Steve Zurier
Contributor at SC Media
Writer, editor and music lover, especially jazz and improvised music. I work as a freelance writer out of Columbia, Md.
Articles
-
2 days ago |
scworld.com | Steve Zurier
Multiple malicious packages were discovered causing supply chain incidents across leading open-source code repos such as npm, PyPI and RubyGems. While repos speed development, the issue highlights how the packages expose dev teams to security risks. The issues around open-source repos were brought up in reports by leading research groups over the past several weeks, including Checkmarx, ReversingLabs, and Socket, according to The Hacker News.
-
3 days ago |
scworld.com | Steve Zurier
Cyberattacks on retailers continued as Reuters reported that luxury jewelry retailer Cartier told its customers that its website had been hacked and some client data was stolen. Outdoor retailer North Face told customers that its personal information was stolen in credential-stuffing attacks that targeted the company’s website in April, a sign that U.S. retailers should expect more of such attacks.
-
4 days ago |
scworld.com | Steve Zurier
The details about a 10.0 Cisco IOS XE Wireless LAN Controller (WLC) flaw that Cisco patched May 7 have been made public, bringing the industry closer to a working exploit and prompting security pros to tell teams to patch right away. "This is a ‘drop everything and fix it’ kind of bug," said Casey Ellis, founder of Bugcrowd.
-
1 week ago |
scworld.com | Steve Zurier
Remote monitoring and management (RMM) software provider ConnectWise on May 28 reported that an undisclosed nation-state actor has affected “a very small number” of its ScreenConnect customers. The company, which reportedly has 45,000 managed service provider (MSP) customers, launched an investigation with Google Mandiant in response. The firm said it has contacted all affected customers and was coordinating with law enforcement.
-
1 week ago |
scworld.com | Steve Zurier
Ohio-based Victoria’s Secret on May 29 said it was hit by a cyberattack and took down its website as well as some in-store services as a precaution. In a note sent to the retailer’s employees and reported in Bloomberg News, Victoria’s Secret Chief Executive Officer Hillary Super said that “recovery is going to take a while.”The news came on the heels of Germany-based Adidas being hit by a cyberattack last week, as well as French luxury brand Dior reporting a cybersecurity incident two weeks ago.
Try JournoFinder For Free
Search and contact over 1M+ journalist profiles, browse 100M+ articles, and unlock powerful PR tools.
Start Your 7-Day Free Trial →X (formerly Twitter)
- Followers
- 869
- Tweets
- 1K
- DMs Open
- No
Critical Insight's Mike Hamilton offers some advice for all security teams as they face cyberattacks resulting from the Israel-Hamas war: https://t.co/Cq96myztrv
Here's some good insight into the regulatory environment impacting cyber and how people can sort out what's important to their business. A CYE webinar I moderated: https://t.co/W9WQGB6Kvg
Another plug for SC's Women in Cyber, a column from the ISSA's Candy Alexander and Debra Christofferson on the Biden administration's cyber workforce plan: https://t.co/s7kjgqxTIu