Facing a costly and time-consuming app modernization project? Don't worry, you're not alone. Join industry leaders from Fortune 500 organizations like Kroger, to secure your apps on any cloud with any IDP no matter how complex your environment is. We call this Identity Orchestration. The best part? You’ll eliminate the need to refactor apps and say goodbye to legacy tech debt. Try it for free today to experience no-code identity modernization.
We're always looking for ways to improve the CyberWire, now N2K Cyber Network, to give you an intelligence-driven news experience that saves you time and keeps you in the know on the latest developments in cybersecurity. Please share your feedback in our 2023 Audience Survey and you will have a chance to win a $100 Amazon gift card. Take the survey.
Researchers at Eclypsium have discovered a firmware backdoor in motherboards sold by Taiwanese hardware manufacturer Gigabyte. The feature appears to be intended to automate firmware updates, but Eclypsium says it could be abused by threat actors via man-in-the-middle attacks. The researchers compare the vulnerability to other firmware backdoors such as LoJax, MosiacRegresser, MoonBounce, and Vector-EDK.
The researchers explain, “The firmware does not implement any cryptographic digital signature verification or any other validation over the executables. The dropped executable and the normally-downloaded Gigabyte tools do have a Gigabyte cryptographic signature that satisfies the code signing requirements of Microsoft Windows, but this does little to offset malicious use, especially if exploited using Living-off-the-Land techniques (like in the recent alert regarding Volt Typhoon attackers). As a result, any threat actor can use this to persistently infect vulnerable systems either via MITM or compromised infrastructure.” For more on this firmware issue, see CyberWire Pro.
With 84% of organizations experiencing an identity-related breach, identity is the new battlefield. As the pioneers of privileged access management, we started by protecting the most privileged users and most critical data. With intelligent privilege controls, today we’re applying the same levels of security and protection to every identity – both human and machine. CyberArk offers the most advanced identity security platform in the world, surrounding every identity with a powerful force field of continuous protection.
Armorblox today reported detecting and stopping an email attack impersonating Adobe that evaded email security measures. The threat actor used social engineering to target law firms by sending emails from a compromised third-party account. Legal documents were the phishbait. The phish hooks were malicious hyperlinks leading to pages mimicking Adobe Acrobat. The landing page of those hyperlinks led to a faux Adobe File Sharing page with another link leading to a credential harvesting page that requested the victim’s Microsoft login. The threat actors both leveraged the legitimacy of Adobe to reel in unsuspecting victims, but they were also able to bypass certain Microsoft security measures, since the manipulation and use of Adobe’s legitimate domain bypassed email security checks.
Register now for Mandiant’s mWISE security conference.
Singapore-based cybersecurity firm Group-IB is observing the activities of a threat actor they're calling Dark Pink. At least thirteen organizations across nine countries have been victimized by this advanced persistent threat (APT). CyberScoop reports that recent victims have been located in Brunei, Thailand, and Belgium, atop previous attacks targeting the Asia-Pacific region and Europe. Spearphishing emails are Dark Pink’s primary modus operandi, whose custom data exfiltration toolkit has been updated to allow for them to lie low within infected systems and devices. Their recent targets have spanned the government, nonprofit, military, and education sectors, Insurance Journal reports. Attribution of Dark Pink remains unclear.
Your prospects are demanding SOC 2 and you're not closing deals without it. Scytale's security compliance automation platform helps companies get compliant and stay compliant with frameworks like SOC 2, ISO 27001, HIPAA, GDPR and PCI-DSS without breaking a sweat.
Save hundreds of hours with streamlined compliance and dedicated support, remain compliant all year round with automated monitoring and alerts, and most importantly, boost sales by providing proof of information security to your customers.
Mitiga released a comprehensive report regarding a “significant forensic deficiency in Google Workspace.” This deficiency allows threat actors to exfiltrate data using Google Drive with no trace. The problem lies in the fact that Google Drive logs, which would allow these activities to be traced, are only active in its premium service “Google Workspace Enterprise Plus.” If an organization is not paying for the service, or an employee is not using a paid license, then the logs remain inactive allowing threat actors to move data without notice. Mitiga writes “All users can access the Workspace and complete actions with the files inside their private company drive. They simply do so without generating any logs, making organizations blind to potential data manipulation and exfiltration attacks. When incidents occur, this standard prevents organizations from efficiently responding, as they have no chance to correctly assess what data has been stolen or whether it has been stolen at all.” Mitiga has alerted Google to this discrepancy but, as of the publishing of their report, Google had not yet responded. For more on Mitiga's report, see CyberWire Pro.
Crowdstrike warns that someone going by the handle “spyboy” is selling a new endpoint defense evasion tool for Windows on the Russian-language forum Ramp. The tool, called “Terminator,” is advertised as being able to bypass twenty-three antivirus and EDR solutions. Crowdstrike notes that the software “requires administrative privileges and User Account Controls (UAC) acceptance to properly function.” Upon execution, “the binary will write a legitimate, signed driver file — Zemana Anti-Malware — to the C:\Windows\System32\drivers\ folder.”
Avertium has published an extensive look at Cuba ransomware (a Russian operation with no connection to its island-nation namesake). They include in their study a timeline of the operators' activities, notes on indicators of compromise, and advice on defense and remediation. The timeline is interesting in the way it shows how a nominally criminal organization can be turned to serve the purposes of the Russian state.
Ukrainian hacktivists posting under the Linux-hacker-inspired name Sudo RM-RF chirped at Russia's Skolkovo Foundation over Telegram, claiming to have pwned the tech development agency. "We're saying 'Hello' to @skolkovolive Your infrastructure has been destroyed. We have all the documents and the project source codes. Stay tuned for that." The Record reports that Skolkovo acknowledged sustaining an attack, but said that its systems were all back up and running. The hacktivists' claims are probably overblown, as hacktivist claims normally are, but the Skolkovo Foundation has at least experienced some degree of embarrassment. Headquartered on the outskirts of Moscow, the Skolkovo Foundation was founded by the former Russian President and current Deputy Chairman of the Security Council Dmitry Medvedev. He charged it with leading the development of a Russian tech industry that would rival if not supplant Silicon Valley.
Russia's FSB says, Reuters reports, that the US National Security Agency (NSA) has succeeded in compromising iPhones used in Russia. The phones belonged mostly to Russian citizens, but the FSB says that iPhones belonging to some foreign diplomats were also affected. The official moral Russia would have public opinion draw from the announcement is that NSA and Apple are conniving with one another. As the Foreign Ministry put it, "The hidden data collection was carried out through software vulnerabilities in U.S.-made mobile phones. The U.S. intelligence services have been using IT corporations for decades in order to collect large-scale data of Internet users without their knowledge."
Tankers carrying Russian oil are having their movements concealed by Automatic Identification System (AIS) spoofing. The purpose of the deception appears to be, the New York Times reports, evasion of international sanctions against Russia. Why would the tankers spoof their locations? If tracking data revealed the ships' movements from Russian to customers' ports, that would be evidence of a prohibited breach of sanctions sufficient to void the vessels' insurance coverage, and no shipper wants that.
The CyberWire's continuing coverage of Russia's war against Ukraine, with special attention to the cyber phases of that war, may be found here.
Today's issue includes events affecting Bahrain, Belgium, Brunei, Cambodia, China, Indonesia, Iran, Israel, Moldova, Morocco, NATO/OTAN, the Philippines, Russia, Taiwan, Ukraine, the United Arab Emirates, the United Kingdom, and the United States.
Ukraine at D+462: Skirmishing in cyberspace. (CyberWire) As Russian missile strikes continue, some unusual criticism of President Putin appears on Russian TV. Ukrainian hacktivists count coup, tankers carrying Russian oil spoof their positions, and the FSB says Apple is in bed with NSA.
Russia-Ukraine war at a glance: what we know on day 463 of the invasion (the Guardian) Three people including child killed in early morning missile attack on Kyiv; eight wounded in shelling of Belgorod region in Russia
Three Killed Including A Child In Latest Russian Missile Strikes On Kyiv (RadioFreeEurope/RadioLiberty) An overnight Russian missile attack on Kyiv killed at least three people, including a 9-year-old girl and her mother, and wounded 10 others, city officials said on June 1. The casualty toll was the highest from one attack on the nation's capital in the past month.
Kyiv strikes: three die in early morning attack by Russia (the Guardian) Girl and her mother reportedly among the dead from falling debris after short-range missiles intercepted
Russia’s Month of Missile Madness: 90% of Projectiles Failed, $1.7 Billion Spent (KyivPost) Kyiv Post analyzed Ukraine air force data on Russia’s May missile campaign which shows that although on a huge scale was highly ineffective, costly and wasteful.
Russian missiles and drones had a 90% failure rate in May and that cost the Kremlin $1.7 billion, Ukraine says (Business Insider) Russia deployed 563 missiles and kamikaze drones in May, and 533 were destroyed by Ukrainian air defense systems, the Kyiv Post reported.
Drones Hit Russian Oil Refineries as Moscow Shores Up Front Line (Wall Street Journal) Such attacks come as Russia loses the initiative in the conflict, say Western officials, with Moscow increasingly reacting to Ukrainian offensives that are setting the agenda on the battlefield.
Ukraine war: Russia 'destroys Ukraine's last warship' (The Telegraph) Russia said it had destroyed Ukraine’s “last warship” two days ago in a missile strike.
Russia may be devoured by its neighbours (The Telegraph) Japan, China, Turkey and even Ukraine could lay claim to Moscow’s territories. Putin may reap what he has sown
DOD Announces New Security Assistance Package for Ukraine (U.S. Department of Defense) The Defense Department announced an additional security assistance package for Ukraine today that contains key capabilities to arm against Russian airstrikes targeting critical infrastructure across the country.
US announces $300m arms package for Ukraine – with a caveat (the Guardian) The shipment comes with a warning that the weaponry should not be used to attack within Russia
Equipment for Ukraine drawn from Kuwait wasn’t combat-ready, IG says (Defense News) If poorly maintained howitzers from Kuwait stock were sent directly to Ukraine, it "would have killed somebody," a DoD inspector general report found.
Zelenskiy pleads for ‘security guarantees’ for Ukraine and Moldova (the Guardian) Ukrainian president tells summit of European leaders in Moldova that countries need protection from Russia
Macron Will Push NATO For ‘Concrete’ Security Guarantee for Ukraine (Defense One) With alliance membership still unsure, French president wants the next best thing.
NATO Monitors Moldova's Skies As European Leaders Gather (RadioFreeEurope/RadioLiberty) NATO will monitor the skies over Moldova as more than 40 European leaders attend a summit close to Ukraine's borders to show support for both countries as Kyiv prepares a counteroffensive against Russia's invasion.
Russia’s ‘Silicon Valley’ hit by cyberattack; Ukrainian group claims deep access (Record) The Skolkovo Foundation said attackers gained limited access to its systems. A group of Ukrainian hackers said they had done major damage to the Russian tech organization.
An In-Depth Look at Cuba Ransomware (Avertium) Cuba ransomware first appeared in 2019 but remained nearly unnoticed until November 2021. Let's take a look at their recent attacks, tactics, & techniques.
Fake Signals and American Insurance: How a Dark Fleet Moves Russian Oil (New York Times) The New York Times tracked several oil tankers faking their locations while transporting Russian oil currently under Western sanctions, in an apparent effort to deceive their American insurer.
Russia says U.S. accessed thousands of Apple phones in spy plot (Reuters) Russia's Federal Security Service (FSB) said on Thursday it had uncovered a U.S. National Security Agency (NSA) plot using previously unknown malware to access specially made so-called backdoor vulnerabilities in Apple phones.
Unlawful Transfer: Inside The Russian System To Take Ukraine's Children (RadioFreeEurope/RadioLiberty) Moscow is making it easier to send children taken from Ukraine to orphanages and families in Russia -- and harder for their real families to bring them home. An RFE/RL investigation reveals details about the process that has earned President Vladimir Putin an arrest warrant for war crimes.
U.S. Lawmakers Support International Tribunal To Prosecute Crimes Of Aggression In Ukraine (RadioFreeEurope/RadioLiberty) U.S. lawmakers and a top U.S. diplomat expressed support on May 31 for the creation of an international tribunal separate from the International Criminal Court (ICC) to try crimes of aggression that have taken place during the war in Ukraine.
Iranian dissidents' claim of presidential hack likely legitimate, experts say (CyberScoop) The hack and leak operation revealed Monday includes a trove of files related to Iranian President Ebrahim Raisi.
Southeast Asian hacking crew racks up victims, rapidly expands criminal campaign (CyberScoop) A group called "Dark Pink" is likely based in Southeast Asia and shows signs of ongoing development and recent activity, researchers say.
Suspected State-Backed Hackers Hit Series of New Targets in Europe, SE Asia (Insurance Journal) A hacking group suspected of ties to an Asian government has broadened its targets to government agencies in countries including Indonesia and Thailand,
Supply Chain Risk from Gigabyte App Center Backdoor (Eclypsium) Recently, the Eclypsium platform began detecting suspected backdoor-like behavior within Gigabyte systems in the wild. These detections were driven by heuristic detection methods, which play an important role in detecting new, previously-unknown supply chain threats, where legitimate third-party technology products or updates have been compromised. Our follow-up analysis discovered that firmware in Gigabyte systems is […]
Experts warn of backdoor-like behavior within Gigabyte systems (Security Affairs) Researchers discovered a suspected backdoor-like behavior within Gigabyte systems that exposes devices to compromise. Researchers from firmware security firm Eclypsium have discovered a suspected backdoor-like behavior within Gigabyte systems. The experts discovered that the firmware in Gigabyte systems drops and executes a Windows native executable during the system startup process. The executable is utilized for insecure […]
Millions of PC Motherboards Were Sold With a Firmware Backdoor (WIRED) Hidden code in hundreds of models of Gigabyte motherboards invisibly and insecurely downloads programs—a feature ripe for abuse, researchers say.
Gigabyte motherboards shipped with hidden firmware backdoor (Computing) Computing is the leading information resource for UK technology decision makers, providing the latest market news and hard-hitting opinion.
2023-05-31 // SITUATIONAL AWARENESS // Spyboy Defense Evasion Tool Advertised Online (r/crowdstrike) On May 21, 2023, an online persona named spyboy began advertising an endpoint defense evasion tool for the Windows operating system via the Russian-language forum Ramp. The author claims that the software — seen in a demonstration video as being titled “Terminator” — can bypass twenty three (23) EDR and AV controls. At time of writing, spyboy is pricing the software from $300 USD (single bypass) to $3,000 USD (all-in-one bypass).
Barracuda Zero-Day Exploited to Deliver Malware for Months Before Discovery (SecurityWeek) Recently discovered Barracuda zero-day vulnerability CVE-2023-2868 has been exploited to deliver malware and steal data since October 2022.
Chinese-speaking phishing ring behind latest fake fee scam targeting UAE; another campaign exposed (Group-IB) Group-IB, a global cybersecurity leader headquartered in Singapore, has attributed a recent wave of scams impersonating UAE public bodies to a Chinese-speaking phishing gang, codenamed PostalFurious.
Mitiga Security Advisory: Lack of Forensic Visibility with the Basic License in Google Drive (Mitiga) After gaining initial access to any platform, data theft (exfiltration) is one of the most common attack vectors used by threat actors.
Ado-be-gone: Armorblox Stops Adobe Impersonation Attack (Armorblox) Today, we shed light on an email attack that impersonated Adobe, with a focus on Adobe Acrobat. This attack bypassed native Microsoft 365 email security, and would have landed in the inboxes of more than 2,300 end users if not successfully detected and stopped by Armorblox.
The Picture in Picture Attack (Avanan) Hackers are hiding malicious links within pictures.
Hackers hunting for exposed Apache NiFi, warns SANS Institute (IT World Canada News) Threat actors are scouring the internet for unprotected instances of Apache NiFi, to steal server credentials and install cryptominers, warns the SANS Institute. "An attacker for such a misconfigured system can access all the data processed by NiFi and read/modify/delete the NiFi configuration," Johannes Ullrich, the cyber training organization's director of research, said today in
Your Business Data and Machine Learning at Risk: Attacks Against Apache NiFi (SANS Internet Storm Center) Apache NiFi describes itself as “an easy-to-use, powerful, and reliable system to process and distribute data.” [1] In simple terms, NiFi implements a web-based interface to define how data is moved from a source to a destination. Users may define various “processors” to manipulate data along the way. This is often needed when processing business data or preparing data for machine learning. A dataset used for machine learning may arrive in one format (let's say JSON), but to conveniently use it for training, it must be converted to JSON or inserted into a database. The features are not just attractive to machine learning, but many business processes require similar functionality.
DNS Snooping on Apple iOS 14 Zero-Click Spyware KingsPawn (CircleID) Last year, several governments reportedly used the NSO Group's spyware Pegasus to exploit a zero-day vulnerability in WhatsApp to spy on journalists, opposition politicians, and dissidents via their mobile devices. Apple quickly addressed the issue by launching more powerful data protection features.
Apology and Notice Concerning Newly Discovered Potential Data Leakage of Customer Information Due to Cloud Settings (Toyota Motor Corporation Official Global Website) On May 12, Toyota Motor Corporation (TMC) announced "Apology and Notice Concerning Potential Data Leakage of of Customer Information Due to Misconfiguration of Cloud Environment (Japanese only)" Subsequently, we conducted an investigation for all cloud environments managed by TOYOTA Connected Corporation (TC). It was further discovered that a part of the data containing customer information had been potentially accessible externally. We would like to inform you of the incident that has been identified as of today.
Toyota finds more misconfigured servers leaking customer info (BleepingComputer) Toyota Motor Corporation has discovered two additional misconfigured cloud services that leaked car owners' personal information for over seven years.
Yet Another Toyota Cloud Data Breach Jeopardizes Thousands of Customers (Dark Reading) The newly found misconfigured cloud services are discovered just two weeks after an initial data breach affecting millions came to light.
Molly White Tracks Crypto Scams. It's Going Just Great (WIRED) In 2021, software engineer Molly White launched a cautionary Web3 blog to pour cold water on cryptocurrency's dumpster fires
BREAKING: New data breach affects over 1,000 patients throughout UL Hospitals Group (Limerick Post Newspaper) A SPOKESMAN for University Hospital Limerick Group has confirmed that there has been a fresh data breach affecting more than 1,000 patients.
MCNA Notifies 8.9M Individuals of Healthcare Data Breach (Health IT Security) An internal investigation revealed that the breach exposed the personal information of nearly 9M patients, marking the year's largest healthcare data breach so far.
IL Hospital Suffers Cybersecurity Incident (Health IT Security) Illinois-based Morris Hospital & Healthcare Centers is investigating a cybersecurity incident that occurred when the organization discovered unusual activity within its network.
Cleveland Clinic suffers patient data breach (Becker's ASC Review) Cleveland Clinic has filed a notice of data breach with the Attorney General of Massachusetts after an unauthorized user accessed confidential patient informati
Cleveland Clinic patients caught up in medical billing data breach (Becker's Hospital Review) Data breach at MedInform affects Cleveland Clinic patients, potentially including names, addresses, Social Security numbers, and financial information.
Clinical test data of 2.5 million people stolen from biotech company Enzo Biochem (Record) An April ransomware attack on a biotech company resulted in the compromise of test information and personal data of nearly 2.5 million people, according to regulatory filings.
Dallas Animal Services Still Recovering From City Ransomware Attack (NBC 5 Dallas-Fort Worth) Staff have been working hard to overcome challenges and operate one of the largest shelters in the country, despite the impact on its computer system
Hillsborough County voter system breach exposes 58,000 people's information (WTSP) Officials believe the unauthorized user accessed Hillsborough County voters' social security or driver's license numbers.
Hillsborough election hack exposed 58,000 voters’ private information (Tampa Bay Times) A criminal investigation into the cyberattack continues.
Cyberattack forces Idaho hospital to send ambulances elsewhere (CNN Politics) A hospital in Idaho has been diverting ambulances to other hospitals for more than 24 hours because of a cyberattack, a hospital spokesperson confirmed to CNN on Wednesday in the latest example of a hacking incident complicating health care in the US.
Ransomware resurgence underscores the dynamic nature of cyber risk (Advisen) The cybersecurity threat landscape is dynamic and rapidly evolving. On any given day, a hacker’s preferred attack method can change. Businesses should be mindful of this shifting landscape and take proactive steps to mitigate potential losses from various cyber threats rather than focusing on preventing a particular attack method that is making headlines.
Vulnerability Summary for the Week of May 22, 2023 (Cybersecurity and Infrastructure Security Agency CISA) The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. NVD is sponsored by CISA. In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.
Information Warfare in the Depths: An Analysis of Global Undersea Cable Networks (U.S. Naval Institute) The world increasingly relies on undersea cables for economic viability. Their security is at risk.
Chrome 114 Released With 18 Security Fixes (SecurityWeek) Chrome 114 stable brings 18 security fixes, including 13 for vulnerabilities reported by external researchers.
Zyxel security advisory for post-authentication command injection vulnerability in NAS products (Zyxel Community) CVE: CVE-2023-27988 SummaryZyxel has released patches addressing a post-authentication command injection vulnerability in some NAS versions.
CISOs Plan to Increase Cybersecurity Spending Despite Economic Concerns, Study Says (PR Newswire) Nuspire, a leading managed security services provider (MSSP), announced findings from its second annual research study, revealing current...
Second Annual CISO Research Report on Challenges and Buying Trends: A Focus on Optimization (Nuspire) Understanding the challenges faced by chief information security officers (CISOs) and IT decision-makers (ITDMs) is critical for businesses looking to strengthen their cybersecurity posture, stay competitive and ensure regulatory compliance.
Research Report Shows the US is Leading Adoption of New Digital Identi (PRWeb) US organizations are leading the adoption of digital identity solutions — well ahead of their UK counterparts, according to a new report from Curity, an API-focused
Cisco Buys Armorblox to Bring Generative AI to Its Portfolio (Gov Info Security) Cisco plans to make its third tuck-in cybersecurity acquisition of 2023 to protect email, cloud office applications and enterprise communications through natural
Acquisition of Men&Mice to Expand BlueCat's Services (CIOReview) Acquisition of Men&Mice to Expand BlueCat's Services By CIOReview - The acquisition of Men&Miceadvances BlueCat's strategy to position itself as an industry leader in DNS, DHCP, and IP...
Dig Security Secures Strategic Investment from Samsung Ventures for Cloud Data Security Posture Management (DSPM) (PR Newswire) Dig Security, the cloud data security leader, announced a new investment from Samsung Ventures today. The investment will accelerate Dig's...
IBM to Retrench About 8,000 Jobs to Move Toward AI Automation (Zacks Investment Research) IBM recently announced a halt in the hiring process as it's aiming to replace around 8000 jobs with AI technology.
PCI Security Standards Council Announces 2023-2025 Advisory Board (PCI Security Standards Council) The PCI Security Standards Council (PCI SSC) announced the newly elected 2023-2025 Board of Advisors. The Board of Advisors represents the Council’s Participating Organizations (POs) worldwide to ensure global industry involvement in the development of PCI standards […]
Bishop Fox Names Kevin Tonkin First CPO (SecurityBrief Asia) Cybersecurity firm Bishop Fox appoints Kevin Tonkin as its first ever Chief Product Officer to lead expansion of its continuous offensive security platform.
Infosec products of the month: May 2023 (Help Net Security) The featured infosec products this month are from: Aqua Security, Axiado, Bitwarden, Cloudflare, ComplyAdvantage, Dashlane, and more.
HYAS Infosec Wins 2023 Fortress Cybersecurity Award (Business Wire) HYAS Insight Selected in Threat Intelligence Category for “Always Staying One Step Ahead” In Cybersecurity
ConnectWise Recognized for Exceptional Innovation and Successful Deployment Through The Channel (ConnectWise) ConnectWise, the world’s leading software company dedicated to the success of IT solution providers, announced today that TMC, a global, integrated media company helping clients build communities in print, in person and online, has named ConnectWise RMM as a 2023 MSP Today Product of the Year Award winner.
Company Recognized for Second Year in Categories for Leadership, Endpoint Detection, Incident Response and Network Security (ConnectWise) ConnectWise won in four categories and was named a finalist in the training category for the 2023 Fortress Cybersecurity Awards. Read...
Testlio and Bugcrowd Join Forces to Deliver Comprehensive Quality and Security with Crowdsourced Testing for More Cost Efficient DevSecOps (Bugcrowd) Alliance combines experts across quality and security domains to give product teams exceptional value on end-to-end software testing coverage
Cipherpoint Signs Agreement with Trend Micro (Australian Cyber Security Magazine) Cipherpoint has announced that Excite IT, its recently acquired wholly owned subsidiary, has entered into an agreement with Trend Micro Australia to provide security operations services to support Trend’s managed detection and response service in Australia.
LogRhythm snaps up SIEM Computer Software accolade yet again (SecurityBrief Australia) LogRhythm, the cybersecurity company, has been recognised with the SIEM Computer Software accolade at the 2023 SBR Technology Excellence Awards.
ID Quantique joins EAGLE-1, Europe's pioneering quantum key distribution initiative (PR Newswire APAC) The ESA- and EC-supported EAGLE-1 LEO satellite will be equipped with innovative security features developed by ID Quantique and TESAT, Europe's leading laser communication technology company
Novel ‘Automated Program Analysis’ Technique Drastically Improves Internet of Things and Embedded Systems Security (GlobeNewswire News Room) Resulting Cybersecurity Tech More Accurately Detects Exploitable Vulnerabilities...
OccamSec Launches New Platform to Manage Cyber Threat Exposures Across Mobile, API, and Cloud Environments (PR Newswire) OccamSec today launched its market-defining Continuous Threat Exposure Management (CTEM) platform with the major expansion of Incenter. With...
Tel Aviv Stock Exchange Selects CardinalOps to Reduce Risk of Breaches Due to Undetected Attacks (PR Newswire) CardinalOps, the detection posture management company, today announced that the Tel Aviv Stock Exchange (TASE) has deployed the CardinalOps...
FortMesa Joins CompTIA in Effort to Strengthen the Cybersecurity Culture throughout the Global MSP Community (FortMesa) Leader in security enablement tools for IT service providers will supply critical component for CompTIA Cybersecurity Trustmark
BigID Revolutionizes Auto-Classification with Classifier Tuning (PR Newswire) BigID, the leading data intelligence platform that enables organizations to know their enterprise data and take action for Data Security,...
9 smart contract vulnerabilities and how to mitigate them (Security | TechTarget) Smart contracts are increasingly popular targets for attackers, so knowing how to mitigate the top smart contract vulnerabilities is critical. Learn how.
5 free OSINT tools for social media | WeLiveSecurity (WeLiveSecurity) A roundup of some of the handiest tools for the collection and analysis of publicly available data from Twitter, Facebook and other social media platforms.
Top 9 Reasons Why Cybersecurity Should be a Priority for Small Business Owners (Techshali) In today’s digital age, cybersecurity has become more important than ever. Small business owners are often vulnerable to cyber attacks due to their lack of resources and expertise in this area. The consequences of a cyber attack can be devastating, ranging from financial losses to reputational damage. That’s why it’s crucial for small business owners …
Thinking straight in the SoC: How AI erases cognitive bias (Register) The whispering voice presents an alternative point of view to steer cyber security pros in the right direction
ChatGPT Is Cutting Non-English Languages Out of the AI Revolution (WIRED) AI chatbots are less fluent in languages other than English, threatening to amplify existing bias in global commerce and innovation.
Why an Octopus-like Creature Has Come to Symbolize the State of A.I. (New York Times) The Shoggoth, a character from a science fiction story, captures the essential weirdness of the A.I. moment.
Security Think Tank: A brief history of (secure) coding (Computer Weekly) From controlling who was allowed to work with IBM mainframes to present-day DevSecOps techniques, the concept of secure coding has a longer history than you might think
China Investing in Open-Source Intelligence Collection on the U.S. (New York Times) A new report outlines Chinese efforts to mine public information from the Pentagon, think tanks and private companies to gain insight on the American military.
'US is the empire of hacking': China just hit back at Microsoft's accusations that it attacked critical American infrastructure. Is there a cause for concern as tensions heat up? (Yahoo Finance) Microsoft has 'moderate confidence' that Chinese cyberattack tools have been created.
Canada to set up cyber security certification for defence contractors (Reuters) Canada will work with the United States to draft a cyber security certification framework for defence contractors that will be identical for both countries as incidents of malicious hacking increase, the defence minister said on Wednesday.
New bill aims to boost cybersecurity cooperation between U.S., Abraham Accords nations (Axios) A bipartisan group of senators is introducing a bill to enhance cybersecurity cooperation between the Department of Homeland Security and Abraham Accords countries — Israel, the United Arab Emirates, Bahrain and Morocco, according to a statement shared with Axios.
ChatGPT Risks Divide Biden Administration Over EU’s AI Rules (Bloomberg) Some officials fear tough regulation will give China an edge. US and EU are discussing AI regulation this week in Sweden.
Key US Official Calls for Tech Companies to 'Do Something' About AI (VOA) Director of lead US cybersecurity agency says it is not enough for tech executives, scientists involved with artificial intelligence to issue warnings, a day after more than 350 sign statement about human extinction
AI and China are ‘defining challenges of our time,’ CISA director says (FCW) Artificial intelligence’s potential as an “extinction event” for humanity prompted CISA Director Jen Easterly to advise companies to “think about self-regulation” for product security and safety.
US Army may ask defense industry to disclose AI algorithms (Federal Times) "It's not to get at vendor IP," Young Bang said. "It's really about, how do we manage the cyber risks and the vulnerabilities?"
CISA Chief Confident on Agency’s Budget Trajectory (Meritalk) Cybersecurity and Infrastructure Security Agency (CISA) Director Jen Easterly said today she is confident that Congress will give CISA the funding it needs to execute on its mission even in times of skinnier Federal budgets, and emphasized her belief that cybersecurity is an issue with substantial bipartisan support among lawmakers.
Will the debt ceiling deal mean less for homeland security? (Atlantic Council) Congress needs to ensure that the Department of Homeland Security has the resources it needs to defend the nation against nonmilitary threats.
DHS Asked to Replace Aging Technology to Plug Security Risks (Bloomberg Law) The Department of Homeland Security needs to replace aging technology systems to prevent security breaches, Sen. Maggie Hassan (D-N.H.) said at a hearing Wednesday.
DHS likely needs more funding for IT modernization, says watchdog official (FedScoop) GAO Director of IT and Cybersecurity Kevin Walsh told lawmakers on Wednesday that IT modernization "may not be a cost saving endeavor".
UALR: Grant will enhance fighting attacks on utilities (Arkansas Online) The Emerging Threat Information Sharing and Analysis Center -- of which the University of Arkansas at Little Rock is a key member -- is expanding, thanks to a $1 million grant from the U.S. Department of Energy.
White House to choose Army general to be new No. 2 at Cyber Command (Record) Maj. Gen. William Hartman is the president's pick to be the next deputy of U.S. Cyber Command as the organization's leadership transitions into a new era.
Shopee Taiwan fined NT$200,000 for customer data breaches (Taiwan News) MODA says country's largest e-commerce site failed to protect data | 2023-05-30 20:48:00
US court finds that border phone searches need a warrant (Register) Here's a story with a twist
Jack Teixeira Should Have Been Stopped Again and Again (The Atlantic) How did the worst leak in a decade take almost a year to be detected?
Has loneliness become a national security issue? (Military Times) Recent revelations about the prevalence of mental health issues in America present challenges, including questioning how security clearances are vetted.
FTC Says Ring Employees Illegally Surveilled Customers, Failed to Stop Hackers from Taking Control of Users' Cameras (Federal Trade Commission) The Federal Trade Commission charged home security camera company Ring with compromising its customers’ privacy by allowing any employee or contractor to access consumers’ private
Amazon to Pay $25 Million to Settle Children’s Privacy Charges (New York Times) Regulators said the tech giant kept children’s Alexa voice recordings “forever,” violating a children’s privacy law.
For a complete running list of events, please visit the Event Tracker.
Women in Cybersecurity at Infosecurity Europe 2023 (London, UK, Jun 21, 2023) Infosecurity Magazine is excited to be hosting the seventh annual Women in Cybersecurity networking event at Infosecurity Europe on Wednesday 21 June 2023 Men still outnumber women in cybersecurity by three to one and overall representation of women in the sector is hovering at around 24%, according to (ISC)2’s Women in Cybersecurity report. That’s why it continues to be important to champion the achievements of women in our sector, build bridges with allies in the information security world and empower women both at the start of their careers and progressing up the ladder. Hosted by Infosecurity Magazine Editor, Beth Maundrill, this exclusive event will consist of networking, an exciting keynote presentation and a panel discussion featuring some of the industry’s most inspiring women.
2023 International Cybersecurity Championship and Conference (IC3) (San Diego, California, USA, Jul 31 - Aug 4, 2023) The International Cybersecurity Championship and Conference (IC3) event is designed to attract top talent and raise global awareness of the power of games to upskill the cybersecurity industry. Through its exciting, competition-based forum, the IC3 helps individuals further their cybersecurity education and skills. IC3 is designed with three primary components. The first is a speaker session showcasing top leaders in Cybersecurity Games and Exercises from around the world. The second is the hands-on expo of cyber games, immersive training, and exercises. Finally, the program includes the 2023 International Cybersecurity Challenge (ICC), a championship tournament featuring global teams (25 years and younger).
Women4Cyber Conference “Hacking Gender Barriers” (Madrid, Spain, Sep 26 - 27, 2023) The Women4Cyber Conference “Hacking Gender Barriers” will take place in September 2023 in Madrid. It will be the very first conference in Europe organised by Women4Cyber bringing women and men together to collaborate on building diversity in our field.
MILIPOL Paris2023 (Paris Nord Villepinte, France, Nov 14 - 17, 2023) During 4 days, Milipol Paris 2023, organised under the auspices of the French Ministry of Interior and in partnership with several governmental bodies, will be the epicentre of all security-related innovations. For this new edition, Milipol will gather over 1,000 exhibitors, 65% of whom are from outside-France, 30,000 attendants from more than 150 countries, and 150 official delegations.
OT Cybersecurity Summit—Scotland (Aberdeen, Scotland, UK, May 29 - Jun 1, 2023) This brand new event will focus on how you can protect your fortress with the ISA 62443 series of standards and related training courses. Cybersecurity is a hot topic as supply chain risk emerges as a top concern in the energy sector. A cyber breach at any level in a supply chain has the potential to take down the whole operation. Regulators in the North Sea are asking contractors detailed questions about OT Cybersecurity, especially on operations classified as critical infrastructure. This increased scrutiny has resulted in more detailed contractual requirements. Insurance companies are also looking for specific details before writing a cybersecurity policy. ISA has established a series of industrial cybersecurity standards that serve as your roadmap to improve security and protect your operations with strategies such as zero-trust architecture and OPC/protocols.
US Cyber Open® Kick-Off Event (Virtual, Jun 1, 2023) US Cyber Open Kick-Off Event. SEASON III WHAT ARE THE US CYBER GAMES ALL ABOUT? -Why should I get into a career in cybersecurity? -What's the key to making the US Cyber Team? -Who are the coaches for Season III? Learn about these and more during our Season III Kick-Off event.
35th Annual FIRST Conference (Montréal, Québec, Canada, Jun 4 - 9, 2023) FIRST is an international non-profit association of Computer Security and Incident Response Teams (“CSIRTs”), Product Security and Incident Response Teams (“PSIRTs”), and independent security researchers from the public, private, and academic sectors. Membership comprises of over 600 teams with representation from over 100 nations. The annual conference provides a forum for sharing goals, ideas, and information on how to improve global cyber security. FIRST is a front-line enabler in the global response community, providing access to the best practices, tools, and trusted communication with its member teams. Named one of the Top 19 Information Security Conferences of 2020 by TripWire, the FIRST annual conference promotes worldwide coordination and cooperation among computer security and incident response teams (CSIRTs). The conference provides a forum for sharing goals, ideas, and information on how to improve computer security on a global scale.
IT Nation Secure 2023 (Orlando, Florida, USA, Jun 5 - 7, 2023) Network with peers to solve cybersecurity business challenges. Join us June 5-7 in Orlando to see how IT Nation Secure can help you transform your cybersecurity services, make meaningful connections, and ultimately protect your business and customers.
Techno Security & Digital Forensics Conference (Wilmington, North Carolina, USA, Jun 5 - 8, 2023) Techno Security & Digital Forensics Conference provides a unique education experience that blends the digital forensics and cybersecurity industries for collaboration between government and private sectors. The 2023 East edition of Techno Security & Digital Forensics Conference will feature educational sessions, industry-leading speakers, and sponsors/exhibits over four days of networking among cybersecurity and digital forensics industry professionals. Learn about new tools and techniques, discuss important case studies, and share insight on future trends and the current state of the industry. Educational sessions cover a wide range of topics within the following primary tracks from which CPE credits can be earned: Audit/Risk Management, eDiscovery (New!), Forensics, Information Security, Investigations, Magnet Forensics Lab, Cellebrite Lab, and Sponsor Demos. In addition to educational sessions, sponsoring/exhibiting companies will be on hand to introduce and demonstrate the latest products and services in the industry. Learn from industry experts, connect with leading suppliers, explore the latest tools, and network with cybersecurity and digital forensics professionals.
