IT pros, are you ready to fortify your defenses? Discover ThreatLocker® Network Control, a powerful Zero Trust host-based firewall with dynamic ACLs. Gain full visibility, granular control, and advanced filtering to secure your network like never before. Learn how to stop breaches, implement microsegmentation, and integrate seamlessly with the ThreatLocker Platform. Download the whitepaper now and get the insights you need to enhance your organization’s defenses!
Don’t miss Rick Howard’s final time in the host seat for CSO Perspectives Live! Join Rick, along with Hash Table members Kim Jones and Steve Winterfeld, for a live discussion on the most impactful stories, threats, and events of the past 90 days. Be part of this special moment — register now!
The US Commerce Department last week issued a notice to the US subsidiary of China Telecom outlining a preliminary finding that the company’s presence in American networks poses a national security risk to the United States, the New York Times reports. The move is viewed as the Biden Administration's response to China's alleged hacking of multiple US telecommunications networks. The US government has already reduced China Telecom's presence in American networks over the past few years, but the company still maintains nodes that would be stripped under the Commerce Department's order. The final decision on whether to ban China Telecom Americas will likely fall to the incoming Trump Administration.
Outdated SOAR platforms can slow your response times and leave your team struggling to keep up with emerging threats.
Today’s biggest security challenges demand evolved solutions:
This SOAR Buyer’s Guide helps you pinpoint where next-gen orchestration and automation can deliver the greatest impact for your team - and choose the right tools to support these priorities.
The US Cybersecurity and Infrastructure Security Agency (CISA) has published a new draft of its National Cyber Incident Response Plan (NCIRP), which "addresses significant changes in policy and cyber operations since NCIRP was released in 2016." The agency says the updates to the draft include:
The update is open for public comment on the Federal Register.
Dropzone AI has been recognized as a Gartner Cool Vendor, validating its role in transforming SOCs. With an AI SOC Analyst that autonomously investigates alerts 24/7, Dropzone AI helps security teams stay ahead by reducing alert fatigue and providing decision-ready insights. Discover how we're leading SOC innovation.
Namibia's national telecommunications operator Telecom Namibia has disclosed a data breach affecting customer information, the Record reports. Telecom Namibia says the information was leaked by the Hunters International cybercrime group after the company refused to pay a ransom. The company's CEO Stanley Shanapinda said in an interview with the Namibian, "We don’t negotiate with cyber terrorists. We know the sums they’re asking for are exorbitant and unaffordable, so there’s no reason to even consider discussing it. And even if you do pay a ransom, there’s no guarantee the information won’t still be leaked
Are you exposed? Download the Q3 2024 Vulnerability Watch report to find out. The usual vulns from Microsoft and VMware make the list, but there are some surprises too. Chances are at least one of these vulnerabilities is lurking in your environment. The Watch isn't just a sh*t list, but details exposure risk specifications and provides practical mitigating actions for each included CVE to minimize your cyber risk. Download the report and stay one step ahead of the most-critical exposure risk.
A New York City resident has been sentenced to 69 months in prison for "conspiracies to engage in computer hacking, trafficking in stolen payment card numbers and money laundering." The defendant, 32-year-old Vitalii Antonenko, was arrested at JFK Airport in 2019 after arriving from Ukraine with laptops holding hundreds of thousands of stolen payment card numbers. The Justice Department says Antonenko and co-conspirators scanned the Internet for vulnerable websites and used SQL injection attacks to payment card data. Antonenko will also need to pay approximately $1.8 million in restitution to a victim.
Identity architects and engineers, securely integrate non-standard apps with any IDP using Strata. Apply modern MFA and ensure seamless failover during outages. Avoid app refactoring and reduce legacy tech debt. Share your identity challenge and get a free set of AirPods Pro.
Today's issue includes events affecting China, Namibia, Ukraine, and the United States.
RATs can sniff out your Chinese-made web cameras: here’s how to defend yourself (Cybernews) The FBI has issued a notification about a Remote Access Trojans (RATs) attack that targets Chinese-branded web cameras and DVRs, such as Hikvision and Xiongmai devices with telnet access.
Over 25,000 SonicWall VPN Firewalls exposed to critical flaws (BleepingComputer) Over 25,000 publicly accessible SonicWall SSLVPN devices are vulnerable to critical severity flaws, with 20,000 using a SonicOS/OSX firmware version that the vendor no longer supports.
2024 Year in Review | CISA (Cybersecurity and Infrastructure Security Agency CISA) 2024: A Year of Growth and Transition
Onapsis Appoints Paul Kleinschnitz as Chief Revenue Officer (BusinessWire) Former Coalfire, Corelight and BlueVoyant executive to help scale company growth
Fenix24 Launches Argos99, the Newest Battalion in its Suite of Cybersecurity Services, to Enhance Cyber Resilience and Accelerate Recovery (PR Newswire) /PRNewswire/ -- Fenix24™, the market-leading incident response recovery firm, is launching a new battalion, Argos99™. In conjunction with Fenix24™, Conversant...
Wallarm Releases World's First API Honeypot Report Highlighting API Attack Trends (BusinessWire) Wallarm, the leader in real-time blocking of API attacks, today unveiled a comprehensive security research report based on data collected from the world's first globally distributed API honeypot network.
Protect AI Joins Prestigious Microsoft Pegasus Program to Accelerate the Adoption of AI Security Solutions (BusinessWire) Protect AI’s comprehensive platform for AI Security will be available to Microsoft customers to address the critical need for AI Security across the enterprise
RunSafe Security Launches Supply Chain Security Platform (RunSafe Security) RunSafe Security introduces a new platform to automate risk identification, exploit prevention, and SBOM generation for embedded systems
Playbook for Strengthening Cybersecurity in Federal Grant Programs for Critical Infrastructure (Cybersecurity and Infrastructure Security Agency CISA) This Playbook assists grant-making agencies to incorporate cybersecurity into their grant programs, and to enable grant-recipients to build cyber resilience into their grant-funded infrastructure
Ireland fines Meta $264 million over 2018 Facebook data breach (BleepingComputer) The Irish Data Protection Commission (DPC) fined Meta €251 million ($263.6M) over General Data Protection Regulation (GDPR) violations arising from a 2018 personal data breach impacting 29 million Facebook accounts.
For a complete running list of events, please visit the Event Tracker.
GSA Spaceport Summit 2025 (Orlando, Florida, USA, Jan 27, 2025) Commercial Space Week begins with annual GSA Spaceport Summit on January 27, 2025.
Space Mobility Conference and Expo (Orlando, Florida, USA, Jan 28, 2025) Space Mobility mobilizes commercial industry executives and high-ranking officials from defense and government agencies to assure access and superiority in the highly contested space domain.
SpaceCom/Space Congress (Orlando, Florida, USA, Jan 28 - 30, 2025) SpaceCom | Space Congress exclusively draws participation from the industry leaders and organizations with the power to drive new space strategies, fuel forward progress, signal demand for continued innovation, inform policy, and institute a sustainable future for commercial space. As host of Commercial Space Week, SpaceCom integrates the people, institutions, and solutions that ignite innovation– facilitating progress for every space mission.
40th Space Symposium (Denver and Virtual, Colorado, USA, Apr 7 - 10, 2025) Bringing together leaders from commercial, government and military space from around the world, the Space Symposium provides a forum to discuss, address and plan for future achievements in space. The Space Symposium program delivers exclusive networking and engagement opportunities with influential participants in one convenient and extraordinary venue. Space Symposium luncheons and dinners provide additional contact with influential participants.
RSA Innovation Sandbox 2025 (San Francisco, California, USA, Apr 28, 2025) RSA Conference 2025 marks 20 years for cybersecurity’s top innovation startup competition: RSAC Innovation Sandbox contest. The contest puts the spotlight on cybersecurity’s boldest new innovators while highlighting their potentially game-changing ideas. Hundreds of submissions are reviewed and narrowed down to only 10 finalists. The Top 10 Finalists will take the stage during RSA Conference 2025 and will have three minutes to make their award-winning pitch to a panel of leading industry experts. Since the start of the contest, the Top 10 Finalists have collectively seen over 90 acquisitions and over $16.4 billion in investments.*
RSA Conference 2025 (San Francisco, California, USA, Apr 28 - May 1, 2025) At RSAC 2025, you're not just attending a conference—you're stepping into a vibrant, thriving community of thinkers, innovators, and achievers. Though we come from different corners of the cybersecurity world, we are united by a common mission: to foresee risks, counter threats, and embrace the challenges ahead. Together, we shape the future of security. Together, we shine as one.
CYSAT (Paris, France, May 14 - 15, 2025) In today’s society, we heavily rely on space-based assets, and considering the continuously evolving cyber threats in the current geopolitical environment, securing space data is a major challenge. Since 2021, CYSEC has been organizing CYSAT to bring together all the players in the space cybersecurity domain.
NICE Conference (Denver, Colorado, USA, Jun 1 - 4, 2025) The NICE Conference is the annual convening of community members and thought leaders from education, government, industry, and non-profits to explore ways of developing a skilled cybersecurity workforce ready to meet the challenges of the future. This event provides an opportunity to share best practices from around the world and across sectors in order to build the workforce we need to confront cybersecurity risks today and in years to come.
AWS re:Inforce 2025 (Philadelphia, Pennsylvania, USA, Jun 16 - 18, 2025) AWS re:Inforce is our annual, immersive, cloud-security learning event delivering hands-on training and collaboration with AWS experts. It’s your opportunity to learn about the latest AWS security innovations, get direct access to the AWS teams and partners who build the security tools you rely on, and connect with cloud security peers from around the world. You’ll leave with actionable next steps to raise your security posture.
DEF CON 33 (Las Vegas, Nevada, USA, Aug 7 - 10, 2025) DEF CON is one of the oldest continuously running hacker conventions around, and also one of the largest.
AWS re:Invent 2025 (Las Vegas, Nevada, USA, Dec 1 - 5, 2025) AWS re:Invent is a learning conference hosted by AWS for the global cloud computing community. The in-person event features keynote announcements, training and certification opportunities, access to more than 2,000 technical sessions, the Expo, after-hours events, and so much more.
Hacking 4 Humanity 2025 (Virtual, Jan 24 - Feb 7, 2025) Online hate is on the rise, leading to real-world devastating effects on individuals and communities around the world. Join Carnegie Mellon, Duquesne, Pitt, and other undergrad and grad students from Pittsburgh at a multidisciplinary hackathon to develop new tech and policy solutions that mitigate online hate and create safer communities. Hacking4Humanity is a tech and policy hackathon for undergraduate and graduate students, which offers students a new way to engage with real-world social problems that can be improved with novel technical and policy solutions.
GSA Spaceport Summit 2025 (Orlando, Florida, USA, Jan 27, 2025) Commercial Space Week begins with annual GSA Spaceport Summit on January 27, 2025.
Space Mobility Conference and Expo (Orlando, Florida, USA, Jan 28, 2025) Space Mobility mobilizes commercial industry executives and high-ranking officials from defense and government agencies to assure access and superiority in the highly contested space domain.
SpaceCom/Space Congress (Orlando, Florida, USA, Jan 28 - 30, 2025) SpaceCom | Space Congress exclusively draws participation from the industry leaders and organizations with the power to drive new space strategies, fuel forward progress, signal demand for continued innovation, inform policy, and institute a sustainable future for commercial space. As host of Commercial Space Week, SpaceCom integrates the people, institutions, and solutions that ignite innovation– facilitating progress for every space mission.
