A remote or hybrid workforce expands your company's surface area of attack beyond corporate firewall boundaries. Employees’ personal computers introduce shadow IT, and home networks with default settings are easy targets, compounded by public Wi-Fi vulnerabilities. You need to develop a strategy to stay secure while remote employees work across untrusted networks. To learn how you can secure your company's workforce, get a free copy of the latest ThreatLocker® whitepaper on how to secure remote workforces.
Is your 2025 marketing strategy already outdated? Find out by joining leading voices in cybersecurity marketing as they unpack what 2025 holds for our industry. We'll discuss the trends shaping the marketing landscape, which channels are in and which are out, and where they find the most significant opportunities for success. Register now for our webinar on November 19th, 2024 at 12:00 PM.
The US Cybersecurity and Infrastructure Security Agency (CISA) warns that a critical vulnerability (CVE-2024-5910) affecting Palo Alto Networks’ Expedition tool is being exploited in attacks. Palo Alto issued a patch for the flaw in July. CISA hasn't shared details on the exploitation, but BleepingComputer notes that a Horizon3.ai researcher released a proof-of-concept exploit for the vulnerability last month.
CVE-2024-5910 is a missing authentication vulnerability that can allow "an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data." The flaw was assigned a CVSS score of 9.3.
Join Kieran Walsh (Senior SOC Engineer, Samsara) and Hela Lucas (Security Operations Engineer, Samsara) for a behind-the-scenes look at how they optimize security operations with AI.
They'll share how AI helped them:
The US Transportation Security Administration (TSA) is seeking public feedback on a proposed cybersecurity rule that would require certain pipeline, freight railroad, passenger railroad, and rail transit operators to establish comprehensive cyber risk management programs, Industrial Cyber reports.
TSA Administrator David Pekoske said in a statement, "TSA has collaborated closely with its industry partners to increase the cybersecurity resilience of the nation’s critical transportation infrastructure. The requirements in the proposed rule seek to build on this collaborative effort and further strengthen the cybersecurity posture of surface transportation stakeholders. We look forward to industry and public input on this proposed regulation."
In our free eBook, Attack Vectors Decoded: Securing Organizations Against Identity-Based Threats, we delve into the attacker’s playbook and arm you with the knowledge and tools to bolster your secure access. Learn how to build powerful, secure identity access that protects your business, your data, and your workers—no matter where they are. Download the eBook now and take the first step in modernizing and galvanizing your secure access against identity-based threats.
Texas-based oilfield supplier Newpark Resources has disclosed an October 29th ransomware attack that disrupted its IT services, the Record reports. The company said its "manufacturing and field operations have continued in all material respects utilizing established downtime procedures."
Newpark stated in an SEC filing that the incident "has caused disruptions and limitation of access to certain of the Company’s information systems and business applications supporting aspects of the Company’s operations and corporate functions, including financial and operating reporting systems." The company added that it believes "this incident is not reasonably likely to materially impact the Company's financial conditions or results of operations."
Today's issue includes events affecting Germany, the Democratic People's Republic of Korea, and the United States.
The CyberWire will be taking a break on Monday for the US Federal holiday of Veterans Day. We'll be back as usual on Tuesday.
North Korean hackers use new macOS malware against crypto firms (BleepingComputer) North Korean threat actor BlueNoroff has been targeting crypto-related businesses with a new multi-stage malware for macOS systems.
Host of House panels getting briefed on major Chinese hacker telecom breaches (CyberScoop) The reported scope of the Salt Typhoon hacks has expanded in recent days and weeks, from the incoming president to top U.S. officials.
Hacker-Powered Security Report: Firms Turn to Human Intelligence Amid Rising AI Threats (HackerOne) 67% of respondents believe an external, unbiased review of GenAI is the most effective way to uncover AI safety and security issues as AI red teaming gathers momentum
AppOmni and Cisco Partner to Extend SaaS Security with End-to-End Zero Trust From Endpoint to the Application (BusinessWire) Cisco selects AppOmni to join its Global Price List as part of its SolutionsPlus Program for easy procurement by global customers and resellers
Permiso Releases Suite of Open-Source Tools to Bolster Detection Capabilities for Past,Present and Future Attacks (Permiso) Permiso, the leader in real-time identity security, has released a suite of three open-source tools that help security teams bolster their detection capabilities for a variety of different attacks. The P0 Labs team -- the threat research arm of Permiso -- has launched a total of ten open-source tools to date, developed from their ongoing threat research and observations from real-world attacks.
Germany drafts law to protect researchers who find security flaws (BleepingComputer) The Federal Ministry of Justice in Germany has drafted a law to provide legal protection to security researchers who discover and responsibly report security vulnerabilities to vendors.
For a complete running list of events, please visit the Event Tracker.
SANS Holiday Hack Cybersecurity Challenge 2024: Snow-maggedon (Vienna, Nov 7 - Dec 2, 2024) Whether you're a first-time player or a seasoned participant, this year’s Holiday Hack brings exciting new features you won’t want to miss! We’ve introduced a new dynamic for this year: challenges will be gradually released in sync with the story, keeping the experience fresh and immersive. See challenges release dates and new features included.
SANS Holiday Hack Cybersecurity Challenge 2024: Snow-maggedon (Vienna, Nov 7 - Dec 2, 2024) Whether you're a first-time player or a seasoned participant, this year’s Holiday Hack brings exciting new features you won’t want to miss! We’ve introduced a new dynamic for this year: challenges will be gradually released in sync with the story, keeping the experience fresh and immersive. See challenges release dates and new features included.
The Cyber Guild Virtual Employer Roundtable (Virtual, Nov 12, 2024) The Cyber Guild Employer Roundtable is an innovative sequence of virtual events for business, technical and people leaders across all sectors and industries building a sustainable cyber ecosystem, and who are invested in driving inclusive workforce practices. A peer discussion on how an intentional approach to deploying innovative tools ensures the desired outcome of increased innovation, inclusion and alignment with NIST AI standards.
Beyond Earth Symposium (Washington, DC, USA, Nov 12 - 13, 2024) The acceleration of space innovations that will enable space migration is outpacing public policy and international law regimes. Beyond Earth Institute’s mission is to create a policy and legal framework to support the robust development of an in-space economy and the expansion of human civilization beyond Earth. At the Beyond Earth Symposium 2024, we will wrestle with the critical current issues of the day and delve into the bleeding edge issues that must be moved to the center of international debate. What we do in a post-ISS era is an urgent, immediate concern. Policies that can foster the creation of a lunar-based economy are equally important. Let’s be bold together! Join stakeholders from across the industry, government, and international sector for this third annual Beyond Earth Symposium. Momentum is building to transform policy and legal landscape to enable a space migration future. Dare to be part of this work.
SecureWorld Midwest Virtual Conference (Virtual, Nov 13, 2024) Join with cybersecurity professionals for training and information sharing through an interactive online experience. Earn 6 CPE credits learning from nationally recognized industry leaders. The agenda offers 12+ educational presentations, including panel discussions, breakout sessions, and keynotes. Connect with your peers in the Networking Lounge, enter to win prizes, and see demos and resources from top solution vendors in the Exhibitor Hall.
CYBERSAT24 (Reston, Virginia, USA, Nov 18 - 20, 2024) CyberSat Summit has been at the forefront of the satellite industry’s burgeoning cybersecurity landscape since the event’s launch in 2017. Initially run as a single annual event, it morphed into two separate events in recent years – CyberLEO and CyberSatGov. This was done in response to changing market conditions, most notably the huge growth of LEO satellites and the corresponding rise of commercial interest in space. While CyberSatGov and CyberLEO were successful independently, the continued demand for LEO architectures and the ever-increasing collaboration between government and industry meant that these conversations needed to happen under one roof. As a result, 2024 will feature a single CyberSat event in November, where for the first time in its 7-year history, we will nearly double the event’s content offerings to include two concurrent tracks – one track titled “Space Infrastructure” and the second track titled “Space Data & Technology.” The “Space Infrastructure” track will continue CyberSat’s legacy focus on the overall satellite cybersecurity ecosystem and the protection of tangible assets like ground systems and satellite components, while the new “Space Data & Technology” track will focus on emerging technologies and the protection of space’s intangible assets like data. Keynotes, and a handful of general sessions, will contain talks that apply to all attendees.
