A remote or hybrid workforce expands your company's surface area of attack beyond corporate firewall boundaries. Employees’ personal computers introduce shadow IT, and home networks with default settings are easy targets, compounded by public Wi-Fi vulnerabilities. You need to develop a strategy to stay secure while remote employees work across untrusted networks. To learn how you can secure your company's workforce, get a free copy of the latest ThreatLocker® whitepaper on how to secure remote workforces.
Is your 2025 marketing strategy already outdated? Find out by joining leading voices in cybersecurity marketing as they unpack what 2025 holds for our industry. We'll discuss the trends shaping the marketing landscape, which channels are in and which are out, and where they find the most significant opportunities for success. Register now for our webinar on November 19th, 2024 at 12:00 PM.
The Canadian government has ordered TikTok parent ByteDance to shut down TikTok's business operations in Canada, citing national security concerns, CBC reports. The company will be required to shutter its offices in Toronto and Vancouver, but Canadians can still access and use the TikTok app. Canada's Innovation Minister François-Philippe Champagne told CBC, "We came to the conclusion that these activities that were conducted in Canada by TikTok and their offices would be injurious to national security."
A TikTok spokesperson told TechCrunch the company plans to challenge the order in court.
Join Kieran Walsh (Senior SOC Engineer, Samsara) and Hela Lucas (Security Operations Engineer, Samsara) for a behind-the-scenes look at how they optimize security operations with AI.
They'll share how AI helped them:
Cisco has issued a patch for a critical remote code execution vulnerability (CVE-2024-20418) affecting its Unified Industrial Wireless software that can "allow an unauthenticated, remote attacker to perform command injection attacks with root privileges on the underlying operating system." SecurityWeek reports. The flaw was assigned a CVSS score of 10.
Cisco states, "This vulnerability is due to improper validation of input to the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface of an affected system."
The Register notes that the flaw is particularly serious because these devices are often used in industrial environments at critical infrastructure organizations.
In our free eBook, Attack Vectors Decoded: Securing Organizations Against Identity-Based Threats, we delve into the attacker’s playbook and arm you with the knowledge and tools to bolster your secure access. Learn how to build powerful, secure identity access that protects your business, your data, and your workers—no matter where they are. Download the eBook now and take the first step in modernizing and galvanizing your secure access against identity-based threats.
Kaspersky has published a report on a new crimeware bundle dubbed "SteelFox" that's spreading via trojanized cracks for popular software applications like Foxit PDF Editor, JetBrains, and AutoCAD. Once installed, it attempts to steal financial data and drops a cryptocurrency miner.
The researchers note, "For this particular campaign, no attribution can be given. Posts with links to activators were either made by compromised accounts or by inexperienced users who were not aware of the threats they were spreading. This campaign was highly active on the Chinese platform Baidu and Russian torrent trackers."
Today's issue includes events affecting Canada, China, Russia, and the United States.
SelectBlinds says 200,000 customers impacted after hackers embed malware on site (The Record) In breach notification documents filed this week in California and Maine, SelectBlinds said employees discovered the malware on September 28 and realized the malware had been on the company website since at least January 7.
Outages impact Washington state courts after ‘unauthorized activity’ detected on network (The Record) Courts in the Washington counties of Thurston, Monroe, Renton, Puyallup, Bainbridge, King, Pierce, Whatcom, and Lewis have all been impacted by what may be a cyber intrusion.
Threat Campaign Spreads Winos4.0 Through Game Application | FortiGuard Labs (Fortinet Blog) FortiGuard Labs reveals a threat actor spreads Winos4.0, infiltrating gaming apps and targeting the education sector. Learn more.…
Malwarebytes Acquires AzireVPN to Strengthen Security and Privacy Offerings (PR Newswire) /PRNewswire/ -- Malwarebytes, a global leader in real-time cyber protection, today announced the acquisition of AzireVPN, a renowned privacy-focused VPN...
Skyhigh Security Expands Executive Team to Accelerate Growth and Innovation (Skyhigh Security) New President and CFO join to drive transformation and propel success SAN JOSE, Calif.–(BUSINESS WIRE)–Skyhigh Security, a worldwide leader in...
CrowdStrike Launches AI Red Team Services to Secure AI Innovation (CrowdStrike) Read this blog and learn how to fortify your genAI rollout through proactive assessments and attack emulations from CrowdStrike.
ConnectWise Empowers MSPs to Strengthen Cybersecurity and Data Protection with Groundbreaking Innovations (GlobeNewswire News Room) Company unveils major product advancements during IT Nation Connect 2024 ...
SonicWall Unveils TZ80: Empowering Service Providers to Deliver Comprehensive Security, Remote Access and Networking Solutions for Branch Offices and SOHO (SonicWall) More Than a Firewall: SonicWall Introduces Integrated Cybersecurity Platform with the TZ80 at the Core of the Market’s Next-Gen SOHO Solution, Featuring: Industry-First Warranties, Cloud Native VPN, Firewall Management and Flexible Pricing
Illumio Expands Partner Program in Response to Rising Demand for Zero Trust Segmentation - Illumio News | Illumio (Illumio) Enables Partners to Contain Ransomware and Breaches More Effectively
Entro Enhances its Industry Leading Non-Human Identity Security Platform (GlobeNewswire News Room) New Capabilities Lower Exposure of Sensitive Secrets by 90%, Reduce Remediation Times by 80% BOSTON, Nov. 07, 2024 (GLOBE NEWSWIRE) -- Entro...
For a complete running list of events, please visit the Event Tracker.
SANS Holiday Hack Cybersecurity Challenge 2024: Snow-maggedon (Vienna, Nov 7 - Dec 2, 2024) Whether you're a first-time player or a seasoned participant, this year’s Holiday Hack brings exciting new features you won’t want to miss! We’ve introduced a new dynamic for this year: challenges will be gradually released in sync with the story, keeping the experience fresh and immersive. See challenges release dates and new features included.
SecureWorld Seattle (Bellevue, Washington, USA, Nov 6 - 7, 2024) Join your regional cybersecurity community for high-quality, affordable training and collaboration. Earn 12-18 CPE credits through 30+ educational sessions learning from local and nationally recognized industry leaders. Attend featured keynotes, panel discussions, breakout sessions, and solution vendor displays—all while networking with peers in InfoSec.
SANS Holiday Hack Cybersecurity Challenge 2024: Snow-maggedon (Vienna, Nov 7 - Dec 2, 2024) Whether you're a first-time player or a seasoned participant, this year’s Holiday Hack brings exciting new features you won’t want to miss! We’ve introduced a new dynamic for this year: challenges will be gradually released in sync with the story, keeping the experience fresh and immersive. See challenges release dates and new features included.
The Cyber Guild Virtual Employer Roundtable (Virtual, Nov 12, 2024) The Cyber Guild Employer Roundtable is an innovative sequence of virtual events for business, technical and people leaders across all sectors and industries building a sustainable cyber ecosystem, and who are invested in driving inclusive workforce practices. A peer discussion on how an intentional approach to deploying innovative tools ensures the desired outcome of increased innovation, inclusion and alignment with NIST AI standards.
Beyond Earth Symposium (Washington, DC, USA, Nov 12 - 13, 2024) The acceleration of space innovations that will enable space migration is outpacing public policy and international law regimes. Beyond Earth Institute’s mission is to create a policy and legal framework to support the robust development of an in-space economy and the expansion of human civilization beyond Earth. At the Beyond Earth Symposium 2024, we will wrestle with the critical current issues of the day and delve into the bleeding edge issues that must be moved to the center of international debate. What we do in a post-ISS era is an urgent, immediate concern. Policies that can foster the creation of a lunar-based economy are equally important. Let’s be bold together! Join stakeholders from across the industry, government, and international sector for this third annual Beyond Earth Symposium. Momentum is building to transform policy and legal landscape to enable a space migration future. Dare to be part of this work.
SecureWorld Midwest Virtual Conference (Virtual, Nov 13, 2024) Join with cybersecurity professionals for training and information sharing through an interactive online experience. Earn 6 CPE credits learning from nationally recognized industry leaders. The agenda offers 12+ educational presentations, including panel discussions, breakout sessions, and keynotes. Connect with your peers in the Networking Lounge, enter to win prizes, and see demos and resources from top solution vendors in the Exhibitor Hall.
