Advertisement

Time-lapse photography of busy pedestrian traffic on a city street.

ISACA pledges to help grow cybersecurity workforce in Europe

ISACA will provide 20,000 free memberships to students across Europe and support the identification of qualified cybersecurity candidates for organizations.


data scientist analytics cybersecurity

BigID wants to let you tweak your data classifications manually

Sailing the seas of enterprise data may get easier, with BigID’s latest release. The company hopes to make discovery simpler by letting individual users tune its automated discovery engine to their own needs.


hacker handcuffs laptop cybercrime cyber crime arrested

What is the Cybercrime Atlas? How it can help disrupt cybercrime

The Cybercrime Atlas aims to map the cybercriminal ecosystem worldwide and allow global law enforcement agencies to access that information when fighting cybercrime.


Advertisement

05 malware

Gigabyte firmware component can be abused as a backdoor

Attackers can abuse the UEFI firmware to inject executable malware code into the Windows kernel, compromising systems.


Salesforce

Inactive, unmaintained Salesforce sites vulnerable to threat actors

Research highlights the risks posed by inactive Salesforce sites that continue to pull sensitive business data and can be easily exploited by malicious actors.


AWS

Trellix, Netskope announce new Amazon Security Lake support to enhance threat detection, remediation

Trellix expands XDR support for Amazon Security Lake while Netskope integrates its SSE platform with AWS’ centralized security data service.


seagatebarracuda

Barracuda patches zero-day vulnerability exploited since October

The vulnerability stemmed from incomplete input validation of user-supplied .tar files as it pertains to the names of the files contained within the archive.


InfoSec4TC Platinum Membership: Cyber Security Training Lifetime Access

What is federated Identity? How it works and its importance to enterprise security

Federated identity can be hugely beneficial for creating a solid user experience and better security, but it can be more costly and complex to implement.


fishing phishing survival competition different point of view

Phishing remained the top identity abuser in 2022: IDSA report

The survey revealed phishing as the most common identity-related incident in 2022, with “emails” as the most popular type.


major cyber attack global international cybersecurity

AI-automated malware campaigns coming soon, says Mikko Hyppönen

The industry pioneer also expects cybersecurity to remain a growth business for years and sees Russian hacktivists as demoralizing European infosec teams.


Advertisement

Multifactor authentication  >  Mobile phone verification of a permission request for laptop login.

Frontegg launches entitlements engine to streamline access authorization

Frontegg’s new entitlement engine will be powered by context-aware logic controls (CALC) technology to effect context-based, fine-grained authorization controls.


Can your employer spy on your iPhone or Android phone?

Screen recording Android app found to be spying on users

iRecorder was a legitimate app made available on Google Play Store in September 2021. A remote access trojan AhRat was most likely added to it a year later.


A man and woman sit on opposite sides of an office desk, in discussion.

Upskilling the non-technical: finding cyber certification and training for internal hires

A shortage of cybersecurity talent in the market? The solution could be close to home — upskilling and re-skilling non-technical employees. Here are some programs to help make them job-ready.


12 ransomware

Hackers hold city of Augusta hostage in a ransomware attack

The ransomware group has released 10GB of sample data from the cyberattack on the US city of Augusta and claimed they have a lot more data available.


A hook is cast at laptop email with fishing lures amid abstract data.

New phishing technique poses as a browser-based file archiver

The new technique has a hacker simulate an archiving app in the web browser to trick victims as they try to access a .zip domain.