Tag: cybersecurity
-
Chris Krebs resigns from SentinelOne to focus on fighting Trump’s executive order
The former CISA director departed the cybersecurity company in response to the order, which directs DOJ to investigate him. First seen on cyberscoop.com Jump to article: cyberscoop.com/chris-krebs-resigns-sentinelone-fight-trump-executive-order/
-
Targeted by Trump, Chris Krebs Resigns Job to Fight Probe
Cybersecurity Expert Sees Retribution for Stating 2020 Election Results Legitimate. Chris Krebs, director of the U.S. Cybersecurity and Infrastructure Security Agency during President Donald Trump’s first administration, resigned from his private-sector job to fight what he characterized as a retaliatory probe, designed to punish dissent, ordered by his former boss. First seen on govinfosecurity.com Jump…
-
Managing Burnout in the SOC What CISOs Can Do
The Security Operations Center (SOC) is the nerve center of modern cybersecurity, responsible for detecting, analyzing, and responding to threats 24/7. However, the relentless pace, high stakes, and constant pressure to defend against sophisticated attacks can take a heavy toll on SOC analysts. Burnout is now a significant risk in many SOCs, leading to decreased…
-
The Future of Cybersecurity Talent Trends and Opportunities
The cybersecurity landscape is transforming rapidly, driven by evolving threats, technological advancements, and a persistent global talent shortage. By 2025, the sector faces a shortfall of over four million professionals, exacerbated by the growing complexity of attacks and the proliferation of artificial intelligence (AI) in both defense and offense. Leaders must reimagine talent strategies to…
-
Chris Krebs leaves SentinelOne after Trump memo, saying ‘this is my fight’
Former CISA Director Chris Krebs has left a senior position at cybersecurity company SentinelOne to fight back against the Trump administration’s investigation into his activities atop the federal agency. First seen on therecord.media Jump to article: therecord.media/krebs-leaves-sentinelone-after-trump-memo
-
Senators Urge Cyber-Threat Sharing Law Extension Before Deadline
Bipartisan support grows in Congress to extend Cybersecurity Information Sharing Act for 10 years First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/senators-urge-cyberthreat-sharing/
-
Mit der Firmenübernahme steigt das Angriffsrisiko
Übernahmeaktivitäten bergen auch mit Blick auf die Security Risiken.Im Rahmen ihrer Arbeit an dem kürzlich veröffentlichten Report ‘2025 Data Security Incidcent Response” (PDF) haben Security-Experten der US-Anwaltskanzlei BakerHostetler den gefährlichsten Zeitraum für die Unternehmenssicherheit ermittelt. Demnach ist der Zeitabschnitt unmittelbar nach Abschluss einer Übernahme besonders erfolgversprechend für Cyberangriffe. Dafür gibt es mehrere Gründe: Angst vor…
-
CISA Issues Threat Warning After ‘Potential’ Oracle Cloud Breach
While CISA said it has no specifics on a recently reported Oracle Cloud breach, the federal cybersecurity agency warned of a possibility of increased credential risks. First seen on crn.com Jump to article: www.crn.com/news/security/2025/cisa-issues-threat-warning-after-potential-oracle-cloud-breach
-
Cybersecurity by Design: When Humans Meet Technology
If security tools are challenging to use, people will look for workarounds to get around the restrictions. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/cybersecurity-by-design-when-humans-meet-technology
-
How Critical Infrastructure Leaders Are Rethinking Cybersecurity
S4 EP 5: What’s changed, what’s working, and how to prepare for when, not if, incidents hit critical infrastructure. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/how-critical-infrastructure-leaders-are-rethinking-cybersecurity/
-
Bipartisan duo wants to renew 10-year-old cyberthreat information sharing law
Sens. Mike Rounds and Gary Peters want have offered a 10-year extension of the Cybersecurity Information Sharing Act of 2015, which helps businesses share cyberthreat information with federal agencies. First seen on therecord.media Jump to article: therecord.media/cybersecurity-information-sharing-act-2015-renewal-rounds-peters
-
China Plans Expanded Cybersecurity Cooperation with Russia
China has announced a significant step forward in its partnership with Russia, with plans to expand their cooperation in the field of cybersecurity. In an article published by Sputnik News, Chinese Ambassador to Russia Zhang Hanhui outlined Beijing’s intention to deepen its collaboration, emphasizing the shared importance both countries place on digital security and the…
-
NIST Updates Privacy Framework With AI and Governance Revisions
The US National Institute of Standards and Technology has updated its Privacy Framework to work cohesively with its Cybersecurity Framework and guide organizations to develop stronger postures to handle privacy risks. First seen on darkreading.com Jump to article: www.darkreading.com/data-privacy/nist-updates-privacy-framework-ai-governance
-
CVE-Finanzierung weiterhin gesichert
Tags: cisa, cve, cyber, cybersecurity, docker, google, governance, government, infrastructure, mitre, open-source, technology, tool, usa, vulnerabilityExperten warnten, dass ohne CVE ein Koordinationschaos in der IT-Sicherheit droht. Die CISA scheint sie erhört zu haben.Am 16. April 2025 hatte die Trump-Regierung kurzfristig ein Ende der Finanzierung des weltweit bedeutenden CVE-Programms (Common Vulnerabilities and Exposures), das seit 25 Jahren eine zentrale Rolle in der Cybersicherheitslandschaft spielt, verkündet. Die gemeinnützige Organisation MITRE, die das…
-
Critical Erlang/OTP SSH Vulnerability Allow Hackers Execute Arbitrary Code Remotely
A major security flaw has been uncovered in the widely used Erlang/OTP SSH implementation, drawing urgent attention from the cybersecurity community worldwide. The vulnerability, tracked as CVE-2025-32433, exposes systems to unauthenticated remote code execution, potentially allowing hackers to fully compromise affected servers with ease. Overview of the vulnerability The vulnerability was discovered by a research team…
-
What’s New at ManagedMethods: New Features, Smarter Tools Smoother Experiences
Our engineering team has been busy behind the scenes building and improving our cybersecurity and safety products. We’ve been gathering feedback from our amazing customers (that’s you!) and turning it into new features and upgrades across the ManagedMethods suite: Cloud Monitor, Content Filter, and Classroom Manager. Here’s a look at what’s new and what’s coming…
-
Trump’s Retaliation Against Chris Krebs, and the Cybersecurity Industry’s Deafening Silence
Chris Krebs, the former director of the Cybersecurity and Infrastructure Security Agency (CISA), was fired by Donald Trump in 2020 for publicly affirming that the presidential election was secure and free from widespread fraud. Fast-forward to April 2025: Trump, now back in the White House, issued an executive order revoking Krebs’ security clearances and ordering……
-
U.S. CISA adds SonicWall SMA100 Appliance flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SonicWall SMA100 Appliance flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a SonicWall SMA100 Appliance flaw, tracked as CVE-2021-20035, to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is an OS Command Injection Vulnerability in the SMA100 management interface. A…
-
Hacker Leaks 33,000 Employee Records in Third-Party API Breach
A hacker has exposed the personal records of over 33,000 employees after discovering unrestricted endpoints belonging to a major technology service provider. The breach, first reported by cybersecurity platform CloudSEK’s BeVigil, highlights alarming gaps in API security that could have far-reaching consequences for both the affected organization and its clients. CloudSEK’s BeVigil, a platform specializing…
-
CISA Flags Actively Exploited Vulnerability in SonicWall SMA Devices
Tags: access, cisa, cve, cybersecurity, exploit, flaw, infrastructure, injection, kev, mobile, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting SonicWall Secure Mobile Access (SMA) 100 Series gateways to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.The high-severity vulnerability, tracked as CVE-2021-20035 (CVSS score: 7.2), relates to a case of operating system command injection First seen…
-
When AI agents go rogue, the fallout hits the enterprise
In this Help Net Security interview, Jason Lord, CTO at AutoRABIT, discusses the cybersecurity risks posed by AI agents integrated into real-world systems. Issues like … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/17/jason-lord-autorabit-ai-agents-risks/
-
CISA Issues Alert on SonicWall Flaw Being Actively Exploited
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical security alert after confirming active exploitation of a SonicWall vulnerability. The flaw, documented as CVE-2021-20035, targets SonicWall’s SMA100 series appliances and has been added to CISA’s Known Exploited Vulnerabilities Catalog. Overview of the Vulnerability This particular vulnerability lies within the SonicWall Secure Mobile Access (SMA)…
-
MITRE funding still in up in the air, say experts
‘Shouldn’t be begging’: “MITRE leaders have been begging for more private funding for years,” said Roger Grimes, data driven defense evangelist at KnowBe4, in an email.”This isn’t a type of program where the program leaders should be begging for funding. It should be fully funded, correctly resourced, and able to do a superb job for…
-
Whistleblower alleges Russian IP address attempted access to US agency’s systems via DOGE-created accounts
Legal battle: As it stands, the allegations are being made by one individual, and the evidence behind them has yet to be examined independently.In a statement to NPR, an NLRB representative said that while Berulis had raised concerns within the agency, an investigation had “determined that no breach of agency systems occurred.”That said, it won’t…
-
New Windows Task Scheduler Bugs Let Attackers Bypass UAC and Tamper with Logs
Cybersecurity researchers have detailed four different vulnerabilities in a core component of the Windows task scheduling service that could be exploited by local attackers to achieve privilege escalation and erase logs to cover up evidence of malicious activities.The issues have been uncovered in a binary named “schtasks.exe,” which enables an administrator to create, delete, query,…
-
Smashing Security podcast #413: Hacking the hackers… with a credit card?
A cybersecurity firm is buying access to underground crime forums to gather intelligence. Does that seem daft to you? First seen on grahamcluley.com Jump to article: grahamcluley.com/smashing-security-podcast-413/
-
Former CISA director Chris Krebs vows to fight back against Trump-ordered federal investigation
The former cybersecurity chief is the latest to push back on the Trump administration’s targeting of critics and dissenters. First seen on techcrunch.com Jump to article: techcrunch.com/2025/04/16/former-cisa-director-chris-krebs-vows-to-fight-back-against-trump-ordered-federal-investigation/
-
Frequently Asked Questions About the MITRE CVE Program Expiration and Renewal
Tags: advisory, attack, cisa, computer, cve, cybersecurity, data, exploit, government, incident response, infrastructure, mitre, nvd, open-source, risk, tactics, update, vulnerability, vulnerability-managementConcerns about the future of the MITRE CVE Program continue to circulate. The Tenable Security Response Team has created this FAQ to help provide clarity and context around this developing situation. Background The Tenable Security Response Team has compiled this blog to answer Frequently Asked Questions (FAQ) regarding changes around the MITRE CVE Program. As…