Lohrman on Security

APRIL 2, 2023

NATO countries are facing a growing breadth and depth of nation-state cyber attacks as Russia, China, Iran and other countries increase military cyber cooperation.

Cyber Risk 260

Cyber Risk Risk Cyber Attacks 260

Daniel Miessler

APRIL 2, 2023

After two and a half decades in information security, I’ve witnessed countless failures in security efforts. Most of them can be traced back to either asking the wrong questions or lacking the necessary context for effective action. Enter AI, which promises to address these shortcomings with two fundamental advantages: Context and Question-based security products.

InfoSec 168

InfoSec Software Information Security Risk 168

Trend Micro

APRIL 2, 2023

We examine three differently sized criminal groups to know how they compare to similarly sized legitimate businesses in terms of how they are organized. We also discuss how threat researchers can use their knowledge of the size and structure of a target criminal organization to aid their investigation.

Cybercrime 119

Cybercrime 119

Bleeping Computer

APRIL 2, 2023

A new ransomware gang named 'Money Message' has appeared, targeting victims worldwide and demanding million-dollar ransoms not to leak data and release a decryptor. [.

Ransomware 117

Ransomware 117

Speaker: Erroll Amacker

Automation is transforming finance but without strong financial oversight it can introduce more risk than reward. From missed discrepancies to strained vendor relationships, accounts payable automation needs a human touch to deliver lasting value. This session is your playbook to get automation right. We’ll explore how to balance speed with control, boost decision-making through human-machine collaboration, and unlock ROI with fewer errors, stronger fraud prevention, and smoother operations.

Risk

CSO Magazine

APRIL 2, 2023

Darktrace has announced a new upgrade to its Darktrace/Email product with enhanced features that defend organizations from evolving cyberthreats including generative AI business email compromise (BEC) and novel social engineering attacks. Among the new capabilities are an AI-employee feedback loop; account takeover protection; insights from endpoint, network, and cloud; and behavioral detections of misdirected emails, the vendor said.

Social Engineering 108

Social Engineering Engineering Phishing Accountability 108

Security Affairs

APRIL 2, 2023

Files leaked by Russian IT contractor NTC Vulkan show that Russia-linked Sandworm APT requested it to develop offensive tools. Documents leaked from Russian IT contractor NTC Vulkan show it was likely involved in the development of offensive tools. The documents demonstrate that it also developed hacking tools for the Russia-linked APT group Sandworm.

Energy and Utilities 98

Energy and Utilities Media Hacking Technology 98

Trend Micro

APRIL 2, 2023

Going further and faster with high-performance network security

Cyber threats 53

Cyber threats Network Security Risk 53

Security Boulevard

APRIL 2, 2023

Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Security ’22 Conference content on the organization’s’ YouTube channel. Permalink The post USENIX Security ’22 – Michele Grisafi, Mahmoud Ammar, Marco Roveri, Bruno Crispo – ‘PISTIS: Trusted Computing Architecture For Low-End Embedded Systems appeared first on Security Boulevard.

Architecture 52

Architecture Education InfoSec Cybersecurity 52

Daniel Miessler

APRIL 2, 2023

There is much being said right now about the AI Alignment Problem. There’s more to it, but it’s essentially the question of how to keep AI from destroying us when it wakes up. Yay. Russell argues that we need uncertainty built into our alignment efforts. I just read Stuart Russell’s excellent book on the topic—which I highly recommend—and Lex Fridman’s recent conversation with Eleizer Yudkowsky is an absolute must as well.

Information Security 168

Information Security 168

Security Boulevard

APRIL 2, 2023

NATO countries are facing a growing breadth and depth of nation-state cyber attacks as Russia, China, Iran and other countries increase military cyber cooperation. The post Growing Nation-State Alliances Increase U.S. Cyber Risks appeared first on Security Boulevard.

Cyber Risk 52

Cyber Risk Risk Cyber Attacks 52

Advertisement

Many cybersecurity awareness platforms offer massive content libraries, yet they fail to enhance employees’ cyber resilience. Without structured, engaging, and personalized training, employees struggle to retain and apply key cybersecurity principles. Phished.io explains why organizations should focus on interactive, scenario-based learning rather than overwhelming employees with excessive content.

Cyber threats

Security Affairs

APRIL 2, 2023

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here. LockBit leaks data stolen from the South Korean National Tax Service Italy’s Data Protection Authority temporarily blocks ChatGPT over privacy concerns CISA adds bugs exploited by commercial surveillance spyware to Known Exploited Vulnerabiliti

Spyware 98

Spyware Surveillance Artificial Intelligence Data breaches 98

CyberSecurity Insiders

APRIL 2, 2023

After hearing a lot from the US government over national security fears, TikTok seems to have come up with answers to the three big cybersecurity questions that the app is facing from international media and governments across the world. Regarding TikTok’s data collection, the company claims that its application is in line with industry practices carried out by big tech companies like Twitter, Facebook, and WhatsApp around the world.

Cybersecurity 123

Cybersecurity Government Media Data collection 123