As CISA Downsizes, Where Can Enterprises Get Support? | Oracle Cloud Users Urged to Take Action

Klicken Sie hier, um Informationweek.com zu abonnieren

Kategorien: Dienstleistungen | Professionals Geschäftswaren Finanziell Kantoor Marketing Einzelhandel Einzelhandel Industrie Machines Alter: 14 - 18 Jahr 19 - 30 Jahr 31 - 64 Jahre

Laden...

2 Monate vor

Html
Text

Cybersecurity experts — including two former CISA executives — weigh in on alternate sources for threat intel, incident response, and other essential cybersecurity services.

Apr. 3, 2025

Signup

Weekly Edition

The latest news and insights for cybersecurity professionals

- The Latest News and Features -

As CISA Downsizes, Where Can Enterprises Get Support?‎ In this roundtable, cybersecurity experts — including two former CISA executives — weigh in on alternate sources for threat intel, incident response, and other essential cybersecurity services.‎ Keep Reading →

Oracle Cloud Users Urged to Take Action‎ Although Oracle has denied its cloud infrastructure services were breached, security experts recommend Oracle customers independently verify if they were affected and take measures to reduce exposure to potential fallout.‎

DR GLOBAL

Israel Enters 'Stage 3' of Cyber Wars With Iran Proxies‎ While Israel and Iranian proxies fight it out IRL, their conflict in cyberspace has developed in parallel. These days attacks have decelerated, but advanced in sophistication.‎

Lazarus APT Jumps on ClickFix Bandwagon in Recent Attacks‎ A continuation of the North Korean nation-state threat's campaign against employment seekers uses the social engineering attack to target CeFi organizations with the GolangGhost backdoor.‎

Evilginx Tool (Still) Bypasses MFA‎ Based on the open source NGINX Web server, the malicious tool allows threat actors to steal user credentials and session tokens.‎

Fake DeepSeek Ads Spread Malware to Google Users‎ Popularity of the generative AI platform makes it an obvious choice for cybercriminals abusing Google-sponsored search results, according to researchers.‎

Qakbot Resurfaces in Fresh Wave of ClickFix Attacks‎ Attackers post links to fake websites on LinkedIn to ask people to complete malicious CAPTCHA challenges that install malware.‎

DR GLOBAL

Malaysian Airport's Cyber Disruption a Warning for Asia‎ Transportation facilities and networks slowly adapt to changes and threats, leaving them vulnerable to agile cyberattackers, as demonstrated by the $10 million ransomware attack.‎

THE EDGE

New PCI DSS Rules Say Merchants on Hook for Compliance, Not Providers‎ Merchants and retailers will now face penalties for not being compliant with PCI DSS 4.0.1, and the increased security standards make it clear they cannot transfer compliance responsibility to third-party service providers.‎

DR TECHNOLOGY

Emerging Risks Require IT/OT Collaboration to Secure Physical Systems‎ With an increase in cyber-physical attacks that can cause significant disruptions, financial fallout and safety concerns for victim organizations, Renee Guttmann and Marc Sachs discuss why IT and OT security teams cannot keep working in silos.‎

- Commentary -

Opinions from thought leaders around the cybersecurity industry

Bridging the Gap Between the CISO & the Board of Directors‎‎ Positioning security leaders as more than risk managers turns them into business enablers, trusted advisers, and, eventually, integral members of the C-suite.‎‎

Beyond STIX: Next-Level Cyber-Threat Intelligence‎‎ While industry experts continue to analyze, interpret, and act on threat data, the complexity of cyber threats necessitates solutions that can quickly convert expert knowledge into machine-readable formats.‎‎

More Commentary →

- Upcoming Events -

Apr 3, 2025

Memory Safety & Exploit Management: Real-World Attacks & Defenses

Apr 4, 2025

Unifying Cloud Security: A Blueprint for Modern Threat Resilience

Aug 2, 2025

[Conference] Black Hat USA - August 2-7 - Learn More

More Events →

- More Resources -

WHITE PAPER

Solution Brief: Introducing the runZero Platform