cybersecurity

OpenAI Secrets Stolen in 2023 After Internal Forum Was Hacked

Posted on by Admin
OpenAI Secrets Stolen in 2023 After Internal Forum Was Hacked

The online forum OpenAI employees use for confidential internal communications was breached last year, anonymous sources have told The New York Times. Hackers lifted details about the design of the company’s AI technologies from forum posts, but they did not infiltrate the systems where OpenAI actually houses and builds its AI. OpenAI executives announced the incident to the whole company during an all-hands meeting in April 2023, and also informed the board of directors. It…

Read More

Cyber Insurance Premiums Are Declining, Howden Insurance Brokers Report Finds

Posted on by Admin
Cyber Insurance Premiums Are Declining, Howden Insurance Brokers Report Finds

Improved cyber hygiene among businesses has led to a reduction in cyber insurance premiums by 15% worldwide over the last two years, a new report from Howden Insurance Brokers has found. This is despite the fact that cyberthreats, particularly ransomware attacks, are becoming more prevalent. Awareness of cyber hygiene practices, like multifactor authentication, EDR and cloud backups, has grown significantly since 2022. Ransomware attacks have increased by 18% this year, according to Howden and NCC…

Read More

Operation Endgame: The ultimate troll patrol.

Posted on by Admin
Operation Endgame: The ultimate troll patrol.

Welcome in! You’ve entered, Only Malware in the Building. Join us each month to sip tea and solve mysteries about today’s most interesting threats. Your host is Selena Larson, Proofpoint intelligence analyst and host of their podcast DISCARDED. Inspired by the residents of a building in New York’s exclusive upper west side, Selena is joined by N2K Networks Dave Bittner and Rick Howard to uncover the stories behind notable cyberattacks.  Being a security researcher is…

Read More

Ransomware Cheat Sheet for 2024: What Is Ransomware?

Posted on by Admin
Ransomware Cheat Sheet for 2024: What Is Ransomware?

Ransomware is arguably the most high-profile security threat of the moment. Cybercriminals across the world are demanding money from victims by holding their devices and data hostage. This type of attack, in which data is encrypted or claimed to be and victims are prompted to pay for the key to restore access, has been growing rapidly since 2013 and is now one of the most common types of malware. TechRepublic’s cheat sheet about ransomware is…

Read More

Digital Forensics for Investigating the Metaverse

Posted on by Admin
Digital Forensics for Investigating the Metaverse

The intriguing realm of the metaverse should not make us overlook its cybersecurity hazards. Metaverse adoption has been steadily increasing worldwide, with various existing examples such as virtual weddings, auctions, and the establishment of government offices and law enforcement agencies. Prominent organizations like INTERPOL and others are investing considerable time and resources, underscoring the importance of the metaverse. While the growth of the metaverse has been substantial, its full potential has not yet been realized…

Read More

America's drinking water is facing attack, with links back to China, Russia and Iran

Posted on by Admin
America's drinking water is facing attack, with links back to China, Russia and Iran

Houston Chronicle/hearst Newspapers Via Getty Images | Hearst Newspapers | Getty Images The city of Wichita, Kansas, recently had an experience that’s become all too common — its water system was hacked. The cyberattack, which targeted water metering, billing and payment processing, followed the targeting of water utilities across the U.S. in recent years. In going after America’s water, hackers aren’t doing anything special. Despite rising fears of AI use in cyber threats, the go-to…

Read More

Gartner: 3 Actions to Achieve Cybersecurity Consolidation

Posted on by Admin
Gartner: 3 Actions to Achieve Cybersecurity Consolidation

Cybersecurity leaders are grappling with the complexity, overlap and blind spots that come from using multiple cybersecurity vendors and tools. Many of the products offered by cybersecurity vendors have overlapping capabilities, making it easy for misconfigurations to occur and difficult to uncover security gaps. Consolidating cybersecurity products reduces this complexity by streamlining the number of products and their interactions, thus improving efficiency of security outcomes. Organizations consolidate security solutions for a variety of reasons, such…

Read More

European Cyber Resilience: How the EU Can Patch the Weak Spots in its Collective Armour

Posted on by Admin
European Cyber Resilience: How the EU Can Patch the Weak Spots in its Collective Armour

In the thrust and parry of cyber resilience, the European Union (EU) has forged a legal framework made of many pieces to fortify its digital defences. Yet, there remain two clear weak spots in Europe’s collective armour: the presence of unsupported connected devices within critical infrastructure networks and the opacity surrounding the handling of newly discovered, or obtained, vulnerabilities by government agencies. In this blog, I delve into these two crucial issues for EU policymakers…

Read More

As Companies Flood Into Security AI, Do Large Players Have A Data Advantage?

Posted on by Admin
As Companies Flood Into Security AI, Do Large Players Have A Data Advantage?

Executives from major cybersecurity vendors such as Palo Alto Networks and Proofpoint see the arrival of GenAI as a different story from prior technology shifts — with the need for having massive customer data being paramount. The history of technology shifts in recent decades has tended to center around scrappy upstarts, which burst onto the scene with a big new idea and disrupt more-established players. Generative AI may play out differently, however. While the initiation…

Read More

Snowflake Users Targeted for Data Theft and Extortion

Posted on by Admin
Snowflake Users Targeted for Data Theft and Extortion

A new report from Mandiant, part of Google Cloud, reveals that a financially motivated threat actor named UNC5537 collected and exfiltrated data from about 165 organizations’ Snowflake customer instances. Snowflake is a cloud data platform used for storing and analyzing large volumes of data. The threat actor managed to get access to these data by triggering credentials that were previously stolen by infostealer malware or purchased from other cybercriminals. According to Mandiant, the threat actor…

Read More
1 … 12 13 14 15 16 … 30