Data Breach Today

JUNE 17, 2020

Senator Wyden Releases CIA's Own 2017 Report Into Leak of 'Vault 7' Hacking Tools An internal CIA report from 2017 - just released in heavily redacted form - found that the agency's failure to secure its own systems facilitated the massive "Vault 7" data breach that enabled classified information, including details of 35 CIA hacking tools, to be leaked (..)

IT 257

IT Security Data breaches 257

Data Breach Today

MARCH 20, 2024

Among the exiting employees is Zohar Alon, the longtime Dome9 Security leader who joined Cybereason just 11 months ago as president of product and research and development.o joined Cybereason just 11 months ago as president of product and research and development.

IT 280

IT Security 280

Data Breach Today

FEBRUARY 27, 2024

Forrester's David Holmes on Why CISOs Must Evaluate Microsegmentation in Cloud Microsegmentation is a fundamental concept in zero trust security, but CISOs should assess its feasibility before diving in.

IT 265

IT Cloud Security 265

Data Breach Today

FEBRUARY 5, 2021

Stormshield Is a Major Supplier of Security Products to the French Government French security vendor Stormshield has launched an investigation after an internal review found that hackers accessed the source code of the company's network security product.

Access 363

Access Security IT Government 363

Data Breach Today

APRIL 1, 2024

GSA Establishes Framework for Security Regulations Covering Federal Acquisitions The federal government aims to streamline its information security and supply chain security procurement policies as part of an effort to better safeguard federal systems.

Information Security 271

Information Security Government Security Cybersecurity 271

Data Breach Today

JUNE 9, 2022

Jeetu Patel of Cisco Discusses the Critical Ability to 'Bounce Back' From Incidents With rising threats facing critical infrastructure sectors, such as healthcare and financial services, "society as a whole, and the safety of society is completely dependent on cyber risk" - and being security resilient, says Jeetu Patel of Cisco.

Financial Services 245

Financial Services Security IT Risk 245

Data Breach Today

NOVEMBER 30, 2023

In the constant struggle to manage the other five pillars - identify, protect, detect, respond and recover - security leaders often do not have governance at top of mind, said Netography CEO Martin Roesch, but he added, "Good governance is the root of having good security."

Government 282

Government IT Security 282

Data Breach Today

FEBRUARY 11, 2021

The incident is likely to raise questions about the vulnerability of critical infrastructure in small towns on slim IT security budgets.

IT 297

IT Passwords Security Access 297

Data Breach Today

FEBRUARY 10, 2021

The incident is likely to raise questions over the vulnerability of critical infrastructure in small towns on slim IT security budgets.

IT 271

IT Security Passwords Access 271

Data Breach Today

MAY 15, 2024

Palo Alto Networks and Google Cloud Execs on Power of Security Solution Partnership The move to cloud offers numerous benefits, but cloud apps and multi-cloud environments add complexity to defending IT environments.

Cloud 164

Cloud Security IT 164

Security Affairs

MARCH 8, 2024

Cisco addressed two high-severity vulnerabilities in Secure Client that could lead to code execution and unauthorized remote access VPN sessions. Cisco released security patches to address two high-severity vulnerabilities in Secure Client respectively tracked as CVE-2024-20337 and CVE-2024-20338.

Security 95

Security IT Authentication Libraries 95

Data Breach Today

JULY 18, 2022

A new assessment framework aims to help patients, healthcare providers and others examine the various privacy, security and other risks of digital health technologies, says Tim Andrews of the nonprofit Organization for the Review of Care and Health Applications, which co-developed the framework.

Risk 240

Risk Privacy Security IT 240

Data Breach Today

DECEMBER 19, 2023

Okta Says Acquisition Will Expand Its Ability to Detect High-Risk Accounts Okta finalized an agreement to acquire Spera Security, saying the purchase will expand its ability to track risky accounts and access misconfigurations.

Security 289

Security Risk Access IT 289

Data Breach Today

OCTOBER 31, 2022

Consistency Is the Objective in IT Security, But Product Security Must Be Flexible Organizations expect the IT security landscape to be consistent - from builds and hardware to operating systems - but for product security, everything Honeywell makes is a snowflake with flexible, highly tailored design across many technologies, says Honeywell Product (..)

IT 143

IT Security 143

Jamf

MARCH 20, 2024

Securing your organization is a difficult task. Learn how a unified security platform makes security easier. Choosing the right software solutions can help.

Security 103

Security IT 103

Data Breach Today

NOVEMBER 9, 2023

Iranian Espionage Group Used Tactics From Previous Campaigns Security company CrowdStrike said it had observed Iranian hacker group Imperial Kitten, also known as TA456, Crimson Sandstorm and Tortoiseshell, conducting web compromise operations between 2022 and 2023 to infiltrate Israeli logistics, transportation and technology companies.

IT 270

IT Security 270

Data Breach Today

APRIL 5, 2023

Josh Hankins of Qualys on Tips and Tricks He Learned as a Practitioner Before he became a chief technical security officer at Qualys, Josh Hankins was a cybersecurity leader in financial services. He learned how security audit failures are increasingly costly, and he devised new strategies for audit preparation.

Financial Services 143

Financial Services Security IT Cybersecurity 143

Security Affairs

FEBRUARY 9, 2024

Ivanti warns customers of a new authentication bypass vulnerability in its Connect Secure, Policy Secure, and ZTA gateway devices. “An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, x), Ivanti Policy Secure (9.x, and 22.5R1.1); Policy Secure version 22.5R1.1;

Security 101

Security IT Authentication Access 101

Dark Reading

SEPTEMBER 26, 2023

Proactive Security holds the elusive promise of helping enterprises finally get ahead of threats, but CISOs must come to grips with the technological and philosophical change that it brings.

Security 98

Security IT 98

Data Breach Today

OCTOBER 5, 2023

The Question is Also One for the Legal Team to Own, Says Uber's Former CSO Trick question for CSOs: When does a security incident qualify as being a data breach? The answer is that it's "a very complicated question" best left to the legal team, said former Uber CSO Joe Sullivan, sharing lessons learned from the U.S.

IT 290

IT Data breaches Security 290

Data Breach Today

JANUARY 22, 2024

Build Resiliency by Simulating Real-World Attacks and Gaining Insight Into Threats As cyberthreats evolve, mobile network operators need offensive security to maintain resilience. Traditional security, such as firewalls and encryption, is not sufficient on its own.

Security 280

Security Encryption IT 280

Data Breach Today

MARCH 14, 2024

Zscaler Purchase Aims to Revolutionize Zero Trust Cybersecurity With Advanced AI Zscaler bought a data security startup led by a longtime Salesforce executive to help customers stay ahead of threats by beefing up data quality and AI models.

Security 275

Security Cybersecurity IT 275

Data Breach Today

MARCH 7, 2024

Cybersecurity and Infrastructure Security Agency hopes to expand voluntary information sharing between the federal government and open-source software operators with a series of actions the agency announced following a two-day open-source security summit held at its Virginia headquarters.

Security 288

Security Cybersecurity Government IT 288

Krebs on Security

FEBRUARY 29, 2024

Security experts say LockBit was likely bluffing and probably lost most of the data when the gang’s servers were seized this month by U.S. The ransomware group LockBit told officials with Fulton County, Ga. they could expect to see their internal documents published online this morning unless the county paid a ransom demand.

Security 259

Security Ransomware IT Access 259

Data Breach Today

JANUARY 7, 2024

SQL Injection Flaw Affects All Supported Versions of Ivanti Endpoint Manager Ivanti issued an urgent alert to users of its endpoint security product to patch a critical vulnerability that exposes systems to potential exploitation by unauthorized attackers.

Security 303

Security IT 303

Data Breach Today

SEPTEMBER 13, 2021

Meralco's Mel Migriño on How to Ensure OT Security In addition to doing asset inventory, it is important to profile the risks of each asset to ensure OT security, says Mel Migriño, vice president and group CISO at Meralco, the largest power distribution unit in the Philippines.

IT 164

IT Security Risk 164

Jamf

AUGUST 9, 2023

In this webinar series, Aaron Webb explains what security frameworks are, their importance and explains the critical role they play when securing your organization’s environment.

Security 98

Security IT Compliance Risk 98

Jamf

JANUARY 12, 2023

IT and security teams are tasked with the hefty responsibilty of securing their organization's data. Without the miracle of an infinite budget, teams have to select tools that give the most security for their buck.

Security 98

Security IT 98

IT Governance

NOVEMBER 17, 2022

The organisation’s share price plummeted by almost 19% following the data breach, and despite its claims that it has done the right thing, new details continue to emerge that cast doubt on Medibank’s cyber security practices. million current and former customers was compromised. The extent of the damage.

IT 107

IT Ransomware Security Data breaches 107

Security Affairs

JANUARY 19, 2024

So, it might not be time to panic, but it certainly is time to recognize that the threats and the benefits of quantum computing are here now, and security professionals need to ensure that they and the organization they work for are fully prepared. Can quantum computing break cryptography? Can it do it within a person’s lifetime?

IT 115

IT Encryption Cybersecurity Security 115