Latest

Endpoint Security

Likely State Hackers Exploiting Palo Alto Firewall Zero-Day

Mihir Bagwe  •  April 15, 2024

Firewall appliance manufacturer Palo Alto Networks rushed out a hotfix Friday to a command injection vulnerability present in its custom operating system after security researchers spotted a campaign to exploit the zero-day starting in March, likely from a state-backed threat actor.

3rd Party Risk Management

Sisense Breach Highlights Rise in Major Supply Chain Attacks

Chris Riotta  •  April 15, 2024

Cybersecurity experts are sounding the alarm over a rise in supply chain attacks targeting the interconnected systems of global corporate giants after the top U.S. cyber agency urged Sisense customers to reset their credentials following an apparent hack.

►

Governance & Risk Management

New Foundation Sees Mental Health Tied to Cyber Resilience

Anna Delaney  •  April 15, 2024

In response to rising stress levels in cybersecurity, industry leaders, including CTO Sarb Sembhi of Virtually Informed, have launched the Mental Health in CyberSecurity Charter and Foundation to focus on mental health, high-pressure jobs and burnout in the field.

Zero Trust

Zero Trust Adoption: Where Are Enterprises Today?

Brian Pereira  •  April 15, 2024

Enterprises have deliberated on implementing zero trust for years, but vendors are overpromising and under-delivering on zero trust solutions. Gartner Vice President Analyst John Watts discusses the current adoption status and misunderstandings surrounding the framework.

Critical Infrastructure Security

Iran Launches Wave of Retaliatory Strikes at Israel

Prajeet Nair  •  April 14, 2024

Israel Defense Forces reported the launch of rockets by Iran from Lebanon into Israel on Saturday. Hezbollah militants claim responsibility, citing retaliation for recent Israeli actions and solidarity with Palestinians in Gaza, according to reports.

Artificial Intelligence & Machine Learning

UK Markets Authority Warns of AI Market Capture by Big Tech

Akshaya Asokan  •  April 12, 2024

The British antitrust authority warned Thursday that the market for foundational models is taking on "winner takes all" dynamics that could entrench a small number of providers. Firms with an outsize presence in offering compute or data resources could restrict access to critical inputs.

Application Security

PE Firm Accuses Synopsys of Breaching Exclusivity Agreement

Michael Novinson  •  April 12, 2024

A California private equity firm sued Synopsys and accused the systems design behemoth of breaching an exclusivity agreement by shopping its $525 million software integrity business. Sunstone Partners Management said it signed a letter of intent to acquire Synopsys' security testing services unit.

Cyberwarfare / Nation-State Attacks

US Cyber Command Expanded 'Hunt Forward' Operations in 2023

Chris Riotta  •  April 12, 2024

Air Force Gen. Timothy Haugh told the Senate Armed Services Committee the U.S. Cyber Command carried out nearly two dozen defensive cyber operations across the globe in 2023, expanding in size and scope since the "hunt forward" teams were first launched in 2014.

►

Leadership & Executive Communication

Quel rôle de chef d’orchestre pour le CISO?

Timothée Bardet  •  April 12, 2024

Hamid Saidi d'ENGIE discute du rôle crucial du CISO en cybersécurité, soulignant la gestion du shadow IT, l'importance de la cartographie des actifs et la collaboration interne. Il insiste sur l'adaptation à l'audience du COMEX et prévoit une évolution du rôle du CISO face à des défis croissants.

►

Fraud Management & Cybercrime

ISMG Editors: Unpacking the Change Healthcare Attack Saga

Anna Delaney  •  April 12, 2024

In the latest weekly update, four ISMG editors discussed the unending twists and turns in the Change Healthcare cyberattack, positive signs of economic recovery in the cybersecurity tech market, and how artificial intelligence is shaking up supply chain security.

Cybersecurity Spending

FBI Calls for Increased Funding to Counter Cyberthreats

Chris Riotta  •  April 11, 2024

FBI Director Christopher Wray told a congressional panel Thursday the United States faces a wide range of "escalated" digital threats, including sophisticated cyberattacks and emerging risks to networks and critical infrastructure. The FBI took over 1,000 actions against cyber adversaries in 2023.

Cybercrime

Breach Roundup: Sisense Supply Chain Attack

Anviksha More  •  April 11, 2024

This week, Sisense supply chain attack, a likely Romanian botnet, Patch Tuesday, an Apple spyware warning and AT&T notifies customers of breach. Alcohol counselor Monument shared data with Meta, a breach of Home Depot employee data, a breach at Targus and a threat actor targeted Moroccan activists.