Oktacron logo
Cyber security aggregate rss news

Cyber security aggregator - feeds history
image for The Shadow AI Threat ...

 Cyber Essentials

With the dawn of generative AI (GenAI) becoming publicly accessible, a Pandora’s box of risks was unleashed on the corporate world. What began as a revolutionary tool for boosting productivity and creativity soon revealed its darker side—Shadow AI. This unregulated and unauthorized use of AI tools poses   show more ...  

significant Shadow AI threats in 2025. In its infancy, GenAI promised endless possibilities, but it also introduced vulnerabilities that have become the modern-day equivalent of a Trojan horse.  A chilling reality began to emerge: one in five UK companies fell victim to potentially sensitive data leaks through the unchecked use of these AI tools. Employees, drawn by the lure of convenience, inadvertently exposed corporate secrets—data that, once entered into platforms like ChatGPT, could potentially resurface and fall into the wrong hands. These incidents highlight the growing risks of Shadow AI in 2025, where even seemingly harmless actions can lead to devastating security breaches. The repercussions were immediate and far-reaching, with global corporations like Samsung serving as early examples of how a simple mistake could spiral into a full-blown crisis.  Samsung’s ordeal was particularly sobering. In a series of incidents, employees unknowingly compromised proprietary source code and critical meeting notes by inputting them into ChatGPT. Harmless as these actions may have seemed at the time, they illuminated a stark truth: every keystroke, every query submitted to an AI tool, could open a gateway for data misuse. Once uploaded, information entered into such systems was no longer entirely within the company’s control. This stark reality underscores the dangers of Shadow AI threats in 2025, where a lack of oversight can leave organizations vulnerable to insider leaks and external exploitation.  These incidents marked the beginning of a new chapter in cybersecurity. According to a survey, 75% of UK CISOs now see insider threats, amplified by the misuse of Shadow AI, as a greater danger than external attacks. Even more alarming, 20% identified malicious AI use by cybercriminals as the single greatest threat to their organizations. As Shadow AI threats in 2025 evolve, enterprises are facing an uphill battle to regain control over unauthorized AI usage within their ecosystems.  As this silent storm brews, it’s clear that a new adversary is taking shape. Unregulated, unauthorized, and often invisible, Shadow AI is quietly embedding itself into the fabric of enterprises worldwide. Its dangers are as multifaceted as they are imminent, ranging from employee misuse and accidental leaks to deliberate exploitation by cyber adversaries. The rise of Shadow AI in 2025 is not a distant possibility—it’s already here, disrupting the corporate world and reshaping how organizations must approach security.  The Problems with Shadow AI: A Growing Threat to Enterprises  As Shadow AI—defined as the unregulated, unauthorized use of AI tools within an organization—continues to proliferate, its impact on businesses is becoming increasingly severe. While generative AI and machine learning (ML) models offer transformative potential, their unchecked use can lead to a range of problems, including data leaks, misinformation, compliance violations, and security vulnerabilities. Here’s a detailed exploration of the key issues posed by Shadow AI threats in 2025: 1. Rogue Cloud Instances and Unmonitored Models Shadow AI often emerges from employees bypassing IT governance to set up cloud instances for AI experiments or productivity hacks. These instances might involve downloading pre-trained ML models to analyze data or automate workflows.  The danger lies in the potential for these models to operate beyond the control of IT or security teams. A rogue instance running on the cloud could process sensitive corporate data, inadvertently exposing it to external entities. Worse still, if employees fail to properly secure the instance, attackers can exploit vulnerabilities to access confidential information.  For instance, consider an employee downloading a public model to analyze proprietary data. The model, once active, might send telemetry data to its developers or use an API that logs the input, creating unforeseen exposure risks. This scenario exemplifies the risks associated with Shadow AI in 2025. 2. AI Embedded in Consumer Devices Most modern smartphones now come with built-in AI capabilities, and this trend is accelerating. Apple, for example, is set to roll out its own AI integrated into iOS, promising unparalleled convenience but raising significant security concerns.  If not managed carefully, these ubiquitous AI tools could become gateways for data leaks. Employees using AI-powered features to manage work-related tasks might unintentionally upload sensitive information to third-party servers. Additionally, generative AI capabilities built into operating systems can disseminate misinformation, whether intentional or accidental, exacerbating internal communication issues and creating liability risks. Such cases add to the mounting Shadow AI threats in 2025, making oversight more critical than ever. 3. Unauthorized AI in Customer Interactions AI-powered chatbots are becoming ubiquitous in customer service. However, when these tools are used without authorization, they can wreak havoc on an organization’s brand and security posture.  For instance, a customer service representative might consult an external chatbot to craft responses to customer inquiries, inadvertently sharing sensitive customer or company data with an unsecured AI model. Such actions could lead to reputational damage, compliance violations, and further escalation of Shadow AI threats in 2025. Other problems include:   Inconsistent or false messaging that damages customer trust.  Security breaches as sensitive data input into chatbots becomes accessible to other users or malicious actors.  Regulatory noncompliance, especially in industries with stringent data protection standards.   4. Shadow AI in Data Analysis AI-powered machine learning models are a boon for data analysts, offering powerful insights into customer behavior, financial patterns, and market trends. However, when employees use external tools to analyze proprietary datasets without IT oversight, they unknowingly expose their organizations to substantial risks.  For example:  A predictive behavior model might inadvertently leak customer data to external servers.  Unsecured models might be targeted by hackers, leading to significant data breaches.  The lack of governance also results in questionable accuracy, as unapproved models might not adhere to the organization’s data quality or compliance standards.   5. Marketing Automation Gone Rogue Marketing teams often rely on AI tools to optimize email campaigns, track social media engagement, and automate outreach. However, unauthorized use of these tools can have unintended consequences:  Data mishandling: Customer data fed into external AI platforms could violate data protection laws like GDPR or CCPA.  Inconsistent messaging: Without centralized oversight, AI-generated marketing content might stray from brand guidelines, leading to reputational risks.  Regulatory risks: Using unapproved AI tools might result in inadvertent noncompliance with industry-specific data usage regulations.   6. Risks in Data Visualization AI-powered visualization tools, such as those used to create heat maps, bar graphs, or dashboards, are invaluable for translating complex datasets into actionable insights. Yet their unauthorized use presents similar challenges:  Data inaccuracies: Inputs from unsecured tools can lead to flawed reporting, undermining critical business decisions.  Exposure of sensitive data: Inputting proprietary information into external platforms can result in unintended sharing of confidential business intelligence.  Security breaches: These tools might store data on external servers, increasing the risk of exposure if the provider’s security is compromised.   The Multifaceted Impact of Shadow AI  The decentralized nature of Shadow AI makes it a particularly insidious threat:  Data Leaks: Sensitive corporate data can be exposed inadvertently or maliciously through unvetted AI tools.  Misinformation: Inconsistent outputs from unauthorized tools can undermine organizational credibility and sow confusion among stakeholders.  Regulatory Penalties: Noncompliance with data protection regulations could result in hefty fines, legal liabilities, and reputational damage.  Increased Attack Surface: Shadow AI instances create unmonitored entry points for cybercriminals, making organizations more vulnerable to targeted attacks.  The EU AI Act: 'GDPR of AI'  On August 2, 2025, the European Union’s AI Act will come into effect, ushering in one of the most comprehensive regulatory frameworks for artificial intelligence in the world. Drawing parallels to the revolutionary General Data Protection Regulation (GDPR), which reshaped global data privacy standards upon its implementation in 2018, the AI Act is poised to become a landmark directive that influences the development, deployment, and use of AI not only within the EU but globally.  When GDPR came into force, it redefined how organizations worldwide managed personal data. Its impact extended far beyond Europe, setting a global standard for data protection. Companies scrambled to comply, re-evaluating data collection, processing, and storage practices. The legislation empowered individuals with greater control over their personal information and enforced severe penalties for non-compliance, up to 4% of global annual revenue or €20 million, whichever was higher.  Similarly, the EU AI Act aims to regulate the AI landscape by addressing its risks and ensuring accountability, transparency, and ethical standards in AI deployment. It could redefine the way organizations approach AI, particularly those operating within the EU or interacting with EU citizens.  Key Features of the EU AI Act  The EU AI Act takes a risk-based approach to AI regulation, categorizing AI systems into four risk levels:  1. Unacceptable Risk AI:  AI systems deemed a threat to fundamental rights will be banned outright. Examples include AI used for social scoring, subliminal manipulation, or systems exploiting vulnerabilities of specific groups (e.g., children or disabled individuals).  2. High-Risk AI:  AI systems used in critical applications, such as healthcare, law enforcement, border control, or recruitment, will face strict requirements. These systems must comply with rigorous standards for transparency, explainability, accuracy, and human oversight.  3. Limited Risk AI:  Applications such as chatbots or AI-powered recommendation engines will require transparency measures, such as informing users they are interacting with AI.  4. Minimal or No Risk AI:  Most AI applications, such as video games or spam filters, fall under this category and face minimal regulatory intervention.  Transparency and Accountability  The Act emphasizes:  AI Audits: Organizations must ensure AI models meet standards for fairness, accuracy, and security.  Human Oversight: High-risk systems must provide human intervention mechanisms.  Data Management: AI systems must use datasets free of bias, ensuring equitable outcomes.  Traceability: Developers must document the AI’s design, purpose, and testing to create an audit trail.  The Global Implications of the AI Act  Just as GDPR catalyzed global conversations about data privacy, the AI Act is expected to influence regulatory efforts worldwide. It sets a precedent for governing AI systems responsibly, especially as AI becomes increasingly embedded in daily life. Non-compliance will carry steep fines—up to €30 million or 6% of annual turnover, whichever is higher—mirroring the heavy penalties of GDPR.  The AI Act’s Role in Tackling Shadow AI  The AI Act will be instrumental in addressing Shadow AI by:  Mandating Governance: Organizations will need to document AI use and ensure unauthorized AI tools are not deployed.  Ensuring Accountability: Companies will be held accountable for AI-related decisions, even when unauthorized tools are used.  Mitigating Risks: With strict requirements for high-risk AI, the Act will reduce the likelihood of unregulated tools causing harm.  The Legacy of GDPR and Its Lessons  GDPR showed the world that strict regulation could drive positive change. It forced organizations to adopt robust data protection measures and placed individual rights at the center of data governance. Yet, it also presented challenges—companies faced significant costs for compliance, and enforcement proved uneven across EU member states.  The AI Act builds on these lessons. By focusing on a risk-based approach and fostering innovation within ethical boundaries, it aims to balance technological advancement with societal well-being.  Embracing the Challenge of Shadow AI and the EU AI Act  As we stand on the precipice of 2025, the convergence of Shadow AI and the impending implementation of the EU AI Act presents both an unprecedented challenge and a transformative opportunity for businesses. The unchecked rise of Shadow AI has underscored the dangers of innovation without oversight. From rogue AI models running on unmonitored cloud instances to unauthorized tools embedded in marketing, customer service, and data analysis, the risks are clear: data leaks, regulatory violations, and an erosion of trust. Left unaddressed, Shadow AI has the potential to undermine the very foundations of enterprise security, governance, and credibility.  The EU AI Act is poised to address these challenges head-on. The Act provides a robust framework to regulate AI technologies and ensure their alignment with ethical and societal values. By categorizing AI applications into risk levels and mandating transparency, accountability, and fairness, the Act sets the stage for a safer and more responsible AI ecosystem. However, its success will depend on how organizations respond.  The Responsibility of Organizations  The responsibility lies squarely with organizations to act decisively and proactively. The AI Act, with its stringent requirements and steep penalties, is not merely a compliance exercise—it is a call to action for enterprises to rethink their relationship with technology. Businesses must view the Act as a framework for innovation within ethical boundaries, rather than a hindrance to progress.  To succeed, organizations must:  Prioritize Governance: Establishing robust AI governance frameworks is essential to identify and mitigate the risks of Shadow AI. This includes monitoring all AI tools in use, ensuring compliance with regulatory standards, and creating clear accountability structures.  Invest in Education: Employees at all levels must be educated about the risks and responsibilities of AI. This goes beyond developers and IT teams to include marketing, customer service, and operations, ensuring that every employee understands the potential consequences of unauthorized AI use.  Embrace Transparency: The AI Act emphasizes transparency not just in compliance but as a fundamental principle of ethical AI. Organizations must document AI usage, ensure explainability in decision-making, and provide clear audit trails to regulators and stakeholders.  Turn Regulation Into a Competitive Edge: Companies that move quickly to align with the AI Act will not only avoid penalties but also position themselves as industry leaders. In a world where trust is paramount, demonstrating a commitment to ethical AI will be a significant differentiator.  A Broader Implication: Building Trust in AI  The rise of AI has introduced remarkable possibilities but also exposed its potential to harm individuals and societies when left unchecked. The EU AI Act, by addressing risks such as bias, misuse, and lack of oversight, represents a pivotal step in ensuring that AI serves humanity responsibly. However, regulation alone cannot solve all problems. It must be accompanied by a cultural shift within organizations—a move toward embedding ethical principles into the DNA of AI innovation.  As Shadow AI grows as a significant risk in 2025, companies like Cyble are uniquely positioned to mitigate these challenges through advanced cybersecurity solutions. Cyble’s Cloud Security Posture Management (CSPM) and Incident Management capabilities help organizations monitor and secure unauthorized AI usage, such as rogue cloud instances and unvetted AI tools. These solutions proactively address vulnerabilities that could lead to data leaks or compliance violations.  Cyble’s threat intelligence tools, including dark web monitoring and attack surface management, provide real-time detection and remediation of data exposures caused by Shadow AI. By leveraging its AI-driven solutions, such as Cyble Vision, the company enables predictive analysis and advanced threat detection, helping enterprises counter evolving risks. These offerings, combined with robust compliance support, position Cyble as a critical partner in safeguarding organizations against the growing menace of Shadow AI.  The journey toward responsible AI is not an easy one, but it is a necessary one. The challenges of Shadow AI and the complexities of compliance with the EU AI Act are reminders that innovation without accountability is unsustainable. By embracing these challenges, businesses have an opportunity to shape the future of AI—not as a source of risk but as a tool for empowerment, growth, and societal advancement.  In the end, the story of AI in 2025 will be written not by the technology itself, but by the decisions we make today. Will we allow Shadow AI to undermine progress, or will we rise to the occasion, leveraging frameworks like the EU AI Act to build a future where AI enhances lives, respects rights, and drives ethical innovation? The answer lies in how swiftly and effectively we act. 

image for Meet, Learn, Dominat ...

 Cyber Essentials

What makes a cybersecurity professional stand out in today’s rapidly evolving digital landscape? Is it their technical prowess, their ability to anticipate threats or their knack for staying ahead of the curve? The answer lies in all three—and one of the best ways to achieve this is by attending industry-leading   show more ...  

cybersecurity conferences. These aren’t just events; they’re immersive experiences where innovation meets collaboration.  From hands-on workshops that refine your skills to keynote sessions that redefine the future of digital defense, cybersecurity conferences are the ultimate playground for professionals eager to make a difference. They are the places where new ideas are born, global strategies are forged, and the latest tools and technologies are unveiled to tackle tomorrow’s threats today.  In this article, we’ll guide you through 10 must-attend cybersecurity conferences in 2025, each uniquely tailored to enrich your knowledge, expand your network, and inspire your next big breakthrough.  Cybersecurity Conferences to Attend in 2025  1. SANS Cyber Threat Intelligence Summit & Training 2025 [caption id="attachment_100067" align="aligncenter" width="1024"] Source: sans.org[/caption] Dates: January 27 - February 3, 2025  Location: Alexandria, Virginia + Virtual  Cost: In-Person $525 / Free Virtual  If you're involved in Cyber Threat Intelligence (CTI), this summit is tailor-made for you. Whether you're a newcomer or a seasoned professional, the event offers hands-on education, thought-provoking sessions, and the opportunity to challenge conventional CTI assumptions. Participants can expect to learn practical strategies that can be implemented immediately, all while engaging with thousands of global attendees. The hybrid format ensures accessibility for everyone, regardless of location. 2. Gartner Identity & Access Management Summit 2025 UK [caption id="attachment_100069" align="aligncenter" width="1024"] Source: Gartner[/caption] Dates: March 24-25, 2025  Location: London, UK  Cost: Starting at €3,175 Identity and Access Management (IAM) is a cornerstone of modern cybersecurity. This summit, hosted by Gartner, dives deep into the challenges and solutions in IAM. From managing digital identities to implementing zero-trust frameworks, this conference will offer invaluable insights. With expert-led sessions and networking opportunities, it’s an essential event for professionals focused on securing access and identities in their organizations. 3. RSA Conference 2025 [caption id="attachment_100070" align="aligncenter" width="998"] Source: RSA[/caption] Dates: April 28 – May 1, 2025  Location: San Francisco, California  Cost: Starting at $2,195  The RSA Conference remains one of the biggest names in cybersecurity events. It’s the ultimate destination for discovering the latest technologies, hearing from industry leaders, and connecting with cybersecurity professionals. The 2025 edition promises to cover a wide array of topics, from AI-driven threat detection to ransomware mitigation.  4. 37th Annual FIRST Conference [caption id="attachment_100071" align="aligncenter" width="800"] Source: Annual FIRST Conference[/caption] Dates: June 22-27, 2025  Location: Copenhagen, Denmark  Cost: TBD  The FIRST (Forum of Incident Response and Security Teams) conference brings together global incident response teams from the private, public, and academic sectors. This year’s gathering in Copenhagen will focus on fostering collaboration to improve global cybersecurity efforts. FIRST’s sessions are known for their technical depth and strategic insights, making it a vital event for those involved in Computer Security and Incident Response Teams (CSIRTs). 5. Black Hat USA 2025 [caption id="attachment_100072" align="aligncenter" width="800"] Source: blackhat[/caption] Dates: August 2-7, 2025  Location: Las Vegas, Nevada  Cost: TBD  Black Hat is synonymous with cutting-edge research and practical cybersecurity training. The 2025 edition promises intensive workshops, technical briefings, and demonstrations of the latest vulnerabilities and exploits. Whether you’re a white-hat hacker, a penetration tester, or a cybersecurity policymaker, Black Hat offers unparalleled opportunities to expand your skill set and network with the best in the industry. 6. DefCon 33 [caption id="attachment_100075" align="aligncenter" width="1024"] Source: DefCon 33[/caption] Dates: August 7-10, 2025  Location: Las Vegas, Nevada  Just after Black Hat, DefCon takes over Las Vegas as a more informal and community-driven event. Known as the largest hacker conference in the world, DefCon is a playground for cybersecurity enthusiasts to test their skills, learn from peers, and explore emerging challenges. From Capture the Flag (CTF) competitions to hands-on hardware hacking villages, it’s an unmissable experience for anyone passionate about cybersecurity. 7. National Homeland Security Conference (NHSC) 2025 [caption id="attachment_100077" align="aligncenter" width="1024"] Source: National Homeland Security Conference[/caption] Dates: August 25-28, 2025  Location: Washington, D.C.  For professionals working in homeland security, emergency management, and public safety, the NHSC is the go-to event. It provides a platform to discuss cybersecurity issues critical to national security, such as critical infrastructure protection and supply chain risk management. Attendees will gain insights into how cybersecurity intersects with broader security challenges. 8. 16th Annual Billington CyberSecurity Summit [caption id="attachment_100079" align="aligncenter" width="800"] Source: Annual Billington CyberSecurity Summit[/caption] Dates: September 9-12, 2025  Location: Walter E. Washington Convention Center, Washington, D.C.  The Billington CyberSecurity Summit has cemented its reputation as one of the leading cybersecurity conferences. The 2025 edition will bring together policymakers, government leaders, and industry experts to tackle pressing cybersecurity challenges. Topics include emerging technologies, critical infrastructure protection, and strategies for enhancing public-private partnerships. 9. Global Security Exchange (GSX) 2025 [caption id="attachment_100081" align="aligncenter" width="1024"] Source: Global Security Exchange (GSX) 2025[/caption] Dates: September 29 - October 1, 2025  Location: New Orleans, Louisiana  GSX is a comprehensive security event that goes beyond cybersecurity to include physical security and risk management. It’s an excellent choice for professionals seeking a holistic approach to securing organizational assets. The event features keynote speeches, breakout sessions, and an expansive expo showcasing the latest security solutions. 10. Innovate Cybersecurity Summit – Scottsdale 2025 [caption id="attachment_100089" align="aligncenter" width="871"] Source: Innovate Cybersecurity Summit[/caption] Dates: October 5-6, 2025  Location: Scottsdale, Arizona  Cost: TBD (Invite-only event)  This invite-only summit is designed for C-level executives and senior cybersecurity leaders. The Innovate Cybersecurity Summit focuses on forward-thinking strategies and advanced technologies to tackle the most pressing challenges in the field. With exclusive access to industry leaders and decision-makers, this event offers high-value networking and thought leadership.  Why Attend Cybersecurity Conferences in 2025?  Attending cybersecurity conferences isn’t just about earning certifications or hearing keynote speeches—it’s about staying ahead in a constantly evolving field. These events provide:  Networking Opportunities: Connect with industry peers, potential partners, and mentors.  Valuable Insights: Learn about the latest trends, tools, and techniques in cybersecurity.  Skill Development: Participate in hands-on workshops and training sessions to enhance your expertise.  Strategic Value: Gain actionable knowledge to shape your organization’s cybersecurity strategies.  These 2025 conferences are your chance to step into the epicenter of cybersecurity advancement. Packed with insights, transformative ideas, and invaluable connections, they offer a unique opportunity to not only keep up with the industry but to lead within it.   The real question is: are you ready to make the leap and redefine your approach to securing the digital world? 

image for Why CISOs Need Full ...

 Cyber News

For years, cyber risk was relegated to the world of information technology (IT), managed by security and engineering teams as part of their operational responsibilities. However, as the digital world becomes increasingly interconnected and hovers with threats from nation-state adversaries, ransomware gangs, and other   show more ...  

cybercriminals, this limited approach is no longer viable. Today, corporate leaders and board members are realizing that cyber risk is not merely an IT issue but a strategic enterprise risk that demands their direct oversight. This shift reflects an urgent need for organizations to rethink how they approach cybersecurity. The stakes have never been higher: cyber threats not only harm company operations but also pose significant risks to national security and systemic resilience. Recognizing this, the Cybersecurity and Infrastructure Security Agency (CISA), in partnership with the National Association of Corporate Directors (NACD) and the Internet Security Alliance, has developed the NACD Director’s Handbook on Cyber-Risk Oversight. This handbook lays out a comprehensive framework for integrating cybersecurity into board governance and offers actionable guidance for leaders to foster a culture of sustainable cybersecurity. Boards as Stewards of Cyber Risk The NACD Director’s Handbook emphasizes a fundamental shift: cybersecurity must be treated as a core element of corporate governance. Board members hold the power to drive this change through their actions and decisions, ensuring that cybersecurity considerations are embedded in the organization’s strategic priorities. But what does this look like in practice? Here are the key actions boards can take: Empowering the CISO Chief Information Security Officers (CISOs) are at the frontline of a company’s cybersecurity efforts. Yet, they often lack the authority or resources to make impactful decisions. Boards must ensure that CISOs are fully empowered to prioritize cybersecurity effectively. This includes providing them with the influence, budget, and tools necessary to address emerging threats. Moreover, decisions that prioritize cost, speed to market, or product features over security should be made transparently. Such trade-offs must involve not just the CISO but also the CEO and board members, with full visibility for potentially impacted customers. Cybersecurity, as a matter of safety, cannot afford to lag behind innovation. Educating Leadership on Cyber Risk Cyber risk literacy is no longer optional for corporate leadership. Boards must ensure that their peers and senior executives understand the critical nature of cyber threats and the potential consequences of inadequate defenses. This includes integrating cybersecurity considerations into every business, technology, and software acquisition decision. Additionally, boards should scrutinize decisions to accept rather than mitigate cyber risks and revisit these decisions regularly. To manage cyber risk more effectively, some organizations are establishing dedicated cybersecurity or technology risk committees—moving beyond the traditional audit committee approach, which often treats cybersecurity as a compliance issue. Building a Cyber-Risk Management Framework A strong cyber-risk management framework is essential for measuring and mitigating exposure to cyber threats. Boards should review and approve the development of standardized metrics and benchmarks to assess the organization’s cybersecurity posture. These standards enable consistent evaluation and provide a clear picture of the company’s vulnerabilities. Lowering Reporting Thresholds One of the most overlooked aspects of effective cyber governance is the reporting of near misses. Often, thresholds for reporting malicious activity to senior management are set too high, leaving critical learning opportunities unaddressed. Boards should require regular briefings on both successful intrusions and near misses, as these incidents reveal gaps in defenses and test the organization’s response capabilities. Fostering Collaboration Over Isolation The cyber threat landscape is too vast and complex for organizations to tackle alone. Boards must champion a culture of collaboration, encouraging companies to share information about malicious activity with industry peers and government agencies. This proactive sharing can lead to quicker, more effective responses while fostering trust between the private and public sectors. A New Model for Sustainable Cybersecurity CISA and its partners advocate for a new model of sustainable cybersecurity—one that begins with a commitment from the top. This model requires CEOs and boards to view cybersecurity not as an isolated function but as an integral part of good governance. It’s about creating a culture where managing cyber risk is as ingrained in the organization as financial oversight. As NACD notes, cybersecurity literacy should be treated like financial literacy: while not every board member needs to be a cybersecurity expert, all members should have a baseline understanding of cyber risks and their implications. Just as directors are expected to read financial statements, they must also grasp the fundamentals of cybersecurity to make informed decisions. Corporate Cyber Responsibility: The Time is Now In today’s environment, boards and CEOs must embrace corporate cyber responsibility as a non-negotiable aspect of governance. Every organization must safeguard its employees, partners, and customers against cyber threats. This commitment begins with holding senior leaders accountable for managing cyber risk and ensuring that they are directly involved in key cybersecurity decisions. The NACD Director’s Handbook outlines actionable steps to achieve this goal, emphasizing the importance of: Empowering CISOs and aligning their efforts with organizational priorities. Educating board members and executives on the evolving threat landscape. Developing standardized frameworks for assessing and mitigating cyber risks. Encouraging information sharing and collaboration across industries and with government partners. To Sum Up The digital threats facing organizations today are not just operational challenges—they are existential risks that demand immediate and sustained attention from corporate leaders. By adopting the principles outlined in the NACD Director’s Handbook, boards can transform their approach to cybersecurity, ensuring that it is treated as a strategic priority. The message is clear: cybersecurity is not just an IT function; it is a culture, a governance issue, and a shared responsibility. The time has come for boards to step up, lead by example, and redefine what it means to be resilient in an interconnected world.

image for The Good, the Bad, a ...

 Firewall Daily

The Australian Government has shared its insights and developments regarding the Commonwealth’s cybersecurity measures. The Commonwealth Cybersecurity Posture 2024 provides an in-depth overview of Australia’s cybersecurity landscape, detailing the progress, challenges, and future steps for protecting the   show more ...  

nation’s critical digital infrastructure. Presented to the Australian Parliament, this report serves as a vital tool for assessing the effectiveness of cyber defense strategies in the 2023–2024 financial year.  An Overview of the Australia Commonwealth Cybersecurity The Commonwealth Cybersecurity Posture 2024 offers a thorough update on how the Australian Government is handling cybersecurity risks. Australia’s commitment to enhancing its cybersecurity measures is crucial, given the increasing sophistication of cyber threats facing not only government entities but also private enterprises. The report reflects the latest data, drawing from the Australian Signals Directorate’s (ASD) Cybersecurity Survey for Commonwealth Entities.  As of June 30, 2024, Australia’s government comprises 1,002 non-corporate Commonwealth entities (NCEs), 74 corporate Commonwealth entities (CCEs), and 16 Commonwealth companies (CCs), totaling 1,092 entities. The survey shows a record 94% participation rate, which marks the highest level of engagement since the survey's inception.   Key Criteria for Assessing Cybersecurity Effectiveness  The Commonwealth Cybersecurity Posture 2024 is structured around three critical criteria to evaluate the cybersecurity readiness of Australian government entities:  This refers to the technical measures in place to minimize the likelihood of system vulnerabilities being exploited.  This assesses the ability of entities to respond swiftly and effectively when a cybersecurity incident occurs.  This focuses on the involvement of senior leadership in embedding a robust cybersecurity culture within the organization.  These three pillars are essential to Australia’s cyber defense, helping to create a comprehensive and proactive approach to managing threats in an increasingly complex digital environment.  Progress and Challenges in the Commonwealth Cybersecurity Posture  The report highlights the cybersecurity readiness of Australia but also points out areas that require attention. Notably, the implementation of the Essential Eight mitigation strategies — a set of critical cybersecurity practices devised by the ASD — has seen a decline in its effectiveness across government entities. In 2024, only 15% of entities achieved Maturity Level 2 in applying these strategies, a decrease from 25% in 2023. This decline points to the challenges that remain in fully embedding these essential cybersecurity measures.  Despite this setback, the report outlines several positive developments. For instance, 75% of entities had established a cybersecurity strategy by 2024, showing an increase from the previous year’s 73%. Furthermore, 86% of entities included cyber disruptions in their business continuity and disaster recovery plans, an improvement from 83% in 2023. These efforts reflect a growing awareness of the importance of resilience and continuity in government operations, even amid cyber disruptions.  Another noteworthy progress indicator is that 88% of entities had developed a work plan to upgrade their cybersecurity measures, with 82% of these plans being funded. This illustrates a proactive stance across government sectors to address vulnerabilities and enhance defenses. Additionally, 86% of entities now have incident response plans in place, signaling a marked improvement in preparedness compared to 82% in 2023.  Training and Workforce Development in Cybersecurity  The report also emphasizes the importance of training and awareness within the workforce. In 2024, 78% of government entities provided annual cybersecurity training, maintaining the same level as the previous year. However, a more encouraging sign is the increase in specialized training for privileged users. Fifty-one percent of entities offered such training in 2024, up from 39% in 2023. This growth highlights the government’s increasing focus on educating personnel about advanced cyber threats, such as phishing and unauthorized access attempts.  Despite these advancements, the report notes that the presence of legacy IT systems remains a significant challenge. These outdated systems, which are vulnerable to modern cyberattacks, pose ongoing risks. In response, the ASD published new guidance in April 2024 aimed at helping entities manage the risks associated with legacy IT systems. This guidance offers practical, low-cost mitigations to manage these risks alongside ongoing cybersecurity strategies.  Incident Reporting and Supply Chain Risk Management  While progress is evident, the report underscores some critical gaps, particularly in the area of incident reporting. Only 32% of entities reported at least half of the cybersecurity incidents they encountered, a concerning statistic. Comprehensive incident reporting is crucial for identifying emerging threats and strengthening national cybersecurity resilience.  Supply chain risks also continue to be a significant concern. In 2024, 74% of entities conducted supply chain risk assessments for applications, ICT equipment, and services. This highlights the importance of ensuring that third-party services and software, which are often integrated into government systems, are also secure and do not introduce vulnerabilities.  Conclusion   The Commonwealth Cybersecurity Posture 2024 highlights Australia’s ongoing efforts to enhance its cybersecurity, showing progress while identifying areas for improvement. The implementation of the Essential Eight strategies, increased leadership involvement, and better workforce training are positive steps forward.  As cyber threats evolve, Australia’s cybersecurity measures must continue adapting. By focusing on the Essential Eight, improving incident reporting, and addressing legacy IT risks, Australia is working to ensure a secure and resilient digital future. These efforts are crucial for protecting national security, public trust, and economic stability in an increasingly complex cyber landscape. 

image for How vulnerable Ecova ...

 Technology

Imagine: you get up in the night for a glass of water, walk across the unlit landing, when out of the darkness a voice starts yelling at you. Not nice, youd surely agree. But thats the new reality for owners of vulnerable robot vacuums, which can be commanded by hackers to turn from domestic servants into foul-mouthed   show more ...  

louts. And thats not all: hackers can also control the robot remotely and access its live camera feed. The danger is clear and present: recently, cases of cyberhooligans hijacking vulnerable robot vacuums to prank people (and worse) have been seen in the wild. Read on for the details… How a robot vacuum works Lets start with the fact that a modern robot vacuum is a full-fledged computer on wheels, usually running on Linux. It comes with a powerful multi-core ARM processor, a solid chunk of RAM, a capacious flash drive, Wi-Fi, and Bluetooth. Todays robot vacuum is a full-fledged computer on wheels Source And of course, the modern robot vacuum has sensors everywhere: infrared, lidar, motion, camera (often several of each), and some models also have microphones for voice control. The Ecovacs DEEBOT X1 has not only a camera, but an array of microphones Source And naturally, all modern robot vacuums are permanently online and hooked up to the vendors cloud infrastructure. In most cases, they communicate aplenty with this cloud — uploading piles upon piles of data collected during operation. Vulnerabilities in Ecovacs robot vacuums and lawn mowers The first report of vulnerabilities in Ecovacs robot vacuums and lawnmowers surfaced in August 2024, when security researchers Dennis Giese (known for hacking a Xiaomi robot vacuum) and Braelynn Luedtke gave a talk at DEF CON 32 on reverse engineering and hacking Ecovacs robots. The Ecovacs GOAT G1 can also be equipped with GPS, LTE and a long-range Bluetooth module Source In their talk, Giese and Luedtke described several methods for hacking Ecovacs robot vacuums and the mobile app that owners use to control them. In particular, they found that a potential hacker could access the feed from the robots built-in camera and microphone. This is possible for two reasons. First, if the app is used on an insecure network, attackers can intercept the authentication token and communicate with the robot. Second, although in theory the PIN code set by the device owner secures the video feed, in practice it gets verified on the app side — so it can be bypassed. The PIN code for securing the video feed from an Ecovacs robot vacuum is verified on the app side, which makes the mechanism extremely vulnerable Source The researchers also managed to gain root access to the robots operating system. They found it was possible to send a malicious payload to the robot via Bluetooth, which in some Ecovacs models gets turned on after a scheduled reboot, while in others its on all the time. In theory, encryption should protect against this, but Ecovacs uses a static key thats the same for all devices. Armed with this knowledge, an intruder can get root privileges in the operating system of any vulnerable Ecovacs robot and hack it at a distance of up to 50 meters (~165 feet) — which is precisely what the researchers did. As for robot lawnmowers, these models are hackable at more than 100 meters (~330 feet) away, since theyve got more powerful Bluetooth capabilities. Add to that that, as mentioned already, todays robot vacuums are full-fledged Linux-based computers, and you can see how attackers can use one infected robot as a means to hack others nearby. In theory, hackers can even create a network-worm to automatically infect robots anywhere in the world. Bluetooth vulnerability in Ecovacs robots could lead to a chain of infection Source Giese and Luedtke informed Ecovacs about the vulnerabilities they found, but received no response. The company did try to close some of the holes, say the researchers, but with little success and ignoring the most serious vulnerabilities. How the Ecovacs robot vacuums were hacked for real It appears that the DEF CON talk generated great interest in the hacker community — so much so that someone seems to have taken the attack a step further and deployed it on Ecovacs robot vacuums out in the real world. According to recent reports, owners in several U.S. cities had been hit by hackers and made to suffer abuse from their robot servants. In one incident in Minnesota, an Ecovacs DEEBOT X2 started moving by itself and making strange noises. Alarmed, its owner went into the Ecovacs app and saw that someone was accessing the video feed and remote-control feature. Writing it off as a software glitch, he changed the password, rebooted the robot and sat down on the couch to watch TV with his wife and son. But the robot kicked back into life almost straight away — this time emitting a continuous stream of racial slurs from its speakers. Not knowing what to do, the owner turned off the robot, took it into the garage and left it there. Despite this ordeal, he is grateful that the hackers made their presence so obvious. Far worse, he says, would have been if theyd simply secretly monitored his family through the robot without revealing themselves. Hijacking a live video feed of an Ecovacs robot vacuum Source In a similar case, this time in California, another Ecovacs DEEBOT X2 chased a dog around the house, again shouting obscenities. And a third case was reported from Texas, where, you guessed it, an Ecovacs robot vacuum went walkabout and hurled abuse at its owners. The exact number of hacks of Ecovacs robot vacuums is unknown. One reason for this, alluded to above, is that the owners may not be aware of it: the hackers may be quietly observing their daily lives through the built-in camera. How to guard against robot vacuum hacking? The short answer is: you cant. Unfortunately, theres no universal method of protecting against robot vacuum hacking that covers all bases. For some models, in theory, theres the option of hacking it yourself, getting root access, and unlinking the machine from the vendors cloud. But this is a complex and time-consuming procedure that the average owner wont consider attempting. A serious problem with IoT devices is that many vendors, sadly, still pay insufficient attention to security. And they often prefer to bury their heads in the sand — even declining to respond to researchers who helpfully report such issues. To reduce the risks, try do your own research on the security practices of the vendor in question before purchasing. Some actually do a pretty good job of keeping their products safe. And, of course, always install firmware updates: new versions usually remove at least some of the vulnerabilities that hackers can exploit to gain control over your robot. And remember that a robot connected to home Wi-Fi, if hacked, can become a launchpad for an attack on other devices connected to the same network — smartphones, computers, smart TVs, and so on. So its always a good idea to move IoT devices (in particular, robot vacuums) to a guest network, and install reliable protection on all devices where possible.

 Feed

Ivanti is warning that a critical security flaw impacting Ivanti Connect Secure, Policy Secure, and ZTA Gateways has come under active exploitation in the wild beginning mid-December 2024. The security vulnerability in question is CVE-2025-0282 (CVSS score: 9.0), a stack-based buffer overflow that affects Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2

 Feed

Threat actors are attempting to take advantage of a recently disclosed security flaw impacting GFI KerioControl firewalls that, if successfully exploited, could allow malicious actors to achieve remote code execution (RCE). The vulnerability in question, CVE-2024-52875, refers to a carriage return line feed (CRLF) injection attack, paving the way for HTTP response splitting, which could then

 Feed

The European General Court on Wednesday fined the European Commission, the primary executive arm of the European Union responsible for proposing and enforcing laws for member states, for violating the bloc's own data privacy regulations. The development marks the first time the Commission has been held liable for infringing stringent data protection laws in the region. The court determined that

 Feed

Cybersecurity researchers have uncovered a new, stealthier version of a macOS-focused information-stealing malware called Banshee Stealer. "Once thought dormant after its source code leak in late 2024, this new iteration introduces advanced string encryption inspired by Apple's XProtect," Check Point Research said in a new analysis shared with The Hacker News. "This development allows it to

 Feed

As SaaS providers race to integrate AI into their product offerings to stay competitive and relevant, a new challenge has emerged in the world of AI: shadow AI.  Shadow AI refers to the unauthorized use of AI tools and copilots at organizations. For example, a developer using ChatGPT to assist with writing code, a salesperson downloading an AI-powered meeting transcription tool, or a

 Feed

Japan's National Police Agency (NPA) and National Center of Incident Readiness and Strategy for Cybersecurity (NCSC) accused a China-linked threat actor named MirrorFace of orchestrating a persistent attack campaign targeting organizations, businesses, and individuals in the country since 2019. The primary objective of the attack campaign is to steal information related to Japan's national

 Feed

Ransomware isn’t slowing down—it’s getting smarter. Encryption, designed to keep our online lives secure, is now being weaponized by cybercriminals to hide malware, steal data, and avoid detection.The result? A 10.3% surge in encrypted attacks over the past year and some of the most shocking ransom payouts in history, including a $75 million ransom in 2024. Are you prepared to fight back? Join

 Feed

Palo Alto Networks has released software patches to address several security flaws in its Expedition migration tool, including a high-severity bug that an authenticated attacker could exploit to access sensitive data. "Multiple vulnerabilities in the Palo Alto Networks Expedition migration tool enable an attacker to read Expedition database contents and arbitrary files, as well as create and

 Android

Ever wonder how those "free" browser extensions that promise to save you money actually work? We dive deep into the controversial world of Honey, the coupon-finding tool owned by PayPal, and uncover a scheme that might be leaving you with less savings and your favorite YouTubers with empty pockets. Plus, we   show more ...  

take a look at Kagi, the search engine you pay not to show you adverts, and discuss what you should do with your old, no-longer-wanted technology. All this and more is discussed in the latest edition of the award-winning "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

 Data loss

The Space Bears ransomware gang stands out from the crowd by presenting itself better than many legitimate companies, with corporate stock images and a professional-looking leak site. Read more in my article on the Tripwire State of Security blog.

 Cyber Security News

Source: go.theregister.com – Author: Jessica Lyons Cybercriminals are actively exploiting two vulnerabilities in Mitel MiCollab, including a zero-day flaw – and a critical remote code execution vulnerability in Oracle WebLogic Server that has been abused for at least five years. Here are the three, all of   show more ...  

which the US Cybersecurity and Infrastructure Security Agency (CISA) […] La entrada Mitel 0-day, 5-year-old Oracle RCE bug under active exploit – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Connor Jones Updated Argentine cybersecurity shop Eclypsium claims security issues affecting leading DNA sequencing devices could lead to disruptions in crucial clinical research. The iSeq 100, developed by manufacturer Illumina, was torn down and found to be running an   show more ...  

insecure BIOS implementation that opened up the device to malware and ransomware […] La entrada DNA sequencers found running ancient BIOS, posing risk to clinical research – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Aviation

Source: go.theregister.com – Author: Connor Jones The International Civil Aviation Organization (ICAO), the United Nations’ aviation agency, has confirmed to The Register that a cyber crim did indeed steal 42,000 records from its recruitment database. Yesterday, we reported claims from an atacker that   show more ...  

they had illegally accessed tens of thousands of documents. In response to […] La entrada UN’s aviation agency confirms attack on recruitment database – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Crims

Source: go.theregister.com – Author: Jessica Lyons More than 4,000 unique backdoors are using expired domains and/or abandoned infrastructure, and many of these expose government and academia-owned hosts – thus setting these hosts up for hijacking by criminals who likely have less altruistic intentions than   show more ...  

the security researchers who uncovered the backdoors. In its latest who-can-we-pwn […] La entrada Crims backdoored the backdoors they supplied to other miscreants. Then the domains lapsed – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Akamai

Source: go.theregister.com – Author: Simon Sharwood Akamai has decided to end its content delivery network services in China, but not because it’s finding it hard to do business in the Middle Kingdom. News of Akamai’s decision to end CDN services in China emerged in a letter it recently published and sent   show more ...  

to customers and partners […] La entrada Akamai to quit its CDN in China, seemingly not due to trouble from Beijing – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: heimdalsecurity.com – Author: Livia Gyongyoși There are a lot of different hacking techniques to be aware of. At the time of publication, the MITRE ATT&CK framework identified some 236 hacking techniques across 14 different categories. Luckily, you don’t need to understand all these tactics to   show more ...  

stay safe. Many are close variations of the same […] La entrada How to Defend Against the Three Most Dangerous Cybersecurity Attacks – Source: heimdalsecurity.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 'Cyber

Source: sec.cloudapps.cisco.com – Author: . Cisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities Medium CVE-2025-20166 CVE-2025-20167 CVE-2025-20168 CWE-86 Download CSAF Email Summary Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform   show more ...  

Collector (CSPC) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These […] La entrada Cisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities – Source:sec.cloudapps.cisco.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 China

Source: www.schneier.com – Author: Bruce Schneier HomeBlog US Treasury Department Sanctions Chinese Company Over Cyberattacks From the Washington Post: The sanctions target Beijing Integrity Technology Group, which U.S. officials say employed workers responsible for the Flax Typhoon attacks which compromised   show more ...  

devices including routers and internet-enabled cameras to infiltrate government and industrial targets in the United […] La entrada US Treasury Department Sanctions Chinese Company Over Cyberattacks – Source: www.schneier.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Victor Ronin I struggled to find widely adopted terminology to describe this. Let me call it the process global path for the rest of the article, referring to the hierarchical, precise definition of where it runs. Taking it further, you might argue that even a single   show more ...  

process could run multiple distinct […] La entrada What Makes You… You? A Philosophical Take on Non-Human Identity – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Marc Handelman Wednesday, January 8, 2025 Home » Security Bloggers Network » DEF CON 32 – Student Engagement Doesn’t Have to Suck Author/Presenter: Dr. Muhsinah Morris Our sincere appreciation to DEF CON, and the Authors/Presenters for publishing their erudite DEF   show more ...  

CON 32 content. Originating from the conference’s events located at the […] La entrada DEF CON 32 – Student Engagement Doesn’t Have to Suck – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cloud Security

Source: securityboulevard.com – Author: Jeffrey Burt As the Green Bay Packers gear up for their first-round NFL playoff game January 12, team executives are having to deal with the fallout of a hack of its online retail store that exposed the data of customers who bought merchandise in late September and   show more ...  

through much of October. […] La entrada Green Bay Packers Retail Site Hacked, Data of 8,500 Customers Exposed – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Satnam Narang Ivanti disclosed two vulnerabilities in its Connect Secure, Policy Secure and Neurons for ZTA gateway devices, including one flaw that was exploited in the wild as a zero-day. Background On January 8, Ivanti published a security advisory for two   show more ...  

vulnerabilities affecting multiple products including Ivanti Connect Secure, Ivanti Policy […] La entrada CVE-2025-0282: Ivanti Connect Secure Zero-Day Vulnerability Exploited In The Wild – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Application Security

Source: securityboulevard.com – Author: Richi Jennings Running an obsolete OS, on obsolete hardware, configured with obsolete  settings. A widely used DNA sequencer contains several worrying vulnerabilities. The Illumina iSeq 100 can be “easily” disabled or rigged to produce false results, say   show more ...  

researchers. But it’s only the tip of the iceberg: Many other devices are likely affected. […] La entrada Insecure Medical Devices — Illumina DNA Sequencer Illuminates Risks – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 account takeover

Source: securityboulevard.com – Author: Enzoic A New Chapter for Immediate, Cross-Organizational Security In today’s hyper-connected society, personal accounts rarely remain confined to a single platform. Individuals often access multiple applications and resources—ranging from   show more ...  

an organization’s internal systems and cloud-based apps to consumer-facing services such as media platforms or financial portals. Unfortunately, those who engage in malicious activities are quick to notice any lack of coordination […] La entrada The OpenID Shared Signals Framework – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Marc Handelman via the comic humor & dry wit of Randall Munroe, creator of XKCD Permalink *** This is a Security Bloggers Network syndicated blog from Infosecurity.US authored by Marc Handelman. Read the original post at: https://xkcd.com/3033/ Original Post URL:   show more ...  

https://securityboulevard.com/2025/01/randall-munroes-xkcd-origami-black-hole/ Category & Tags: Humor,Security Bloggers Network,Randall Munroe,Sarcasm,satire,XKCD – Humor,Security Bloggers […] La entrada Randall Munroe’s XKCD ‘Origami Black Hole’ – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: securityboulevard.com – Author: Avast Blog Home » Security Bloggers Network » Time for a new job—9 work-from-home scams and how to spot them Navigating the job market can feel like a final boss battle in a video game—thrilling, challenging, and filled with traps. Unfortunately, work-from-home   show more ...  

scams are some of the trickiest villains you’ll encounter […] La entrada Time for a new job—9 work-from-home scams and how to spot them – Source: securityboulevard.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Nate Nelson, Contributing Writer Source: Wavebreakmedia Ltd IFE-240405_3 via Alamy Stock Photo The government of India has drafted rules that will define how companies inside and outside of the country must handle its citizens’ data privacy. A year and a half ago,   show more ...  

India enacted its first ever comprehensive national data protection […] La entrada India Readies Overhauled National Data Privacy Rules – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 'Cyber

Source: www.darkreading.com – Author: Kristina Beek, Associate Editor, Dark Reading Source: Prisma by Dukas Presseagentur GmbH via Alamy Stock Photo Yesterday, the White House introduced a cybersecurity labeling program for wireless Internet-connected devices, intended to help Americans make more informed   show more ...  

decisions about the products they buy and their security. As Americans continue to add Internet […] La entrada Fed ‘Cyber Trust’ Label: Good Intentions That Fall Short – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CrowdStrike

Source: www.darkreading.com – Author: PRESS RELEASE AUSTIN, Texas – January 8, 2025 – CrowdStrike (Nasdaq: CRWD), today announced that the CrowdStrike Falcon® cybersecurity platform achieved Federal Risk and Authorization Management Program (FedRAMP) authorization for three key modules: CrowdStrike   show more ...  

Falcon® Next-Gen SIEM, CrowdStrike Falcon® for IT and CrowdStrike Falcon® Data Protection. These modules are available to government entities requiring FedRAMP Moderate authorization, enabling them […] La entrada CrowdStrike Achieves FedRAMP Authorization for New Modules – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: PRESS RELEASE DALLAS, Jan. 7, 2025 /PRNewswire/ — Trend Micro Incorporated (TYO: 4704; TSE: 4704), a global cybersecurity leader, today announced a new collaboration with Intel® (NASDAQ: INTC) designed to help joint enterprise customers protect critical   show more ...  

systems from stealthy threats, including fileless malware and advanced ransomware. When Trend’s proactive security platform and Intel’s technology are used together, the […] La entrada Trend Micro and Intel Innovate to Weed Out Covert Threats – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Source: www.darkreading.com – Author: PRESS RELEASE 7th January 2025 – Zivver, a leader in secure communications, has published its latest report, shedding light on critical gaps in email security practices and their alignment with increasing regulatory requirements. The findings from Email Security   show more ...  

Trends 2025: The Widening Disconnect Between Email Security and Risk Management highlight the often-overlooked threats in email security, and […] La entrada Zivver Report Reveals Critical Challenges in Email Security for 2025 – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: PRESS RELEASE PRINCETON, N.J., Jan. 6, 2025 /PRNewswire/ — Palindrome Technologies has been conditionally approved as a Cybersecurity Label Administrator (CLA) for the Federal Communications Commission’s (FCC) voluntary Internet of Things (IoT) Cybersecurity   show more ...  

Labeling Program. As a CLA, Palindrome will evaluate and certify IoT products that meet FCC cybersecurity standards. Qualified products will […] La entrada Palindrome Technologies Approved as Cybersecurity Label Administrator for FCC’s IoT Program – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.darkreading.com – Author: Tara Seals, Managing Editor, News, Dark Reading Source: Cal Sport Media via Alamy Stock Photo Fans of the Green Bay Packers football franchise have been tackled by a payment-card skimmer; people who bought merch at the Packers Pro Shop website last fall may have had their   show more ...  

personal data harvested. In a […] La entrada Green Bay Packers’ Online Pro Shop Sacked by Payment Skimmer – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 0CISO2CISO

Source: www.darkreading.com – Author: Andrada Fiscutean Nathan Sportsman, the CEO of offensive security company Praetorian, had a grim epiphany in the summer of 2023: We’re beginning to lose some of the hackers and visionaries who laid the foundation of the cybersecurity industry. “When Kevin Mitnick   show more ...  

passed, I realized that he would never be able to […] La entrada New Docuseries Spotlights Hackers Who Shaped Cybersecurity – Source: www.darkreading.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Blog

Source: socprime.com – Author: Daryna Olyniychuk Hot on the heels of the re-emergence of a more advanced NonEuclid RAT variant in the cyber threat arena, a novel malware iteration known as the Eagerbee backdoor poses an increasing threat to organizations in the Middle East, primarily targeting Internet Service   show more ...  

Providers (ISPs) and state agencies. The enhanced […] La entrada EAGERBEE Malware Detection: New Backdoor Variant Targets Internet Service Providers and State Bodies in the Middle East – Source: socprime.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Connor Jones The cybersecurity industry is urging those in charge of defending their orgs to take mitigation efforts “seriously” as Ivanti battles two dangerous new vulnerabilities, one of which was already being exploited as a zero-day. It’s just under a   show more ...  

year since the last high-profile security snafu hit the vendor and […] La entrada Zero-day exploits plague Ivanti Connect Secure appliances for second year running – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Connor Jones Security researchers are once again being lured into traps by attackers, this time with fake exploits of serious Microsoft security flaws. Trend Micro spotted what appears to be a fork of the legitimate proof-of-concept (PoC) exploit for LDAPNightmare, initially   show more ...  

published by SafeBreach Labs on January 1. But the “forked” […] La entrada Security pros baited with fake Windows LDAP exploit traps – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Simon Sharwood Japan’s National Police Agency and Center of Incident Readiness and Strategy for Cybersecurity have confirmed third party reports of attacks on local orgs by publishing details of a years-long series of attacks attributed to a China-backed source. The   show more ...  

agencies have named the actor “MirrorFace”, aka “Earth Kasha”, and outlined […] La entrada Japanese police claim China ran five-year cyberattack campaign targeting local orgs – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Iain Thomson A leading education software maker has admitted its IT environment was compromised in a cyberattack, with students and teachers’ personal data – including some Social Security Numbers and medical info – stolen. PowerSchool says its cloud-based student   show more ...  

information system is used by 18,000 customers around the globe, including the […] La entrada Database tables of student, teacher info stolen from PowerSchool in cyberattack – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: go.theregister.com – Author: Brandon Vigliarolo The outgoing leader of the United States’ Office of the National Cyber Director has a clear message for whomever President-elect Trump picks to be his successor: There’s a lot of work still to do. Speaking to the Foundation for the Defense of   show more ...  

Democracies yesterday, outgoing director National Cyber Director […] La entrada I tried hard, but didn’t fix all of cybersecurity, admits outgoing US National Cyber Director – Source: go.theregister.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.infosecurity-magazine.com – Author: Two significant security vulnerabilities have been identified in the Fancy Product Designer premium plugin, which allows the customization of WooCommerce products. The issues remain unpatched in the latest version, 6.4.3, affecting WordPress websites using the   show more ...  

plugin. The plugin, developed by Radykal, has over 20,000 sales and enables extensive product customization. However, […] La entrada Fancy Product Designer Plugin Flaws Expose WordPress Sites – Source: www.infosecurity-magazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.infosecurity-magazine.com – Author: A prolonged cyber-attack campaign targeting Japanese organizations and individuals since 2019 has been attributed to the China-linked threat actor MirrorFace, also known as Earth Kasha, by Japan’s National Police Agency (NPA) and the National Center of Incident   show more ...  

Readiness and Strategy for Cybersecurity (NISC). The attacks aimed to steal sensitive information related […] La entrada Japan Faces Prolonged Cyber-Attacks Linked to China’s MirrorFace – Source: www.infosecurity-magazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Cyber Security News

Source: www.infosecurity-magazine.com – Author: North American school software provider PowerSchool has reportedly paid a ransom to prevent attackers from releasing stolen data of students and teachers. A message to parents by the Howard-Suamico School District in Wisconsin, US, seen by news outlet NBC 26,   show more ...  

read: “PowerSchool confirmed that this was not a ransomware attack but […] La entrada PowerSchool Reportedly Pays Ransom to Prevent Student Data Leak – Source: www.infosecurity-magazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 Commission

Source: www.infosecurity-magazine.com – Author: The EU Commission has been found liable for breaching the EU’s own data protection rules in a landmark ruling that could open the door to class action lawsuits in the region. In a civil litigation action brought by an EU citizen living in Germany, the General   show more ...  

Court of the EU found […] La entrada EU Commission Liable for Breaching EU’s Own Data Protection Rules – Source: www.infosecurity-magazine.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

2025-01
Aggregator history
Thursday, January 09
WED
THU
FRI
SAT
SUN
MON
TUE
JanuaryFebruaryMarch