SpyCloud’s annual Malware & Ransomware Defense Report is packed with valuable insights from over 500+ security leaders and practitioners from across the US and UK. The findings include details about how infostealer malware is fueling ransomware, the most common entry points used by cybercriminals in ransomware attacks, industry-specific risks, and actionable takeaways on how to protect your organization from the criminal underground. Read the report now.
This quarter’s CSO Perspectives Live discussion, normally an N2K Pro exclusive, is open to the public! Join Rick Howard, host of our CSO Perspectives podcast, and our Hash Table panelists Alan Berry of Centene and Bob Turner of Cyber Hero vCISO Network on Thursday, September 26th at 2:00 PM EST. Register now and join us to analyze emerging industry trends, recent threats and events, and the evolving role of executives in our field.
Adam Meyers, vice president for counter-adversary operations at CrowdStrike, appeared before a US congressional committee yesterday to address questions about the global outage caused by a faulty CrowdStrike update in July, Infosecurity Magazine reports. The outage was due to a mismatch between input parameters and the rules engine in CrowdStrike's Falcon sensors, triggering "blue screen of death" errors on all Windows machines that installed the update.
Meyers stated, "On July 19, 2024, new threat detection configurations were validated through regular validation procedures and sent to sensors running on Microsoft Windows devices. However, the configurations were not understood by the Falcon sensor’s rules engine, leading affected sensors to malfunction until the problematic configurations were replaced."
Meyers apologized for the disruption and outlined measures taken to prevent future incidents, including enhanced validation and testing processes, phased rollouts of updates, and added runtime safeguards.
Time spent on customer security questionnaires is time you could invest in improving your security posture. At BARR Advisory, we take the burden off your shoulders by managing your vendor due diligence processes and much more, so you can focus on what matters—growing your business. From internal audits to penetration testing, BARR’s comprehensive consulting services cover all your cybersecurity and compliance needs. Take advantage of our limited-time offer: Claim your free security questionnaire now.
Cloudflare has published a report on "SloppyLemming," a cyberespionage actor that "primarily targets Pakistani government, defense, telecommunications, technology, and energy sector organizations." The threat actor has also hit organizations in Bangladesh, Sri Lanka, Nepal, and China. CrowdStrike tracks the same group as "OUTRIDER TIGER," and has tied the threat actor to India.
The researchers note, "Of particular interest, Cloudforce One has observed concerted efforts by SloppyLemming to target Pakistani police departments and other law enforcement organizations. Separately, there are indications that the actor has targeted entities involved in the operation and maintenance of Pakistan’s sole nuclear power facility. Outside of Pakistan, SloppyLemming’s credential harvesting has focused primarily on Sri Lankan and Bangladeshi government and military organizations, and to a lesser extent, Chinese energy and academic sector entities."
A remote or hybrid workforce expands your company's surface area of attack beyond corporate firewall boundaries. Employees’ personal computers introduce shadow IT, and home networks with default settings are easy targets, compounded by public Wi-Fi vulnerabilities. You need to develop a strategy to stay secure while remote employees work across untrusted networks. To learn how you can secure your company's workforce, get a free copy of the latest ThreatLocker® whitepaper on how to secure remote workforces.
CyberScoop reports that an Iranian hacking group appears to have continued access to the Trump campaign. Last week the threat actor shared apparent stolen materials with journalists, including a letter dated September 15th. The threat actor had previously stolen a vetting report on vice presidential nominee JD Vance and shared it with US news outlets last month.
Microsoft's Threat Analysis Center and Google's Threat Analysis Group have both observed Iranian state-sponsored targeting of US presidential campaigns. Tehran has denied allegations of its involvement.
Listen to the recent discussion between N2K CyberWire’s Dave Bittner and Sysdig’s Loris Degioanni on how generative AI (GenAI) and Large Language Models (LLMs) are changing the cloud security landscape. We explored how to secure your AI deployments to safeguard sensitive information and went into the state-of-the-art for employing AI to boost the effectiveness of your cloud security teams in the face of evolving threats. Watch or listen to the discussion now.
Today's issue includes events affecting Bangladesh, China, India, Nepal, Pakistan, Sri Lanka, and the United States.
Diddy Do It? Or Did Cybercriminals? How Hackers Are Turning Scandals Into Cyber Attacks (VERITI) Cyber attackers are exploiting the P. Diddy scandal to spread malware like PDiddySploit. Learn how curiosity can lead to dangerous downloads and how to stay safe from these threats.
Hacker plants false memories in ChatGPT to steal user data in perpetuity (Ars Technica) Emails, documents, and other untrusted content can plant malicious memories.
Broken Hill: A Productionized Greedy Coordinate Gradient Attack Tool… (Bishop Fox) Walkthrough the GCG attack at a high level and be introduced to Broken Hill – Bishop Fox’s newly-released tool that can perform the GCG attack against a…
An easier way to get your logo in the inbox: Google’s latest BIMI changes (Valimail) Unlock your brand’s potential in Gmail! Google’s new BIMI update lets you display logos with a CMC—no trademark needed. Learn all about it here!
How RegScale Won the SC Media Excellence Award for Best Compliance Solution (RegScale) Explore how RegScale won the 2024 SC Media Excellence Award for Best Compliance Solution and see why our CCM platform is leading the industry.
IDC MarketScape Worldwide SIEM for Enterprise 2024 Vendor Assessment (Devo.com) Devo named a Leader in IDC MarketScape for SIEM 2024. Read the report to learn how Devo and other were assessed.
Malwarebytes Unveils Personal Data Remover to Safeguard User Privacy (PR Newswire) /PRNewswire/ -- Malwarebytes, a global leader in real-time cyber protection, today announced the launch of its latest consumer product, Personal Data Remover,...
Baffle Announces New Data Security Capabilities on Amazon S3 (GlobeNewswire News Room) Customers now have access to easy to use, comprehensive data security against accidental data exposure in Generative AI pipelines...
Exclusive: State Department cyber bureau preps funding blitz aimed at boosting allies' defenses (The Record) The U.S. State Department’s cyber bureau is ready to shell out almost $35 million in foreign aid for an array of projects around the world, as Washington aims to boost the digital acumen of allies and take the lead in shaping international norms for cyberspace ahead of other countries like China.
For a complete running list of events, please visit the Event Tracker.
SecureWorld St. Louis (Clayton, Missouri, USA, Sep 26, 2024) Join your regional cybersecurity community for high-quality, affordable training and collaboration. Earn 6-12 CPE credits through 15+ educational sessions learning from local and nationally recognized industry leaders. Attend featured keynotes, panel discussions, breakout sessions, and solution vendor displays—all while networking with peers in InfoSec.
2024 DataTribe Challenge Submission Deadline (Fulton and Virtual, Maryland, USA, Sep 27, 2024) As founders ourselves, we have never liked the feeling of being the entertainment that comes with participating in most pitch competitions. So, in creating the DataTribe Challenge, we have centered it on the North Star of creating a platform that is a valuable use of time for the founders participating. Submit your startup to potentially be selected to be part of a startup competition like no other. The DataTribe Challenge is a unique program to accelerate your cybersecurity startup. Workshop your messaging and meet potential investors and customers. We will pick five finalists to join the program, receive coaching from our team of startup veterans, present at the live event, and benefit from free promotion and press coverage. Finalists share $25,000 in prizes and all will receive the title of DataTribe Challenge Finalist.
Uniting Women in Cyber 2024 (Arlington, Virginia, USA, Oct 1, 2024) The premier networking event to advance diversity in cybersecurity! Join renowned cyber leaders and experts from all walks of life. Uniting Women in Cyber (UWIC) event convenes a powerful and diverse network of cyber leaders and experts to discuss emerging global trends, technological advancements, and workforce development. UWIC is the premier event for professionals, aspiring practitioners and all who are interested in cybersecurity, to meet and network with national leaders in the field. Come and be a part of a vibrant, diverse community to learn, share ideas, and expand your professional network!
HITRUST® Collaborate 2024 (Frisco, Texas, USA, Oct 1 - 3, 2024) HITRUST Collaborate is the most comprehensive information protection and risk management conference for privacy, security, and compliance. The 2.5-day conference includes keynotes, panel discussions, and educational sessions for industry professionals.
Insider Risk Management Program Evaluation & Optimization Training Course (Laurel, Maryland, USA, Oct 2 - 3, 2024) This highly sought after and very comprehensive training course, will ensure that the Insider RIsk Program Manager / Insider Threat Program (ITP) Manager and other key stakeholders that support the program, have the Core / Advanced Knowledge, Blueprint, Resources needed for developing, managing or optimizing a program. Students will be provided with an ITP Management Toolkit that provides an abundance of educational resources, templates and checklists for ITP development, management and optimization. Our student satisfaction levels are in the exceptional range. The Insider Threat Defense Group is so confident about our training courses that they come with a money back training guarantee.
