IT Security News

Internal emails suggest that the company continued to provide gunshot data to police in cities where its contracts had been canceled. This article has been indexed from Security Latest Read the o...

https://www.itsecuritynews.info/shotspotter-keeps-listening-for-gunfire-after-contracts-expire/

The Treasury Department’s Office of Foreign Assets Control (OFAC) has sanctioned four Iranian nationals for their involvement in cyberattacks against the U.S. government, defense contractors, a...

https://www.itsecuritynews.info/us-treasury-sanctions-iranians-linked-to-government-cyberattacks/

In this Help Net Security video, we take you inside GISEC Global, which is taking place from April 23 to April 25, 2024, at the Dubai World Trade Centre. The video features the following vendors:...

https://www.itsecuritynews.info/gisec-global-2024-video-walkthrough/

Secureworks announced the ability to integrate vulnerability risk context with threat detection to prevent attackers from exploiting known vulnerabilities and expedite response times, improving a...

https://www.itsecuritynews.info/secureworks-enables-users-to-view-known-vulnerabilities-in-the-context-of-threat-data/

Iranian nationals charged with hacking U.S. companies and agencies On Tuesday, four Iranian nationals (Hossein Harooni, Reza Kazemifar, Komeil Baradaran Salmani, and Alireza Shafie Nasab) were in...

https://www.itsecuritynews.info/cyber-security-headlines-iranian-hackers-charged-siemens-fixing-palo-bug-russia-hacks-water-plant/

ByteDance protest falls on deaf ears, as Senate passes TikTok ban or divest bill, with President Biden expected to sign it This article has been indexed from Silicon UK Read the original article:...

https://www.itsecuritynews.info/us-senate-passes-tiktok-ban-or-divestment-bill/

Autodesk is hosting malicious PDF files that lead phishing attack victims to have their Microsoft login credentials stolen. The elaborate phishing campaign behind these attacks is much more convi...

https://www.itsecuritynews.info/autodesk-hosting-pdf-files-used-in-microsoft-phishing-attacks/

In this article we analyze social engineering aspects of the XZ backdoor incident. Namely pressuring the XZ maintainer to pass on the project to Jia Cheong Tan, and then urging major downstream m...

https://www.itsecuritynews.info/assessing-the-y-and-how-of-the-xz-utils-incident/

Siemens is urging organizations using its Ruggedcom APE1808 devices configured with Palo Alto Networks (PAN) Virtual NGFW to implement workarounds for a maximum severity zero-day bug that PAN rec...

https://www.itsecuritynews.info/siemens-working-on-fix-for-device-affected-by-palo-alto-firewall-bug/

This blog discusses the essentials of PCI DSS compliance, and the 5 best practices for maintaining compliance. The post The 5 Best Practices for PCI DSS Compliance appeared first on Scytale. The ...

https://www.itsecuritynews.info/the-5-best-practices-for-pci-dss-compliance/

Binarly releases the Binarly Transparency Platform v2.0 with features for continuous post-build compliance, visibility into the security posture of IoT and XIoT devices, and the ability to identi...

https://www.itsecuritynews.info/binarly-releases-transparency-platform-v2-0-to-improve-software-supply-chain-security/

Compliance requirements are meant to increase cybersecurity transparency and accountability. As cyber threats increase, so do the number of compliance frameworks and the specificity of the secu...

https://www.itsecuritynews.info/ciso-perspectives-on-complying-with-cybersecurity-regulations-2/

Security vulnerabilities uncovered in cloud-based pinyin keyboard apps could be exploited to reveal users’ keystrokes to nefarious actors. The findings come from the Citizen Lab, which discove...

https://www.itsecuritynews.info/major-security-flaws-expose-keystrokes-of-over-1-billion-chinese-keyboard-app-users/

RedLine stealer variant delivers Lua bytecode by disguising as game cheat According to McAfee Labs, this off-the-shelf variant of RedLine malware gathers saved credentials, autocomplete data, cre...

https://www.itsecuritynews.info/cyber-security-headlines-redline-github-connection-mitre-ivanti-breach-e-zpass-spoof-sites/

TikTok ban passes the US House The bill passed as part of a larger foreign aid package by a vote of 360-58. THe House passed a similar standalone TikTok ban The post Cyber Security Headlines: Ti...

https://www.itsecuritynews.info/cyber-security-headlines-tiktok-ban-update-sandworm-hits-ukraine-north-korean-streaming-animators/

Lots of businesses pledge to never pay ransomware demands. That sounds good, but priorities quickly change when you need to get the business back to normal after an attack occurs. The post We’...

https://www.itsecuritynews.info/well-invest-in-resilience-as-soon-as-the-ransom-payment-clears/

This episode reports on a new campaign to steal credentials from LastPass users, a warning to admits of Ivanti Avalanche mobile device management software, and more This article has been indexed ...

https://www.itsecuritynews.info/cyber-security-today-april-22-2024-vulnerability-found-in-crushftp-file-transfer-software-security-updates-for-ciscos-controller-management-application-and-more/

This episode reports on the danger of using expired open-source packages, a tool used by a Russian hacking group and password advice This article has been indexed from Cybersecurity Today Read th...

https://www.itsecuritynews.info/cyber-security-today-april-24-2024-good-news-bad-news-in-mandiant-report-unitedhealth-admits-paying-a-ransomware-gang-and-more/

Search giant Google is currently undergoing one of its biggest algorithm updates in its history, sources are told. The online search platform which manages more than 8 billion searches per day is...

https://www.itsecuritynews.info/googles-core-update-is-biggest-algorithm-update-in-history/

After failing to achieve “expected results,” Sweden’s National Cyber Security Center (NCSC) is facing a range of reforms, including being brought under the control of the country’s cyber ...

https://www.itsecuritynews.info/swedish-signals-intelligence-agency-to-take-over-national-cybersecurity-center/

The actual number of people exposed to political and other deepfakes is expected to be much higher given many Americans are not able to decipher what is real versus fake, thanks to the sophistica...

https://www.itsecuritynews.info/people-doubt-their-own-ability-to-spot-ai-generated-deepfakes-2/

Active Directory (AD) is the backbone of most organizations’ networks, managing access and authentication for users, devices and applications. While AD provides both users and administrators wi...

https://www.itsecuritynews.info/5-ways-to-step-up-your-ad-hygiene-with-silverfort/

Prophet Security emerged from stealth with $11 million in seed financing led by Bain Capital Ventures (BCV) with participation from several security leaders and angel investors. At the core of th...

https://www.itsecuritynews.info/prophet-security-emerges-from-stealth-and-raises-11-million/

GISEC Global is taking place from April 23 to April 25, 2024, at the Dubai World Trade Centre. Here are a few photos from the event, featured vendors include: Waterfall Security Solutions, Netsko...

https://www.itsecuritynews.info/photos-gisec-global-2024/

One in five UK organizations have had corporate data exposed via generative AI, says RiverSafe This article has been indexed from www.infosecurity-magazine.com Read the original article: Fifth of...

https://www.itsecuritynews.info/fifth-of-cisos-admit-staff-leaked-data-via-genai/

Law enforcement operations disrupted BlackCat and LockBit RaaS operations, including sanctions on LockBit members aiming to undermine affiliate confidence. In response, LockBit publicly exposed a...

https://www.itsecuritynews.info/ransomware-victims-who-opt-to-pay-ransom-hits-record-low/

In January 2024 I collected 288 events, with Cyber Crime continuing to lead the motivations, and ransomware leading the known attack techniques, ahead of Malware. This article has been indexed fr...

https://www.itsecuritynews.info/january-2024-cyber-attacks-statistics/

The DIB Vulnerability Disclosure Program (DIB-VDP), a joint venture between the DoD Cyber Crime Center (DC3), the Defense Counterintelligence and Security Agency (DCSA), and HackerOne, will bring...

https://www.itsecuritynews.info/pentagon-launches-dib-vulnerability-disclosure-program/

Sometimes the best advice is free advice. Especially in cybersecurity, where understanding the ‘why’ behind attacks can be as crucial as defending against them. Recently, CISA, the FBI, and M...

https://www.itsecuritynews.info/understanding-and-responding-to-distributed-denial-of-service-attacks/

IBM is reportedly close to finalizing negotiations to acquire HashiCorp, a prominent cloud infrastructure software market player. This potential acquisition is part of IBM’s transformation into...

https://www.itsecuritynews.info/ibm-nearing-talks-to-acquire-cloud-software-provider-hashicorp/

Lift your organisation’s security into the top 1% It’s a shocking statistic, but most businesses don’t have a cyber security plan. Given the lack of general interest in cyber security, it�...

https://www.itsecuritynews.info/back-to-security-basics/

North Korean hackers ran a year-long cyber-espionage campaign against South Korean defense companies This article has been indexed from www.infosecurity-magazine.com Read the original article: No...

https://www.itsecuritynews.info/north-korean-hackers-target-dozens-of-defense-companies/

In this blog entry, we discuss Trend Micro’s contributions to an Interpol-coordinated operation to help Brazilian and Spanish law enforcement agencies analyze malware samples of the Grandoreiro...

https://www.itsecuritynews.info/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan/

Alexandre Dumas’s timeless novel “The Three Musketeers” immortalized the ideal of unyielding solidarity, the enduring motto “All for one and one for all.” In the face of ever-evolving t...

https://www.itsecuritynews.info/all-for-one-and-one-for-all-the-eu-cyber-solidarity-act-strengthens-digital-defenses/

Tech leaders taking cybersecurity seriously is something of a double-edged sword. While it’s undoubtedly good that organizations are waking up to the genuine threat cyberattacks pose, it’s de...

https://www.itsecuritynews.info/uk-it-leaders-are-prioritizing-cybersecurity-but-is-this-a-good-thing/

We started the ISO 27001:2022 series with the promise of explaining how the 14 categories of controls can be implemented. Today we address ISO 27001:2022 Annex A.17, “Information Security Asp...

https://www.itsecuritynews.info/implementing-iso-270012022-annex-a-17-information-security-aspects-of-business-continuity-management/

A new malware campaign has been exploiting the updating mechanism of the eScan antivirus software to distribute backdoors and cryptocurrency miners like XMRig through a long-standing threat coden...

https://www.itsecuritynews.info/escan-antivirus-update-mechanism-exploited-to-spread-backdoors-and-miners/

Alert fatigue represents more than a mere inconvenience for Security Operations Centre (SOC) teams; it poses a tangible threat to enterprise security. When analysts confront a deluge of thousands...

https://www.itsecuritynews.info/overcoming-security-alert-fatigue/

The United States Justice Department has announced big rewards for information leading to the capture of four Iranian nationals. These individuals are accused of conducting a sophisticated multi-...

https://www.itsecuritynews.info/rewards-up-to-10-million-for-information-on-iranian-hackers/

One wonders why are there adverts on public-sector portals at all Exclusive  At least 18 public-sector websites in the UK and US send visitor data in some form to various web advertising brokers...

https://www.itsecuritynews.info/if-britain-is-so-bothered-by-china-why-do-these-gov-uk-sites-use-chinese-ad-brokers/

A cyber attack on Leicester City Council resulted in certain street lights remaining illuminated all day and severely impacted the council’s operations The Leicester City Council suffered a c...

https://www.itsecuritynews.info/the-street-lights-in-leicester-city-cannot-be-turned-off-due-to-a-cyber-attack/

The Treasury Department’s Office of Foreign Assets Control (OFAC) sanctioned four Iranian nationals for their role in cyberattacks against the U.S.. The U.S. Treasury Department’s Office of F...

https://www.itsecuritynews.info/us-offers-a-10-million-reward-for-information-on-four-iranian-nationals/

Academics at a U.S. university found that if you feed a GPT-4 artificial intelligence agent public security advisories, it can exploit unpatched “real-world” vulnerabilities without precise t...

https://www.itsecuritynews.info/study-gpt-4-agent-can-exploit-unpatched-vulnerabilities/

In April 2024, 95k records from the T2 tea store were posted to a popular hacking forum. Data included email and physical addresses, names, phone numbers, dates of birth, purchases and passwords ...

https://www.itsecuritynews.info/t2-94584-breached-accounts/

Change Healthcare, a subsidiary of UnitedHealth Group, has confirmed the transfer of 350 bitcoins, equivalent to $22 million USD, to a crypto wallet owned by the ALPHV Ransomware group. Despite c...

https://www.itsecuritynews.info/change-healthcare-faces-data-leak-threat-despite-paying-22-million-as-ransom/

In today’s digital landscape, small and medium enterprises (SMEs) are increasingly turning to cloud computing to streamline operations, enhance scalability, and reduce costs. However, with the ...

https://www.itsecuritynews.info/strategies-for-building-resilient-cloud-security-in-small-and-medium-enterprises-smes/

A new ongoing malware campaign has been observed distributing three different stealers, such as CryptBot, LummaC2, and Rhadamanthys hosted on Content Delivery Network (CDN) cache domains s...

https://www.itsecuritynews.info/coralraider-malware-campaign-exploits-cdn-cache-to-spread-info-stealers/

Four Iranians are accused of hacking into critical systems at the Departments of Treasury and State and dozens of private US companies. The post $10 Million Bounty on Iranian Hackers for Cyberatt...

https://www.itsecuritynews.info/10-million-bounty-on-iranian-hackers-for-cyberattacks-on-us-gov-defense-contractors/

One of the biggest concerns over generative AI is its ability to manipulate us, which makes it ideal for orchestrating social engineering attacks. From mining someone’s digital footprint to cra...

https://www.itsecuritynews.info/genai-can-enhance-security-awareness-training/

All of us rely on at least one device in order to go about our daily lives. Our smartphones help us get from A to B, connect us with friends and manage our bank accounts, our work laptops allow u...

https://www.itsecuritynews.info/four-ways-to-make-yourself-a-harder-target-for-cybercriminals/