSO Magazine

SEPTEMBER 13, 2022

billion this year and expects it to reach nearly $600 billion in 2023. Gartner predicts that worldwide spending on public cloud computing services will rise 20.4% to a total of $494.7 To read this article in full, please click here

Encryption 122

Encryption 122