Career Spotlight: The Growing Demand for OT Security Experts

Brandy Harris • October 9, 2024

As digital transformation continues to reshape industries, the convergence of operational technology and cybersecurity has emerged as a critical area of focus. But there's a noticeable gap in the workforce. Professionals who truly understand both OT and cybersecurity are in short supply.

►

CISO Trainings

To Be a Cybersecurity Pro, Think Like a Puzzle Solver

Latest

Breach Notification

County 911 Service Notifying 180,000 About Breach in July

Marianne Kolbasuk McGee • October 9, 2024

An Oklahoma county provider of medical, fire, police and other 911 emergency services is notifying 180,000 individuals that their health information may have been compromised in a recent ransomware attack. The incident affects patients receiving emergency medical care as far back as 2011.

Fraud Management & Cybercrime

Human Security Raises $50M+ to Take on Click-Fraud Defense

Michael Novinson • October 9, 2024

Human Security's recent $50 million growth funding, led by WestCap, will drive the development of click-fraud defense and enhance advertising integrity solutions. CEO Stu Solomon aims to leverage the funding for scaling the engineering and data science teams, addressing emerging fraud threats.

Governance & Risk Management

Ivanti CSA Customers Targeted in New Zero Day Attacks

Anviksha More • October 9, 2024

Internet appliance maker Ivanti warned customers Tuesday that attackers are actively exploiting new vulnerabilities in Cloud Services Appliance instances by chaining three security flaws with a zero-day patched in September. The company advised customers to update to version 5.0.

Cybercrime

UK to Continue Disruptive Actions Targeting Cybercrime

Akshaya Asokan • October 9, 2024

The British government will continue disruptive actions against ransomware and malware operators, a top U.K. government official vowed Wednesday. Stephen Doughty, Minister of State, said the recently elected U.K. government views security as a core pillar of economic and strategic growth.

Cybercrime

Malicious Pixels: Criminals Revamp QR Code Phishing Attacks

Mathew J. Schwartz • October 9, 2024

Attackers are moving beyond using QR code images added to phishing emails to trick victims into visiting malicious sites, and using ASCII "full block" characters to build working QR codes designed to evade optical character recognition defenses, warns cybersecurity firm Barracuda Networks.

Finance & Banking

EU Strengthens Sanctions Against Russian Hackers

Akshaya Asokan • October 8, 2024

The European Council on Tuesday introduced a new sanctions framework to target Russian nationals and organizations engaged in malicious cyber activities such as election misinformation and disruptive cyberattacks. It seeks to address activities such as influence operations and hacking.

Cloud Security

Cloudflare Acquires Kivera to Fuel Preventive Cloud Security

Michael Novinson • October 8, 2024

With the acquisition of New York-based startup Kivera, Cloudflare will enhance its Cloudflare One platform, adding proactive controls that secure cloud environments, prevent misconfigurations and improve regulatory compliance for businesses using multiple cloud providers.

Cybercrime

UN Says Asian Cybercrime Cartels Are Rising Global Threat

Jayant Chakravarti • October 8, 2024

Cybercrime syndicates across Southeast Asia have teamed up with human traffickers, money launderers and cryptocurrency services to build an increasingly effective cybercrime ecosystem that can survive law enforcement crackdowns, according to a new United Nations report.

Cyberwarfare / Nation-State Attacks

CISA Issues Guidance to Counter Iran's Election Interference

Chris Riotta • October 8, 2024

The Cybersecurity and Infrastructure Security Agency and the Federal Bureau of Investigation have issued new guidance to help U.S. political campaigns defend against increasing cyber threats from Iran, recommending stronger multifactor authentication, phishing-resistant protocols and vigilance against social...

Fraud Management & Cybercrime

NHS: Most Patient Services Online Following Synnovis Attack

Marianne Kolbasuk McGee • October 8, 2024

The United Kingdom's National Health Service said nearly all services disrupted by a June ransomware attack on pathology laboratory services provider Synnovis are finally back online. The incident triggered a national blood supply shortage and forced cancellation of thousands of medical procedures.

Finance & Banking

MoneyGram Money Transfer Firm Reports Customer Data Breach

Mathew J. Schwartz • October 8, 2024

MoneyGram Payment Systems, a Dallas-based money transfer system, said hackers who hit its infrastructure last month stole customer data, including contact details, Social Security numbers and information pertaining to criminal fraud investigations.

Fraud Management & Cybercrime

Study: 92% of Healthcare Firms Hit by Cyberattacks This Year

Marianne Kolbasuk McGee • October 8, 2024

Healthcare organizations should rethink some of their approach to security, enhancing focus on insider threats, improving cyber awareness training and securing mobile applications and devices, said Ryan Witt, vice president of industry solutions at Proofpoint, discussing findings of a new study.