Tag: jobs

6 hot cybersecurity trends

Sep 10, 2025 5:16 PM

Tags: access, ai, attack, automation, awareness, breach, ceo, chatgpt, cisco, ciso, cloud, compliance, credentials, crowdstrike, cyber, cybersecurity, data, data-breach, deep-fake, edr, email, endpoint, finance, firewall, google, group, hacker, ibm, identity, incident response, infrastructure, intelligence, jobs, law, LLM, malicious, mfa, monitoring, network, open-source, password, phishing, phone, radius, RedTeam, risk, risk-assessment, sans, skills, sophos, strategy, supply-chain, theft, threat, tool, training, unauthorized, update, vulnerability, zero-trust

2. Protecting AI from attacks: AI can help CISOs protect their IT infrastructure, but who’s protecting the AI?”While 2024 saw a surge in proof-of-concept (POC) projects for gen AI, many organizations are moving these projects into production without conducting comprehensive risk assessments,” IDC concludes in its 2025 Security and Trust FutureScape.”Companies may face significant vulnerabilities…
When AI nukes your database: The dark side of vibe coding

Sep 9, 2025 2:08 PM

Tags: ai, application-security, attack, authentication, automation, ciso, computer, control, corporate, data, data-breach, defense, dos, email, flaw, governance, incident response, injection, jobs, LLM, microsoft, open-source, password, risk, saas, skills, supply-chain, threat, tool, training, zero-trust

private paths, on another instance.Worthington warns this is one of the most frequent red flags in threat intel. When vibe-coded applications reach incident response, she says, “You’ll often see absence of logging, lack of source control, or weak authentication alongside hardcoded secrets. Rather than a single fingerprint, it’s a collection of sloppy behaviors that point…
When AI nukes your database: The dark side of vibe coding

Sep 9, 2025 2:08 PM

Tags: ai, application-security, attack, authentication, automation, ciso, computer, control, corporate, data, data-breach, defense, dos, email, flaw, governance, incident response, injection, jobs, LLM, microsoft, open-source, password, risk, saas, skills, supply-chain, threat, tool, training, zero-trust

private paths, on another instance.Worthington warns this is one of the most frequent red flags in threat intel. When vibe-coded applications reach incident response, she says, “You’ll often see absence of logging, lack of source control, or weak authentication alongside hardcoded secrets. Rather than a single fingerprint, it’s a collection of sloppy behaviors that point…
When AI nukes your database: The dark side of vibe coding

Sep 9, 2025 2:08 PM

Tags: ai, application-security, attack, authentication, automation, ciso, computer, control, corporate, data, data-breach, defense, dos, email, flaw, governance, incident response, injection, jobs, LLM, microsoft, open-source, password, risk, saas, skills, supply-chain, threat, tool, training, zero-trust

private paths, on another instance.Worthington warns this is one of the most frequent red flags in threat intel. When vibe-coded applications reach incident response, she says, “You’ll often see absence of logging, lack of source control, or weak authentication alongside hardcoded secrets. Rather than a single fingerprint, it’s a collection of sloppy behaviors that point…
‘I broke completely’: how jobseekers from Africa are being tricked into slavery in Asia’s cyberscam compounds

Sep 9, 2025 6:08 AM

Tags: crime, jobs, military, scam, service

A growing number of Kenyans, Ugandans and Ethiopians are being trafficked to Myanmar, where missing online scam targets leads to beatings and torture”¢ <a href=”https://www.theguardian.com/global-development/2025/sep/08/myanmar-military-junta-scam-centres-trafficking-crime-syndicates-kk-park”>Revealed: the huge growth of Myanmar scam centres that may hold 100,000 trafficked peopleWithin hours of landing in Bangkok from Nairobi last December to start a job as a customer service…
ICYMI: Exposure Management Academy on Attack Surface Management, Proactive Security and More

Sep 8, 2025 5:08 PM

Tags: ai, attack, best-practice, business, cio, cloud, cybersecurity, data, data-breach, group, Internet, jobs, office, risk, skills, technology, threat, update, vulnerability, vulnerability-management, zero-day

Each Monday, the Tenable Exposure Management Academy provides the practical, real-world guidance you need to shift from vulnerability management to exposure management. In this post, we look back on the guidance and best practices shared in the past several months. You can read the entire Exposure Management Academy series here. Let’s look back at key…
APT37 Targets Windows with Rust Backdoor and Python Loader

Sep 8, 2025 5:08 PM

Tags: api, attack, backdoor, cctv, cloud, computer, control, data, detection, exploit, government, group, infection, injection, jobs, korea, malicious, malware, microsoft, monitoring, north-korea, organized, password, phishing, powershell, programming, rust, service, social-engineering, spear-phishing, startup, tactics, theft, threat, tool, update, vulnerability, windows

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals connected to the North Korean regime or involved in human rights activism, leveraging custom malware and adopting emerging technologies.In recent campaigns, APT37 utilizes a single command-and-control (C2) server…
ICYMI: Exposure Management Academy on Attack Surface Management, Proactive Security and More

Sep 8, 2025 5:08 PM

Tags: ai, attack, best-practice, business, cio, cloud, cybersecurity, data, data-breach, group, Internet, jobs, office, risk, skills, technology, threat, update, vulnerability, vulnerability-management, zero-day

Each Monday, the Tenable Exposure Management Academy provides the practical, real-world guidance you need to shift from vulnerability management to exposure management. In this post, we look back on the guidance and best practices shared in the past several months. You can read the entire Exposure Management Academy series here. Let’s look back at key…
APT37 Targets Windows with Rust Backdoor and Python Loader

Sep 8, 2025 5:08 PM

Tags: api, attack, backdoor, cctv, cloud, computer, control, data, detection, exploit, government, group, infection, injection, jobs, korea, malicious, malware, microsoft, monitoring, north-korea, organized, password, phishing, powershell, programming, rust, service, social-engineering, spear-phishing, startup, tactics, theft, threat, tool, update, vulnerability, windows

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals connected to the North Korean regime or involved in human rights activism, leveraging custom malware and adopting emerging technologies.In recent campaigns, APT37 utilizes a single command-and-control (C2) server…
APT37 Targets Windows with Rust Backdoor and Python Loader

Sep 8, 2025 5:08 PM

Tags: api, attack, backdoor, cctv, cloud, computer, control, data, detection, exploit, government, group, infection, injection, jobs, korea, malicious, malware, microsoft, monitoring, north-korea, organized, password, phishing, powershell, programming, rust, service, social-engineering, spear-phishing, startup, tactics, theft, threat, tool, update, vulnerability, windows

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals connected to the North Korean regime or involved in human rights activism, leveraging custom malware and adopting emerging technologies.In recent campaigns, APT37 utilizes a single command-and-control (C2) server…
Saviynt Hires Channel Vet Kelly Allbright For Partner Push

Sep 8, 2025 4:08 PM

Tags: business, identity, jobs, usa

Identity security vendor Saviynt has hired channel veteran Kelly Allbright, most recently the Americas channel head at Wiz, to serve as its global vice president of business development. First seen on crn.com Jump to article: www.crn.com/news/security/2025/saviynt-hires-channel-vet-kelly-allbright-for-partner-push
Is the CISO role broken?

Sep 8, 2025 2:08 PM

Tags: business, ciso, compliance, corporate, cybersecurity, governance, jobs, threat

Short tenures breed long-term failure: But tenures have remained low. Several articles every year place the average CISO tenure in the region at two to three years, and that matches my own field experience.You do not achieve much in terms of transformative impact in any large firm in two to three years.In fact, many CISOs…
Is the CISO role broken?

Sep 8, 2025 2:08 PM

Tags: business, ciso, compliance, corporate, cybersecurity, governance, jobs, threat

Short tenures breed long-term failure: But tenures have remained low. Several articles every year place the average CISO tenure in the region at two to three years, and that matches my own field experience.You do not achieve much in terms of transformative impact in any large firm in two to three years.In fact, many CISOs…
Lazarus Group Deploys Malware With ClickFix Scam in Fake Job Interviews

Sep 8, 2025 1:08 PM

Tags: crypto, data, group, jobs, korea, lazarus, malware, north-korea, scam

North Korea’s Lazarus Group uses the ClickFix scam in fake crypto job interviews to deploy malware, steal data,… First seen on hackread.com Jump to article: hackread.com/lazarus-group-malware-clickfix-scam-fake-job-interview/
The importance of reviewing AI data centers’ policies

Sep 8, 2025 10:08 AM

Tags: ai, attack, backdoor, corporate, cybersecurity, data, government, Hardware, jobs, monitoring, risk, side-channel, supply-chain, threat, tool, vulnerability

What cybersecurity leaders need to consider: Given these expanded threats, cybersecurity leaders and decision makers must closely scrutinize whether their AI data center operators are implementing corporate policies that require technical measures to secure AI data centers across all layers of security, including hardware, data, and geopolitical. Examples of such policies include: closely inspecting hardware…
10 security leadership career-killers, and how to avoid them

Sep 8, 2025 10:08 AM

Tags: ai, breach, business, ciso, control, cybersecurity, incident response, intelligence, jobs, resilience, risk, security-incident, service, skills, strategy, technology, threat, tool

2. Being just a technologist rather than a business executive, too: To align security with enterprise strategy, security professionals need to be business leaders, too, says Ryan Knisley, former CISO of The Walt Disney Co. and Costco Wholesale.That remains a struggle for many CISOs, who still tend to ascend through the security organization and not…
ICE Has Spyware Now

Sep 6, 2025 1:20 PM

Tags: ai, jobs, korea, north-korea, spy, spyware, training

Plus: An AI chatbot system is linked to a widespread hack, details emerge of a US plan to plant a spy device in North Korea, your job’s security training isn’t working, and more. First seen on wired.com Jump to article: www.wired.com/story/ice-has-spyware-now/
LLM06: Excessive Agency FireTail Blog

Sep 5, 2025 7:20 PM

Tags: access, ai, application-security, best-practice, breach, data, finance, flaw, jobs, LLM, risk, vulnerability

Sep 05, 2025 – Lina Romero – In 2025, we are seeing an unprecedented rise in the volume and scale of AI attacks. Since AI is still a relatively new beast, developers and security teams alike are struggling to keep up with the changing landscape. The OWASP Top 10 Risks for LLMs is a great…
OpenAI eats jobs, then offers to help you find a new one at Walmart

Sep 5, 2025 7:20 PM

Tags: jobs, linkedin, openai

Move over LinkedIn, Altman’s crew wants a piece of the action First seen on theregister.com Jump to article: www.theregister.com/2025/09/05/openai_jobs_board/
Jaguar Land Rover staff told to stay home after cyber-attack

Sep 5, 2025 1:20 PM

Tags: attack, business, cyber, hacker, jobs

Prolonged halt at Merseyside and West Midlands factories is tacit admission that quick resolution is unlikely<ul><li><a href=”https://www.theguardian.com/business/live/2025/sep/05/ons-crisis-retail-sales-error-uk-house-prices-record-high-us-jobs-report-business-live-news-updates”>Business live latest updates</li></ul>Jaguar Land Rover has told its factory staff to stay home until at least next Tuesday as it continues to deal with the effects of a cyber-attack.The carmaker has had to stop production at its factories…
Behörden: Russland rekrutiert Cyberkriminelle für IT-Jobs

Sep 5, 2025 10:20 AM

Tags: hacker, jobs

Eine Gruppe junger Hacker steht im Dienste Russlands. Sie dürfen unter anderem an der Plattform arbeiten, die sie einst attackierten. First seen on golem.de Jump to article: www.golem.de/news/russland-moskau-rekrutiert-cyberkriminelle-fuer-it-jobs-2509-199809.html
Lack of board access: The No. 1 factor for CISO dissatisfaction

Sep 5, 2025 9:19 AM

Tags: access, business, ciso, cve, cyber, cybersecurity, finance, jobs, network, ransomware, risk

Building a relationship with the board: The CISO Executive Network is a peer-to-peer organization for information security professionals with more than 1,500 members. Andy Land, general manager of the organization, is seeing most of those members working with solid access to their boards. “But the question is, are we fundamentally doing anything good with that…
Lack of board access: The No. 1 factor for CISO dissatisfaction

Sep 5, 2025 9:19 AM

Tags: access, business, ciso, cve, cyber, cybersecurity, finance, jobs, network, ransomware, risk

Building a relationship with the board: The CISO Executive Network is a peer-to-peer organization for information security professionals with more than 1,500 members. Andy Land, general manager of the organization, is seeing most of those members working with solid access to their boards. “But the question is, are we fundamentally doing anything good with that…
North Korean Hackers Exploit Threat Intel Platforms For Phishing

Sep 4, 2025 6:20 PM

Tags: cyber, exploit, hacker, intelligence, jobs, malware, north-korea, phishing, threat

North Korean hackers have been observed exploiting cyber threat intelligence platforms in a campaign targeting job seekers with malware-laced lures First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/north-korea-exploit-threat-intel/
Palo Alto Networks, Zscaler, Cloudflare hit by the latest data breach

Sep 3, 2025 5:19 AM

Tags: access, ai, api, attack, authentication, breach, business, ciso, credentials, cybersecurity, data, data-breach, email, endpoint, group, identity, incident response, jobs, login, monitoring, network, password, phishing, phone, risk, saas, scam, service, social-engineering, software, strategy, supply-chain, theft, threat, tool, zero-trust

CSO, in response to a request for clarification. “In the case of Zscaler and Palo Alto, because they sell solutions in the SASE space, their compromise can be particularly problematic since this may end up unfolding into a third-party or even fourth-party compromise,” said Flavio Villanustre, SVP and CISO for LexisNexis Risk Solutions. “Keep in mind…
TDL 002 – Defending the DNS: How Quad9 Protects the Internet with John Todd

Sep 3, 2025 1:19 AM

Tags: access, apple, attack, business, china, ciso, communications, control, country, crime, cyber, cybersecurity, data, defense, dns, email, encryption, firewall, google, ibm, india, infrastructure, intelligence, Internet, jobs, law, malicious, malware, network, phishing, privacy, service, strategy, technology, threat, tool, zero-trust

Summary The Defender’s Log episode features John Todd from Quad9, discussing their mission to protect the internet through secure DNS. Quad9, a non-profit launched in 2017 with founding partners Global Cyber Alliance, Packet Clearing House, and IBM, provides a free, global recursive DNS resolver that blocks malicious domains. Todd emphasizes that Quad9’s success is a…
CISSP certification: Requirements, training, exam, and cost

Sep 2, 2025 10:20 PM

Tags: access, business, china, ciso, cloud, computer, credentials, cybersecurity, government, guide, infosec, jobs, linkedin, network, risk, risk-management, skills, training

Who should get a CISSP?: CISSP has been called the “gold standard” of security certifications. “From the hiring side, the CISSP remains one of the most valued certifications I look for,” says Ankit Gupta, Senior Security Engineer at Exeter Finance. “It shows a candidate has a firm grasp of security principles across multiple domains, and…
Moscow reportedly hires hackers who breached city’s school system

Sep 2, 2025 5:20 PM

Tags: cyberattack, hacker, jobs

A senior Moscow official said the city hired several hackers who previously launched a cyberattack against the capital’s digital education platform. First seen on therecord.media Jump to article: therecord.media/moscow-hires-hackers-breached-education
Women cyber leaders are on the rise, and paying it forward

Sep 1, 2025 10:19 AM

Tags: ciso, cloud, cyber, cybersecurity, data, defense, finance, google, group, insurance, international, jobs, lessons-learned, network, office, privacy, risk, service, skills, software, strategy, supply-chain, technology

Carol Lee Hobson, CISO, PayNearMe PayNearMeStill, companies could be doing more to bring women into cybersecurity positions, says Lauren Winchester, vice president of cyber risk services at Travelers.”Women make up more than half of the population yet represent roughly 20% of the cybersecurity workforce. While the number of women in cyber has increased over the…
Task Scams: Trend Micro warnt vor digitalem Job-Betrug

Aug 31, 2025 5:19 PM

Tags: fraud, jobs, scam

First seen on datensicherheit.de Jump to article: www.datensicherheit.de/task-scams-trend-micro-warnung-digital-job-betrug