Career Spotlight: The Growing Demand for OT Security Experts

Brandy Harris • October 9, 2024

As digital transformation continues to reshape industries, the convergence of operational technology and cybersecurity has emerged as a critical area of focus. But there's a noticeable gap in the workforce. Professionals who truly understand both OT and cybersecurity are in short supply.

►

CISO Trainings

To Be a Cybersecurity Pro, Think Like a Puzzle Solver

Latest

Incident & Breach Response

Marriott Pays $52M to Settle US States' Breach Litigation

David Perera • October 9, 2024

The world's largest hotel chain agreed Wednesday to pay $52 million and submit to 20 years of third-party monitoring of its cybersecurity program to settle a rash of data breaches affecting millions of guests. The sizeable payout is part of a settlement reached with 50 U.S. attorneys general.

Breach Notification

Australia May Require Businesses to Report Ransom Payments

Jayant Chakravarti • October 9, 2024

Ransom payments are typically tightly held secrets between cybercriminals and their victims, but the Australian government has introduced a cybersecurity bill in Parliament that would require larger businesses to report ransom payments to the government.

Artificial Intelligence & Machine Learning

US DOJ Developing Guidelines for AI Use in Law Enforcement

Chris Riotta • October 9, 2024

The U.S. Department of Justice is drafting new guidelines for law enforcement on the use of artificial intelligence and facial recognition tools to enhance public safety while safeguarding civil rights and ensuring ethical deployment, a senior official said Wednesday.

Breach Notification

County 911 Service Notifying 180,000 About Breach in July

Marianne Kolbasuk McGee • October 9, 2024

An Oklahoma county provider of medical, fire, police and other 911 emergency services is notifying 180,000 individuals that their health information may have been compromised in a recent ransomware attack. The incident affects patients receiving emergency medical care as far back as 2011.

Fraud Management & Cybercrime

Human Security Raises $50M+ to Take on Click-Fraud Defense

Michael Novinson • October 9, 2024

Human Security's recent $50 million growth funding, led by WestCap, will drive the development of click-fraud defense and enhance advertising integrity solutions. CEO Stu Solomon aims to leverage the funding for scaling the engineering and data science teams, addressing emerging fraud threats.

Governance & Risk Management

Ivanti CSA Customers Targeted in New Zero-Day Attacks

Anviksha More • October 9, 2024

Internet appliance maker Ivanti warned customers Tuesday that attackers are actively exploiting new vulnerabilities in Cloud Services Appliance instances by chaining three security flaws with a zero-day patched in September. The company advised customers to update to version 5.0.

Cybercrime

UK to Continue Disruptive Actions Targeting Cybercrime

Akshaya Asokan • October 9, 2024

The British government will continue disruptive actions against ransomware and malware operators, a top U.K. government official vowed Wednesday. Stephen Doughty, Minister of State, said the recently elected U.K. government views security as a core pillar of economic and strategic growth.

Cybercrime

Malicious Pixels: Criminals Revamp QR Code Phishing Attacks

Mathew J. Schwartz • October 9, 2024

Attackers are moving beyond using QR code images added to phishing emails to trick victims into visiting malicious sites, and using ASCII "full block" characters to build working QR codes designed to evade optical character recognition defenses, warns cybersecurity firm Barracuda Networks.

Finance & Banking

EU Strengthens Sanctions Against Russian Hackers

Akshaya Asokan • October 8, 2024

The European Council on Tuesday introduced a new sanctions framework to target Russian nationals and organizations engaged in malicious cyber activities such as election misinformation and disruptive cyberattacks. It seeks to address activities such as influence operations and hacking.

Cloud Security

Cloudflare Acquires Kivera to Fuel Preventive Cloud Security

Michael Novinson • October 8, 2024

With the acquisition of New York-based startup Kivera, Cloudflare will enhance its Cloudflare One platform, adding proactive controls that secure cloud environments, prevent misconfigurations and improve regulatory compliance for businesses using multiple cloud providers.

Cybercrime

UN Says Asian Cybercrime Cartels Are Rising Global Threat

Jayant Chakravarti • October 8, 2024

Cybercrime syndicates across Southeast Asia have teamed up with human traffickers, money launderers and cryptocurrency services to build an increasingly effective cybercrime ecosystem that can survive law enforcement crackdowns, according to a new United Nations report.

Cyberwarfare / Nation-State Attacks

CISA Issues Guidance to Counter Iran's Election Interference

Chris Riotta • October 8, 2024

The Cybersecurity and Infrastructure Security Agency and the Federal Bureau of Investigation have issued new guidance to help U.S. political campaigns defend against increasing cyber threats from Iran, recommending stronger multifactor authentication, phishing-resistant protocols and vigilance against social...