IT pros, are you ready to fortify your defenses? Discover ThreatLocker® Network Control, a powerful Zero Trust host-based firewall with dynamic ACLs. Gain full visibility, granular control, and advanced filtering to secure your network like never before. Learn how to stop breaches, implement microsegmentation, and integrate seamlessly with the ThreatLocker Platform. Download the whitepaper now and get the insights you need to enhance your organization’s defenses!
Don’t miss Rick Howard’s final time in the host seat for CSO Perspectives Live! Join Rick, along with Hash Table members Kim Jones and Steve Winterfeld, for a live discussion on the most impactful stories, threats, and events of the past 90 days. Be part of this special moment — register now!
The Wall Street Journal reports that authorities from the US Commerce, Defense, and Justice departments have each opened investigations into whether Chinese-manufactured TP-Link home routers pose a national security risk, and are considering banning the devices in the US. The Journal notes that TP-Link holds around 65% of the US market for routers for homes and small businesses, and the routers are used by the Defense Department and other Federal agencies.
A TP-Link spokesperson stated, "We welcome any opportunities to engage with the U.S. government to demonstrate that our security practices are fully in line with industry security standards, and to demonstrate our ongoing commitment to the U.S. market, U.S. consumers, and addressing U.S. national security risks."
Outdated SOAR platforms can slow your response times and leave your team struggling to keep up with emerging threats.
Today’s biggest security challenges demand evolved solutions:
This SOAR Buyer’s Guide helps you pinpoint where next-gen orchestration and automation can deliver the greatest impact for your team - and choose the right tools to support these priorities.
Ireland's Data Protection Commission (DPC) has fined Meta €251 million ($263 million) over a 2018 data breach that affected approximately 29 million Facebook accounts, the Record reports. The majority of the fines related to the company's alleged failure "to ensure that data protection principles were protected in the design of processing systems" and failure to ensure that "only personal data that are necessary for specific purposes are processed."
A Meta spokesperson said in a statement, "We took immediate action to fix the problem as soon as it was identified, and we proactively informed people impacted as well as the Irish Data Protection Commission. We have a wide range of industry-leading measures in place to protect people across our platforms."
Dropzone AI has been recognized as a Gartner Cool Vendor, validating its role in transforming SOCs. With an AI SOC Analyst that autonomously investigates alerts 24/7, Dropzone AI helps security teams stay ahead by reducing alert fatigue and providing decision-ready insights. Discover how we're leading SOC innovation.
The US FBI has issued an alert warning that HiatusRAT malware operators are conducting scanning campaigns against Chinese-branded web cameras and DVRs across the US, Australia, Canada, New Zealand, and the United Kingdom. The Bureau states, "The actors scanned web cameras and DVRs for vulnerabilities including CVE-2017-7921, CVE-2018-9995, CVE-2020-25078, CVE-2021-33044, CVE-2021-36260, and weak vendor-supplied passwords. Many of these vulnerabilities have not yet been mitigated by the vendors. In particular, the actors targeted Xiongmai and Hikvision devices with telnet access."
The FBI recommends limiting the use of these devices or isolating them from the rest of the network.
Are you exposed? Download the Q3 2024 Vulnerability Watch report to find out. The usual vulns from Microsoft and VMware make the list, but there are some surprises too. Chances are at least one of these vulnerabilities is lurking in your environment. The Watch isn't just a sh*t list, but details exposure risk specifications and provides practical mitigating actions for each included CVE to minimize your cyber risk. Download the report and stay one step ahead of the most-critical exposure risk.
Proofpoint says the South Asia-based cyberespionage actor TA397 (also known as "Bitter") is targeting defense organizations in Turkey with a new malware family dubbed "MiyaRAT." Proofpoint belives MiyaRAT "may be reserved for targets TA397 deems high value due to the observed sporadic deployment of the malware in only a certain number of campaigns."
The malware was delivered via a spearphishing lure related to infrastructure development in Madagascar. Proofpoint notes that this "theme is very common for TA397, as the majority of the organizations they target are either in the public sector or receive public investments and is indicative of the targeted nature of their campaigns."
Identity architects and engineers, securely integrate non-standard apps with any IDP using Strata. Apply modern MFA and ensure seamless failover during outages. Avoid app refactoring and reduce legacy tech debt. Share your identity challenge and get a free set of AirPods Pro.
Today's issue includes events affecting Australia, Canada, China, Ireland, New Zealand, the United Kingdom, and the United States.
Hidden in Plain Sight: TA397’s New Attack Chain Delivers Espionage RATs | Proofpoint US (Proofpoint) Key findings Proofpoint observed advanced persistent threat (APT) TA397 targeting a Turkish defense sector organization with a lure about public infrastructure projects in Madagascar. The attack...
A new playground: Malicious campaigns proliferate from VSCode to npm (ReversingLabs) When using public repos, keep an eye open for malicious code. Also scrutinize features and behaviors of open source, third-party and commercial code.
Domo Releases 12th Annual “Data Never Sleeps” Report (BusinessWire) AI and Collaboration Take Center Stage as Digital Activity Reaches Record Highs
OPSWAT Acquires Leader in Advanced Data Diode Technology to Strengthen Cyber Defenses for Critical Infrastructure - OPSWAT (OPSWAT) Acquisition of Fend Incorporated broadens OPSWAT’s end-to-end cybersecurity product offerings in the field of Data Diodes and Unidirectional Gateway Solutions, establishing company as one of the most comprehensive providers in the industry
Sonar to Acquire Tidelift to Reduce Risk From Open Source Software (Sonar) Code quality and security leader to address code-level issues in software supply chain in addition to first-party and AI-generated code
Stellar Cyber and ESET expand strategic partnership to deliver AI-driven XDR solutions (ESET) ESET, a global leader in cybersecurity solutions and Stellar Cyber, the innovator of Open XDR technology, today announced an expanded strategic partnership aimed at delivering unparalleled threat detection and response capabilities.
Cymulate Recognized as Leader for Security and Exposure Validation in G2’s Winter 2024 Report (BusinessWire) Cymulate earns 20 badges across BAS, ASM and System Security
Abstract Security Joins Forces with Analytica42 to Supercharge Integration Delivery including integration to Google SecOps Platform (PR Newswire) /PRNewswire/ -- Abstract Security announced today that it has partnered with Analytica42 to help organizations easily integrate their data sources with Google...
Forward Networks named Outperformer in 2024 GigaOm Radar for Network Validation for Third Consecutive Year (PR Newswire) /PRNewswire/ -- Forward Networks' digital twin technology is again recognized for delivering multi-layered benefits and substantial return on investment (ROI)...
Red Teaming in 2025 & Why You Need One More Than Ever (IOActive) Find out why you need a Red Team Service in 2025 and what to watch out for. New threat actors, AI attacks, and more. What’s on the horizon for 2025?
Banco Sabadell Collaborates with Accenture and QuSecure to Advance Quantum Safe Infrastructure (Accenture) Banco Sabadell has successfully completed a joint project with Accenture (NYSE: ACN) and QuSecure to explore the adoption of Post-Quantum Cryptography (PQC) technologies in the bank’s infrastructure.
INTERPOL urges end to 'Pig Butchering' term, cites harm to online victims (INTERPOL) Think Twice: words matter to the victims of fraud
For a complete running list of events, please visit the Event Tracker.
CYSAT (Paris, France, May 14 - 15, 2025) In today’s society, we heavily rely on space-based assets, and considering the continuously evolving cyber threats in the current geopolitical environment, securing space data is a major challenge. Since 2021, CYSEC has been organizing CYSAT to bring together all the players in the space cybersecurity domain.
Hacking 4 Humanity 2025 (Virtual, Jan 24 - Feb 7, 2025) Online hate is on the rise, leading to real-world devastating effects on individuals and communities around the world. Join Carnegie Mellon, Duquesne, Pitt, and other undergrad and grad students from Pittsburgh at a multidisciplinary hackathon to develop new tech and policy solutions that mitigate online hate and create safer communities. Hacking4Humanity is a tech and policy hackathon for undergraduate and graduate students, which offers students a new way to engage with real-world social problems that can be improved with novel technical and policy solutions.
GSA Spaceport Summit 2025 (Orlando, Florida, USA, Jan 27, 2025) Commercial Space Week begins with annual GSA Spaceport Summit on January 27, 2025.
Space Mobility Conference and Expo (Orlando, Florida, USA, Jan 28, 2025) Space Mobility mobilizes commercial industry executives and high-ranking officials from defense and government agencies to assure access and superiority in the highly contested space domain.
SpaceCom/Space Congress (Orlando, Florida, USA, Jan 28 - 30, 2025) SpaceCom | Space Congress exclusively draws participation from the industry leaders and organizations with the power to drive new space strategies, fuel forward progress, signal demand for continued innovation, inform policy, and institute a sustainable future for commercial space. As host of Commercial Space Week, SpaceCom integrates the people, institutions, and solutions that ignite innovation– facilitating progress for every space mission.
