Tag: cybersecurity
-
Senator Urges FTC to Investigate Microsoft Product Security
Lawmaker Says Microsoft Lapses Led to Ascension Health’s Major 2024 Hack. Sen. Ron Wyden, D-Oregon, is urging the Federal Trade Commission to investigate Microsoft over the software giant’s alleged negligent cybersecurity, which he says contributed to ransomware attacks on critical infrastructure sector organizations, including last year’s attack on Ascension Health. First seen on govinfosecurity.com Jump…
-
U.S. Senator accuses Microsoft of “gross cybersecurity negligence”
U.S. Senator Ron Wyden has sent a letter to the Federal Trade Commission (FTC) requesting the agency to investigate Microsoft for failing to provide adequate security in its products, which led to ransomware attacks against healthcare organizations. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/us-senator-accuses-microsoft-of-gross-cybersecurity-negligence/
-
F5 to acquire AI security firm CalypsoAI for $180 million
The deal reflects growing cybersecurity concerns as companies rapidly deploy artificial intelligence systems. First seen on cyberscoop.com Jump to article: cyberscoop.com/f5-to-acquire-ai-security-firm-calypsoai-for-180-million/
-
The Future of Human Risk Management: The Zensory and Brigantia Partnership A Year On
Cybersecurity distributor Brigantia and The Zensory, the popular wellbeing and productivity platform dedicated to transforming work habits, have been working together for a whole year now. The partnership set out with a hefty aim: to tackle one of the biggest threats in cybersecurity human error. No small feat. Reporting on the success of the The…
-
Senator Wyden Urges FTC to Probe Microsoft for Ransomware-Linked Cybersecurity Negligence
U.S. Senator Ron Wyden has called on the Federal Trade Commission (FTC) to probe Microsoft and hold it responsible for what he called “gross cybersecurity negligence” that enabled ransomware attacks on U.S. critical infrastructure, including against healthcare networks.”Without timely action, Microsoft’s culture of negligent cybersecurity, combined with its de facto monopolization of the First seen…
-
CISA Launches Roadmap for the CVE Program
The US cybersecurity agency called for the CVE program to remain publicly maintained and vendor-neutral while emphasizing the need for broader engagement First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cisa-launches-roadmap-cve-program/
-
Microsoft’s ‘Gross Cybersecurity Negligence Threatens National Security’
Roasting Redmond for Kerberoasting: “Like an arsonist selling firefighting services,” quips this 76-year-old. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/ron-wyden-microsoft-kerberoasting-richixbw/
-
From Alert Fatigue to Proactive Defense: The Case for AI-Driven Prevention
Artificial intelligence is no longer just another tool in the cybersecurity stack”, it’s becoming a requirement to keep pace with modern threats. Deep Instinct CIO Carl Froggett discusses how attackers are leveraging AI to move faster and why defenders need to rethink their own strategies. One of the most pressing issues security teams face today is…
-
Kids in the UK are hacking their own schools for dares and notoriety
Kids are making a mark in the U.K.’s cybersecurity arena, and not in the way their parents want them to. First seen on techcrunch.com Jump to article: techcrunch.com/2025/09/11/kids-in-the-uk-are-hacking-their-own-schools-for-dares-and-notoriety/
-
Wyden Urges FTC Investigation Over Ascension Ransomware Hack
Senator Ron Wyden of Oregon has urged the FTC to investigate Microsoft for cybersecurity lapses linked to ransomware attacks on US critical infrastructure First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/wyden-urges-ascension-hack-ftc/
-
How Exposure Management and Cyber Risk Quantification Power CTEM
If you’ve been anywhere near cybersecurity leadership circles lately, you’ve probably heard the acronym CTEM tossed around a lot. Continuous Threat Exposure Management promises a framework for staying ahead of an endlessly shifting attack surface. But here’s the catch: a framework is only as good as the engines that drive it. That was the heart……
-
Microsoft under fire: Senator demands FTC investigation into ‘arsonist selling firefighting services’
Tags: access, attack, authentication, breach, business, cio, ciso, computer, corporate, cyber, cybersecurity, email, encryption, finance, government, hacker, mfa, microsoft, network, password, ransomware, service, software, technology, threat, updateThe technical reality behind the failures: Security experts have long criticized Microsoft’s reliance on outdated encryption standards. “RC4 should have been retired long ago, yet it still lurks in Active Directory and continues to enable attacks like Kerberoasting,” Gogia noted.Microsoft’s justification centered on backward compatibility concerns. “Microsoft’s line has been that switching it off overnight…
-
How Zscaler-Red Canary Deal Is Boosting CrowdStrike Partnership: Execs
Zscaler’s recent acquisition of Red Canary is delivering massive benefits to its pivotal partnership with CrowdStrike, creating major opportunities for joint channel partners of the two cybersecurity giants, executives from the companies told CRN. First seen on crn.com Jump to article: www.crn.com/news/security/2025/how-zscaler-red-canary-deal-is-boosting-crowdstrike-partnership-execs
-
Wyden Asks FTC to Investigate Microsoft’s ‘Gross Cybersecurity Negligence’
For the second time in two years, Senator Ron Wyden is asking federal regulators to investigate Microsoft’s cybersecurity practices, saying the ongoing weaknesses in the Windows OS is making federal agencies, critical infrastructure, and corporations vulnerable to ransomware and other cyberthreats. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/wyden-asks-ftc-to-investigate-microsofts-gross-cybersecurity-negligence/
-
UK delays introducing new cybersecurity legislation, again
As high-profile incidents continue to disrupt British companies, the U.K. government, amid a cabinet reshuffle of senior and junior ministers, is delaying a bill to update cybersecurity regulations. First seen on therecord.media Jump to article: therecord.media/uk-cybersecurity-law-update-csrb-delayed-again
-
Fake Madgicx Plus and SocialMetrics Extensions Are Hijacking Meta Business Accounts
Cybersecurity researchers have disclosed two new campaigns that are serving fake browser extensions using malicious ads and fake websites to steal sensitive data.The malvertising campaign, per Bitdefender, is designed to push fake “Meta Verified” browser extensions named SocialMetrics Pro that claim to unlock the blue check badge for Facebook and Instagram profiles. At least 37…
-
Wyden Urges FTC to Investigate Microsoft Over Weak RC4 Encryption Enabling Kerberoasting
Tags: attack, cyber, cybersecurity, encryption, finance, infrastructure, microsoft, ransomware, software, vulnerability, windowsSenator Ron Wyden has formally requested the Federal Trade Commission investigate Microsoft for cybersecurity negligence that has enabled ransomware attacks against critical infrastructure organizations nationwide. In a September 10 letter to FTC Chair Andrew Ferguson, Wyden detailed how Microsoft’s dangerous software engineering decisions have made Windows systems extremely vulnerable to sophisticated cyberattacks. The senator’s investigation…
-
Shift from Reactive to Proactive: Leveraging Tenable Exposure Management for MSSP Success
Tags: access, ai, api, application-security, attack, best-practice, breach, business, cloud, compliance, control, cyber, cybersecurity, data, endpoint, exploit, framework, guide, identity, infrastructure, iot, mitre, mssp, risk, risk-management, service, technology, threat, tool, vulnerability, vulnerability-managementAn Exposure Management as a Service offering allows MSSPs to unify security visibility, insight and action across the attack surface to prioritize exposure and enable innovation that is secure and compliant. Whether you’re already leveraging Tenable Vulnerability Management as a Service or you’re just starting a service offering, we’ve got guidance for you. Key takeaways…
-
AsyncRAT Exploits ConnectWise ScreenConnect to Steal Credentials and Crypto
Cybersecurity researchers have disclosed details of a new campaign that leverages ConnectWise ScreenConnect, a legitimate Remote Monitoring and Management (RMM) software, to deliver a fleshless loader that drops a remote access trojan (RAT) called AsyncRAT to steal sensitive data from compromised hosts.”The attacker used ScreenConnect to gain remote access, then executed a layered VBScript and…
-
When is the Right Time to Hire a CISO?
Knowing when to hire a CISO is a challenging proposition one which most organizations will eventually need to answer. The need to hire a CISO depends on a combination of factors, including but not limited to: Relevance of regulatory requirements Size of the organization Complexity of operations Sensitivity of data handled or processed Desired risk…
-
Pentagon Releases Long-Awaited Contractor Cybersecurity Rule
Department of Defense Releases Cybersecurity Maturity Model Certification Rule. The Department of War has published the final version of its Cybersecurity Maturity Model Certification Rule – dubbed CMMC 2.0 – following years of collaboration with defense vendors on a tiered-approach to developing standardized cybersecurity requirements across the Defense Industrial Base. First seen on govinfosecurity.com Jump…
-
Spanish club Girona FC selects WatchGuard as Official Cybersecurity Supplier
Tags: cybersecurityWatchGuard Technologies, a provider of unified cybersecurity, has announced that it is now the Official Cybersecurity Supplier of Spanish football club Girona FC. The strategic partnership marks a significant step in the Club’s ongoing commitment to strengthening its digital security. Under the terms of the partnership, WatchGuard will apply its Unified Security Platform® architecture…
-
Wyden calls on FTC to investigate Microsoft for ‘gross cybersecurity negligence’ in protecting critical infrastructure
The Oregon senator said Microsoft’s default settings for Windows and other products are enabling ransomware attacks, like the one against Ascension hospital system in 2024. First seen on cyberscoop.com Jump to article: cyberscoop.com/ron-wyden-ftc-microsoft-default-security-flaws-rc4-kerberoasting-ascension-ransomware/
-
How Mitsubishi-Nozomi Deal Will Boost OT Cyber Capabilities
CMO Mike Plante on Nozomi Expanding Industrial Reach, Operating as Independent Unit. Japanese Industrial giant Mitsubishi Electric will acquire San Francisco-based cybersecurity firm Nozomi Networks for $883 million. The two companies aim to fuse industrial data insights with advanced threat detection while keeping Nozomi as an independent brand. First seen on govinfosecurity.com Jump to article:…
-
Expertenstatements zur it-sa 2025 was sind die Highlights, die wichtigsten Trends und Visionen?
Netzpalaver hat seine Community zur kommenden Sicherheitsmesse it-sa 2025 (7. bis 9. Oktober in Nürnberg) befragt und die Community-Experten aus dem IT- und Cybersicherheitsbereich antworteten mit einem Video-Statement auf die Frage: ‘Was müssen die Besucher der Sicherheitsmesse it-sa in diesem Jahr unbedingt auf dem Cybersecurity-Radar haben und vor allem warum?>> Statement von Michael Veit, […]…
-
1.6 Million Voices Stolen: Your Voice Could Be Next
A cybersecurity researcher’s recent discovery from yesterday should make every gym member’s blood run cold. Jeremiah Fowler uncovered something that defies belief, 1,605,345 audio recordings sitting completely exposed online, no password, no encryption, no protection whatsoever. These were not random files. They were five years of personal phone calls and voicemails from gym members spanning…
-
New Tenable Report: How Complexity and Weak AI Security Put Cloud Environments at Risk
Tags: access, ai, attack, authentication, breach, cloud, control, credentials, cyber, cybersecurity, data, governance, iam, identity, least-privilege, metric, mfa, monitoring, resilience, risk, security-incident, skills, software, strategy, threat, toolThis survey, commissioned by Tenable and developed in collaboration with the Cloud Security Alliance, warns that rapid cloud and AI adoption, combined with insecure identities and a reactive posture, leave organizations exposed. The report urges a strategic shift to preventive security with a unified view of risk and mature identity governance. Key takeaways Organizations are…
-
We’ve crossed the security singularity – Impart Security
Tags: access, ai, api, attack, authentication, breach, ciso, compliance, credentials, cyber, cyberattack, cybersecurity, data, data-breach, defense, detection, exploit, framework, group, hacker, incident response, injection, intelligence, Internet, msp, password, penetration-testing, ransomware, risk, risk-assessment, skills, software, sql, strategy, supply-chain, threat, update, vulnerability, zero-day, zero-trustThe Bottom Line: We’ve Crossed the Security Singularity “ The Security Singularity: When AI Democratized Cyberattacks We’ve crossed a threshold that fundamentally changes cybersecurity forever. Not with fanfare or headlines, but quietly, in the background of our AI-powered world. The expertise barrier that once separated script kiddies from sophisticated threat actors has simply… vanished. I…