article thumbnail

NASA Audit: Cyber Risk Skyrockets with 'Work from Home'

SecureWorld News

The audit proves what we've heard from many security leaders during our SecureWorld Remote Sessions : the pandemic and work from home have greatly increased the cyber attack surface and attack attempts. NASA lacked an Agency-wide risk management framework for information security and an information security architecture.

article thumbnail

Group-IB uncovers PerSwaysion – sophisticated phishing campaign targeting executives worldwide

Security Affairs

Group-IB uncovered a new sophisticated phishing campaign, tracked as PerSwaysion, against high-level executives of more than 150 companies worldwide. . PerSwaysion is a highly-targeted phishing campaign. New round of phishing attempts leveraging current victim’s account usually takes less than 24 hours.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

LW ROUNDTABLE: Cybersecurity takeaways of 2023 — and what’s ahead in 2024 ( part 3)

The Last Watchdog

Last Watchdog posed two questions: •What should be my biggest takeaway from 2023, with respect to mitigating cyber risks at my organization? Wayne Schepens , Chief Cyber Market Analyst, CyberRisk Alliance Schepens The weakest link is still humans; attacks caused by social engineering remain a critical risk for all organizations.

article thumbnail

Top 5 Cyber Predictions for 2024: A CISO Perspective

Security Boulevard

This adoption brings us to the flip side of the generative AI coin: attackers are leveraging AI tools to elevate and automate phishing campaigns, craft extremely evasive malware, and reduce the development time of threats across the board. Let’s explore five predictions that should be top of mind for security leaders and organizations.

CISO 104
article thumbnail

LW ROUNDTABLE: Cybersecurity takeaways of 2023 — and what’s ahead in 2024 ( part 1)

The Last Watchdog

Related: Adopting an assume-breach mindset With that in mind, Last Watchdog invited the cybersecurity experts we’ve worked with this past year for their perspectives on two questions that all company leaders should have top of mind: •What should be my biggest takeaway from 2023, with respect to mitigating cyber risks at my organization?

article thumbnail

North Korean Hackers Intensify Cyberattacks on South's Arms Industry

SecureWorld News

The group employed sophisticated spear-phishing, watering hole attacks, and kernel-level malware to compromise the targets. Organizations can then work to counter these TTPs specific to each their assets, criticality, architecture, and other unique risks and considerations for that organization.

article thumbnail

US National Cybersecurity Strategy: What It Means for Digital Identity

Security Boulevard

The ability to have standard processing for proofing, authenticating, and authorizing Identities and non-person entities (NPE) is key to the Zero Trust architecture, which will quickly advance the availability of new standards to support and enable the most disadvantaged populations. Legacy systems take time to modernize.