News
![Tech Spotlight > The Future of Work [CSO] > Laptop user with virtual security overlay.](https://images.idgesg.net/images/idge/imported/imageapi/2022/06/02/11/spot_future_of_work_cso_3x2_2400x1600_hero_laptop_user_with_virtual_security_overlay_by_ibrave_gettyimages-100876236-small.3x2-100928629-small.3x2.jpg?auto=webp&quality=85,70)
New Deep Instinct partner program targets MSSPs fighting ransomware
Deep Instinct's Stratosphere program is indirectly aimed at small and medium-size businesses, which are increasingly turning toward MSSPs (managed security service providers).
Universal database of device vulnerability information launched
DeviceTotal's new repository includes security data for all devices on the market with the aim to better mitigate vulnerabilities.
Google updates Chronicle with enhanced threat detection
Google Cloud’s Chronicle will now offer curated threat detection as part of its analytics initiative in the Chronicle SecOps suite.
"Evil PLC Attack" weaponizes PLCs to infect engineering workstations
Researchers demonstrate a proof of concept where hijacked programmable logic controllers can compromise engineering workstations to allow lateral movement.
Safe Security debuts two free risk assessment tools for businesses
Organizations can gauge their cybersecurity risk factors by using Safe Security’s new online calculators.
Exposed VNC instances threatens critical infrastructure as attacks spike
Threats surrounding Virtual Network Computing laid bare as attacks targeting critical infrastructure increase.
New exploits can bypass Secure Boot and modern UEFI security protections
Two research groups demonstrate PC firmware vulnerabilities that are difficult to mitigate and likely to be exploited in the wild.
New US CISO appointments, August 2022
Keep up with news of CSO, CISO, and other senior security executive appointments.
Top cybersecurity products unveiled at Black Hat 2022
Here are some of the most interesting new products launched at Black Hat USA 2022, including zero trust, extended detection and response (XDR), and a host of other threat and vulnerability management offerings.
FTC begins sweeping commercial surveillance and lax data security rulemaking process
While some praise the FTC's efforts, some in Congress worry that it overlaps with and possibly jeopardizes the passing of the American Data Privacy and Protection Act.
Network mistakes, misconfigurations cost companies millions
Titania research pegs losses from misconfigurations at average of 9% of annual revenue.
What happened to the Lapsus$ hackers?
Despite using methods that are "bold, illogical, and poorly thought out, Lapsus$ has successfully breached companies like Microsoft, Vodafone and Nvidia.
Cisco admits hack on IT network, links attacker to LAPSUS$ threat group
Cisco says an employee’s credentials were compromised after an attacker gained control of a personal Google account.
How a Venezuelan disinformation campaign swayed voters in Colombia
A Black Hat presentation explains how Russia-aligned Venezuela influenced the presidential election in Colombia to its political benefit.
Sensitive data in the cloud gets new automated remediation tool from BigID
An automated watchdog designed to keep private files in cloud storage secure is now available for Google Drive users, from data intelligence and management company BigID.
Microsoft urges Windows users to run patch for DogWalk zero-day exploit
Despite previously claiming the DogWalk vulnerability did not constitute a security issue, Microsoft has now released a patch to stop attackers from actively exploiting the vulnerability.
CrowdStrike adds AI-powered indicators of attack to Falcon platform
The new feature leverages millions of examples of malicious activity to more accurately identify signs of an attack.
Chinese APT group uses multiple backdoors in attacks on military and research organizations
The TA428 group has been successful by targeting known vulnerabilities and using known detection evasion techniques.
Most Popular
BrandPosts
Learn more-
Sponsored by Netscout
-
Sponsored by Zscaler
-
Sponsored by Microsoft Security