Tag: defense
-
Star Blizzard hackers abuse WhatsApp to target high-value diplomats
Russian nation-state actor Star Blizzard has been running a new spear-phishing campaign to compromise WhatsApp accounts of targets in government, diplomacy, defense policy, international relations, and Ukraine aid organizations. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/star-blizzard-hackers-abuse-whatsapp-to-target-high-value-diplomats/
-
A Brief Guide for Dealing with ‘Humanless SOC’ Idiots
image by Meta.AI lampooning humanless SOC My former “colleagues” have written several serious pieces of research about why a SOC without humans will never happen (“Predict 2025: There Will Never Be an Autonomous SOC”, “The “Autonomous SOC” Is A Pipe Dream”, “Stop Trying To Take Humans Out Of Security Operations”). But I wanted to write…
-
US hits back against China’s Salt Typhoon group
Tags: attack, backdoor, china, cisa, ciso, communications, computer, control, crypto, cve, cyber, cyberattack, cybersecurity, defense, detection, disinformation, espionage, exploit, finance, government, group, infosec, infrastructure, intelligence, ivanti, law, malicious, mandiant, microsoft, network, north-korea, office, tactics, technology, theft, threat, tool, vpn, vulnerabilityThe US is hitting back against the threat group, dubbed Salt Typhoon by Microsoft, which is allegedly behind recent cyber attacks against American telecommunications providers, as part of a wider campaign against Chinese-based hacking.On Friday the Department of the Treasury’s Office of Foreign Assets Control (OFAC) said it is sanctioning Sichuan Juxinhe Network Technology, a…
-
Cisco Unveils AI Defense to Stand Against Model Safety Risks
Product Head Jeetu Patel on How AI Defense Ensures Secure LLM Operations at Runtime. Cisco’s AI Defense platform addresses emerging safety and security risks in AI. By leveraging insights from Robust Intelligence, it offers model validation, threat prevention and integrated guardrails to protect against evolving challenges such as hallucinations and prompt injection attacks. First seen…
-
CISA’s AI cyber collaboration playbook aims to spur information-sharing
The Joint Cyber Defense Collaborative product seeks to build “a unified approach” to combat AI-related cyber threats. First seen on cyberscoop.com Jump to article: cyberscoop.com/cisa-ai-jcdc-cyber-collaboration-playbook/
-
Russian espionage and financial theft campaigns have ramped up, Ukraine cyber agency says
Tags: cyber, cybersecurity, defense, espionage, finance, government, incident, incident response, russia, theft, ukraineOver the past year, Ukraine’s cyber incident response center identified and addressed 1,042 cybersecurity incidents impacting government, defense, and critical services.]]> First seen on therecord.media Jump to article: therecord.media/russian-espionage-financial-theft-campaign
-
Cisco’s homegrown AI to help enterprises navigate AI adoption
As the world rushes to integrate AI into all aspects of enterprise applications, there’s a pressing need to secure data-absorbing AI systems from malicious interferences.To achieve that, Cisco has announced Cisco AI Defense, a solution designed to address the risks introduced by the development, deployment, and usage of AI.According to Tom Gillis, SVP and GM…
-
The Top 8 Countries Leading the Cyber Defense Race in 2025
Organizations of all types are getting breached at an alarming rate everywhere, which makes picking the top countries leading the cyber defense race a challenging endeavor. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/top-countries-leading-cybersecurity-race-2025/
-
Using cognitive diversity for stronger, smarter cyber defense
In this Help Net Security interview, Mel Morris, CEO of Corpora.ai, discusses how cognitive biases affect decision-making during cybersecurity incidents. Morris shares … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/01/15/mel-morris-corpora-ai-cognitive-diversity-cybersecurity/
-
Hegseth says debate over Cyber Command, NSA leadership would reach ‘conclusion’
“I will bring these debates to conclusion,” Pete Hegseth, President-elect Donald Trump’s pick for Defense secretary, told senators about how he would handle the “dual hat” leadership atop U.S. Cyber Command and the National Security Agency.]]> First seen on therecord.media Jump to article: therecord.media/pete-hegseth-confirmation-hearing-nsa-cybercom-dual-hat
-
Beware cybersecurity tech that’s past its prime, 5 areas to check or retire
Tags: access, advisory, ai, antivirus, attack, authentication, breach, bug-bounty, ciso, cloud, control, credentials, cyberattack, cybersecurity, data, data-breach, defense, detection, encryption, endpoint, firewall, Hardware, network, password, penetration-testing, risk, router, siem, software, strategy, switch, threat, tool, vpn, vulnerability, waf, zero-trustCybersecurity leaders can choose from an ever-expanding list of digital tools to help them ward off attacks and, based on market projections, they’re implementing plenty of those options.Gartner predicts a 15% increase in cybersecurity spending for 2025, with global expenditures expected to reach $212 billion in the upcoming year. The research and consulting firm says…
-
Companies Double Down on AI and Supply Chain Security, According to Black Duck’s BSIMM15 Report
Organisations worldwide are ramping up efforts to tackle emerging security risks in artificial intelligence (AI) and software supply chains, according to the newly released BSIMM15 report from Black Duck. The report, which examines software security practices across 121 companies, reveals a sharp increase in activities aimed at strengthening defenses against evolving threats. Key findings from…
-
NATO’s newest member comes out swinging following latest Baltic Sea cable attack
‘Sweden has changed,’ PM warns as trio of warships join defense efforts First seen on theregister.com Jump to article: www.theregister.com/2025/01/13/sweden_baltic_cable_attack/
-
Biden’s final push: Using AI to bolster cybersecurity standards
Tags: access, ai, attack, china, cisa, compliance, cyber, cyberattack, cybersecurity, data, defense, detection, email, exploit, finance, framework, government, hacker, incident, infrastructure, intelligence, office, privacy, programming, resilience, risk, software, strategy, technology, threat, vulnerabilityIn a decisive move to strengthen national cybersecurity, President Joe Biden is poised to sign an executive order imposing stringent security standards for federal agencies and contractors. Scheduled for publication in the coming days, the directive will emphasize integrating artificial intelligence (AI) into cyber defense strategies while addressing systemic vulnerabilities in software security, reported Reuters.This…
-
Strategic Approaches to Enhance Data Security
How Crucial Are Non-Human Identities to Data Security? Data security has long been the bedrock of digital enterprises, providing robust defenses against the myriad of cyber threats that organizations face daily. But how often have you considered Non-Human Identities (NHIs) and Secrets Security Management in these defenses? If you haven’t been, it’s time to start….…
-
Malware targets Mac users by using Apple’s security tool
A variant of the Banshee macOS infostealer was seen duping detection systems with new string encryption copied from Apple’s in-house algorithm.A Check Point research, which caught the variant after two months of successful evasion, said threat actors distributed Banshee using phishing websites and fake GitHub repositories, often impersonating popular software like Google Chrome, Telegram, and…
-
Harnessing AI for Proactive Threat Intelligence and Advanced Cyber Defense
Discover how AI revolutionizes cybersecurity with real-time threat detection, adaptive protection, and advanced data protection to combat evolving… First seen on hackread.com Jump to article: hackread.com/harnessing-ai-proactive-threat-intelligence-cyber-defense/
-
Cyber Command overhaul gets Austin’s approval, but plan faces uncertain future
Defense Secretary Lloyd Austin approved the plan known as Cyber Command 2.0 in December, sources tell Recorded Future News, but any overhaul of the digital warfighting unit will be subject to an entirely new set of Pentagon leaders soon.]]> First seen on therecord.media Jump to article: therecord.media/cyber-command-overhaul-secdef-approval
-
Effective API Throttling for Enhanced API Security
APIs are the backbone of modern digital ecosystems, but their misuse can expose systems to cyber threats. Effective API throttling not only optimizes performance but also acts as a critical defense mechanism against abuse, such as denial-of-service attacks. Discover how this powerful strategy enhances API security and safeguards your organization’s data in an interconnected world. …
-
Part 15: Function Type Categories
On Detection: Tactical to Functional Seven Ways to View API Functions Introduction Welcome back to Part 15 of the On Detection: Tactical to Functional blog series. I wrote this article to serve as a resource for those attempting to create tool graphs to describe the capabilities of the attacker tools or malware samples they encounter.…
-
In The News – What is Quishing and How Can Schools Defend Against it?
This article was originally published in Campus Safety Magazine on 1/3/25 by Charlie Sander. “Quishing” is phishing using a QR code, and it is slipping through the defenses of companies and K-12 schools alike Most people are familiar with phishing, which involves scammers sending targeted emails with malicious links to an unsuspecting individual. The average…
-
Chinese Tech Companies Tencent, CATL and Others Protest US Listings as Army-Linked Companies
The U.S. Defense Department added dozens of Chinese companies, including Tencent, SenseTime and battery maker CATL, to a list of companies it says have ties to China’s military. The post Chinese Tech Companies Tencent, CATL and Others Protest US Listings as Army-Linked Companies appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/chinese-tech-companies-tencent-catl-and-others-protest-us-listings-as-army-linked-companies/
-
Cybercriminals Don’t Care About National Cyber Policy
We can’t put defense on hold until Inauguration Day. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/cybercriminals-dont-care-national-cyber-policy
-
US adds Tencent to the list of companies supporting Chinese military
US adds Chinese multinational technology and entertainment conglomerate Tencent to the list of companies supporting the Chinese military. The US Department of Defense has added Chinese multinational technology and entertainment conglomerate Tencent to its >>Chinese military company