Security News

Unifying Security Tech Beyond the Stack: Integrating SecOps with Managed Risk and Strategy
2024-01-08 11:39

Cybersecurity is an infinite journey in a digital landscape that never ceases to change. According to Ponemon Institute1, “only 59% of organizations say their cybersecurity strategy has changed...

Webinar – Leverage Zero Trust Security to Minimize Your Attack Surface
2024-01-08 09:01

Digital expansion inevitably increases the external attack surface, making you susceptible to cyberthreats. Threat actors increasingly exploit the vulnerabilities stemming from software and...

NIST Warns of Security and Privacy Risks from Rapid AI System Deployment
2024-01-08 07:53

The U.S. National Institute of Standards and Technology (NIST) is calling attention to the privacy and security challenges that arise as a result of increased deployment of artificial intelligence...

Review: Engineering-grade OT security: A manager’s guide
2024-01-08 06:00

Rew Ginter is a widely-read author on industrial security and a trusted advisor for industrial enterprises. He currently works as a VP of industrial security at Waterfall Security Solutions.

Web3 security firm CertiK's X account hacked to push crypto drainer
2024-01-05 17:20

The Twitter/X account of blockchain security firm CertiK was hijacked today to redirect the company's more than 343,000 followers to a malicious website pushing a cryptocurrency wallet drainer. CertiK's gold-verified X account was compromised in a social engineering attack by a threat actor using another hacked account described by the company as "Associated with a well-known media."

Three Ways To Supercharge Your Software Supply Chain Security
2024-01-04 12:13

Section four of the "Executive Order on Improving the Nation’s Cybersecurity" introduced a lot of people in tech to the concept of a “Software Supply Chain” and securing it. If you make software...

As lawmakers mull outlawing poor security, what can they really do to tackle online gangs?
2024-01-04 11:45

Comment In some ways, the ransomware landscape in 2023 remained unchanged from the way it looked in previous years. The industry needs governments to insert themselves into the crisis and take decisive action to stop ransomware from becoming even more out of hand than it already is.

LastPass now requires 12-character master passwords for better security
2024-01-03 17:11

LastPass notified customers today that they are now required to use complex master passwords with a minimum of 12 characters to increase their accounts' security. "Historically, while a 12-character master password has been LastPass' default setting since 2018, customers still had the ability to forego the recommended default settings and choose to create a master password with fewer characters, if they wished to do so," LastPass said in a new announcement today.

Uncertainty Is the Biggest Challenge to Australia’s Cyber Security Strategy
2024-01-03 16:06

The Australian government announced the 2023-2030 Australian Cyber Security Strategy, which aims to "Help realise the Australian Government's vision of becoming a world leader in cyber security." Overall, the strategy is designed to bring the public and private sectors together in delivering a cohesive vision. More Australia coverage Lack of bipartisan agreement means a lack of clear cyber security strategy.

Copy that? Xerox confirms 'security incident' at subsidiary
2024-01-03 13:15

Xerox has officially confirmed that a cyber baddie broke into the systems of its US subsidiary - a week after INC Ransom claimed to have exfiltrated data from the copier and print giant. Xerox Business Solutions, a subsidiary of Xerox, offers a range of products and services, from managed IT and print services, to robotic process automation solutions, and more.