Author: Admin

By Tony D’Angelo, Vice President of Public Sector, Lookout With international tensions continuing to rise, the Biden administration signed a $1.5 trillion omnibus spending bill in March that includes funding to bolster cybersecurity resources for U.S. critical infrastructure and billions of dollars for ongoing aid to the Ukrainian government. This effort — combined, in part, with portions of a previous supplemental funding request — highlights a strengthening of cyber defenses in response to a crisis…

Data is now one of the most valuable enterprise commodities. According to CIO.com’s State of the CIO 2022 report, 35% of IT leaders say that data and business analytics will drive the most IT investment at their organization this year, and 58% say their involvement with data analysis will increase over the next year. While data comes in many forms, perhaps the largest pool of untapped data consists of text. Patents, product specifications, academic publications,…

Developers are notoriously grumpy and unamenable to disruption.  They tend to want to continue working until they arrive at a place of completion and satisfaction.  That’s all well and good unless they’ve lost sight of the bigger picture. What’s an IT leader to do? The following perspectives will help you better understand what motivates and mystifies developers and can guide your thinking on how to be the leader your team needs. Cultivate business awareness One…

Cybersecurity agencies in the US, UK, Australia and Canada have warned that Iranian state-sponsored hackers are exploiting Log4j vulnerabilities in ransomware campaigns. An alert published this week said Tehran’s Islamic Revolutionary Guard Corps (IRGC) was behind multiple attacks exploiting VMware Horizon Log4j bugs on unprotected networks to enable disk encryption and data extortion. These include February attacks against a US municipal government and an aerospace company which leveraged the original Log4Shell bug CVE-2021-44228 as well…

Uber appears to have been breached again, after a threat actor reportedly accessed its email and cloud systems, code repositories, internal Slack account and HackerOne tickets. The ride-hailing giant released a terse message on Twitter yesterday saying it is “currently responding to a cybersecurity incident” and is in touch with law enforcement. Meanwhile, the alleged hacker sent screenshots to the New York Times and security researchers showing they had access to various internal corporate IT systems….

Thousands of Microsoft 365 credentials have been discovered stored in plaintext on phishing servers, as part of an unusual, targeted credential-harvesting campaign against real estate professionals. The attacks showcase the growing, evolving risk that traditional username-password combinations present, researchers say, especially as phishing continues to grow in sophistication, evading basic email security.  Researchers from Ironscales discovered the offensive, in which cyberattackers posed as employees at two well-known financial-services vendors in the realty space: First American Financial Corp.,…

Cryptocurrency scams are set to explode after researchers detected a triple-digit increase in registered domains in the first half of 2022, compared to the whole of last year. Group-IB said it had detected over 2000 domains registered to be used as fake promotion websites in the first half of this year. That’s a 335% increase on the number recorded in 2021, a five-fold increase compared to the second half of 2021 and a 53-fold rise…