Schneier on Security

MAY 11, 2023

We will all soon get into the habit of using AI tools for help with everyday problems and tasks. We should get in the habit of questioning the motives, incentives, and capabilities behind them, too. Imagine you’re using an AI chatbot to plan a vacation. Did it suggest a particular resort because it knows your preferences, or because the company is getting a kickback from the hotel chain?

Artificial Intelligence 291

Artificial Intelligence Computers and Electronics Risk Technology 291

The Last Watchdog

MAY 11, 2023

Email remains by far the no.1 business communications tool. Meanwhile, weaponized email continues to pose a clear and present threat to all businesses. Related: The need for timely training At RSA Conference 2023 , I learned all about a new category of email security — referred to as integrated cloud email security ( ICES ) – that is helping companies more effectively keep email threats in check.

Security Awareness 215

Security Awareness Phishing Internet Internet 215

Tech Republic Security

MAY 11, 2023

Google adds a Cybersecurity Certificate to its Career Certificates program, which offers paths to such enterprise tech fields as data analytics, IT support and business intelligence. The post Google offers certificate in cybersecurity, no dorm room required appeared first on TechRepublic.

Cybersecurity 194

Cybersecurity 194

Bleeping Computer

MAY 11, 2023

One of WordPress's most popular Elementor plugins, "Essential Addons for Elementor," was found to be vulnerable to an unauthenticated privilege escalation that could allow remote attacks to gain administrator rights on the site. [.

Accountability 143

Accountability 143

Advertisement

How many people would you trust with your house keys? Chances are, you have a handful of trusted friends and family members who have an emergency copy, but you definitely wouldn’t hand those out too freely. You have stuff that’s worth protecting—and the more people that have access to your belongings, the higher the odds that something will go missing.

Cybersecurity

Security Boulevard

MAY 11, 2023

Okta this week made available Security Center, an extension of the Okta Customer Identity Cloud that provides a real-time view of authentication events, potential security incidents and threat response efficacy. Ian Hassard, senior director of product management for Okta, said Security Center will enable organizations to monitor attacks that compromise the identity of end users.

Authentication 122

Authentication Cybersecurity Network Security 122

Bleeping Computer

MAY 11, 2023

Swiss multinational company ABB, a leading electrification and automation technology provider, has suffered a Black Basta ransomware attack, reportedly impacting business operations. [.

Ransomware 143

Ransomware Technology 143

Bleeping Computer

MAY 11, 2023

Microsoft fixed a security vulnerability this week that could be used by remote attackers to bypass recent patches for a critical Outlook zero-day security flaw abused in the wild. [.

138

138

Security Boulevard

MAY 11, 2023

Cybersecurity compliance represents a major business opportunity for managed service providers (MSPs) attempting to move away from legacy IT services and toward a market that’s projected to double from $40 billion to roughly $80 billion by the end of the decade. But for the ill-equipped, it’s a potential albatross that can ultimately sink a business.

Cybersecurity 112

Cybersecurity Marketing 112

Lenny Zeltser

MAY 11, 2023

Too many people are unsure how to enter or grow in the cybersecurity industry. It's a relatively young field, and we haven’t done a good job of defining what it means to have a career in it. Hiring managers who are worried about finding candidates because of the much-discussed cybersecurity skills gap should consider the underlying issue, which I'd like to call the cybersecurity careers gap.

Cybersecurity 109

Cybersecurity Education CISO Information Security 109

Security Boulevard

MAY 11, 2023

The advent of cloud computing has transformed the way businesses operate, allowing them to access scalable resources and improve their agility. Cloud computing has enabled organizations to quickly and easily provision resources on-demand, resulting in faster time-to-market and reduced costs. However, the rapid adoption of cloud technology has led to the emergence of new challenges, […] The post Why DevOps and CloudOps are Critical for Successful Cloud Implementations appeared first on PeoplActiv

Marketing 109

Marketing Technology 109

Advertiser: Revenera

In a recent study, IDC found that 64% of organizations said they were already using open source in software development with a further 25% planning to in the next year. Most organizations are unaware of just how much open-source code is used and underestimate their dependency on it. As enterprises grow the use of open-source software, they face a new challenge: understanding the scope of open-source software that's being used throughout the organization and the corresponding exposure.

Risk

Dark Reading

MAY 11, 2023

Two years ago, a popular ransomware-as-a-service group's source code got leaked. Now other ransomware groups are using it for their own purposes.

Ransomware 120

Ransomware 120

Security Boulevard

MAY 11, 2023

Even as cybercriminals get more sophisticated and try new methods, they’re not moving away from what’s tried and true. According to FortiGuard Labs’ analysis, 82% of financially motivated cybercrimes in 2022 included ransomware or malicious scripts. This demonstrates that the ransomware menace is still present globally and shows no signs of slowing down.

Ransomware 109

Ransomware Cybercrime Malware Cybersecurity 109

Bleeping Computer

MAY 11, 2023

A new, stealthier variant of the Linux malware 'BPFDoor' has been discovered, featuring more robust encryption and reverse shell communications. [.

Malware 118

Malware Encryption 118

CyberSecurity Insiders

MAY 11, 2023

With the increasing use of technology, the demand for professionals with expertise in Cyber Security and Data Science has also been on the rise. Both fields are known to have good career prospects and lucrative salaries. However, when it comes to comparing the two, which field pays better? In this article, we will explore the salaries of Cyber Security and Data Science pro-fessionals to help you make an informed decision.

Education 106

Education Data breaches Cyber threats Cyber Attacks 106

Advertisement

Within the past few years, ransomware attacks have turned to critical infrastructure, healthcare, and government entities. Attackers have taken advantage of the rapid shift to remote work and new technologies. Add to that hacktivism due to global conflicts and U.S. elections, and an increased focus on AI, and you have the perfect recipe for a knotty and turbulent 2024.

Cybersecurity

Graham Cluley

MAY 11, 2023

Akira is a new family of ransomware, first used in cybercrime attacks in March 2023. Read more about the threat in my article on the Tripwire State of Security blog.

Ransomware 109

Ransomware Cybercrime Data breaches Malware 109

Digital Guardian

MAY 11, 2023

With ChatGPT in the news almost daily these days, users should know that Digital Guardian’s data loss prevention solutions can help highlight and mitigate data loss risks associated with deep learning large language models.

Risk 105

Risk 105

Dark Reading

MAY 11, 2023

Attackers compromised the personal email of a new employee and, when the initial attack failed, attempted through socially engineered messages to get the company to pay them off.

Social Engineering 101

Social Engineering Hacking Ransomware Engineering 101

IT Security Guru

MAY 11, 2023

The lax attitude to cyber security by a large percentage of internet users never fails to amaze and bamboozle IT security specialists. People seem to have a blasé attitude towards their online safety, probably because they do not believe anything will happen to them. After all, there are more than 1.1 billion websites worldwide , so what are the chances of criminals targeting theirs?

Data breaches 101

Data breaches Internet Internet Government 101

Advertisement

The healthcare industry has massively adopted web tracking tools, including pixels and trackers. Tracking tools on user-authenticated and unauthenticated web pages can access personal health information (PHI) such as IP addresses, medical record numbers, home and email addresses, appointment dates, or other info provided by users on pages and thus can violate HIPAA Rules that govern the Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates.

Healthcare

Trend Micro

MAY 11, 2023

We’ve been observing malicious advertisement campaigns in Google’s search engine with themes that are related to AI tools such as Midjourney and ChatGPT.

Advertising 108

Advertising Engineering Malware 108

Security Boulevard

MAY 11, 2023

A decade ago, most companies realized that being hit with a data breach was inevitable—the well-known “when, not if” statement drove that idea home. The time has come to make a similar realization about ransomware. Tenacious cybercrime rings and the easy availability of ransomware toolkits, as well as the financial rewards, are why ransomware attacks.

Ransomware 98

Ransomware Data breaches Cybercrime CISO 98

Security Affairs

MAY 11, 2023

Researchers shared technical details about a flaw in Windows MSHTML platform, tracked as CVE-2023-29324 , that could be abused to bypass security protections. Cybersecurity researchers have shared details about a now-patched security flaw, tracked as CVE-2023-29324 (CVSS score: 6.5), in Windows MSHTML platform. An attacker can exploit the vulnerability by crafting a malicious URL that would evade zone checks. “An attacker can craft a malicious URL that would evade zone checks, resultin

Internet 98

Internet Internet Government Hacking 98

Security Boulevard

MAY 11, 2023

Email remains by far the no.1 business communications tool. Meanwhile, weaponized email continues to pose a clear and present threat to all businesses. Related: The need for timely training At RSA Conference 2023 , I learned all about a new … (more…) The post RSAC Fireside Chat: Keeping persistent email threats at bay requires deeper, cloud-layer vigilance appeared first on Security Boulevard.

Security Awareness 98

Security Awareness 98

Advertisement

The losses companies suffered in 2023 ransomware attacks increased by 74% compared to those of the previous year, according to new data from the Federal Bureau of Investigation (FBI). The true figure is likely to be even higher, though, as many identity theft and phishing attacks go unreported. Ransomware attackers can potentially paralyze not just private sector organizations but also healthcare facilities, schools, and entire police departments.

Identity Theft

CyberSecurity Insiders

MAY 11, 2023

The content of this post is solely the responsibility of the author. AT&T does not adopt or endorse any of the views, positions, or information provided by the author in this article. Intro In February 2022, Microsoft disabled VBA macros on documents due to their frequent use as a malware distribution method. This move prompted malware authors to seek out new ways to distribute their payloads, resulting in an increase in the use of other infection vectors, such as password-encrypted zip fi

Malware 98

Malware Social Engineering Engineering Education 98

Security Boulevard

MAY 11, 2023

Navigating the complexities of cybersecurity due diligence and ensuring seamless integration of systems and practices Mergers and acquisitions (M&A) and divestitures are complex processes that require careful planning and execution. Cybersecurity is a critical (yet often overlooked) aspect of these transactions. Ensuring a secure and seamless integration of systems and practices is crucial to the.

Cybersecurity 98

Cybersecurity 98

Security Affairs

MAY 11, 2023

Researchers disclosed the details of five vulnerabilities that can be chained to take over some Netgear router models. Industrial and IoT cybersecurity firm Claroty disclosed technical details of five vulnerabilities that be exploited to hack some Netgear router models. “Team82 disclosed five vulnerabilities in NETGEAR’s Nighthawk RAX30 routers as part of its research and participation in last December’s Pwn2Own Toronto hacking competition.” reads the advisory published by the sec

Hacking 96

Hacking Firmware Authentication DNS 96

CSO Magazine

MAY 11, 2023

A previously undocumented malware campaign called DownEx has been observed actively targeting government institutions in Central Asia for cyberespionage , according to a report by Bitdefender. The first instance of the malware was detected in 2022 in a highly targeted attack aimed at exfiltrating data from foreign government institutions in Kazakhstan.

Malware 94

Malware Government 94

Speaker: Blackberry, OSS Consultants, & Revenera

Software is complex, which makes threats to the software supply chain more real every day. 64% of organizations have been impacted by a software supply chain attack and 60% of data breaches are due to unpatched software vulnerabilities. In the U.S. alone, cyber losses totaled $10.3 billion in 2022. All of these stats beg the question, “Do you know what’s in your software?

Cybersecurity

Security Affairs

MAY 11, 2023

Google announced the opening of the dark web monitoring report security feature to all Gmail users in the United States. Google is going to offer dark web monitoring to all U.S. Gmail users, the feature allows them to search for their email addresses on the dark web. Dark web scans for Gmail address was previously only available to Google One subscribers in the US.

Marketing 95

Marketing Accountability VPN Data breaches 95

The Hacker News

MAY 11, 2023

A security vulnerability has been disclosed in the popular WordPress plugin Essential Addons for Elementor that could be potentially exploited to achieve elevated privileges on affected sites. The issue, tracked as CVE-2023-32243, has been addressed by the plugin maintainers in version 5.7.2 that was shipped on May 11, 2023.

93

93

Security Affairs

MAY 11, 2023

Experts warn of an unauthenticated privilege escalation flaw in the popular Essential ‘Addons for Elementor’ WordPress plugin. Essential ‘Addons for Elementor’ WordPress plugin is a collection of 90+ creative elements and extensions Enhance that allow admins to enhance Elementor page building experience. The plugin has more than one million active installations.

Hacking 95

Hacking Risk Passwords Accountability 95

CyberSecurity Insiders

MAY 11, 2023

ABB Group that is into the business field of offering Automation Technology was reportedly hit by Black Basta Ransomware attack. The Swiss based multinational company said that the attack hits its business operations and has been contained. However, some of the core factory functions have been stalled until the malware encryption is removed. Information is out that the attack was identified on May 7th,2023 and Black Basta, the crime group identified in April 2022 by the law enforcement was linke

Ransomware 91

Ransomware Encryption Technology Malware 91

Speaker: Erika R. Bales, Esq.

When we talk about “compliance and security," most companies want to ensure that steps are being taken to protect what they value most – people, data, real or personal property, intellectual property, digital assets, or any other number of other things - and it’s more important than ever that safeguards are in place. Let’s step back and focus on the idea that no matter how complicated the compliance and security regime, it should be able to be distilled down to a checklist.