cybersecurity

European Cyber Resilience: How the EU Can Patch the Weak Spots in its Collective Armour

Posted on by Admin
European Cyber Resilience: How the EU Can Patch the Weak Spots in its Collective Armour

In the thrust and parry of cyber resilience, the European Union (EU) has forged a legal framework made of many pieces to fortify its digital defences. Yet, there remain two clear weak spots in Europe’s collective armour: the presence of unsupported connected devices within critical infrastructure networks and the opacity surrounding the handling of newly discovered, or obtained, vulnerabilities by government agencies. In this blog, I delve into these two crucial issues for EU policymakers…

Read More

As Companies Flood Into Security AI, Do Large Players Have A Data Advantage?

Posted on by Admin
As Companies Flood Into Security AI, Do Large Players Have A Data Advantage?

Executives from major cybersecurity vendors such as Palo Alto Networks and Proofpoint see the arrival of GenAI as a different story from prior technology shifts — with the need for having massive customer data being paramount. The history of technology shifts in recent decades has tended to center around scrappy upstarts, which burst onto the scene with a big new idea and disrupt more-established players. Generative AI may play out differently, however. While the initiation…

Read More

Snowflake Users Targeted for Data Theft and Extortion

Posted on by Admin
Snowflake Users Targeted for Data Theft and Extortion

A new report from Mandiant, part of Google Cloud, reveals that a financially motivated threat actor named UNC5537 collected and exfiltrated data from about 165 organizations’ Snowflake customer instances. Snowflake is a cloud data platform used for storing and analyzing large volumes of data. The threat actor managed to get access to these data by triggering credentials that were previously stolen by infostealer malware or purchased from other cybercriminals. According to Mandiant, the threat actor…

Read More

Downtime Costs Large Companies $400 Billion a Year, According to Splunk Report

Posted on by Admin
Downtime Costs Large Companies 0 Billion a Year, According to Splunk Report

Unplanned downtime is costing the world’s largest companies $400 billion a year, or roughly 9% of their profits, a new report has found. This is the equivalent of about $9,000 lost for every minute of system failure or service degradation. The report, published by the data management platform Splunk, also revealed that it takes 75 days for revenue for a Forbes Global 2000 company to recover to where it stood financially prior to the incident….

Read More

OpenAI, Anthropic AI Research Reveals More About How LLMs Affect Security and Bias

Posted on by Admin
OpenAI, Anthropic AI Research Reveals More About How LLMs Affect Security and Bias

Because large language models operate using neuron-like structures that may link many different concepts and modalities together, it can be difficult for AI developers to adjust their models to change the models’ behavior. If you don’t know what neurons connect what concepts, you won’t know which neurons to change. On May 21, Anthropic published a remarkably detailed map of the inner workings of the fine-tuned version of its Claude AI, specifically the Claude 3 Sonnet…

Read More

How Free VPNs Come With a Price | McAfee Blog Free VPNs vs Paid VPN | McAfee Blog

Posted on by Admin
How Free VPNs Come With a Price | McAfee Blog Free VPNs vs Paid VPN | McAfee Blog

The number of people who use VPNs (virtual private networks) continues to mushroom. Recent research shows that 46% of American adults now use a VPN — 23% of which use it for strictly personal purposes.[i] Within that mix, 43% said they use a free VPN service. Yet “free” VPNs often come with a price. Typically at the expense of your privacy. A personal VPN establishes a secure tunnel over the internet, offering you both privacy and…

Read More

Cisco Talos: LilacSquid Threat Actor Targets Multiple Sectors Worldwide With PurpleInk Malware

Posted on by Admin
Cisco Talos: LilacSquid Threat Actor Targets Multiple Sectors Worldwide With PurpleInk Malware

A new report from Cisco Talos exposed the activities of a threat actor known as LilacSquid, or UAT-4820. The threat actor exploits vulnerable web applications or uses compromised Remote Desktop Protection credentials to successfully compromise systems by infecting them with custom PurpleInk malware. So far, organizations in various sectors in the U.S., Europe and Asia have been impacted for data theft purposes, though more sectors might have been impacted but not identified yet. Who is…

Read More

The curious case of the missing IcedID.

Posted on by Admin
The curious case of the missing IcedID.

Welcome in! You’ve entered, Only Malware in the Building. Join us each month to sip tea and solve mysteries about today’s most interesting threats. Your host is Selena Larson, Proofpoint intelligence analyst and host of their podcast DISCARDED. Inspired by the residents of a building in New York’s exclusive upper west side, Selena is joined by N2K Networks Dave Bittner and Rick Howard to uncover the stories behind notable cyberattacks.  Being a security researcher is…

Read More

What You Need to Know About Election Security | McAfee

Posted on by Admin
What You Need to Know About Election Security | McAfee

As election season approaches, the importance of safeguarding our democratic processes has never been more critical. Ensuring election security is not just the responsibility of government bodies but also of every individual voter. This blog post aims to provide valuable insights and practical tips for consumers to protect their votes and understand the mechanisms in place to secure elections. Understanding Election Security Election security encompasses a broad range of practices designed to ensure the integrity,…

Read More

Proofpoint's CISO 2024 Report: Top Challenges Include Human Error & Risk

Posted on by Admin
Proofpoint's CISO 2024 Report: Top Challenges Include Human Error & Risk

In Proofpoint’s 2024 Voice of the CISO report, the cybersecurity company found that CISOs are dealing with people-centric threats more than ever. Plus, cybersecurity budgets often don’t change, and AI can help and hurt CISOs’ efforts. Regarding the specific threat risks, 41% of the CISOs mostly fear ransomware attacks, followed by malware (38%), email fraud (36%), cloud account compromise (34%), insider threat (30%) and distributed denial of service (30%) attacks. Biggest threat risks as perceived…

Read More
1 … 8 9 10 11 12 … 25