Tag: cyber
-
Trump administration fires members of cybersecurity review board in ‘horribly shortsighted’ decision
The Department of Homeland security told members of the Cyber Safety Review Board that their membership was terminated. First seen on techcrunch.com Jump to article: techcrunch.com/2025/01/22/trump-administration-fires-members-of-cybersecurity-review-board-in-horribly-shortsighted-decision/
-
DHS Disbands Cyber Safety Review Board, Ending One of CISA’s Few Bright Spots
The Trump administration has disbanded the Cyber Safety Review Board (CSRB), ending one of the few bright spots at CISA. The post DHS Disbands Cyber Safety Review Board, Ending One of CISA’s Few Bright Spots appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/dhs-disbands-cyber-safety-review-board-ending-one-of-cisas-few-bright-spots/
-
Iran and Russia deepen cyber ties with new agreement
The pact between the world’s two most sanctioned nations aims to elevate relations “to a new level,” the Kremlin said.]]> First seen on therecord.media Jump to article: therecord.media/russia-iran-cyber-ties-agreement
-
DHS disbands existing advisory board memberships, raising questions about CSRB
The Cyber Safety Review Board was investigating the hacks of U.S.;telecom firms attributed to the Salt Typhoon threat group. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/dhs-disbands-advisory-board-csrb/737976/
-
PowerSchool data breach brings claims of negligence, poor cyber hygiene
The K-12 software company is facing legal pushback and criticism following a cyberattack that impacted a still unknown number of districts. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/powerschool-data-breach-lawsuits-negligence/737961/
-
Trump administration fires members of cybersecurity review board in “horribly shortsighted” decision
The Department of Homeland security told members of the Cyber Safety Review Board that their membership was terminated. First seen on techcrunch.com Jump to article: techcrunch.com/2025/01/22/trump-administration-fires-members-of-cybersecurity-review-board-in-horribly-shortsighted-decision/
-
Trump administration dismisses members of all DHS advisory panels, including CSRB
The Department of Homeland Security has cleared all its advisory bodies, including the influential Cyber Safety Review Board, of current members, including experts from the private sector. It’s unclear what the panels’ future will be in the Trump administration.]]> First seen on therecord.media Jump to article: therecord.media/trump-dhs-removal-private-sector-members-advisory-boards
-
73% of UK Education Sector Hit by Cyber-Attacks in Past Five Years
New ESET research reveals that 73% of UK educational institutions experienced at least one cyber-attack or breach in the past five years First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/schools-hit-by-cyberattacks-in/
-
Trump administration removes private sector leaders from all DHS panels, including CSRB
A memo from the acting secretary of Homeland Security cleared all DHS advisory bodies, including the influential Cyber Safety Review Board, of members from the private sector. It’s unclear what their future will be in the Trump administration. ]]> First seen on therecord.media Jump to article: therecord.media/trump-dhs-removal-private-sector-members-advisory-boards
-
Cyber Insights 2025: APIs The Threat Continues
APIs are easy to develop, simple to implement, and frequently attacked. They are prime and lucrative targets for cybercriminals. The post Cyber Insights 2025: APIs The Threat Continues appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/cyber-insights-2025-apis-the-threat-continues/
-
EU Commission Calls for Health Sector ‘Cyber Action Plan’
Initiative Aims to Bolster Security of EU Member Hospitals, Healthcare Providers. The European Commission has a new action plan to strengthen cybersecurity of hospitals and other healthcare providers in the European Union amid rising cyberthreats and attacks. The plan includes a cybersecurity support center to offer guidance and other resources to the EU’s health sector.…
-
2024 Most Inspiring Women in Cyber Winners: Where Are They Now?
Over the past five years, The Most Inspiring Women in Cyber Awards have celebrated some of the most exceptional women from across the cybersecurity industry. From new starters and students to CEOs and CISOs, the awards aim to celebrate outstanding individuals at every level of the industry. No deed is too small for recognition and…
-
The Growing Role of AI-Powered SAST in the Developer Toolkit
In today’s app dev world, where new apps and millions of lines of code are being deployed every day, the need for fast and secure development practices has never been greater. Static Application Security Testing (SAST) plays a big role in meeting this need by finding vulnerabilities directly in the application’s source code often before…
-
Account Compromise and Phishing Top Healthcare Security Incidents
Netwrix claims 84% of healthcare organizations detected a cyber-attack in the past year First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/account-compromise-phishing/
-
Record Breaking 5.6 Tbps DDoS attack Launched by Mirai Botnet
The Mirai botnet unleashed a record-breaking Distributed Denial of Service (DDoS) attack on October 29, 2024, peaking at an astonishing 5.6 terabits per second (Tbps). This mega surge of malicious traffic targeted a Cloudflare customer, an Internet Service Provider (ISP) based in Eastern Asia, marking the largest DDoS attack ever recorded. Understanding DDoS Attacks DDoS…
-
SQL Injection Vulnerability in Microsoft’s DevBlogs Lets Hackers Injecting Malicious SQL
In a recent discovery, a security researcher uncovered a critical SQL injection vulnerability on Microsoft’s DevBlogs website (accessible at https://devblogs.microsoft.com). This vulnerability could allow attackers to manipulate the site’s underlying database by injecting malicious SQL queries, posing a significant risk to the platform and its data integrity. Identifying the Vulnerability The vulnerability was found in the…
-
Security Researchers Discover Critical RCE Vulnerability, Earned $40,000 Bounty
Cybersecurity researchers Abdullah Nawaf and Orwa Atyat, successfully escalated a limited path traversal vulnerability into a full-blown remote code execution (RCE). Their discovery earned a massive $40,000 bounty from the targeted organization’s bug bounty program. The team documented their step-by-step approach, leaving the cybersecurity community with valuable lessons on persistence, creativity, and methodical bug hunting.…
-
Cyberangriff auf einen Automobilzulieferer in Australien
Aussie manufacturer Clutch Industries confirms cyber incident First seen on cyberdaily.au Jump to article: www.cyberdaily.au/security/11613-exclusive-aussie-manufacturer-clutch-industries-confirms-cyber-incident
-
Three New ICS Advisories Released by CISA Detailing Vulnerabilities Mitigations
The Cybersecurity and Infrastructure Security Agency (CISA) announced three new Industrial Control Systems (ICS) advisories. These advisories provide critical insights into vulnerabilities impacting Traffic Alert and Collision Avoidance Systems (TCAS) II, Siemens SIMATIC S7-1200 CPUs, and ZF Roll Stability Support Plus (RSSPlus). Each advisory includes detailed technical descriptions of the vulnerabilities, associated CVEs, and recommended…
-
Trump Fires Cyber Safety Board Investigating Salt Typhoon Hackers
In a letter sent today, the acting DHS secretary terminated membership to all advisory boards, including the Cyber Safety Review Board (CSRB) tasked with investigating state-sponsored cyber threats against the US. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/trump-fires-cyber-safety-board-salt-typhoon-hackers
-
Security chiefs whose companies operate in the EU should be exploring DORA now
Tags: attack, business, ciso, compliance, conference, corporate, cyber, cybersecurity, data, detection, dora, finance, framework, GDPR, incident, network, regulation, resilience, risk, service, technology, threat, vulnerabilityIf your enterprise operates in Europe, you should care about the Digital Operational Resilience Act (DORA), which took effect on January 17. DORA, also known as Directive (EU) 2022/2555 of the European Parliament, aims to enhance and build the EU’s cybersecurity capabilities and it has been hanging like the Sword of Damocles over the heads…
-
Security Researchers Discover Critical RCE Vulnerability, Earn $40,000 Bounty
Cybersecurity researchers Abdullah Nawaf and Orwa Atyat, successfully escalated a limited path traversal vulnerability into a full-blown remote code execution (RCE). Their discovery earned a massive $40,000 bounty from the targeted organization’s bug bounty program. The team documented their step-by-step approach, leaving the cybersecurity community with valuable lessons on persistence, creativity, and methodical bug hunting.…
-
IBM i Access Client Solutions Might Be Leaking Your Passwords
A potential security flaw in IBM i Access Client Solutions (ACS) has raised serious concerns about password leakage, leaving users vulnerable to exploitation. Research published yesterday by a vulnerability assessment team revealed that the *WINLOGON authentication feature in IBM ACS is questionably storing Windows credentials, potentially exposing plaintext passwords. This alarming discovery has prompted immediate…
-
Weaponized VS Code Impersonate Zoom App Steals Cookies From Chrome
A newly identified extension for Visual Studio Code (VS Code) has been found to impersonate a legitimate Zoom application, enabling cybercriminals to steal sensitive cookies from Google Chrome. This incident marks a significant escalation in the tactics employed by malicious actors to exploit trusted software ecosystems. The Discovery The nefarious extension, uploaded to the VS…
-
Die Entwicklung des Cyber-Untergrunds
Tags: cyberTrend Micro hat eine neue Studie mit dem Titel Bridging Divides, Transcending Borders: The Current State of the English Underground veröffentlicht. Der Bericht untersucht aktuelle Entwicklungen im englischsprachigen Cyberkriminalitätsmilieu und dessen weltweite Auswirkungen. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/die-entwicklung-des-cyber-untergrunds
-
DLL Sideloading Proxying: New Campaign Delivers Sliver Implants to German Targets
Cyble Research and Intelligence Labs (CRIL) has uncovered an ongoing cyber campaign targeting German organizations using sophisticated tactics First seen on securityonline.info Jump to article: securityonline.info/dll-sideloading-proxying-new-campaign-delivers-sliver-implants-to-german-targets/
-
Healthcare Cybersecurity: The Chronic Condition We Can’t Ignore
Cyber breaches in healthcare are chronic conditions that can linger for years, quietly draining resources and eroding trust. Imagine a chronic disease. There’s the immediate crisis phase that demands urgent attention”, medication, hospital stays, or even surgery. But long after those acute symptoms subside, the condition requires ongoing care and monitoring. Cyberattacks follow a similar…
-
EU Commission Calls for Health Sector Cyber ‘Action Plan’
Initiative Aims to Bolster Security of EU Member Hospitals, Healthcare Providers. The European Commission has a new action plan to strengthen cybersecurity of the hospitals and other healthcare providers in the European Union from rising cyberthreats and attacks. The plan includes a cybersecurity support center to offer guidance and other resources to the EU’s health…