IT & Security Ops Teams, find out how to supercharge management and risk reduction skills. The 2024 GigaOm Radar Report for Unified Endpoint Management (UEM) reviews and evaluates solutions on the market today to help you better tame device sprawl, prioritize vulnerabilities, and streamline your operations. Download your free copy today, courtesy of Syxsense.
Join the hundreds of thousands of IT and cybersecurity professionals who’ve relied on N2K (formerly CyberVista) training to prepare them for their certification exam. And now for a short time, all N2K practice tests are 40% off with code N2KVDAY. Hurry, offer ends Monday, February 19. Find your cert.
Proofpoint is tracking an "ongoing cloud account takeover campaign impacting dozens of Microsoft Azure environments and compromising hundreds of user accounts, including senior executives." The campaign has been running since at least November 2023, and involves tailored phishing lures within shared documents.
Proofpoint notes, "The affected user base encompasses a wide spectrum of positions, with frequent targets including Sales Directors, Account Managers, and Finance Managers. Individuals holding executive positions such as 'Vice President, Operations,' 'Chief Financial Officer & Treasurer' and 'President & CEO' were also among those targeted. The varied selection of targeted roles indicates a practical strategy by threat actors, aiming to compromise accounts with various levels of access to valuable resources and responsibilities across organizational functions."
The researchers add, "While Proofpoint has not currently attributed this campaign to any known threat actor, there is a possibility that Russian and Nigerian attackers may be involved, drawing parallels to previous cloud attacks."
Boost your cybersecurity career with Penn State World Campus! Our online master's program delivers cutting-edge knowledge, hands-on skills, and expert insights. Benefit from flexible learning that fits your schedule, while gaining industry-relevant expertise in areas like threat detection, risk management, and ethical hacking. Join a renowned institution, be guided by industry leaders, and advance your career in the dynamic field of cybersecurity. Elevate your skills, secure your future — apply today!
Bank of America has disclosed a third-party data breach affecting more than 50,000 customers, BleepingComputer reports. The incident involved customers' "names, addresses, social security numbers, dates of birth, and financial information, including account and credit card numbers." The breach occurred after one of its service providers, Infosys McCamish Systems (IMS), was hacked in October 2023. IMS disclosed in a breach notification letter to the Attorney General of Maine that 57,028 individuals were affected.
Imagine a world where you're always one step ahead of cyber threats, where your defenses are impenetrable because you see what others don't. With real-time access to the worlds largest threat intelligence data ocean, we enable you to turn the tables on attackers. Transform your security from reactive to proactive through accelerated threat hunting and incident response, made possible through automation. Team Cymru: be the hunter, not the hunted.
Threat actors are exploiting a recently disclosed server-side request forgery (SSRF) vulnerability (CVE-2024-21893) affecting Ivanti Connect Secure, Policy Secure, and Neurons for ZTA, Help Net Security reports. Researchers at the Orange Cyberdefense CERT observed the flaw being used to deploy a newly observed backdoor dubbed "DSLog." The researchers say 670 Ivanti servers were compromised by the backdoor earlier this month: "On the first hour of February 3rd, Orange Cyberdefense analyzed a snapshot and logs of a compromised appliance. This appliance had the initial XML mitigation (API endpoints blocked) in place but not yet the second mitigation (or patch). After decrypting the snapshot, analysis started seeking to identify any recent pattern that might explain how the appliance has been compromised. Subsequently Orange Cyberdefense discovered a backdoor that was injected into the appliance’s code base."
Cybercrime knows no bounds, and a united front is our strongest defense. At RSA Conference™ 2024, May 6 – 9, we unite in San Francisco as a cybersecurity community, fostering learning, networking, idea exchange, and exploration of cutting-edge innovations. Join us as we face the future of cybersecurity head on. Learn more and register.
Today's issue includes events affecting France, Israel, and the United States.
For more information on these and other developing stories, listen to the CyberWire Daily podcast each day. You can find it here or on your favorite podcast app. Guests Andrew Scott, Associate Director of China Operations at CISA, and Brett Leatherman, Section Chief at FBI, discuss PRC/Volt Typhoon advisory and living off the land guidance.
Planet Home Lending notifies customers of LockBit ransomware incident (SC Media) In letter to customers, firm said it has no intention of paying a ransom.
Stalkerware App "TheTruthSpy" Hacked Again, 50,000 Device Data Stolen (Hackread) Follow us on Twitter (X) @Hackread - Facebook @ /Hackread
Notorious Bumblebee Malware Re-emerges with New Attack Methods (Infosecurity Magazine) Proofpoint researchers observed a new Bumblebee social engineering campaign in February following a four-month absence
Community Alert: Ongoing Malicious Campaign Impacting Azure Cloud Environments | Proofpoint US (Proofpoint) Over the past weeks, Proofpoint researchers have been monitoring an ongoing cloud account takeover campaign impacting dozens of Microsoft Azure environments and compromising hundreds of user accoun...
CISA: Roundcube email server bug now exploited in attacks (BleepingComputer) CISA warns that a Roundcube email server vulnerability patched in September is now actively exploited in cross-site scripting (XSS) attacks.
CISA warns of Fortinet bug likely being exploited in the wild (The Record) The top cybersecurity agency in the U.S. released two advisories on Friday about Fortinet vulnerabilities causing alarm among cybersecurity defenders.
Bank of America warns customers of data breach after vendor hack (BleepingComputer) Bank of America is warning customers of a data breach exposing their personal information after one of its service providers was hacked last year.
ICS Patch Tuesday: Siemens Addresses 270 Vulnerabilities (SecurityWeek) February 2024 ICS Patch Tuesday: Siemens and Schneider Electric release a total of 18 new security advisories.
Cohesity plans $7B purchase of Veritas' unit (SC Media) California-based data security technology provider Cohesity has revealed plans to purchase Veritas Software's data protection unit for $7 billion, in a deal that is poised to be finalized by the latter part of this year, reports CRN.
Bugcrowd secures $102m in Series E to bolster crowdsourced security services (FinTech Global) Bugcrowd, a leader in AI-powered crowdsourced security solutions, has recently announced a significant boost to its operations with a $102m strategic growth funding round.
Seal Security wants to make open-source vulnerability remediation easy (TechCrunch) Seal Security, a Tel Aviv-based startup founded by a group of former members of Israel's Unit 8200 intelligence unit, is coming out of stealth today and
Kaspersky Appoints Toufic Derbass As MD For META (CIO Africa) Kaspersky has appointed seasoned IT leader, Toufic Derbass, as the new Managing Director for the Middle East, Türkiye and Africa (META) region.
ISC2 Collaborates with IBM to Launch Entry-Level Cybersecurity Certificate (PR Newswire) /PRNewswire/ -- ISC2 – the world's leading nonprofit member organization for cybersecurity professionals – announced a partnership with IBM (NYSE: IBM) to...
zeroRISC, Nuvoton and Winbond Join Forces to Deliver the First Commercial Product Based on the OpenTitan® Open-Source Secure Silicon Platform (zeroRISC) Building on the Historic Success of the OpenTitan Project, Nuvoton and zeroRISC Make First Commercial Chip Based on Open-Source Silicon RoT Available Through Early Access Program; Winbond and zeroR…
Checkmarx launches faster, more accurate app security solution (IT Brief Australia) Checkmarx unveils its next-generation SAST solution, touted to transform enterprise application security with 90% faster app scans and up to 80% reduction in false positives.
CISA releases 2024 priorities for the Joint Cyber Defense Collaborative (CyberScoop) The release comes amid reports that question the effectiveness of the JCDC.
Bipartisan Senate Bill Requires HHS to Bolster Cyber Efforts (GovInfoSecurity) A new bipartisan Senate bill would require the U.S. Department of Health and Human Services to biennially conduct cybersecurity reviews and tests on its IT systems
FCC orders telecom carriers to report PII data breaches within 30 days (BleepingComputer) Starting March 13th, telecommunications companies must report data breaches impacting customers' personally identifiable information within 30 days, as required by FCC's updated data breach reporting requirements.
For a complete running list of events, please visit the Event Tracker.
SANS San Diego 2024 (San Diego (and virtual), California, USA, Feb 12 - 17, 2024) At SANS San Diego 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
SANS Security East New Orleans 2024 (New Orleans, and virtual, Louisiana, USA, Feb 19 - 24, 2024) At SANS Security East New Orleans 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
Spring 2024 CISSP Study Group presented by ISSA Central MD (Columbia, or virtual, Maryland, USA, Feb 20 - May 1, 2024) Our Study Group fosters a learning environment to better absorb and understand the material. This is much better than the alternative of cram it in and regurgitate it on a test immediately following. Our approach simply makes the information more useful and easier to interpret! You can attend each session in-person in Columbia, MD, or attend virtually on line.
Trellix Public Sector Cybersecurity Summit (Washington, DC, USA, Feb 27, 2024) Public sector organizations continue to face a constant barrage of sophisticated cyber threats. And with new cybersecurity mandates and guidance — from recent executive orders to the release of the 2023 National Cyber Strategy — public sector leaders must make considerable decisions about their cyber enterprise that will have lasting impacts for years to come. On top of this, the emergence of novel security capabilities built on machine learning, AI, predictive analytics and extended detection and response has given security leaders a new arsenal of tools to defend against the next sophisticated attack. Join top technology leaders from across the public sector at the Trellix Public Sector Cybersecurity Summit as they discuss emerging topics in cybersecurity like ransomware, zero trust, global security and XDR. Throughout the summit, you’ll have the opportunity to engage in conversations about how the arrival of AI will intersect with public sector cybersecurity, evolving partnerships to strengthen threat intelligence, how to navigate, take action on and go beyond new cybersecurity policy directives, and much more.
SANS Las Vegas 2024 (Las Vegas (and virtual), Nevada, USA, Mar 4 - 9, 2024) At SANS Las Vegas 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
