Security Strategy, Plan, Budget

Chief information security officers have been preparing for cyberattacks against critical infrastructure entities amid the ongoing Russian invasion of Ukraine.

The Department of Energy is putting $12 million in new grant funding behind six university-led cybersecurity research projects that look for innovative ways to securely build or design the nation’s next generation of energy systems.

A settlement has been reached in the class action data breach lawsuit against Solara Medical Supplies, over a months-long, undetected email systems hack, requiring a long list of security requirements.

Despite a surge in cybercrime, Visa reported record-lows in cyber fraud as the company has invested in security innovation and analytics.

SecurityWeek reports that Facebook parent firm Meta has expanded its bug bounty program to include rewards for flaws that could be abuse to evade Facebook integrity checks, including two-factor authentication for some business manager accounts, as well as the platform's feature restrictions and application verification processes.

The Hacker News reports that SonarSource has identified a high-severity vulnerability in the open-source RainLoop web-based email client which could be leveraged for email exfiltration.

Threat actors have been deploying phishing attacks with the more_eggs malware aimed at corporate hiring managers, according to The Hacker News.

More cybercriminals have been launching phishing campaigns spoofing credit unions for data and money theft.