audiobooks. Ghost-writer

Featured in:

Articles

Device code attacks, phone TOAD solution, telecoms breached

2 months ago | cisoseries.com | Steve Prentice |audiobooks. Ghost-writer

A threat actor thought to be allied with Russia is using a technique called device code phishing to target organizations in government, NGOs, IT, defense, telecommunications, health, and energy sectors in Europe, North America, Africa, and the Middle East. Microsoft is tracking the group under the name Storm-237. Device code phishing involves getting access to devices that require a login code, but which do not have keyboard or browser, such as smart TVs and some IoT devices.
CISA brass furloughed, DeepSeek weak security

2 months ago | cisoseries.com | Steve Prentice |audiobooks. Ghost-writer

This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Doug Mayer, vp, CISO, WCGHere are the stories we plan to cover TODAY, time permitting. Please join us live at 12:30pm PT/3:30pm ET by registering for the open discussion on YouTube LiveSeveral members of CISA’s election security team were placed on administrative leave late last week, primarily those working on misinformation and disinformation efforts, according to CyberScoop.
Apple backdoor spat, Sarcoma hits Unimicron, Sault Tribe attacked

2 months ago | cisoseries.com | Steve Prentice |audiobooks. Ghost-writer

Senators Ron Wyden and Andy Biggs are urging newly appointed National Intelligence Director Tulsi Gabbard to push the United Kingdom to revoke its order requiring Apple to grant government access to encrypted user data. They warn that the directive threatens Americans’ privacy and suggested that, if the UK refuses to back down, the U.S. should reconsider its deep intelligence-sharing ties with its ally.
31 Myths and Realities Around Platformization Versus Best-of-Breed

2 months ago | cisoseries.com | Steve Prentice |audiobooks. Ghost-writer

It’s an ongoing conundrum for cybersecurity professionals. Should your security program be stitched together from hand-picked best-of-breed components, or should you rely on the foresight of a larger organization’s one-stop-shop platform? One way to look at it is platform companies have done all the legwork for you. But you may argue they don’t have what you need – for now or the future. Even if it is a great platform of solutions, how could it work for everyone?
Five Eyes breach, cancer center breach, Pixel zero-day flaw

Apr 5, 2024 | cisoseries.com | Steve Prentice |audiobooks. Ghost-writer

A threat actor going by the name of IntelBroker is claiming to be in possession of documents belonging to the Five Eyes Intelligence Group.
Cyber incident rule, Google blocks spoof emails, PandaBuy breach

Apr 3, 2024 | cisoseries.com | Steve Prentice |audiobooks. Ghost-writer

Considered to be one of the most significant cybersecurity policy reforms in recent memory, CISA has released its notice of proposed rulemaking (NOPR) that requires critical infrastructure organizations to report cybersecurity incidents.
17 billion records exposed, Treasury warning, Hot Topic attacks

Mar 29, 2024 | cisoseries.com | Steve Prentice |audiobooks. Ghost-writer

This number comes from Flashpoint’s 2024 Global Threat Intelligence Report, which states that reported data breach incidents rose by 34.5% in 2023 to 6,077. Much of these included sensitive information such as names, social security numbers and financial data.
New Kimsuky technique, KDE Linux warning, Atlassian critical flaws

Mar 25, 2024 | cisoseries.com | Steve Prentice |audiobooks. Ghost-writer

According to security firm Rapid-7, the North Korea-linked threat actor is now exploiting Compiled HTML Help files (CHM) to deliver malware in order to steal sensitive data. CHM files were designed to deliver help documentation, but their usefulness in distributing malware is due to their ability to execute JavaScript when opened.
Microsoft Server crashes, npm discrepancies, Nemesis raided

Mar 22, 2024 | cisoseries.com | Steve Prentice |audiobooks. Ghost-writer

The March 2024 Windows Server security update apparently also delivered a memory leak that has been causing Windows domain controllers to crash. As reported by BleepingComputer, “affected servers are freezing and then restarting unexpectedly due to a Local Security Authority Subsystem Service (LSASS) process memory leak.” BleepingComputer contacted Microsoft, who has now confirmed it as a known issue that impacts all domain controller servers with the latest Windows Server.
McDonald’s outage, Chrome URL update, Birmingham outage

Mar 18, 2024 | cisoseries.com | Steve Prentice |audiobooks. Ghost-writer

A massive outage affected point of sale terminals in McDonald’s outlets in the United States, the UK, Japan, Australia, Canada, the Netherlands, Italy, and New Zealand, on Saturday. The cause, according to a statement shared by the company’s Chief Information Officer Brian Rice, was a third-party service provider’s configuration change, and not a cyberattack. The outage forced stores to revert to pen and paper to take orders and to all transactions in cash.