Breaking the information sharing barrier.

12 hours ago

Breaking the information sharing barrier.

Errol Weiss makes the business case for information sharing.

CSO Perspectives

Breaking the information sharing barrier.

12 hours ago

Breaking the information sharing barrier.

Errol Weiss makes the business case for information sharing.

CSO Perspectives

Cybersecurity News

Daily Briefing

2 hours ago

FBI and CISA debunk claims of hacked voter information.

Apple files to dismiss its lawsuit against NSO Group. 23andMe will pay $30 million over data breach.

CSO Perspectives

12 hours ago

Breaking the barriers in information sharing: Changing the discussion from legal risk to C-suite opportunity.

Errol Weiss makes the business case for information sharing.

CSO Perspectives

12 hours ago

Breaking the information sharing barrier.

Errol Weiss makes the business case for information sharing.

Research Saturday

Sep 14, 2024

Spamageddon: Xeon Sender’s cloudy SMS attack revealed!

Alex Delamotte, Threat Researcher from SentinelOne Labs, joins to share their work on "Xeon Sender | SMS Spam Shipping Multi-Tool Targeting SaaS Credentials." SentinelOne’s Labs team has uncovered new research on Xeon Sender, a cloud hacktool used to launch SMS spam attacks via legitimate APIs like Amazon SNS. First seen in 2022, this tool has been repurposed by multiple threat actors and distributed on underground forums, highlighting the ongoing trend of SMS spam through cloud services and SaaS.

Week that Was

Sep 14, 2024

Fortinet confirms breach of customer data. Iran's Scarred Manticore deploys new malware across the Middle East.

Earth Preta targets government entities in the Asia-Pacific. DragonRank manipulates SEO to promote scam sites. NoName partners with RansomHub. New RaaS operation is recruiting criminal affiliates. Patch news.

CyberWire Daily

Sep 13, 2024

Mini-breach, mega-hype.

Fortinet reveals a data breach. The feds sanction a Cambodian senator for forced labor scams. UK police arrest a teen linked to the Transport for London cyberattack. New Linux malware targets Oracle WebLogic. Citrix patches critical Workspace app flaws. Microsoft unveils updates to prevent outages like the CrowdStrike incident. U.S. Space Systems invests in secure communications. Illegal gun-conversion sites get taken down. Tim Starks of CyberScoop tracks Russian hackers mimicking spyware vendors. Cybersecurity hiring gaps persist. Hackers use eye-tracking to steal passwords.

Daily Briefing

Sep 13, 2024

Fortinet confirms breach of customer data.

Iran's Scarred Manticore deploys new malware across the Middle East. US government sanctions Cambodian senator for alleged involvement in forced labor scam operation.

CyberWire Daily

Sep 12, 2024

UK’s newest cybersecurity MVPs.

The UK designates data centers as Critical National Infrastructure. Cisco releases patches for multiple vulnerabilities in its IOS XR network operating system. BYOD is a growing security risk. A Pennsylvania healthcare network has agreed to a $65 million settlement stemming from a 2023 data breach.Google Cloud introduces air-gapped backup vaults. TrickMo is a newly discovered Android banking malware. GitLab has released a critical security update. A $20 domain purchase highlights concerns over WHOIS trust and security. Our guest is Jon France, CISO at ISC2, with insights on Communicating Cyber Risk of New Technology to the Board. And, could Pikachu be a double-agent for Western intelligence agencies?

Caveat

Sep 12, 2024

US, UK, and EU sign the first international AI treaty.

DOJ and states start their next Google antitrust trial.

Daily Briefing

Sep 12, 2024

UK designates data centers as critical national infrastructure.

Pennsylvania healthcare network will pay $65 million following data breach. British teenager arrested in connection with Transport for London (TfL) attack.

Threat Vector

Sep 12, 2024

Fueling the Business with Cyber AI & Automation with Kieran Norton

In this episode of Threat Vector by Palo Alto Networks, host David Moulton, Director of Thought Leadership, interviews Kieran Norton, Principal at Deloitte & Touche LLP and U.S. Cyber and AI Automation Leader. They discuss the evolution from traditional Security Operations Centers (SOC) to AI-native SOCs, addressing the issues of alert fatigue and data volume. Norton explains how AI can automate routine tasks, allowing analysts to focus on more complex issues, enhancing an organization’s security posture, and offers insights into the interplay between AI and human intelligence in cybersecurity. Also covered are the future trends in AI and cybersecurity, the importance of integrating existing tools with AI SOC platforms, and the benefits of zero-trust solutions.

Caveat

Sep 12, 2024

Securing the final frontier.

This week, Shane Fry from RunSafe Security joins us to discuss his work supporting the space industry with cybersecurity, as the Spacecraft Cybersecurity Act, introduced by Congressmen Frost and Beyer, aims to require NASA-approved cybersecurity plans from manufacturers using federal funds, in response to increasing threats from China and Russia. Ben discusses the latest anti-trust case against Google. Dave looks at Las Vegas police refusing the NFL’s mandate for facial recognition security.

Load More