The Securities and Exchange Commission (SEC) has charged four public companies (current and former) with misleading disclosures about cyber risks and intrusions. The charged companies are Unisys Corp., Avaya Holdings Corp., Check Point Software Technologies Ltd and Mimecast Limited. In order to settle the SEC charges, each company agreed to pay the following civil penalties: […]
In episode 25 of the Cybersecurity & Geopolitical Discussion, our expert panel, CYJAX Chief Information Security Officer (CISO) Ian Thornton-Trump, CD, Philip Ingram, MBE, of Grey Hare Media, and Lisa Forte of Red Goat Security, pull apart the rapidly deteriorating situation in the Middle East. Unsurprisingly, a key focus is on the recent audacious pager […]
An advisory released by the CISA, FBI, NSA, and their international partners warns about the targeting of critical infrastructure entities by Iranian cyber actors through brute force tactics. This activity has been ongoing since October 2023 and has resulted in compromised user accounts in various sectors including government, information technology, energy, engineering, and healthcare. Avishai […]
Recent analysis by Extreme Networks revealed that Chief Information Officers (CIOs) are primarily focused on the convergence of networking and security, despite the buzz around AI in the tech industry. The report showed that 34% of CIOs prioritize securing the network, while 22% focus on integrating networking and security. Protecting the network against potential threats […]
Every chief information security officer (CISO) understands that it’s not a question of “if,” but rather “when,” their business systems will face disruption. This reality persists due to the increasing complexity of network environments and the rising frequency and speed of cyber attacks. The COVID-19 pandemic has further accelerated the interconnectedness of businesses, resulting in […]
Three vulnerabilities have been added to the Known Exploited Vulnerabilities Catalogue by CISA due to evidence of active exploitation. These vulnerabilities are: Microsoft Windows Kernel TOCTOU Race Condition Vulnerability (CVE-2024-30088) Mozilla Firefox Use-After-Free Vulnerability (CVE-2024-9680) SolarWinds Web Help Desk Hardcoded Credential Vulnerability (CVE-2024-28987) These vulnerabilities are frequent attack vectors for malicious actors and pose a […]
Bugcrowd’s Inside the Mind of a Hacker 2024 report provides insights from a survey of 1,300 ethical hackers from 85 countries, such as the United States, India, Australia, and more. The report highlights that 82% of respondents believe the AI threat landscape is evolving too rapidly to ensure adequate security. Additionally, 93% of hackers think […]
What are injection attacks? Injection attacks refer to any type of attack that targets injection vulnerabilities—a broad category of cybersecurity weaknesses that includes several of the most serious application security risks. While you could argue it’s an artificial way to group otherwise unrelated attacks, the OWASP Top 10 for 2021 took this exact approach, naming […]
An analysis of the impact of cybersecurity incidents on healthcare organizations was conducted in a recent report by Proofpoint. The report reveals that 92% of healthcare organizations surveyed experienced at least one cyber attack in the past year, up from 88% in 2023, with 69% reporting disruptions to patient care. Among those affected by the […]
Research released by Fortinet’s FortiGuard Labs highlights the current threats related to the 2024 United States Presidential Election. The research provides a detailed analysis of threats that could impact the electoral process, such as: Phishing scams Ransomware activity Malicious domain registration Security leaders discuss threats to the election Casey Ellis, Founder and Chief Strategy Officer […]
We hate spam, we obviously will not spam you!
Copyright © TSP 2024. All rights reserved. Designed by Enovate LLC