Publicly exposed GitHub repositories have been cloned by threat actors looking to exfiltrate Amazon Web Services credentials as part of the EleKtra-Leak cryptojacking operation that commenced in 2020, reports The Register.
New policy detailing appropriate ransomware response efforts among governments is reportedly being finalized by the Biden administration in a bid to advance collective action in curbing ransomware payments, Reuters reports.
A key role for the CISO and the team is to identify and plan for mitigation of the most damaging risks. Various approaches have been used over the years with varying levels of success. Are we measuring the right things? Are we using the right instruments? Join us as we discuss some of the flaws present in measuring risk today and considerations to ...
Significant cloud and security landscape changes have prompted the Office of Management and Budget to release new draft guidance modernizing the Federal Risk and Authorization Management Program first issued in 2011, reports FedScoop.
Non-banking financial organizations with at least 500 customers, including mortgage brokers, payday lenders, and motor vehicle dealers, have been required by the Federal Trade Commission to report data breaches and other cybersecurity incidents within a 30-day period as part of an amendment to the Safeguards Rule, which will be effective beginning April, according to The Record, a news site by cybersecurity firm Recorded Future.
Widespread MOVEit hack impacts CCleaner TechCrunch reports that optimization app CCleaner was confirmed by parent software firm Gen Digital, which also owns Avast, Avira, and NortonLifeLock, to have been impacted by the widespread compromise of the MOVEit file transfer tool by the Cl0p ransomware operation.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
