Cybersecurity compliance frameworks exist to assist federal agencies and organizations in constructing robust cybersecurity strategies and keep them ahead of threats. However, each framework is often ambiguous, making it challenging to ensure the outlined requirements are met. ThreatLocker® has created a free downloadable asset, “The IT Professional’s Blueprint for Compliance”, to equip cybersecurity leaders with compliance best practices. Download your free copy of the eBook today.
Artificial Intelligence is revolutionizing business, but it also introduces new risks. Join us on Wednesday, September 18th at 2pm EDT for a compelling live webinar on "Good vs. Evil: Cloud Security in the Age of Generative AI" with N2K CyberWire’s Dave Bittner and Sysdig’s Loris Degioanni. Learn more and register now.
Cybersecurity firm Fortinet has confirmed that it sustained a data breach affecting some customer data, BleepingComputer reports. The company stated, "An individual gained unauthorized access to a limited number of files stored on Fortinet’s instance of a third-party cloud-based shared file drive, which included limited data related to a small number (less than 0.3%) of Fortinet customers." The company hasn't disclosed what type of data was stolen, but says it has "communicated directly with customers as appropriate."
BleepingComputer notes that a threat actor posted on a hacking forum yesterday claiming to have stolen 440 GB of data from Fortinet's Azure Sharepoint instance. The crook also posted credentials to an S3 bucket containing the alleged stolen data, stating that Fortinet refused to pay a ransom to prevent the data from being leaked. BleepingComputer hasn't confirmed the validity of the threat actor's claims.
For the second year in a row, Cobalt has been named the only “outperformer” in GigaOm’s independent report on Pentesting as a Service. Recognized for its streamlined approach, free retesting, and swift test launches, Cobalt leads the pack. Download the full report to see why Cobalt stands out as the category leader.
Check Point has published a report on a cyberespionage campaign by Scarred Manticore, a threat actor affiliated with Iran's Ministry of Intelligence and Security (MOIS). The threat actor is using a new malware framework dubbed "LIONTAIL" to target the government, telecommunications, military, and financial sectors in Saudi Arabia, the UAE, Jordan, Kuwait, Oman, Iraq, and Israel.
Check Point states, "LIONTAIL is a malware framework that includes a set of custom shellcode loaders and memory resident shellcode payloads. One of its components is the LIONTAIL backdoor, written in C. It is a lightweight but rather sophisticated passive backdoor installed on Windows servers that enables attackers to execute commands remotely through HTTP requests. The backdoor sets up listeners for the list of URLs provided in its configuration and executes payloads from requests sent by attackers to those URLs."
While the goal of this campaign is espionage, the researchers note that some of the same tools were used in an MOIS-sponsored destructive cyberattack against the Albanian government in 2022.
Seamlessly connect legacy apps to any identity provider with Strata. Effortlessly apply MFA and maintain identity continuity without disruptions. Enhance security and reduce tech debt with Strata’s efficient identity orchestration platform. Share your identity challenge and receive free AirPods Pro.
The US Department of the Treasury’s Office of Foreign Assets Control (OFAC) has sanctioned Cambodian businessman and senator Ly Yong Phat for his alleged involvement in "serious human rights abuse related to the treatment of trafficked workers subjected to forced labor in online scam centers." OFAC alleges that Ly owns a resort that's used as a scam center, with human trafficking victims forced to carry out online scam operations.
Treasury states, "For more than two years, from 2022 to 2024, O-Smach Resort has been investigated by police and publicly reported on for extensive and systemic serious human rights abuse. Victims reported being lured to O-Smach Resort with false employment opportunities, having their phones and passports confiscated upon arrival, and being forced to work scam operations. People who called for help reported being beaten, abused with electric shocks, made to pay a hefty ransom, or threatened with being sold to other online scam gangs."
Feeling a little too "xposed"? Gartner predicts implementing CTEM can make your organization 3x less likely to experience a breach. XPOSURE is your ticket to mastering the CTEM framework and ensuring you’re never caught with your defenses down. In just 3 hours, you'll learn how to continuously test your resilience, identify high-risk gaps, and apply best practices across your entire attack surface. Join us live on September 10th or tune in on-demand!
Today's issue includes events affecting Albania, Cambodia, Iran, Iraq, Israel, Jordan, Kuwait, Oman, Saudi Arabia, the United Arab Emirates, and the United States.
Trustwave's 2024 Financial Services Threat Reports Highlight Alarming Trends in Insider Threats and Phishing-as-a-Service (Trustwave) Chicago – September 10, 2024 – Trustwave today released a series of reports detailing the threats facing the financial services sector.
Chinese-made port cranes in US included 'backdoor' modems, House report says (The Record) The House's Select Committee on China and Homeland Security Committee released a 51-page report about technology installed on Chinese-made port cranes that creates "a significant backdoor security vulnerability."
CSA and Astrix Research: The State of Non-Human Identity Security - Astrix Security (Astrix Security) As NHI attacks Soar, CSA and Astrix reveal critical gaps in NHI protection. New data shows that one in five organizations have experienced a security incident related to non-human identities; and only 15% remain confident in their ability to secure them. Findings from the State of Non-Human Identity Security Survey Report, a survey of more […]
Druva Announces Dru Investigate, a Gen AI Product Revolutionizing Data Investigations and Incident Response (BusinessWire) Expansion of Dru AI portfolio helps IT, security, legal, and privacy teams to investigate, understand, and address data risks in natural language
Treasury Sanctions Cambodian Tycoon and Businesses Linked to Human Trafficking and Forced Labor in Furtherance of Cyber and Virtual Currency Scams (U.S. Department of the Treasury) WASHINGTON — Today, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) is sanctioning Cambodian businessman Ly Yong Phat (Ly), his conglomerate L.Y.P. Group Co., LTD (L.Y.P. Group), and O‑Smach Resort for their role in serious human rights abuse related to the treatment of trafficked workers subjected to forced labor in online scam centers.
Domains seized for allegedly importing Chinese gun switches (The Register) Illegal goods allegedly shipped to the US labeled as toys or jewels
For a complete running list of events, please visit the Event Tracker.
ISC2 Security Congress 2024 (Las Vegas and Virtual, Nevada, USA, Oct 14 - 16, 2024) Join thousands of cybersecurity experts from across the globe as we lead the charge against emerging threats and protect what matters most in today's digital landscape.
SecureWorld Detroit (Novi, Michigan, USA, Sep 18, 2024) Join your regional cybersecurity community for high-quality, affordable training and collaboration. Earn 6-12 CPE credits through 15+ educational sessions learning from local and nationally recognized industry leaders. Attend featured keynotes, panel discussions, breakout sessions, and solution vendor displays—all while networking with peers in InfoSec.
SecureWorld St. Louis (Clayton, Missouri, USA, Sep 26, 2024) Join your regional cybersecurity community for high-quality, affordable training and collaboration. Earn 6-12 CPE credits through 15+ educational sessions learning from local and nationally recognized industry leaders. Attend featured keynotes, panel discussions, breakout sessions, and solution vendor displays—all while networking with peers in InfoSec.
2024 DataTribe Challenge Submission Deadline (Fulton and Virtual, Maryland, USA, Sep 27, 2024) As founders ourselves, we have never liked the feeling of being the entertainment that comes with participating in most pitch competitions. So, in creating the DataTribe Challenge, we have centered it on the North Star of creating a platform that is a valuable use of time for the founders participating. Submit your startup to potentially be selected to be part of a startup competition like no other. The DataTribe Challenge is a unique program to accelerate your cybersecurity startup. Workshop your messaging and meet potential investors and customers. We will pick five finalists to join the program, receive coaching from our team of startup veterans, present at the live event, and benefit from free promotion and press coverage. Finalists share $25,000 in prizes and all will receive the title of DataTribe Challenge Finalist.
Uniting Women in Cyber 2024 (Arlington, Virginia, USA, Oct 1, 2024) The premier networking event to advance diversity in cybersecurity! Join renowned cyber leaders and experts from all walks of life. Uniting Women in Cyber (UWIC) event convenes a powerful and diverse network of cyber leaders and experts to discuss emerging global trends, technological advancements, and workforce development. UWIC is the premier event for professionals, aspiring practitioners and all who are interested in cybersecurity, to meet and network with national leaders in the field. Come and be a part of a vibrant, diverse community to learn, share ideas, and expand your professional network!
HITRUST® Collaborate 2024 (Frisco, Texas, USA, Oct 1 - 3, 2024) HITRUST Collaborate is the most comprehensive information protection and risk management conference for privacy, security, and compliance. The 2.5-day conference includes keynotes, panel discussions, and educational sessions for industry professionals.
