Data Breaches
Cisco Duo warns that breach exposed phone numbers, phone carriers, metadata and other logs that could lead to downstream social engineering attacks.
Hi, what are you looking for?
SecurityWeek
CISO Strategy
Organizations must recognize that security is not about the number of tools deployed, it is about ensuring those tools effectively disrupt the attack chain...
Incident Response
The chief deputy attorney general of the agency sent an email on Wednesday that said nearly all of is computer systems were offline.
Incident Response
The blame of security incidents may be shared—but the burden of response always falls on the security team. Here’s how to prepare for the...
Government
The Trump administration has disbanded the Cyber Safety Review Board (CSRB), ending one of the few bright spots at CISA.
Compliance
With DORA’s January 2025 compliance deadline approaching, financial institutions must embrace rigorous testing, tailored threat profiles, and continuous vigilance to safeguard against cyber threats.
Government
CISA says no federal agencies other than Treasury were impacted by the recent compromise of a BeyondTrust cloud-based service.
Data Breaches
The US government says Midnight Blizzard’s compromise of Microsoft corporate email accounts "presents a grave and unacceptable risk to federal agencies."
Cloud Security
Cyber Safety Review Board, said “a cascade of errors” by Microsoft let state-backed Chinese cyber operators break into email accounts of senior U.S. officials.
Incident Response
Although the attack on the national library of the UK occurred five months ago, the Library’s infrastructure won’t be rebuilt until mid-April 2024, and...
Incident Response
The OODA Loop can be used both by defenders and incident responders for a variety of use cases such as threat assessment, threat monitoring,...
Incident Response
UnitedHealth is testing the last major system it must restore from last month’s Change Healthcare cyberattack, but it has no date yet for finishing...
Incident Response
Microsoft says the Midnight Blizzard APT group may still be poking around its internal network after stealing source code, spying on emails.
Cybercrime
Incident response experts at Sygnia provide a detailed blow-by-blow of a BlackCat ransomware attack and share tips for survival.
Incident Response
US government lays out actions to assist healthcare providers following the highly disruptive Change Healthcare cyberattack.
Incident Response
The vulnerability carries a CVSS severity score of 9.8/10 and affects web sites running the Ultimate Member WordPress membership plugin.
Data Breaches
Aircraft parts dealer Willis Lease Finance Corporation (WLFC) notified the SEC that it fell victim to a cyberattack.
Funding/M&A
California startup lands new financing to build and supply tools to run an MSSP or SOC on a pay-as-you-use model.
Cloud Security
News analysis: Google positions itself to compete with Microsoft for enterprise security dollars. How does this deal affect startup ecosystem?
Artificial Intelligence
Artificial Intelligence
Application Security
Supply Chain Security
Malware & Threats