Data Breach Today

AUGUST 5, 2024

Claroty Says Attackers Could Use Security Flaw to Bypass Trusted Slot Feature A vulnerability in Rockwell Automation's ControlLogix 1756 devices allows attackers to bypass a critical security feature, turning the trusted slot mechanism into a hacker's secret passageway to jump between slots and gain access to industrial control systems.

Access 130

Access Security 130

Data Breach Today

JULY 23, 2021

Senate Bill Would Require CISA to Identify and Respond to ICS Threats A bipartisan group of senators is pushing a bill that would require CISA to identify and respond to vulnerabilities and threats that target industrial control systems. The House has already passed a similar measure.

Security 361

Security 361

Data Breach Today

FEBRUARY 6, 2024

Countries Seek International Guidelines for Responsible Use of Commercial Spyware The United States ramped up pressure on the commercial surveillance industry shortly before the United Kingdom and France convened a two-day meeting dubbed the Pall Mall Process intended to culminate in an international agreement limiting the proliferation of advanced (..)

235

235

Data Breach Today

JUNE 13, 2024

Department Is Asking for Information About How AI Is Used in Financial Products The financial services industry is no stranger to artificial intelligence - leading the sector's U.S. regulator to pose questions such as whether institutions can explain AI outcomes and the technology's role in risk management and internal operations.

Risk 173

Risk Artificial Intelligence Financial Services 173

Data Breach Today

FEBRUARY 27, 2023

government official urged industry to become more conscientious over cybersecurity by preventing vulnerabilities from accumulating before products ship. CISA Director Says Programming Language Swap Will End Memory Safety Vulnerabilities A top U.S.

Cybersecurity 234

Cybersecurity Government 234

Data Breach Today

APRIL 26, 2024

Calls for More Aid to Providers Come as Parent Company UHG Grapples With Breach Twenty-two state attorneys general and some industry groups are urging Change Healthcare's parent company and regulators to be transparent and give more financial aid to providers as the firm recovers from a highly disruptive cyberattack and the industry braces for massive (..)

162

162

Data Breach Today

AUGUST 11, 2023

Exploitation Could Lead to RCE and DoS Attacks in Millions of Devices Security researchers from Microsoft disclosed flaws in a software development kit used for industrial applications, warning that hackers could attempt remote code execution.

Security 226

Security 226

eSecurity Planet

SEPTEMBER 9, 2024

Industrial control systems (ICS) are the backbone of critical infrastructure, powering essential operations in the energy, manufacturing, water treatment, and transportation sectors. These systems ensure the seamless functioning of processes that keep industries running smoothly and efficiently. How Does ICS Security Work?

Security 109

Security Encryption Cybersecurity Communications 109

Data Breach Today

SEPTEMBER 9, 2022

In this episode of "Cybersecurity Unplugged," Mark Cristiano of Rockwell Automation discusses Rockwell's cybersecurity journey, the particular challenges of deploying cybersecurity in an OT environment, and the minimum and proper industrial protections that organizations need to have in place.

Cybersecurity 245

Cybersecurity Security 245

Data Breach Today

AUGUST 20, 2024

EY's Piotr Ciepiela Discusses Key Challenges in Implementing, Maintaining OT SOCs Piotr Ciepiela, EMEIA cybersecurity leader at EY, discusses the challenges of securing OT systems and contrasts them with IT SOC environments.

Cybersecurity 276

Cybersecurity Security IT 276

Data Breach Today

SEPTEMBER 17, 2021

Researchers: Attacker Sold Pilfered Airline Data on the Darknet Cisco Talos researchers have connected a previously discovered series of aviation industry attacks stretching back more than three years to a Nigeria-based attacker. The attacker sold the stolen information on the darknet, the researchers say.

271

271

Data Breach Today

JULY 1, 2022

Scott Flower, the founder of Pareto Cyber and a former global intelligence officer at FS-ISAC, discusses the challenges in OT security and where the industry needs to go. OT security has been at the center of the security conversation ever since the Colonial Pipeline attacks.

Security 247

Security 247

Data Breach Today

SEPTEMBER 29, 2023

Food and Drug Administration on cybersecurity in medical devices, and how the acquisition of Splunk by Cisco might impact the cybersecurity industry.

Cybersecurity 249

Cybersecurity Security 249

Krebs on Security

APRIL 18, 2022

Weiss now serves as the chief security officer of the Health Information Sharing & Analysis Center (H-ISAC), an industry group that shares information about cyberattacks against healthcare providers. National Security Agency (NSA).

Ransomware 306

Ransomware Cybersecurity Healthcare Security 306

Data Breach Today

OCTOBER 9, 2020

Kaspersky: 'MontysThree' Uses Detection Evasion Techniques A hacking group is taking aim at industrial targets in an ongoing cyberespionage campaign, security firm Kaspersky reports. The group, dubbed "MontysThree," uses a variety of techniques, including steganography, to avoid detection.

Security 216

Security 216

Data Breach Today

SEPTEMBER 15, 2022

Why the Lack of Prioritization, Oversight, and Control of Third-Party Access Impacts Everyone The data shows that every industry contains vulnerabilities and strengths, but there are a few standout points to consider.

Access 223

Access 223

Schneier on Security

NOVEMBER 8, 2024

But the OSI seems to have been co-opted by industry players that want both corporate secrecy and the “open source” label. Since for a neural network, the training data is the source code—it’s how the model gets programmed—the definition makes no sense. Here’s one rebuttal to the definition.)

Privacy 127

Privacy IT Artificial Intelligence 127

Data Breach Today

JUNE 7, 2023

aerospace industry. PowerDrop Malware Simple But Sophisticated Suspected nation-state hackers are using that malware researchers say straddles between the line between off-the-shelf and advanced tactics in order to target the U.S. Researchers from Adlumin in May found the malware on a defense contractor's network.

162

162

Data Breach Today

OCTOBER 22, 2021

Comair's Johan Waldeck on New Trends of Online Booking Fraud in Aviation With many countries opening up for tourists, the airline industry is seeing a rise in fraudulent credit card transactions, says Johan Waldeck, senior forensic investigator at Comair Limited, a leading South African airline company.

277

277

Data Breach Today

MAY 23, 2022

government as it plans to roll out EDR deployments at more than half of federal agencies this year, how stable the stablecoin economy really is and how to improve industry collaboration.

Government 244

Government IT 244

Data Breach Today

JANUARY 26, 2023

Dragos CEO: Unpatched Vulnerabilities Less of a Problem in OT Than Outsiders Think The increased physical connectivity of digital assets has expanded the attack surface and added complexity for engineers in industrial environments, says Dragos CEO Robert Lee.

Risk 130

Risk IT 130

Data Breach Today

JUNE 9, 2021

Organizations are connecting to industrial control networks at an increasing pace. The need to connect to the IT environment, cloud applications and remote workers has created a definitive gap by eroding the demilitarized zone. Because of this, organizations must deploy new ways to secure operational technology networks.

IoT 274

IoT Security Cloud IT 274

KnowBe4

OCTOBER 4, 2024

Industry analysis of the domains used behind phishing and brand impersonation attacks show financial institutions are being leveraged at an alarming rate.

Financial Services 104

Financial Services Phishing 104

Data Breach Today

JULY 4, 2020

Researchers Identified Malware Variants With Advanced Capabilities Researchers with FortiGuard Labs have uncovered two samples of the Ekans ransomware strain that offer some additional insight into how the crypto-locking malware targets industrial control systems, according to a new report.

Ransomware 264

Ransomware 264

The Last Watchdog

JULY 11, 2023

Boston, July 7, 2023 — CybSafe, the human risk management platform, has today announced CEO Oz Alashe MBE has been named as a SecurityInfoWatch.com , Security Business and Security Technology Executive magazines’ 2023 Security Industry Innovator Award winner.

Security 178

Security Risk Education Marketing 178

Security Affairs

MAY 23, 2024

Tinexta Cyber’s Zlab Malware Team uncovered a backdoor known as KeyPlug employed in attacks against several Italian industries During an extensive investigation, Tinexta Cyber’s Zlab Malware Team uncovered a backdoor known as KeyPlug , which hit for months a variety of Italian industries.

Encryption 134

Encryption Cybersecurity Government Security 134

Data Breach Today

NOVEMBER 14, 2020

Carefully Crafted Backdoor Targets Specific Oracle Software Used to Store Data A recently uncovered point-of-sale malware called "ModPipe" is targeting specific Oracle software used by thousands of restaurants and other businesses in the hospitality industry, according to researchers at ESET.

Sales 205

Sales 205

WIRED Threat Level

NOVEMBER 20, 2024

AI-generated influencers based on stolen images of real-life adult content creators are flooding social media.

Privacy 96

Privacy Security 96

OpenText Information Management

AUGUST 8, 2024

The energy industry as we know it is changing. The energy industry has never moved this fast. The energy industry will never move this slowly again. Energy Information Administration, Total Petroleum and Other Liquids Production Annual The post Information reimagined for the energy industry appeared first on OpenText Blogs.

Energy and Utilities 59

Energy and Utilities Mining IT Security 59

Info Source

NOVEMBER 8, 2024

By Petr Kramerius, Regional Manager at Infosource November 2024, According to many experts, AI has the potential to drive sustainable practices within the print industry by optimising energy efficiency, reducing waste, and enhancing predictive maintenance across the entire print lifecycle.

Paper 40

Paper IoT Manufacturing Data Privacy 40