Krebs on Security

AUGUST 19, 2024

New details are emerging about a breach at National Public Data (NPD), a consumer data broker that recently spilled hundreds of millions of Americans’ Social Security Numbers, addresses, and phone numbers online. KrebsOnSecurity has learned that another NPD data broker which shares access to the same consumer records inadvertently published the passwords to its back-end database in a file that was freely available from its homepage until today.

Passwords 359

Passwords IT Archiving Data breaches 359

Data Breach Today

AUGUST 19, 2024

Cybercriminal Gang RansomHub Claims It Leaked 700 Gigabytes of Lab's Stolen Data Florida drug testing medical laboratory American Clinical Solutions told federal regulators that 300,000 individuals are caught up in a hacking incident now that criminal gang RansomHub has published 700 gigabytes worth of data stolen from the lab's network.

IT 286

IT 286

The Last Watchdog

AUGUST 19, 2024

President Biden’s call for the mainstreaming of Software Bill of Materials (SBOMs) is a major step forward. Related: Europe mandates resiliency Requiring a formal inventory of all components, libraries and modules in all business applications can help lock down software supply chains, especially in light of the SolarWinds and Colonial Pipeline attacks.

Security 173

Security Libraries Cloud Cybersecurity 173

Data Breach Today

AUGUST 19, 2024

NYUs Brennan Lodge on Training Your Own Model With Retrieval Augmented Generation Many cybersecurity organizations hope generative artificial intelligence and large language models will help them secure the enterprise and comply with the latest regulations. But to date, commercial LLMs have big problems - hallucinations and a lack of timely data, said NYU professor Brennan Lodge.

Artificial Intelligence 283

Artificial Intelligence Security Cybersecurity 283

Advertisement

Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance.

Passwords

WIRED Threat Level

AUGUST 19, 2024

The US Defense Department’s grand strategy for protecting Taiwan from a massive Chinese military offensive involves flooding the zone with thousands of drones.

Military 144

Military Security 144

AIIM

AUGUST 19, 2024

As organizations explore the potential of AI, information management practitioners may face the challenge of being perceived as roadblocks rather than facilitators. However, by aligning Generative AI initiatives with business goals and promoting intentional adoption, these professionals can pivot into a critical educator role.

Education 143

Education Artificial Intelligence 143

Data Breach Today

AUGUST 19, 2024

Officials Say the Olympic Games Saw 140 Cyberattacks. None Were Successful. France’s cyber defense agency teamed up with governments and security experts from across the globe to identify and mitigate a historic level of both physical and cyber threats following years of preparation, experts tell Information Security Media Group.

Information Security 235

Information Security Government Security 235

Security Affairs

AUGUST 19, 2024

Microsoft addressed a zero-day vulnerability actively exploited by the North-Korea-linked Lazarus APT group. Microsoft has addressed a zero-day vulnerability, tracked as CVE-2024-38193 (CVSS score: 7.8), which has been exploited by the North Korea-linked Lazarus APT group. The vulnerability, tracked as CVE-2024-38193 (CVSS score: 7.8), is a privilege escalation issue that resides in the Windows Ancillary Function Driver (AFD.sys) for WinSock.

Access 141

Access Security Marketing IT 141

Data Breach Today

AUGUST 19, 2024

German Government Analysis Finds Screenshots of File Directories A massive February leak of internal documents from Chinese hacking contractor iSoon revealed apparent hacking against European institutions and states, a German federal agency warned this week. Previous analysis of the leaked data by security researchers focused on iSoon's activities in Asia.

Government 162

Government Security 162

Advertisement

Many software teams have migrated their testing and production workloads to the cloud, yet development environments often remain tied to outdated local setups, limiting efficiency and growth. This is where Coder comes in. In our 101 Coder webinar, you’ll explore how cloud-based development environments can unlock new levels of productivity. Discover how to transition from local setups to a secure, cloud-powered ecosystem with ease.

Cloud

Security Affairs

AUGUST 19, 2024

Team Cymru, Silent Push and Stark Industries Solutions researchers uncovered a new infrastructure linked to the cybercrime group FIN7. Researchers from Team Cymru identified two clusters potentially linked to the cybercrime group FIN7. The team collaborated with the cybersecurity experts of Silent Push and Stark Industries Solutions who shared their findings.

Communications 139

Communications Cloud Cybersecurity Security 139

KnowBe4

AUGUST 19, 2024

Recently, we had a customer reach out to ask if disabling clickable uniform resource locator (URL) links in emails was enough protection by itself to potentially not need employee security awareness training and simulated phishing.

Security awareness 124

Security awareness Phishing Security 124

Data Breach Today

AUGUST 19, 2024

Aging Technology and Rising Competition Have Created a Need for Greater Investment The owners of eSentire are exploring a potential sale that could value the company at about $1 billion and attract the interest of private equity firms. The company is hoping to command a valuation equivalent to more than seven times its annual recurring revenue of about $150 million.

Sales 124

Sales IT 124

KnowBe4

AUGUST 19, 2024

Despite changing their stripes, the FBI warns organizations of new tactics used by this known ransomware threat group that are only making them more.

Ransomware 124

Ransomware Security awareness Phishing Security 124

Advertisement

Large enterprises face unique challenges in optimizing their Business Intelligence (BI) output due to the sheer scale and complexity of their operations. Unlike smaller organizations, where basic BI features and simple dashboards might suffice, enterprises must manage vast amounts of data from diverse sources. What are the top modern BI use cases for enterprise businesses to help you get a leg up on the competition?

Schneier on Security

AUGUST 19, 2024

Palo Alto Networks published its semi-annual report on ransomware. From the Executive Summary: Unit 42 monitors ransomware and extortion leak sites closely to keep tabs on threat activity. We reviewed compromise announcements from 53 dedicated leak sites in the first half of 2024 and found 1,762 new posts. This averages to approximately 294 posts a month and almost 68 posts a week.

Ransomware 112

Ransomware IT 112

KnowBe4

AUGUST 19, 2024

Highlights from a new survey focused on employee compliance reveals just how targeted and susceptible U.K. businesses are to phishing attempts.

Phishing 122

Phishing Compliance Cybersecurity Security 122

Collaboration 2.0

AUGUST 19, 2024

One of several Android security enhancements, Google's theft detection feature is rolling out now to a limited number of users.

IT 98

IT Security 98

KnowBe4

AUGUST 19, 2024

When it comes to the duration of a ransomware attack and the subsequent recovery process, the numbers are staggering and vary wildly. Partly because there’s no single source which compiles all the information in a consistent manner.

Ransomware 115

Ransomware IT 115

Advertisement

Cloud Development Environments (CDEs) are changing how software teams work by moving development to the cloud. Our Cloud Development Environment Adoption Report gathers insights from 223 developers and business leaders, uncovering key trends in CDE adoption. With 66% of large organizations already using CDEs, these platforms are quickly becoming essential to modern development practices.

Cloud

Collaboration 2.0

AUGUST 19, 2024

AI-generated content detectors are the new gatekeepers of originality, and they're getting harder to beat. Here's what to know about the technologies powering them.

98

98

OpenText Information Management

AUGUST 19, 2024

Digital asset management systems have rapidly evolved, earning their place in marketing technology stacks and becoming a crucial part of modern brand management. Optimizing and organizing digital media assets helps companies build brand consistency and ultimately, customer trust. DAM acts as a single source of the truth, improves content workflows and maximizes return on investment (ROI) from brand, campaign, and communication assets.

Analytics 59

Analytics Records Management Libraries Communications 59

Collaboration 2.0

AUGUST 19, 2024

I've spent the summer testing solar-powered power banks. It turns out the devices are universally rubbish and potentially unsafe. Here's what to use instead.

IT 98

IT 98

Armstrong Archives

AUGUST 19, 2024

Records Information Management (RIM) refers to the systematic handling of both digital and physical records throughout their entire lifecycle. Effective RIM practices help organizations manage critical information to support strategic planning and informed decision-making. At Armstrong Archives LLC , we provide secure and reliable record storage, document management, scanning, and secure document destruction services.

Records Management 52

Records Management Compliance Archiving Access 52

Advertisement

After a year of sporadic hiring and uncertain investment areas, tech leaders are scrambling to figure out what’s next. This whitepaper reveals how tech leaders are hiring and investing for the future. Download today to learn more!

IT

Collaboration 2.0

AUGUST 19, 2024

Save $80 on this brilliant DeWalt power tool kit with this early Labor Day deal -- perfect for DIY beginners and tradespeople.

98

98

CILIP

AUGUST 19, 2024

LGBTQ+ Network: Festival of Pride and Knowledge By Ashleigh Green ( @ciliplgbtq , email ), a CILIP LGBTQ+ Network Steering Group Member. CILIP LGBTQ+ Network ran its fourth annual Festival of Pride and Knowledge in June, which featured a celebration of diversity and inclusion within the library and information profession. "The festival has now been running for four years, and it engages, educates, celebrates, and inspires those working within the library, knowledge and information (LKI) professi

Libraries 52

Libraries Education Archiving IT 52

Collaboration 2.0

AUGUST 19, 2024

Social media is awash with ads for gadgets that detect hidden cameras and bugs in your hotel room, Airbnb, or even your own home. So I tested one to see if it actually works.

IT 97

IT 97

Armstrong Archives

AUGUST 19, 2024

Safeguarding important paperwork and documents is a key part of being responsible in both your personal and professional life. Even with options like digitization and cloud storage, hard copy documents are still vital because of multiple considerations: Legal Compliance : Some documents must be kept in their original form to meet legal requirements.

Paper 52

Paper Archiving Encryption Cloud 52

Advertisement

Explore how enterprises can enhance developer productivity and onboarding by adopting self-hosted Cloud Development Environments (CDEs). This whitepaper highlights the simplicity and flexibility of cloud-based development over traditional setups, demonstrating how large teams can leverage economies of scale to boost efficiency and developer satisfaction.

Cloud

Collaboration 2.0

AUGUST 19, 2024

XR glasses are great for providing big-screen experiences in a comfortable, compact form factor. Here's my buying advice for the latest from RayNeo.

97

97

Security Affairs

AUGUST 19, 2024

Researchers at the Shadowserver Foundation observed an exploit attempt based on the public PoC for Ivanti vTM bug CVE-2024-7593. Researchers at the Shadowserver Foundation observed an exploit attempt based on the public proof of concept (PoC) for the Ivanti vTM bug, CVE-2024-7593. In Mid-August, Ivanti addressed a critical authentication bypass vulnerability, tracked as CVE-2024-7593 (CVSS score of 9.8), impacting Virtual Traffic Manager (vTM) appliances that can allow attackers to create rogue

Authentication 141

Authentication Ransomware Access IT 141

Collaboration 2.0

AUGUST 19, 2024

The Amazon Fire TV Omni QLED offers excellent picture and audio quality for both streaming and console gaming, and you can save $130 on the 55-inch version.

95

95