The Security Ledger

MAY 16, 2024

In this Spotlight Podcast, host Paul Roberts talks with Chris Walcutt, the CSO of DirectDefense about the rising cyber threats facing operational technology (OT) and how organizations that manage OT - including critical infrastructure owners can best manage increased cyber risks to OT environments. Read the whole entry. »

CSO 59

CSO Risk Energy and Utilities Social Engineering 59

The Last Watchdog

FEBRUARY 21, 2022

The risks are real, and the impact of cybersecurity events continues to grow. A cyber catastrophe may seem inevitable, but there are basic practices and actionable steps any healthcare organization can take to begin reducing the clear and present risk of being impacted by a cybersecurity event. Evaluate data inventory.

Healthcare 214

Healthcare Cyber Attacks Education Social Engineering 214

CyberSecurity Insiders

JUNE 21, 2021

Yet, especially in industries like fintech, a breach of customer information could be an unfortunate risk that shuts the operation down before it begins. Further, a platform that helps companies meet risk and compliance requirements allows fintech businesses to bring digital purchasing experiences to market without the headaches.

Cyber Attacks 144

Cyber Attacks Data breaches Marketing Risk 144

eSecurity Planet

FEBRUARY 11, 2022

Risk management is a concept that has been around as long as companies have had assets to protect. Risk management also extends to physical devices, such as doors and locks to protect homes and vehicles, vaults to protect money and precious jewels, and police, fire, and CCTV to protect against other physical risks.

Risk 145

Risk Cybersecurity Encryption Technology 145

CyberSecurity Insiders

APRIL 4, 2023

The latest iteration of this is the collapse of Silicon Valley Bank (SVB) and the resulting banking crisis, which has presented an opportunity for attackers to spoof highly sensitive communication, for example seeking to intercept legitimate communication instructing recipients to update bank details for payroll.

Cyber Attacks 119

Cyber Attacks Social Engineering Scams Phishing 119

CyberSecurity Insiders

DECEMBER 18, 2021

It’s never been more important to protect employees from cyber-attacks while also mitigating the risk they pose as trusted insiders. Dtex’s Workforce Cyber Intelligence Platform enables organizations better understand their workforce, protect their data and make human-centric operational investments.

Risk 134

Risk Social Engineering Surveillance Data collection 134

Security Boulevard

FEBRUARY 10, 2022

While software developers faced no additional risk from malware during this time, trouble was lurking just around the corner. Threat actors quickly realized the shared-responsibility model used by cloud services presented ample opportunities for exploitation. The Cloud Era.

Malware 96

Malware Software Ransomware Adware 96

SecureWorld News

NOVEMBER 8, 2023

However, it's imperative to know that attackers are beginning to weaponize social engineering with the help of AI, which could present an even bigger series of challenges. Ongoing vigilance and adaptation of incumbent defenses will prove instrumental in managing and overcoming these evolving risks.

Social Engineering 88

Social Engineering Engineering Cyber Attacks Artificial Intelligence 88

CyberSecurity Insiders

MAY 26, 2021

A team of experts from the cyber arm of Congress is busy studying the costs involved when the critical infrastructure is targeted by cyber attacks. The post Congress to review Federal Cyber Terrorism Risk Insurance Program appeared first on Cybersecurity Insiders.

Insurance 78

Insurance Risk Cyber Insurance Cyber Attacks 78

Security Boulevard

SEPTEMBER 20, 2021

The processing phrase consists of actively selecting processing tools and methodologies for the purpose of setting the foundations for a successful processing of the data.

Cybercrime 88

Cybercrime Cyber Attacks Security Defenses Cyber threats 88

The Security Ledger

AUGUST 15, 2022

A researcher presented the results of a year-long effort to reverse engineer John Deere hardware to run a version of the DOOM first person shooter. He also discovered a number of security flaws along the way. Read the whole entry. » Read the whole entry. »

Cyber Risk 98

Cyber Risk Cyber Attacks Engineering Risk 98

The Security Ledger

AUGUST 15, 2022

A researcher presented the results of a year-long effort to reverse engineer John Deere hardware to run a version of the DOOM first person shooter. He also discovered a number of security flaws along the way. Read the whole entry. » Read the whole entry. »

Cyber Risk 98

Cyber Risk Cyber Attacks Engineering Risk 98

Herjavec Group

AUGUST 26, 2021

This puts customers relying on them to secure their networks at risk. 2011-2012 — LulzSec — Lulz Security, or LulzSec, a break-off group from hacking collective Anonymous, attacks Fox.com and then targets more than 250 public and private entities, including an attack on Sony’s PlayStation Network. The time for change is now.

Cybercrime 135

Cybercrime Computers and Electronics Banking Hacking 135

CyberSecurity Insiders

OCTOBER 28, 2021

Raphael Waller from Cardonet , an IT Service Provider, comments: “Most businesses and industries are now reliant on technology and because of this, the impacts of a cyber attack are more harmful than ever. ” “The past 18 months have presented multiple challenges. For a full look at the research, see here.

Risk 52

Risk Cyber Attacks Telecommunications Mobile 52

Joseph Steinberg

JANUARY 18, 2024

While technological advances have, in some ways, allowed humans to enjoy an unprecedented quality of life, they also create significant risks. When it comes to cybersecurity the same is true – you need a cyber security if you want to competently address cyber risk.

Cybersecurity 236

Cybersecurity Computers and Electronics Cyber Risk Risk 236

Thales Cloud Protection & Licensing

JUNE 27, 2022

How to Accelerate Government Transformation by Reducing Risk, Complexity, and Cost. The escalating risk of cyber threat. The digitalization of government services and processes make the growing incidence of cyber-attacks a clear and present danger for agencies. Tue, 06/28/2022 - 05:19.

Government 71

Government Risk Artificial Intelligence Big data 71

CyberSecurity Insiders

OCTOBER 24, 2022

These attacks also tend to be more successful in access and payout in the event of ransom demands, with 74% of attacks ending successfully for hackers. Here are a few prime examples of cyber-attacks in the education sector. Make backups, and practice restoring from them.

Education 58

Education Cyber Attacks Cyber Insurance Insurance 58

The Last Watchdog

JUNE 2, 2022

Third-Party Risk Management ( TPRM ) has been around since the mid-1990s – and has become something of an auditing nightmare. Related: A call to share risk assessments. This is because third-party risk has become a huge problem for enterprises in the digital age. Cyber risks profiling. Cyber hygiene boost.

Cyber Risk 266

Cyber Risk Risk Digital transformation Insurance 266

Security Boulevard

JUNE 6, 2023

Capitalizing on the convenience of the Software as a Service (SaaS) model, malicious actors are offering Malware as a Service (MaaS): ready-made malware packages on the dark web, presenting less technical individuals with the opportunity to launch sophisticated cyber attacks.

Malware 52

Malware Cyber threats Cyber Attacks Software 52

Security Boulevard

MARCH 17, 2022

Threat actors attack software and code developed by DeFi organizations to control digital crypto-currency flows. Organizations with DeFi systems that achieve higher valuation face greater risk because they are the more attractive targets with the most to lose relative to peers.

Cyber Attacks 98

Cyber Attacks Cryptocurrency Marketing Software 98

Security Affairs

OCTOBER 18, 2018

Group-IB has estimated that crypto exchanges suffered a total loss of $882 million due to targeted attacks between 2017 and 2018. Five attacks have been linked to North Korean hackers from Lazarus state-sponsored group, including the infamous attack on Japanese crypto exchange Coincheck , when $534 million in crypto was stolen.

Cyber Attacks 83

Cyber Attacks Cryptocurrency Phishing Social Engineering 83

CyberSecurity Insiders

JUNE 18, 2023

As cyber threats become increasingly sophisticated and pervasive, organizations and governments alike are recognizing the crucial role of cybersecurity intelligence in safeguarding critical assets and protecting against cyber attacks.

Cybersecurity 97

Cybersecurity Cyber threats Cyber Attacks Government 97

The Last Watchdog

AUGUST 25, 2020

As jarring as this abrupt shift to remote work has been for countless companies, government agencies and educational institutions, it has conversely been a huge boon for cyber criminals. The Internet from its inception has presented a wide open attack vector to threat actors. Threat actors haven’t missed a beat. I’ll keep watch.

Cyber Risk 182

Cyber Risk Software Risk Cloud Migration 182

SecureWorld News

MAY 29, 2024

The manufacturing sector faces an increasingly daunting cyber threat landscape that puts production operations, intellectual property, and entire supply chains at risk. Simply checking boxes is no longer sufficient to withstand escalating cyber attacks from criminals, nation-states, and insiders," the paper states.

Manufacturing 87

Manufacturing CISO Artificial Intelligence Cyber threats 87

SecureWorld News

OCTOBER 18, 2023

While this represents an enormous leap in capability, it also poses potential risks such as data exposure, misinformation, and AI-enabled cyber attacks. Effective AI governance has become imperative to balance the benefits and risks. Follow SecureWorld News for more stories related to cybersecurity.

Artificial Intelligence 85

Artificial Intelligence Data privacy Government Risk 85

eSecurity Planet

JULY 27, 2021

The LemonDuck malware that for the past couple of years has been known for its cryptocurrency mining and botnet capabilities is evolving into a much broader threat, moving into new areas of cyber attacks, targeting both Linux and Microsoft systems and expanding its geographical reach, according to security researchers with Microsoft.

Malware 144

Malware Risk Cryptocurrency Ransomware 144

Security Affairs

NOVEMBER 14, 2022

Are the directors of a company hit by a cyberattack liable for negligence in failing to take steps to limit the risk. As the risk of a cyberattack grows, it is pivotal to consider whether the directors of a company hit by a ransomware attack, for example, can bear any liability for negligence in failing to take steps to limit the risk.

Cyber Risk 111

Cyber Risk Insurance Cyber Attacks Risk 111

Security Affairs

JANUARY 28, 2022

The UK’s National Cyber Security Centre (NCSC) urges organizations to improve cybersecurity due to the risk of imminent destructive cyberattacks from Russia-linked APT groups. “UK organisations are being urged to bolster their cyber security resilience in response to the malicious cyber incidents in and around Ukraine.?

Cyber Attacks 77

Cyber Attacks Cyber threats Backups Risk 77

SecureWorld News

JANUARY 7, 2024

The integration of Governance, Risk, and Compliance (GRC) strategies with emerging technologies like Artificial Intelligence and the Internet of Things are reshaping the corporate risk landscape. Governance Governance refers to the policies, rules, and frameworks that a company needs to follow to meet its business targets.

IoT 77

IoT Technology Artificial Intelligence Government 77

IT Security Guru

JUNE 27, 2023

Six years have passed since the infamous NotPetya cyber attack sent shockwaves through the cybersecurity landscape. Six years later, the impact of the NotPetya attack is still being felt, and the lessons learned from this incident continue to shape the way we approach cybersecurity.

Cyber Attacks 100

Cyber Attacks Malware Ransomware Risk 100

Security Affairs

FEBRUARY 6, 2020

A set of vulnerabilities in the Cisco Discovery Protocol (CDP) exposes tens of millions of devices to the risk of cyber attacks. The experts tracked the set as CDPwn and warned that the issues could be exploited by attackers to take complete control of vulnerable devices. Pierluigi Paganini.

Risk 86

Risk IoT Advertising Cyber Attacks 86

Joseph Steinberg

MARCH 8, 2022

At the same time, however, your virtual graffiti efforts have allowed us to learn quite a bit about the vulnerabilities present in our computer systems – and we are applying that knowledge now to fortify our defenses, starting, of course, with systems far more important to us than the websites that you chose to deface.

Artificial Intelligence 347

Artificial Intelligence Hacking Penetration Testing Government 347

SecureWorld News

MARCH 23, 2021

The increased connectivity brought on by the Industrial Internet of Things (IIoT) allows for more real-time monitoring and adjustment of power, but with those benefits also comes greater risk. The GAO report notes that the distribution systems are increasingly vulnerable to cyber attacks, but the scale of potential impacts remains unclear.

Energy and Utilities 53

Energy and Utilities Risk Internet Internet 53

IT Security Guru

FEBRUARY 28, 2023

Their loss ratios – total claims plus the insurer’s costs, divided by total premiums earned – are now consistently above 60%, which presents something of an existential threat to the insurance industry, making cyber risk a potentially uninsurable area due to falling profitability.

Cyber Insurance 114

Cyber Insurance Insurance Marketing Cyber Risk 114

Security Affairs

MAY 26, 2022

Italy announced its National Cybersecurity Strategy for 2022/26, a crucial document to address cyber threats and increase the resilience of the country. “The ongoing evolution of technology that has shaped our current society keeps raising new risks as it continues to develop, along with most sophisticated attack techniques.

Cybersecurity 135

Cybersecurity Cyber threats Technology Government 135

Duo's Security Blog

MAY 23, 2023

Immediately let the IT or security team know of a potential credential compromise According to the OAIC, a key objective of the Notifiable Data Breaches (NDB) scheme is to protect individuals by enabling them to respond quickly to a data breach to mitigate the risk of harm. From the OAIC Notifiable Data Breaches Report 2.

Authentication 112

Authentication Passwords Data breaches Phishing 112

Joseph Steinberg

AUGUST 5, 2021

While leveraging cyber-liability insurance has become an essential component of cyber-risk mitigation strategy, cyber-liability offerings are still relatively new, and, as a result, many parties seeking to obtain coverage are still unaware of many important factors requiring consideration when selecting a policy.

Insurance 258

Insurance Cyber Insurance Artificial Intelligence Cybersecurity 258