SecurityWeek Briefing: Cybersecurity News

Latest cybersecurity news, insights, and analysis from "SecurityWeek Briefing."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents. Accessed on 06 November 2022, 1409 UTC. Content supplied by "SecurityWeek Briefing."

Source: https://www.securityweek.com/

Please click link or scroll down to read your selections.

Russ Roberts

https://www.hawaiicybersecurityjournal.net

https://paper.li/RussellRoberts

PrevNext

IT SECURITY NEWS HEADLINES

Surveillance 'Existential' Danger of Tech: Signal Boss

Video: ESG - CISO's Guide to an Emerging Risk Cornerstone

Apple Rolls Out Xcode Update Patching Git Vulnerabilities

Cloud-Native Application Security Firm Apiiro Raises $100 Million

Ransomware Group Threatens to Leak Data Stolen From Car Parts Giant Continental

MORE SECURITY HEADLINES

Black Basta Ransomware Linked to FIN7 Cybercrime Group

Sentinel One has found evidence suggesting that the Black Basta ransomware is linked to the FIN7 cybercrime group. [Read More]

Red Cross Eyes Digital Emblem for Cyberspace Protection

The Red Cross is seeking support to create a “digital red cross/red crescent emblem” that would make clear to military and other hackers that they have entered the computer systems of medical facilities or Red Cross offices. [Read More]

Binary Defense Raises $36 Million for MDR Platform

Managed detection and response provider Binary Defense Systems this week announced it has raised $36 million in its first funding round. [Read More]

Cyberattack Causes Trains to Stop in Denmark

Trains stopped in Denmark over the weekend as a result of a cyberattack targeting an IT subcontractor. [Read More]

Microsoft Extends Aid for Ukraine's Wartime Tech Innovation

Ukraine and Russia are fighting “a new type of war,” with cyberweapons and other types of digital technology playing a pivotal role, Microsoft's Brad Smith said. [Read More]

Cisco Patches High-Severity Bugs in Email, Identity, Web Security Products

Cisco has released patches for high-severity vulnerabilities in Identity Services Engine, Email Security Appliance, Secure Email and Web Manager, and Secure Web Appliance. [Read More]

Webinar Today: ESG - CISO's Guide to an Emerging Risk Cornerstone

Join Mastercard’s Johan Gerber, EVP, Cyber and Security Products, as he discusses the strategies and tools needed to mitigate ESG risk on a business’s supply chain and reputation. [Read More]

Splunk Patches 9 High-Severity Vulnerabilities in Enterprise Product

Splunk on Wednesday announced the release of patches for multiple vulnerabilities in Splunk Enterprise, including nine high-severity issues. [Read More]

French-Speaking Cybercrime Group Stole Millions From Banks

A French-speaking cybercrime group tracked as Opera1er may have stolen more than $30 million from banks and other organizations. [Read More]

Checkmk Vulnerabilities Can Be Chained for Remote Code Execution

Multiple vulnerabilities in IT Infrastructure monitoring solution Checkmk could be chained to execute code remotely, without authentication. [Read More]

SECURITYWEEK EXPERTS

Offense Gets the Glory, but Defense Wins the Game

Derek Manky - Incident Response

Organizations may better align their defenses to adapt and react proactively to rapidly changing attack approaches when they have a better grasp of the objectives and strategies employed by their adversaries.

Read full story

Tailoring Security Training to Specific Kinds of Threats

Jeff Orloff - Training & Certification

By focusing on attack tactics and techniques that pose clear and present danger to the business, a company can achieve the greatest return on its training initiatives.

Read full story

How to Prepare for New SEC Cybersecurity Disclosure Requirements

Gordon Lawson - Incident Response

The new SEC requirements are putting on paper what many companies—public and private—should have been investing in already.

Read full story

Leveraging Managed Services to Optimize Your Threat Intelligence Program During an Economic Downturn

Landon Winkelvoss - Risk Management

How organizations can use managed services to optimize their threat intelligence program during an economic downturn.

Read full story

Cybersecurity Awareness Month: 5 Actionable Tips

Torsten George - Network Security

Here are five best practices for defeating against most attacks, hopefully making the need for future Cybersecurity Awareness Months obsolete.

Read full story

Anticipation and Action: What's Next in SOC Modernization

Marc Solomon - Network Security

Within the context of security operations, anticipation teams use internal and external threat and event data across their security infrastructure for context and analytics and to become more proactive.

Read full story

Automotive Security Threats Are More Critical Than Ever

Marie Hattar - ICS/OT

Cybersecurity within the automotive industry has a long way to go to catch up to traditional enterprise cybersecurity standards and best practices.

Read full story

The Zero Day Dilemma

Gordon Lawson - Endpoint Security

Why are zero day exploits so effective, and so highly prized by bad actors? The reason has to do with the way cyber security defenses work.

Read full story

Multi-Cloud Networks Require Cloud-Native Protection

John Maddison - Cloud Security

By integrating with native security services on major cloud platforms, a CNP solution can effectively correlate security findings to pinpoint risks and recommend effective mitigation.

Read full story

"Left and Right of Boom" - Having a Winning Strategy

Torsten George - Endpoint Security

Unfortunately, there is no such thing as 100 percent protection. Therefore, we cannot solely focus on “Left of Boom” processes, but also have to talk about the “Right of Boom”.

Read full story