IdentityGoogle Cloud mandates MFA by end of 2025Steve ZurierNovember 6, 2024Security pros says the move to make MFA mandatory is long overdue.
Cloud SecuritySnowflake data theft suspect arrested in CanadaLaura FrenchNovember 5, 2024Alexander “Connor” Moucka, 26, is accused of stealing data from Ticketmaster, AT&T and more.
Critical Infrastructure SecurityCyberthreats linked to foreign actors aim to hinder Election Day proceedingsShaun NicholsNovember 5, 2024Bomb threats aimed at polling places traced back to an email account based in Russia.
Network SecurityDocuSign’s API used to lure victims into e-signing fake invoicesSteve ZurierNovember 5, 2024Researchers say they’ve seen continued reports of these automated email campaigns on the DocuSign community forums for the past five months.
AI/MLGoogle’s Big Sleep LLM agent discovers exploitable bug in SQLiteLaura FrenchNovember 4, 2024The Gemini 1.5 Pro-driven agent used variant analysis to discover the stack buffer underflow flaw.
Network SecurityFCA urges firms to boost operational resilience post-CrowdStrike disruptionDan RaywoodNovember 4, 2024According to the UK's FCA, third-party related issues were the leading cause of operational incidents reported between 2022 and 2023.
RansomwareRhysida ransomware attack on Columbus claimed 500K victimsSteve ZurierNovember 4, 2024Columbus, Ohio, confirms 500,000 residents affected after dropping lawsuit against whistleblower.
IdentityMickey Mouse operation hacked by former employeeShaun NicholsNovember 1, 2024A disgruntled former Disney worker stands accused of illegally hacking the company’s systems and harassing its workers
Critical Infrastructure SecurityCISA Director Easterly seeks to quell concerns about election securityLaura FrenchNovember 1, 2024Easterly addressed ballot security, disinformation and voter databases in public comments this week.
IdentityMicrosoft credentials pilfered by APT Storm via botnet spray-and-pray router attackSteve ZurierNovember 1, 2024Password spray attacks on compromised SOHO routers underscore the need for security pros to lock down remote workers.
Want to attract diverse cyber talent? Go beyond the same-old recruiting techniquesDwan Jones November 6, 2024