Oktacron logo
Cyber security aggregate rss news

Cyber security aggregator - feeds history
image for Meet the Top 100 Cyb ...

 Cyber Essentials

As cyber threats become more advanced, the need for strong leadership in cybersecurity is clearer than ever. Across Australia and New Zealand, cybersecurity leaders are on the front lines, protecting everything from financial systems to critical infrastructure. They are facing growing challenges as cybercriminals and   show more ...  

state actors target key sectors, making their role in securing networks, strengthening resilience, and defending vital industries essential to our safety and economy. Recognizing the importance of cybersecurity, the Australian government has pledged $15–$20 billion by 2033–34 to enhance the nation’s cyber capabilities, including strengthening offensive cyber operations through the REDSPICE program. This move highlights the growing recognition of cybersecurity’s critical role in safeguarding the country. In this article, we spotlight the top 100 cybersecurity leaders in the ANZ region, individuals who are leading the charge to keep systems secure, shape policy, and create innovative solutions in the ever-evolving world of cybersecurity. Their expertise and efforts are vital in defending against digital threats and ensuring the resilience of our infrastructure. The Role of Cybersecurity Leaders in ANZ Region Cybersecurity leaders in the ANZ region play a multifaceted role, from securing critical infrastructure to leading innovative security strategies for organizations. Their efforts are not confined to internal risk management – they are also working collaboratively with both governments and private sectors to build stronger defenses against the ever-evolving threat landscape. The cybersecurity leaders in the region spans various industries, from banking to healthcare, government, and beyond. These leaders are instrumental in creating frameworks, driving policy changes, and advancing the development of next-gen security technologies that can stay ahead of the curve when it comes to evolving threats. Top 100 Cybersecurity Leaders in the ANZ Region Here is a list of 100 cybersecurity leaders in the ANZ region who have made remarkable contributions to the field, helping secure organizations and drive policy change in the face of growing cyber threats: Name Designation Organization Name Aaron Bailey CISO The Missing Link Aaron McKeown CISO Vector Limited Ad Wolst Head of Cyber Security Engineering & Platform Services Bupa Adwin Singh Cyber Security Domain Lead - CISO Office Inland Revenue NZ Akash Mittal CISO Sumitomo Forestry Australia Alissa Maclean Cyber Security Engineer Manager Australian Red Cross Lifeblood Alistair Vickers CISO Horizon Energy Group Limited Dr. Amit Chaubey CEO NIAD Technologies Anand Patil  Head of Cyber Security Teladoc Health Andy Tamara Head of Security humm group Andy Pace Network & Information Security Manager MediaWorks NZ Annie Hagar Cyber Security Partner Norton Rose Fulbright Antonio (Tony) Lou Cyber Security Manager Bendigo Health Anya Avinash Head of Cybersecurity Bank First Arun Singh ANZ Chief Information Security Officer Zip Co Babu Srinivas Global Head - Cyber Competency & Digital Trust BHP Barney Rehfisch IT Operations Manager Nando's Australia & New Zealand Barry Anderson Information Security Architecture, Strategy and Engineering Manager HESTA Bethwyn Berry Head of Cybersecurity, PMO & Governance Bluescope Australian Steel Products (ASP) at Bluescope Callum Nelson CISO EBOS Group Limited Charles Gonzalez CISO Metcash Christopher Lowe GM Cybersecurity Ainsworth Game Technology Cody Keeltka CISO Australian Payments Plus Crispin Apsey Cyber Security and Operations Manager SecurePay Dan Maslin Global Chief Information Security Officer Monash University Dane Maslen CISO Kami Mohammad Arif Head of Information Security (CISO) Guild Group Darren Kane CISO nbn® Australia David Geber General Manager Information Security & Risk REST Dean Kastelic Security Advisor / vCISO Bapcor Limited Doug Hammond Chief Information Security Officer Uniting Care Edmond Loza Group Manager - Cyber Security Workwear Group Eshan Dissanayake CISO Officeworks Fred Hadad Chief Information Security Officer Excite Cyber Fred Thiele CISO Interactive Garry Bentlin Group CISO Nine George Abraham Chief Information Security Officer Frontier Software Grant Anthony CISO Orion Health Hari Jegatheeswaran Australian CISO & Head of APAC Cyber Operations Deloitte Australia Harsh Busa CISO Avant Mutual Ivan Dobay Senior Cybersecurity Risk and Governance Partner ANSTO James Ng General Manager - Cyber Security (CISO) Insignia Financial Jeff Whitton Founder Yirigga Jeremy Koster CISO Transgrid Johann Blignaut Head of Group IT Cyber & Data Protection Crown Resorts John Ooi CISO Australian Unity Kapil Yewale Head of Cybersecurity Clearview Kevin O Sullivan Acting Chief Solutions Officer/ Head of Cyber & Information Security Kinetic IT Kirk Stephen Head of Cyber Security Baby Bunting Lee Barney CISO TPG Telecom Leron Zinatullin Chief Information Security Officer Linkly Group Liam Connolly CISO SEEK Louisa Vogelenzang Head of Cybersecurity Asia Pacific & Japan (APJ) | BISO | Senior Director Dayforce Lukasz Gogolkiewicz Head of Cyber Security Accent Group Limited Luke E Cyber Security Defense Lead Bunnings Mackenzie Muir CISO Allianz Australia Manasseh Paradesi CISO Tyro Payments Mario Ellaz CISO AusNet Mark Leighton CISO Aurecon Mark Haldane Head of Cyber Defence Coles Group Mark Spadafora Chief Technology Officer National Cyber Security Centre Mazino Onibere Head of Cyber Security, Risk and Compliance Regis Aged Care Mohan Swamy Cyber Security Manger / leader Pacific Blue Australia Neha Sharma CISO The Star Entertainment Group Nidhin Tamil Chief Information Security Officer Boral Nigel Hedges General Manager - IT Security Risk & Compliance (CISO) Chemist Warehouse Jean-Baptiste B. CISO / Director of Technology - Security, Risk & Compliance AMP Peeyush Khare Head of Cyber Security Practice - APAC Tech Mahindra Pieter van der Merwe CISO Woolworths Group Pritam Rakshit CISO Cuscal Limited Richard Watson Global & Asia-Pacific Cybersecurity Consulting Leader EY Robert Turney CISO auDA - .au Domain Administration Ltd. Robert Veres CISO Colonial First State Roxanne (R) Pashaei CISO NSW Rural Fire Service Sam Fariborz CISO David Jones Sam Conde Head of IT - Security Dyson Group of Companies Samrat Seal Group Manager - Cyber Security Kmart Australia Limited Sanja Marais Chief Technology and Security Office Aspen Medical Santanu Laudh Chief Information Security Officer OFX Sara Abak CISO Intellihub Group Serkan Tek Infrastructure & Information Security Team Leader Premiere Retail Shane Marquis Manager Cyber Security Architecture Asahi Shannon Remedio Cyber Tech Engineering  Lead Bupa Sourish Datta CISO Victorian Government Stefan Sherkat CISO Reece Group Stephen Bennett Global Chief Information Security Officer Domino's Pizza Enterprises Limited Steven Rebello CISO Endeavour Group Sunil Saale Chief Information Security Officer MinterEllison Tara Dharnikota Head of Information Security Management PEXA Terry Reidy Associate Director Cybersecurity Operations and Capability University of Melbourne Tharaka Perera Head of Information Security Estia Health Ltd Tharusha Udugama Cybersecurity Manager HPX Group Tim Litton Acharya CIO SafetyCulture Varun Balakrishnan CISO Healthscope Venkat Krishnan CISO TAL Australia Vijay Krishnan CISO UniSuper Vijay Narayanan CISO Mercy Health Australia Vishal Kumar Gupta Global IT Security Governance and Risk Lead Hansen Technologies Vishwanath Nair Head Cyber Risk & Compliance (CISO) BaptistCare Will Sharpe CISO Telstra Health

image for Malware Bypasses Chr ...

 Cyber News

Cyble researchers have discovered a sophisticated malware attack that uses dual injection techniques to bypass Google Chrome’s App-Bound Encryption. Chrome App-Bound Encryption was introduced last year to protect cookies from infostealer malware, so attacks that bypass that protection could potentially access user   show more ...  

accounts and other sensitive information. In a blog post this week, Cyble researchers detailed the sophisticated attack, which hides a malicious LNK file in a ZIP file – disguised as a PDF – and also makes a malicious XML project look like a PNG to trick users into opening it. “This attack leverages fileless execution, scheduled task persistence, and Telegram-based communication to evade detection while stealing sensitive data,” the researchers wrote. “By exploiting MSBuild.exe and using a double injection technique, the malware executes directly in memory, making it harder to detect. Its ability to bypass Chrome’s Application-Bound Encryption and extract credentials further strengthens its impact.” Sophisticated Chrome App-Bound Encryption Bypass Detailed The Cyble researchers said the file names suggest that the malware is “likely targeting organizations in Vietnam, particularly in the Telemarketing or Sales sectors.” It’s not clear how the malware was initially delivered. The researchers provided an in-depth analysis of the infection chain, which includes an LNK file that creates a scheduled task that runs every 15 minutes, using Microsoft Build Engine to deploy malicious C# code. The shortcut file copies an XML project file to the Temp directory and initiates a command to create the scheduled task, which launches MSBuild.exe to execute embedded C# code from the XML file. “The malicious code operates within the MSBuild.exe process, deploying different components based on the system’s architecture,” the researchers wrote. The double injection technique used by the malware — Process Injection and Reflective DLL Injection — allows it "to stealthily execute malicious code in memory without leaving traces on the disk, making it harder for traditional security solutions to detect." Telegram Web API Used for Command and Control The malware uses the Telegram Web API to establish command and control communications with the threat actor (TA), and the malware “enables the TA to change the Telegram bot ID and chat ID as required, offering flexibility in controlling their communication channels.” “The use of Telegram Web API for exfiltration and dynamic bot ID switching ensures continued control over infected systems,” the researchers said. The threat actor can use that connection to issue a range of commands, such as bypassing Chrome App-Bound Encryption to steal an encryption key, deploying a custom info stealer, and exfiltrating sensitive user data from the Chrome browser, including cookies and login data. To prevent falling victim to such attacks, Cyble recommended that organizations engage in user training, implement strict email attachment filtering and application whitelisting, and limit file execution paths and extensions, among other defensive steps. The full Cyble blog includes in-depth analysis of the infection chain, communications and exfiltration, Indicators of Compromise (IoCs), and MITRE ATT&CK Techniques.

image for Experts Flag Securit ...

 A Little Sunshine

New mobile apps from the Chinese artificial intelligence (AI) company DeepSeek have remained among the top three “free” downloads for Apple and Google devices since their debut on Jan. 25, 2025. But experts caution that many of DeepSeek’s design choices — such as using hard-coded encryption   show more ...  

keys, and sending unencrypted user and device data to Chinese companies — introduce a number of glaring security and privacy risks. Public interest in the DeepSeek AI chat apps swelled following widespread media reports that the upstart Chinese AI firm had managed to match the abilities of cutting-edge chatbots while using a fraction of the specialized computer chips that leading AI companies rely on. As of this writing, DeepSeek is the third most-downloaded “free” app on the Apple store, and #1 on Google Play. DeepSeek’s rapid rise caught the attention of the mobile security firm NowSecure, a Chicago-based company that helps clients screen mobile apps for security and privacy threats. In a teardown of the DeepSeek app published today, NowSecure urged organizations to remove the DeepSeek iOS mobile app from their environments, citing security concerns. NowSecure founder Andrew Hoog said they haven’t yet concluded an in-depth analysis of the DeepSeek app for Android devices, but that there is little reason to believe its basic design would be functionally much different. Hoog told KrebsOnSecurity there were a number of qualities about the DeepSeek iOS app that suggest the presence of deep-seated security and privacy risks. For starters, he said, the app collects an awful lot of data about the user’s device. “They are doing some very interesting things that are on the edge of advanced device fingerprinting,” Hoog said, noting that one property of the app tracks the device’s name — which for many iOS devices defaults to the customer’s name followed by the type of iOS device. The device information shared, combined with the user’s Internet address and data gathered from mobile advertising companies, could be used to deanonymize users of the DeepSeek iOS app, NowSecure warned. The report notes that DeepSeek communicates with Volcengine, a cloud platform developed by ByteDance (the makers of TikTok), although NowSecure said it wasn’t clear if the data is just leveraging ByteDance’s digital transformation cloud service or if the declared information share extends further between the two companies. Image: NowSecure. Perhaps more concerning, NowSecure said the iOS app transmits device information “in the clear,” without any encryption to encapsulate the data. This means the data being handled by the app could be intercepted, read, and even modified by anyone who has access to any of the networks that carry the app’s traffic. “The DeepSeek iOS app globally disables App Transport Security (ATS) which is an iOS platform level protection that prevents sensitive data from being sent over unencrypted channels,” the report observed. “Since this protection is disabled, the app can (and does) send unencrypted data over the internet.” Hoog said the app does selectively encrypt portions of the responses coming from DeepSeek servers. But they also found it uses an insecure and now deprecated encryption algorithm called 3DES (aka Triple DES), and that the developers had hard-coded the encryption key. That means the cryptographic key needed to decipher those data fields can be extracted from the app itself. There were other, less alarming security and privacy issues highlighted in the report, but Hoog said he’s confident there are additional, unseen security concerns lurking within the app’s code. “When we see people exhibit really simplistic coding errors, as you dig deeper there are usually a lot more issues,” Hoog said. “There is virtually no priority around security or privacy. Whether cultural, or mandated by China, or a witting choice, taken together they point to significant lapse in security and privacy controls, and that puts companies at risk.” Apparently, plenty of others share this view. Axios reported on January 30 that U.S. congressional offices are being warned not to use the app. “[T]hreat actors are already exploiting DeepSeek to deliver malicious software and infect devices,” read the notice from the chief administrative officer for the House of Representatives. “To mitigate these risks, the House has taken security measures to restrict DeepSeek’s functionality on all House-issued devices.” TechCrunch reports that Italy and Taiwan have already moved to ban DeepSeek over security concerns. Bloomberg writes that The Pentagon has blocked access to DeepSeek. CNBC says NASA also banned employees from using the service, as did the U.S. Navy. Beyond security concerns tied to the DeepSeek iOS app, there are indications the Chinese AI company may be playing fast and loose with the data that it collects from and about users. On January 29, researchers at Wiz said they discovered a publicly accessible database linked to DeepSeek that exposed “a significant volume of chat history, backend data and sensitive information, including log streams, API secrets, and operational details.” “More critically, the exposure allowed for full database control and potential privilege escalation within the DeepSeek environment, without any authentication or defense mechanism to the outside world,” Wiz wrote. [Full disclosure: Wiz is currently an advertiser on this website.] KrebsOnSecurity sought comment on the report from DeepSeek and from Apple. This story will be updated with any substantive replies.

 Firewall Daily

IMI plc, a renowned engineering company, is currently dealing with a cybersecurity incident involving unauthorized access to its systems. Upon discovering the breach, the company promptly engaged external cybersecurity experts to investigate the situation and take necessary steps to contain the incident. Alongside   show more ...  

these efforts, IMI is also ensuring compliance with its regulatory obligations related to the IMI cyberattack.  The company is committed to providing updates on the situation as it develops. However, the financial impact of the breach remains uncertain. IMI’s stock has already taken a hit, with shares dropping by 2.4% as of the latest report by Investing.com. The breach has sparked concerns among investors and analysts, particularly because it comes amid a wave of similar cyberattacks affecting multiple companies in recent times.  Details into the IMI Cyberattack  While the full scope of the IMI cyberattack has not yet been revealed, analysts are evaluating the potential financial impact. Some analysts suggest that the incident could lead to a range of possible outcomes, from minimal effects to more significant disruptions. A key point of uncertainty is whether the breach will lead to revenue deferrals or extraordinary charges.   The ongoing investigation is being handled by external cybersecurity experts who have been tasked with analyzing the breach’s severity and working to mitigate further risks. IMI plc has also indicated that they will provide updates on the situation as more information becomes available.  The Cyber Express has reached out to the organization to learn more about cybersecurity incidents. However, at the time of writing this, no official statement or response has been received.   Multiple Companies Been Targeted in Cyberattacks  This IMI cyberattack plc is part of a broader trend of increasing cyber threats that have been targeting businesses and institutions across industries. Over the past few years, numerous organizations have fallen victim to cyberattacks, which have exposed sensitive data and compromised internal systems. In fact, cyberattacks have now become one of the most prominent security challenges for businesses, particularly those handling sensitive customer information or critical operational systems. The IMI cyberattack was highlighted as part of a wider pattern of attacks that have affected various sectors. While the details of the IMI incident remain scarce, the company’s efforts to contain the breach and work with external experts are in line with industry practices in the wake of a cyberattack.  The breach also draws attention to the growing vulnerability of companies in the digital age, where cybercriminals are becoming increasingly sophisticated. Similar cyberattacks have been reported at other organizations, such as the University of Notre Dame, which has been investigating a recent cyberattack involving unauthorized access to its systems. Educational institutions, which handle large amounts of sensitive data, are particularly attractive targets for cybercriminals. With the rise of digital tools and global collaborations, universities are at increased risk from malware, phishing attacks, and other cyber threats.  The rise in cyberattacks is not limited to educational institutions. On January 24, 2025, PowerSchool, a platform that handles student information systems, confirmed a data breach that exposed the personal information of over 300,000 educators, including Social Security numbers. The breach prompted PowerSchool to offer affected individuals two years of free identity protection and credit monitoring services. This data breach is another example of the growing cybersecurity challenges faced by companies across various sectors. Another recent cyberattack involved FalconFeedsio, whose official X (formerly Twitter) account was hacked to promote fraudulent cryptocurrency scams. Despite having two-factor authentication (2FA) enabled, the breach enabled the hackers to use the account to promote misleading posts about digital currencies. The compromised account led users to malicious websites. The incident has raised concerns about the vulnerabilities that even well-protected accounts can face in the ongoing battle against cyber threats.  Media Disclaimer: This report is based on internal and external research obtained through various means. The information provided is for reference purposes only, and users bear full responsibility for their reliance on it. The Cyber Express assumes no liability for the accuracy or consequences of using this information.

 Feed

Cisco has released updates to address two critical security flaws Identity Services Engine (ISE) that could allow remote attackers to execute arbitrary commands and elevate privileges on susceptible devices. The vulnerabilities are listed below - CVE-2025-20124 (CVSS score: 9.9) - An insecure Java deserialization vulnerability in an API of Cisco ISE that could permit an authenticated, remote

 Feed

A new malware campaign dubbed SparkCat has leveraged a suit of bogus apps on both Apple's and Google's respective app stores to steal victims' mnemonic phrases associated with cryptocurrency wallets.  The attacks leverage an optical character recognition (OCR) model to exfiltrate select images containing wallet recovery phrases from photo libraries to a command-and-control (C2) server,

 Feed

Privileged Access Management (PAM) has emerged as a cornerstone of modern cybersecurity strategies, shifting from a technical necessity to a critical pillar in leadership agendas. With the PAM market projected to reach $42.96 billion by 2037 (according to Research Nester), organizations invest heavily in PAM solutions. Why is PAM climbing the ranks of leadership priorities? While Gartner

 Feed

The North Korea-linked nation-state hacking group known as Kimsuky has been observed conducting spear-phishing attacks to deliver an information stealer malware named forceCopy, according to new findings from the AhnLab Security Intelligence Center (ASEC). The attacks commence with phishing emails containing a Windows shortcut (LNK) file that's disguised as a Microsoft Office or PDF document.

 Feed

You arrive at the office, power up your system, and panic sets in. Every file is locked, and every system is frozen. A ransom demand flashes on your screen: "Pay $2 million in Bitcoin within 48 hours or lose everything." And the worst part is that even after paying, there’s no guarantee you’ll get your data back. Many victims hand over the money, only to receive nothing in return, or worse, get

 Feed

Bogus websites advertising Google Chrome have been used to distribute malicious installers for a remote access trojan called ValleyRAT. The malware, first detected in 2023, is attributed to a threat actor tracked as Silver Fox, with prior attack campaigns primarily targeting Chinese-speaking regions like Hong Kong, Taiwan, and Mainland China. "This actor has increasingly targeted key roles

 Feed

Ransomware attacks netted cybercrime groups a total of $813.5 million in 2024, a decline from $1.25 billion in 2023. The total amount extorted during the first half of 2024 stood at $459.8 million, blockchain intelligence firm Chainalysis said, adding payment activity slumped after July 2024 by about 3.94%. "The number of ransomware events increased into H2, but on-chain payments declined,

 Data loss

In episode 403 of "Smashing Security" we dive into the mystery of $65 million vanishing from Coinbase users faster than J-Lo slipped into Graham's DMs, Geoff gives a poor grade for PowerSchool's security, and Carole takes a curious look at QR codes. All this and more is discussed in the latest edition   show more ...  

of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by The Lazarus Heist's Geoff White.

 Guest blog

Well, this is a different approach to the scam problem... The government of Thailand has cut the power supply to areas near its border with Myanmar that are known to host brutal scam compounds. These heavily-guarded fraud factories house armies of people, coerced into defrauding innocent people through bogus investment and romance-baiting scams. Read more in my article on the Hot for Security blog.

 0CISO2CISO

Source: www.theguardian.com – Author: Dan Milmo Global technology editor Ransomware payments fell by more than a third last year to $813m (£650m) as victims refused to pay cybercriminals and law enforcement cracked down on gangs, figures reveal. The decline in such cyber-attacks – where access to a computer   show more ...  

or its data is blocked and money […] La entrada Global ransomware payments plunge by a third amid crackdown – Source: www.theguardian.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: HackerOne. Based in Japan, LINE Corporation is dedicated to the mission of “Closing the Distance,” bringing together information, services and people. The LINE messaging app launched in June 2011, offering users chat, voice call and video call services, as well as   show more ...  

features like Timeline, News, and LINE Stickers. The messaging app […] La entrada LINE on Securing the Application Development Lifecycle with Bug Bounties – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: Jobert Abma. Imagine being part of an organization that has a security team that manages risks by saying “no” to change in an era of cloud migrations, remote-first work, and increased dependency on our digital presence. People develop an aversion to working with security   show more ...  

teams because they block them from getting […] La entrada What Years of AWS Hacking Tells Us About Building Secure Apps – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: HackerOne. Just five years ago, leading rideshare, food delivery, and payments company Grab, became one of the first companies in Southeast Asia to implement a hacker-powered security program. Though it started as a private program, Grab launched their public bug bounty   show more ...  

program in 2017.  In just three years Grab became one […] La entrada Grab Celebrates 5 Years on HackerOne – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: HackerOne. Introduction: During November of this year, you may have noticed a new page on HackerOne: hackerone.com/policies. This page contains the Code of Conduct and other behavioral guidelines for using the HackerOne platform, and even includes a Frequently Asked   show more ...  

Questions section. Please review these pages and ensure that you understand them fully.  […] La entrada HackerOne Policies Update – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: HackerOne. How can we make this one different?  For organizations that operate in the digital space, there’s no such thing as business-as-usual anymore— which means that business-as-usual security can no longer suffice. So when HackerOne and Verizon Media came together   show more ...  

to host a second virtual live hacking event, we knew we […] La entrada The World’s Largest Live Hacking Event – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: HackerOne. Every quarter, a CISO has to stand up in front of their leadership and attempt to put a price on something that didn’t happen. When your job is all about avoiding costly incidents and mistakes, it’s hard to put a dollar value on your work, and even harder to   show more ...  

justify […] La entrada Quantifying Risk: How do you measure success in security? – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.hackerone.com – Author: Ben Sadeghipour. Dear hackers,  The Grinch has gone hi-tech this year with the intentions of ruining the holidays and we need you to infiltrate his network and take him down!  Starting at 12pm PT on Saturday, December 12, 2020 we will be introducing a new flag to the Grinch   show more ...  

Network website. […] La entrada 12 Days of Hacky Holidays CTF – Source:www.hackerone.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 CISOs

Source: www.techrepublic.com – Author: Fiona Jackson Over a fifth of CISOs have been pressured not to report a compliance issue, according to new research. As they take on greater responsibility in the boardroom, they also face increasing accountability for security incidents, making them more vulnerable to   show more ...  

executive pressure when compliance risks arise. The report, published […] La entrada 21% of CISOs Have Been Pressured Not to Report a Compliance Issue, Research Finds – Source: www.techrepublic.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 AI

Source: www.techrepublic.com – Author: Fiona Jackson The U.K. government has introduced its “world-first” AI Cyber Code of Practice for companies developing AI systems. The voluntary framework outlines 13 principles designed to mitigate risks such as AI-driven cyberattacks, system failures, and data   show more ...  

vulnerabilities. The voluntary code applies to developers, system operators, and data custodians at organisations […] La entrada UK Announces ‘World-First’ Cyber Code of Practice for Companies Developing AI – Source: www.techrepublic.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 'Cyber

Source: sec.cloudapps.cisco.com – Author: . Cisco IOS, IOS XE, and IOS XR Software SNMP Denial of Service Vulnerabilities High CVE-2025-20169 CVE-2025-20170 CVE-2025-20171 More… CWE-805 Download CSAF Email Summary Multiple vulnerabilities in the Simple Network Management Protocol (SNMP) subsystem of Cisco   show more ...  

IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, […] La entrada Cisco IOS, IOS XE, and IOS XR Software SNMP Denial of Service Vulnerabilities – Source:sec.cloudapps.cisco.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 'Cyber

Source: sec.cloudapps.cisco.com – Author: . Cisco Identity Services Engine Insecure Java Deserialization and Authorization Bypass Vulnerabilities Critical CVE-2025-20124 CVE-2025-20125 CWE-285 CWE-502 Download CSAF Email Summary Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an   show more ...  

authenticated, remote attacker to execute arbitrary commands and elevate privileges on an affected device. Note: To exploit these vulnerabilities, […] La entrada Cisco Identity Services Engine Insecure Java Deserialization and Authorization Bypass Vulnerabilities – Source:sec.cloudapps.cisco.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.mcafee.com – Author: Jasdev Dhaliwal. Do you? I do and I’ve been doing it since I said “I do.” And if you are married or at least in a committed lifelong relationship, knowing each other’s passwords is probably expected. Today, sharing passwords has become a sign of commitment, a signal of   show more ...  

love and devotion, […] La entrada Do You Share Passwords with Friends and Family? – Source:www.mcafee.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.mcafee.com – Author: Jasdev Dhaliwal. Update: AT&T announced a cybersecurity breach on July 12th that exposed call records and text data for a significant portion of its customer base. This includes customers on mobile virtual network operators (MVNOs) that use AT&T’s network, like   show more ...  

Cricket, Boost Mobile, and Consumer Cellular. The compromised data covers a […] La entrada UPDATED: AT&T Data Leak: What You Need to Know and How to Protect Yourself – Source:www.mcafee.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.mcafee.com – Author: McAfee Labs. Authored by Yashvi Shah and Vignesh Dhatchanamoorthy McAfee Labs has discovered a highly unusual method of malware delivery, referred to by researchers as the “Clickfix” infection chain. The attack chain begins with users being lured to visit seemingly   show more ...  

legitimate but compromised websites. Upon visiting, victims are redirected to domains […] La entrada ClickFix Deception: A Social Engineering Tactic to Deploy Malware – Source:www.mcafee.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.mcafee.com – Author: Jasdev Dhaliwal. In today’s interconnected world, our mobile devices serve as essential tools for communication, productivity, and entertainment. However, for some tech-savvy users, the allure of unlocking the full potential of their devices through jailbreaking (for iOS) or   show more ...  

rooting (for Android) can be tempting. While these processes offer users greater control […] La entrada How Does Jailbreaking Or Rooting Affect My Mobile Device Security? – Source:www.mcafee.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.mcafee.com – Author: Jasdev Dhaliwal. It’s all anyone can talk about. In classrooms, boardrooms, on the nightly news, and around the dinner table, artificial intelligence (AI) is dominating conversations. With the passion everyone is debating, celebrating, and villainizing AI, you’d think it was   show more ...  

a completely new technology; however, AI has been around in various […] La entrada What Is Generative AI and How Does It Work? – Source:www.mcafee.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

 1 - Cyber Security News Post

Source: www.mcafee.com – Author: Jasdev Dhaliwal. When it comes to passwords, most of us would love nothing more than to set it and forget it. But that’s exactly what hackers are hoping for — in fact, it makes their job a lot easier. This means the best line of defense is frequent password changes.   show more ...  

    But how […] La entrada Everything You Need to Know to Keep Your Passwords Secure – Source:www.mcafee.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.

2025-02
Aggregator history
Thursday, February 06
SAT
SUN
MON
TUE
WED
THU
FRI
FebruaryMarchApril