Modernize your identity infrastructure and get rid of technical debt without sacrificing your complex access policies. Use Strata to integrate non-standard apps with any identity service while using any vendor, standard, or app architecture. Or use it to migrate away from outdated identity providers and consolidate IDPs. It’s seamless, simple and code-free. Share your top identity security priorities, and receive a pair of complimentary AirPods Pro.
We're always looking for ways to improve the N2K CyberWire network to give you an intelligence-driven news experience. Please take a few minutes to tell us about your network experience and share your feedback by completing our 2024 Audience Survey, and you will have a chance to win a $100 Amazon gift card. Take the survey.
The UK's National Health Service (NHS) today issued an urgent call for O-type blood donations following last week's ransomware attack on pathology lab provider Synnovis, the Record reports. The impacted London hospitals are using up more of their O-type blood stocks because they "cannot currently match patients’ blood at the same frequency as usual."
Stephen Powis, medical director for NHS England, stated, "To help London staff support and treat more patients, they need access to O Negative and O Positive blood, so if one of these is your blood type, please come forward to one of the 13,000 appointments currently available in NHS Blood Donor Centres."
London hospitals are also asking for medical student volunteers to work long shifts hand-delivering blood tests to and from the affected pathology labs, according to Shaun Lintern at the Sunday Times.
Join Cobalt security experts Caroline Wong, Chief Strategy Officer, and Anne Neilsen, Senior Director of Product Marketing from Cobalt, as they explore Cobalt 2024 State of Pentesting Report and reveal how top security teams are juggling the implications of accelerated AI adoption, the increased use of open source software, growing shifts to cloud technology, and an exploding attack surface, all amidst resource limitations within a tight talent pool of security practitioners. Here is what you will learn:
Morphisec says a threat actor tracked as "Sticky Werewolf" is conducting a cyberespionage campaign against Russia's aviation industry. Sticky Werewolf's home country is unclear, but the researchers believe the group has "geopolitical and/or hacktivist ties."
Morphisec states, "The phishing email, purportedly sent by the First Deputy General Director and Executive Director of AO OKB Kristall, targets individuals in the aerospace and defense sector. The email invites recipients to a video conference on future cooperation, providing a password-protected archive that contains a malicious payload, and aims to deceive recipients into opening the harmful attachment under the lure of a legitimate business invitation."
Mark your calendar for mWISE™, the unique cybersecurity conference from Mandiant, now part of Google Cloud. Built by practitioners for practitioners, it runs from September 18–19, 2024 in Denver, Colorado.
What makes mWISE different from other cybersecurity conferences? It’s a targeted event with hands-on learning for frontline practitioners. The intimate setting allows you to make one-on-one connections with leaders in the field. And best of all, it’s focused on learning without the sales pitches.
The New York Times has disclosed that its internal source code was stolen from GitHub and posted to the 4chan message board in January, BleepingComputer reports. BleepingComputer notes that the leaked folder names "indicate that a wide variety of information was stolen, including IT documentation, infrastructure tools, and source code, allegedly including the viral Wordle game."
The Times said in a statement, "The underlying event related to yesterday’s posting occurred in January 2024 when a credential to a cloud-based third-party code platform was inadvertently made available. The issue was quickly identified and we took appropriate measures in response at the time. There is no indication of unauthorized access to Times-owned systems nor impact to our operations related to this event. Our security measures include continuous monitoring for anomalous activity."
N2K offers affordable exam prep training for top certifications from AWS, CompTIA, ISC2, Microsoft, Cisco, and many others. Get access to simulated exams, custom quizzes, e-flashcards, and more. Explore N2K’s expansive learning library of premium practice tests, training courses, and practice labs to help supplement your studies and accelerate your career journey. Save 25% with promo code "JUMP25" and get started today.
Today's issue includes events affecting Russia, the United Kingdom, and the United States.
Frontier says 750,000 Social Security numbers accessed during April cyberattack (The Record) Frontier told regulators that a ransomware attack it discovered in April resulted in exposed Social Security numbers on hundreds of thousands of people.
DDoS attacks target EU political parties as elections begin (BleepingComputer) Hacktivists are conducting DDoS attacks on European political parties that represent and promote strategies opposing their interests, according to a report by Cloudflare.
What Snowflake isn't saying about its customer data breaches | TechCrunch (TechCrunch) As another Snowflake customer confirms a data breach, the cloud data company says its position "remains unchanged."
Apple to unveil new 'Passwords' password manager app for iPhones, Macs (BleepingComputer) Apple will reportedly unveil a standalone password manager named 'Passwords' as part of iOS 18, iPadOS 18, and macOS 15 during the upcoming Apple Worldwide Developers Conference.
US Senate Committee holds hearing on harmonizing federal cybersecurity standards to address business challenges (Industrial Cyber) US Senate Committee holds a hearing on harmonizing federal cybersecurity standards to address business challenges.
Two arrested in UK over fake cell tower smishing campaign (The Register) Thousands of dodgy SMS messages bypassed network filters in UK-first case
For a complete running list of events, please visit the Event Tracker.
AWS re: Inforce (Philadelphia, Pennsylvania, USA, Jun 10 - 12, 2024) AWS re: Inforce is a conference that addresses AWS security and confidentiality for customers. The conference covers: Proactive security: Considerations and approaches; How AWS secures data, even from trusted operators and services; Identity and access management; Security mindfulness; Cryptography from the future: Research & innovation to protect customer data; Compliance and governance; Data protection and privacy; and Security operations.
Cyber Civil Defense Summit (Washington DC, Jun 13, 2024) The Cyber Civil Defense Summit brings together a community of cyber defenders, academics, and policymakers with the shared mission of protecting our most vulnerable public infrastructure against cybersecurity threats. This in-person event hosts exclusive keynotes and panels with government and industry leaders in cybersecurity, creating an intimate space for cross-sector conversations between academics, volunteers, and policymakers on how we can work together to protect vulnerable community organizations like hospitals, cities, school districts, and nonprofits.
SANS Rocky Mountain Summer 2024 (Denver (and virtual), Colorado, USA, Jun 17 - 22, 2024) At SANS Rocky Mountain Summer 2024, choose from 48 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
ISA OT Cybersecurity Summit (London, England, UK, Jun 18 - 19, 2024) Strategic OT Cybersafety | Intelligent Innovation for a Secure World The future of intelligence evolution and IoT cybersecurity relies on a strategic approach that integrates supply chain sustainability and security. By leveraging intelligent technologies and prioritizing standards and conformance, we can create a more resilient and secure future for all.
Initial Compromise Insights: VPN and Phishing Attacks Exposed (Virtual, Jun 20, 2024) Join us for an exclusive deep dive into initial compromise risks, focusing on threats posed by VPN vulnerabilities and sophisticated phishing attacks, and share insights from recent research and reports by Zscaler ThreatLabz group. Register now.
