SecurityWeek Briefing

"Last Pass employee targeted with deepfake calls."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 12 April 2024, 2022 UTC.

Content and Source:  https://mail.google.com/mail/u/0/?tab=rm&ogbl#inbox/FMfcgzGxSlMCsmsBccgQXHcBZSdzrdfl/SecurityWeek Briefing.

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Friday, April 12, 2024

LATEST CYBERSECURITY HEADLINES

LastPass Employee Targeted With Deepfake Calls Palo Alto Networks Warns of Exploited Firewall Vulnerability Threat Actors Manipulate GitHub Search to Deliver Malware AI-Powered Military Drone Swarms Could Fuel Global Arms Race ‘BatBadBut’ Command Injection Vulnerability Affects Multiple Programming Languages Exploitation of Unpatched D-Link NAS Device Vulnerabilities Soars House Will Try Again on Reauthorization of US Spy Program After Republican Upheaval US Government on High Alert as Russian Hackers Steal Critical Correspondence from Microsoft Inside AWS’s Crusade Against IP Spoofing and DDoS Attacks In Other News: Moscow Sewage Hack, Women in Cybersecurity Report, Dam Security Concerns RubyCarp: Insights Into the Longevity of a Romanian Cybercriminal Gang Wiz Acquires Gem Security, Pushes Security Tools Consolidation People on the Move - SecurityWeek’s ‘People on the Move’ coverage shines a light on fresh hiring announcements, promotions, and career achievements within the cybersecurity community. CISO Conversations: Nick McKenzie (Bugcrowd) and Chris Evans (HackerOne)

CISO Forum Annual Summit The CISO Forum® is a community-fueled organization designed to foster discussion and facilitate knowledge exchange between enterprise cybersecurity leaders. June 25-26, 2024 Ritz-Carlton, Half Moon Bay Justify Your Attendance

SecurityWeek Expert Insights

Why Intelligence Sharing Is Vital to Building a Robust Collective Cyber Defense Program - With automated, detailed, contextualized threat intelligence, organizations can better anticipate malicious activity and utilize intelligence to speed detection around proven attacks. (Marc Solomon) Know Your Audience When Speaking to Security Practitioners - How can security practitioners make sense of the vendor landscape and separate those who talk a good game from those who can execute, perform, and solve real problems for enterprises? (Joshua Goldfarb) Cybersecurity Mesh: Overcoming Data Security Overload - A significant cybersecurity challenge arises from managing the immense volume of data generated by numerous IT security tools, leading organizations into a reactive rather than proactive approach. (Torsten George) The OODA Loop: The Military Model That Speeds Up Cybersecurity Response - The OODA Loop can be used both by defenders and incident responders for a variety of use cases such as threat assessment, threat monitoring, and threat hunting. (Etay Maor)

This Week in Review

US Cyber Force Assisted Foreign Governments 22 Times in 2023 Google Cloud Unveils New AI-Powered Security Capabilities Zscaler to Acquire Network Segmentation Tech Startup Airgap Networks Financial Firms Lost $12 Billion to Cyberattacks in Two Decades: IMF Data Access Platform PVML Launches With $8 Million in Funding Sisense Data Breach Triggers CISA Alert and Urgent Calls for Credential Resets Simbian Emerges From Stealth With $10 Million to Build Autonomous AI-Based Security Platform Knostic Emerges From Stealth With Enterprise Gen-AI Access Controls Why Intelligence Sharing Is Vital to Building a Robust Collective Cyber Defense Program Revolt in the House Blocks Effort to Reauthorize a Key US Spy Tool Google Pays Out $41,000 for Three Serious Chrome Vulnerabilities Palo Alto Networks Patches Vulnerabilities Allowing Firewall Disruption Alethea Raises $20 Million for Disinformation Detection and Mitigation Solution Spectre v2 Attack Against Intel CPUs Resurrected by Researchers Microsoft Patches Two Zero-Days Exploited for Malware Delivery CISA Releases Malware Next-Gen Analysis System for Public Use AT&T Data Breach Update: 51 Million Customers Impacted Fortinet Patches Critical RCE Vulnerability in FortiClientLinux Thousands of LG TVs Possibly Exposed to Remote Hacking Sprinto Raises $20 Million for Automated Risk and Compliance Platform 530k Impacted by Data Breach at Wisconsin Healthcare Organization Microsoft Plugs Gaping Hole in Azure Kubernetes Service Confidential Containers Second Ransomware Group Extorting Change Healthcare Patch Tuesday: Code Execution Flaws in Multiple Adobe Software Products Cyera Raises $300 Million at $1.4 Billion Valuation DOJ-Collected Information Exposed in Data Breach Affecting 340,000  Dark Web Threat Intelligence Startup StealthMole Raises $7 Million SAP’s April 2024 Updates Patch High-Severity Vulnerabilities ICS Patch Tuesday: Siemens Addresses Palo Alto Networks Product Vulnerabilities CVS Group Restoring Systems Impacted by Cyberattack Exploitation Attempts Target Unpatched Flaw Affecting Many D-Link NAS Devices StrikeReady Raises $12M to Build AI-Powered Security Command Center

RSS Feed | LinkedIn | Webcasts | Virtual Events © 2024 Wired Business Media