Tag: business
-
Quantum-Safe Cryptography Isn’t Just a CISO Headache
Bank of Ireland’s Francis Gorman Shares Strategies for Successful Quantum Migration. Most organizations give the migration to quantum-safe cryptography to the CISO. But that puts a cross-business change in the wrong hands. Accountability belongs with senior leaders who can influence the whole enterprise, says Francis Gorman, head of Bank of Ireland’s security center of excellence.…
-
Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline
A French-speaking attacker broke into a small French automotive business, planted a keylogger, and stole banking and email credentials.Ordinary stuff, until one move near the end.Before his command-and-control server went dark, he installed OpenSSH and Tailscale on a victim’s machine, building a way back in that did not run through the C2 at all. When…
-
Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline
A French-speaking attacker broke into a small French automotive business, planted a keylogger, and stole banking and email credentials.Ordinary stuff, until one move near the end.Before his command-and-control server went dark, he installed OpenSSH and Tailscale on a victim’s machine, building a way back in that did not run through the C2 at all. When…
-
Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline
A French-speaking attacker broke into a small French automotive business, planted a keylogger, and stole banking and email credentials.Ordinary stuff, until one move near the end.Before his command-and-control server went dark, he installed OpenSSH and Tailscale on a victim’s machine, building a way back in that did not run through the C2 at all. When…
-
AWS Unveils Continuum to Fight Vulnerability Backlog
Autonomous Remediation Tools Advance. Cloud computing mainstay Amazon Web Services has taken a look at the vulnerability apocalypse and pronounced it fit for a business opportunity. Today the Seattle company entered a new battleground of platforms with the launch of its new family of security agents that it calls Continuum. First seen on govinfosecurity.com Jump…
-
Another healthcare firm attacked days after Novo Nordisk breach
Medical technology company iRhythm Holdings disclosed a cyberattack involving certain third-party-hosted business applications that resulted in the theft of patient protected … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/17/irhythm-data-breach-patient-health-information-stolen/
-
Identity as a Business Asset: Strategies for Security Leaders
First seen on scworld.com Jump to article: www.scworld.com/analysis/identity-as-a-business-asset-strategies-for-security-leaders
-
The AI Accountability Gap CIOs Can’t Ignore
IBM Research Finds Tech Leaders Struggle With Agent Sprawl. A new IBM Institute for Business Value survey finds two-thirds of CIOs and CTOs are accountable for AI systems they don’t fully control. The survey of 2,000 tech executives details rising AI agent incidents and recommends infrastructure, governance and financial fixes. First seen on govinfosecurity.com Jump…
-
iRhythm discloses data breach, says hackers stole patient info
Digital healthcare company iRhythm Holdings has disclosed a data breach after hackers stole patients’ personal and health information stored on third-party-hosted business applications. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/irhythm-discloses-data-breach-says-hackers-stole-patient-info/
-
Most CISOs Report Pressure to Bury Bad Security News
Executive leaders may not be saying it aloud, but business objectives and priorities don’t always promote timely disclosures. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/most-cisos-report-pressure-to-bury-bad-security-news
-
Cyberattack on Russian tech firm Astral disrupts business, government services for week
According to customer complaints, the disruption affected a range of services used by businesses, leading to interruptions in cash register operations, difficulties selling certain regulated goods, loss of access to customer portals and corporate email and problems with electronic human resources document management systems and authentication using digital certificates. First seen on therecord.media Jump to…
-
Policy as Code: From Documents to Machine Intelligence
Policy as Code Turns Static Compliance Documents Into Enforceable, Auditable Policy For decades, policies, standards and procedures have anchored security and compliance governance. But static documents can no longer keep pace with dynamic regulations and frontier technology. Policy as Code transforms them into machine-readable, enforceable, continuously verifiable rules that drive real business decisions. First seen…
-
Chinese, N. Korean Threat Groups Build on Asia-Pacific Success
North Korea’s gross domestic product (GDP) has grown, in part because of the cybercrime gains of groups linked to the nation, which target business and financial firms. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/chinese-korean-threat-groups-asia-pacific-success
-
Security Leaders Must Stop Living by the Framework
Paul Watts of Keywords Studios on Business Alignment, AI Hype and Workforce Risk. Cybersecurity leaders who still operate through the lens of frameworks and risk registers could be irrelevant in a world where business moves without them, said Paul Watts, CISO at Keywords Studios. He recommends investing in both AI and people to sustain operations…
-
Meta to Use Off-Site Business Data for Feed and AI Personalization
Meta on Tuesday announced that it will use information shared by other businesses to personalize users’ feed and responses from its artificial intelligence (AI) chatbot, expanding its scope beyond targeted ads.”Businesses often share information about people’s activity on their sites with us to make ads more relevant,” Meta said in a statement.”We already use this…
-
75% of Firms Deploy Vulnerable Code Amid Pressure on CISOs, Report Finds
Checkmarx report warns that business pressure is among the reason security leaders let security compliance slip First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/firms-deploy-vulnerable-code/
-
Why Tool Count Is the Wrong Security Metric
CybaVerse’s Oliver Spence on Matching Tools to Business Outcomes. Mid-market organizations manage 30 to 40 security tools on average, yet many still struggle to define the outcomes these tools should deliver. Oliver Spence, CEO of CybaVerse, says the fix should start well before any procurement decision. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/tool-count-wrong-security-metric-a-31909
-
The new risk equation: Why endpoint security is a financial imperative
Cyber risk is financial risk; endpoint security in financial services is a business imperative. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/spons/the-new-risk-equation-why-endpoint-security-is-a-financial-imperative/821449/
-
The new risk equation: Why endpoint security is a financial imperative
Cyber risk is financial risk; endpoint security in financial services is a business imperative. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/spons/the-new-risk-equation-why-endpoint-security-is-a-financial-imperative/821449/
-
New ChatGPT Lockdown Mode Aims to Block Prompt Injection and Data Exfiltration Attacks
OpenAI this week introduced Lockdown Mode, a security-focused setting for ChatGPT designed to reduce the risk of data exfiltration from prompt-injection attacks. The feature is rolling out to eligible personal accounts (Free, Go, Plus, Pro) and self-serve ChatGPT Business workspaces, and managed-workspace administrators can assign a Lockdown Mode role to members. Prompt injection is a…
-
Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI
A researcher has reverse-engineered the iOS SDK that Bright Data embeds in consumer apps and documented how it turns devices, including always-on smart TVs, into exit nodes that relay web-scraping traffic for a data business Bright Data markets heavily to the AI industry.The company, the successor to Luminati, operates what it calls the largest residential…
-
Conduent Hack Victim Count Now Tops 62.2 Million
Back-Office Servicer’s Breach Estimate Has More Than Doubled Since February. The victim tally in back-office services firm Conduent Business Services’ 2024 hack has more than doubled to over 62.2 million individuals, from an earlier estimate of 25 million plus. The incident is now on track to be at least the third-largest health data breach ever…
-
ISMG Editors: Wrapping Up Infosecurity Europe 2026
Conference Highlights AI Maturity, Agentic Risks and Human Factors in Cybersecurity. ISMG editors reflect on key themes from Infosecurity Europe 2026, including AI’s role from buzzword to business strategy, the risks of agentic systems in critical infrastructure and why human-to-human trust is emerging as a defining factor in cybersecurity. First seen on govinfosecurity.com Jump to…
-
Azul gewinnt vier Stevie Awards 2026 für Enterprise-Java, Cloud-Optimierung, DevOps und KI-Infrastruktur
Azul, Anbieter von Enterprise-Java-Lösungen für KI- und Cloud-First-Umgebungen, ist bei den 24th Annual American Business Awards mit vier Stevie Awards ausgezeichnet worden. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/azul-gewinnt-vier-stevie-awards-2026-fuer-enterprise-java-cloud-optimierung-devops-und-ki-infrastruktur/a45385/
-
PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network
The threat actor known as PCPJack has hijacked cloud servers associated with Amazon Web Services (AWS), Google Cloud, and Microsoft Azure to create a covert SMTP email relay network.”Compromised business servers across the U.S., Europe, and Asia were quietly converted into SMTP proxies, verified for mail relay capability, and synced to a downstream consumer every…
-
Infosecurity Europe: How Businesses Can Prepare for a Cybersecurity Crisis with Effective Plans
Cybersecurity and business leaders with experience of dealing with major incidents from within the NCSC and at JLR detail what you need to prioritize if your organization is hit by a cyber-attack First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/infosecurity-europe-cybersecurity/
-
The modern-day business can learn a lot about risk from this year’s mega events
Every year brings its share of global events, but 2026 is proving to be a banner year for mega-scale entertainment. The year got off to a roaring start with the Winter … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/04/mega-events-cyber-risk/