CSO Magazine

MARCH 4, 2022

Researchers warn the drivers could be used to sign kernel-level malware and load it on systems that have driver signature verification. The hacker group that recently broke into systems belonging to graphics chip maker Nvidia has released two of the company's old code-signing certificates. To read this article in full, please click here

Malware 66

Malware Data breaches Firmware Passwords 66

CSO Magazine

JUNE 6, 2023

Despite years of modernization initiatives, CISOs are still contending with an old-school problem: shadow IT, technology that operates within an enterprise but is not officially sanctioned — or on the radar of — the IT department. In fact, it is as big a problem as ever and may even worsen.

Risk 105

Risk CISO Technology Malware 105

CSO Magazine

JUNE 15, 2023

The problem is that many companies don't realize that using third-party APIs can expose their applications to security issues, such as malware, data breaches, and unauthorized access. However, not all the APIs that companies use are developed internally, rather some are designed and developed by other organizations.

Data breaches 123

Data breaches Technology Malware Software 123

CSO Magazine

MARCH 15, 2022

Security endpoint protection vendor Webroot has filed a patent infringement complaint against competitor Trend Micro accusing it of implementing patented technology in its security software and systems without authorization.

Marketing 126

Marketing Antivirus Media Technology 126

CSO Magazine

MAY 25, 2023

Microsoft and a few American intelligence agencies have detected malware of Chinese origin deployed in critical infrastructure systems in Guam and elsewhere in the United States. To read this article in full, please click here

Manufacturing 76

Manufacturing Education Government Network Security 76

CSO Magazine

FEBRUARY 23, 2022

Its Forcepoint One is an all-in-one cloud platform that simplifies enterprise security by integrating zero trust and secure access service edge (SASE) technologies so security teams can manage one set of policies through a single console. To read this article in full, please click here

Technology 124

Technology Malware 124

The Last Watchdog

MARCH 13, 2019

Unfortunately, despite steady advances in malware detection and intrusion prevention systems, and much effort put into training employees to be wary of suspicious email, weaponized email and document-based malware remain as virulent as pervasive as it was two decades ago. The key takeaways: Productivity vs. security.

Malware 100

Malware CSO System Administration Financial Services 100

CSO Magazine

NOVEMBER 8, 2021

Cyber criminals, always a clever lot, have found a new way to evade detection when deploying malware. This messes with g-squared process,” says Mark Loman, Director, Engineering, for Next-Gen Technologies at Sophos. They don’t encrypt entire files, they do 16 bytes and then skip 16 bytes.

Encryption 115

Encryption Ransomware Engineering Technology 115

CSO Magazine

FEBRUARY 21, 2023

Cybercriminals continue to refine and adapt their strategies, and malware kits on the dark web make it possible even for common criminals without technology smarts to employ highly sophisticated methods of incursion,” it read.

Technology 124

Technology Malware 124

CSO Magazine

OCTOBER 29, 2021

The report reviews notable malware isolated by HP Wolf Security in the third quarter of 2021 so that security teams can better understand the threat landscape and defend their environments. HP also delves into the latest malware trends, such as top exploited vulnerabilities, delivery file types, and email lures.

Malware 71

Malware Technology 71

CSO Magazine

MARCH 7, 2022

The platform contains security enhancements including: Threat Detection Technology (TDT), a hardware-based way to detect ransomware in an efficient and timely manner. Threat Detection Technology uses machine learning. d Kironský, ESET's chief of endpoint solutions and security technologies, explained in an interview.

Threat Detection 78

Threat Detection Technology Encryption Ransomware 78

CSO Magazine

MARCH 7, 2022

The basic idea is that attackers perform reconnaissance, find vulnerabilities, get malware into victim systems, connect to a command-and-control (C2) server, move laterally to find juicy targets, and finally exfiltrate the stolen data. The idea of the cyber kill chain was first developed by Lockheed Martin more than a decade ago.

Accountability 120

Accountability Technology Malware Cybersecurity 120

CSO Magazine

MAY 4, 2022

Security researchers have uncovered a cyberespionage campaign that has remained largely undetected since 2019 and focused on stealing trade secrets and other intellectual property from technology and manufacturing companies across the world.

Manufacturing 91

Manufacturing Technology Malware 91

CSO Magazine

JUNE 30, 2021

New research from Sophos finds 46% of malware communicating with a remote system over the Internet is utilizing TLS encryption to conceal communications and evade detection. That is more than a 100% increase in TLS-based malware communications compared to 23% in 2020, according to Sophos telemetry analysis.

VPN 86

VPN Encryption Malware Internet 86

SecureWorld News

JUNE 7, 2023

In an article by CIVICUS , Stéphane Duguin is interviewed about the weaponization of technology and progress being made towards a UN Cybercrime Treaty. Crimes committed with the use of information and communication technologies (ICTs) generally belong to two distinct categories: cyber-dependent crimes and cyber-enabled crimes.

Cybercrime 83

Cybercrime CSO Technology Surveillance 83

CSO Magazine

SEPTEMBER 1, 2022

Today, attackers use various types of malware to target organizations' cloud environments. Bootkits are similar to rootkits, noted Positive Technologies , the major difference being that bootkits activate before an operating system (OS) and, by extension, its various security mechanisms finish booting up.

Cyber threats 68

Cyber threats Technology Malware 68

CSO Magazine

MARCH 2, 2022

It is also offering technology from Siriux to immediately discover malicious Microsoft Azure AD activity that could lead to the compromise of Exchange Online mailboxes. This includes threat detection and remediation, most notably the discovery of a new wiper malware package, and limiting the success of Russian disinformation campaigns.

Threat Detection 134

Threat Detection Surveillance Technology Cybersecurity 134

CSO Magazine

JULY 20, 2022

In a press release, Perception Point said the new solution fuses patented browser security technology powered by web isolation platform Hysolate, which it acquired earlier this year, and its own multi-layer detection engines.

Marketing 94

Marketing Engineering Phishing Technology 94

CSO Magazine

APRIL 29, 2021

However, adversaries are also using the technology. They’re increasingly encrypting their attacks, using protocols like Transport Layer Security (TLS) to hide malware in network traffic. It’s a good thing that organizations are using encryption to protect critical network data.

Encryption 88

Encryption Internet Internet Technology 88

eSecurity Planet

APRIL 27, 2023

Those issues continue to exist in ChatGPT, and both can be tricked into creating ransomware , obfuscating malware , and other exploits, they said. For example, this could be to spread misinformation and develop malware. Generative technologies like GPT-4 are exciting and they can drive value. They’re also unavoidable.

Engineering 116

Engineering Risk CSO Social Engineering 116

CSO Magazine

MAY 9, 2023

Malware, social engineering, data leakage, and Wi-Fi interference are among the many mobile security risks organizations face, while novel technologies such as generative AI are predicted to create new opportunities for cybercriminals to target mobile devices.

Mobile 71

Mobile Social Engineering Engineering Technology 71

CyberSecurity Insiders

JUNE 3, 2021

This breach, like every major ransomware attack, was likely because of spear phishing, where someone either received the malware via an emailed attachment or clicked on a link that took them to a website that hosted it. The malware was place inside the code. I recently published a new piece in CNN offering solutions.

Cybersecurity 136

Cybersecurity Energy and Utilities Social Engineering Phishing 136

BH Consulting

NOVEMBER 11, 2021

It ranked the top nine threats facing citizens, organisations and cyberspace as: ransomware, malware, cryptojacking, email-related threats, threats against data and against availability and integrity, disinformation, non-malicious threats and supply-chain attacks. VPNs, TTFN? MORE The year’s most dangerous flaws plaguing hardware, from MITRE.

Ransomware 52

Ransomware CSO Surveillance VPN 52

CyberSecurity Insiders

MARCH 30, 2023

Developing a Clear Cybersecurity Strategy As a CISO/CSO, creating and presenting a clear cybersecurity strategy to the board of directors is crucial in fostering awareness of cyber risks and encouraging investment in cybersecurity defense.

Cybersecurity 119

Cybersecurity Cyber Risk CISO Risk 119

Security Affairs

NOVEMBER 23, 2020

Sonatype’s deep dive research allowed to identify a new family of Discord malware called CursedGrabber. This follows on the heels of last week’s news when Sonatype’s Nexus Intelligence engine and it’s release integrity algorithm discovered discord.dll : the successor to “ fallguys ” malware and 3 other components. and ac-addon.

Malware 134

Malware Engineering Antivirus Software 134

eSecurity Planet

JUNE 21, 2022

My advice for anybody that asks me which certifications they should get is this: find a certification in a subject that you wish to learn about,” Palo Alto Networks CSO Rick Howard said. “If If you are going to study the subject anyway, you might as well get a certification out of it.”. Also read: How to Get Started in a Cybersecurity Career.

Cybersecurity 120

Cybersecurity Penetration Testing System Administration Cyber Attacks 120

Spinone

DECEMBER 26, 2018

The contemporary world has witnessed the rise of the Internet and global communication, and collaboration technologies, including mobile data use and the culture of bring your own device [BYOD]. Today, c yber security incidents lead to significant damage, alarming organizations of all types and sizes in different geographic locations.

Security Awareness 40

Security Awareness Risk Cyber threats Cyber Risk 40

ForAllSecure

MARCH 8, 2023

She’s an amazing person who has done an amazing number of things in a short amount of time -- CMU professor, Forrester analyst, CSO at a successful startup -- and she’s not done changing the industry. VAMOSI: At least I remember her being an early evangelist for cloud container security, joining a startup as its CSO.

InfoSec 40

InfoSec Engineering CSO Technology 40

NetSpi Executives

JUNE 13, 2024

Aaron Shilts, CEO at NetSPI, is joined by Tom Parker, founder and CEO at Hubble (and new NetSPI Chief Technology Officer!) to discuss integrating the cutting-edge CAASM technology with NetSPI’s proactive security solutions all under one platform. That’s very exciting for me. Accessing that data was difficult. It’s a force multiplier.

Technology 59

Technology CISO Marketing Penetration Testing 59

CyberSecurity Insiders

JANUARY 28, 2022

According to CSO, 2021 shaped up to be an active year for mergers and acquisitions in the cybersecurity industry. Top cybersecurity M&A deals for 2021 | CSO Online. Technology disruption Technology disruption assists companies to evolve into new business models and upgrade their traditional modes of operating business.

Cybersecurity 89

Cybersecurity Digital transformation CSO Risk 89

eSecurity Planet

DECEMBER 3, 2021

Brian Krebs is an independent investigative reporter known for his coverage of technology, malware , data breaches , and cybercrime developments. Russian software engineer Eugene Kaspersky’s frustration with the malware of the 80s and 90s led to the founding of antivirus and cybersecurity vendor Kaspersky Lab.

Accountability 139

Accountability Cybersecurity Penetration Testing InfoSec 139

CSO Magazine

OCTOBER 26, 2021

These are the names of top malware that could be haunting your programs and email right now! What is even scarier: Not having systems in place to protect against malware and other cyber threats. It's not just malware that poses a threat to an enterprise's systems. They should. Building a cyber defense plan may seem scary.

Cyber threats 104

Cyber threats Architecture Malware Cybersecurity 104

SecureWorld News

OCTOBER 12, 2022

It could be your IT systems, your operation technology, your IoT, your industrial control systems, or SCADA environments.". Jason Miller, CSO of Paper Excellence, tackled an interesting topic in "Physical and Digital Cyber Defense: Building Culture and Collaboration." It's all about forcing people to think on their feet, Collins said.

CISO 76

CISO Healthcare Government Cybersecurity 76