Over half of CISOs measure security program maturity monthly

Chief Information Security Officers (CISOs) were surveyed on their security programs and risk management strategies, including attack response times.

from Cybersecurity News https://ift.tt/AFbvdRP

API open authentication vulnerabilities discovered by researchers

API security vulnerabilities in open authentication (OAuth), including user account information, were recently discovered by Salt Security.

from Cybersecurity News https://ift.tt/JNkOeLP

One in five executives have shared work passwords outside the company

A report found that one in five leaders have shared their work password with someone outside the company and 77% use easy-to-remember password hacks.

from Cybersecurity News https://ift.tt/iwQM9ja

White House announces executive order to manage AI risk

Yesterday, the White House announced a sweeping executive order aimed to manage the risk of artificial intelligence (AI).

from Cybersecurity News https://ift.tt/W8gl3Us

NASCO notifies individuals of a data breach through MOVEit

NASCO announced a data breach. NASCO utilized MOVEit software, which was accessed in late May and the breach was discovered in mid-July.

from Cybersecurity News https://ift.tt/fk35MJ9

FTC says financial institutions must disclose data breaches in 30 days

The Federal Trade Commission (FTC) has amended the Safeguards Rule requiring non-banking financial institutions to report data breaches.

from Cybersecurity News https://ift.tt/vZOTs5c

45% of Americans avoid accessing sensitive information on public Wi-Fi

According to a public Wi-Fi security survey by NordVPN, almost 70% of U.S. respondents prefer mobile internet for public online activities.

from Cybersecurity News https://ift.tt/3V8rDYf

Report shows 1265% increase in phishing emails since ChatGPT launched

A new report reveals a 967% increase in credential phishing attempts year-over-year, the number one access point to organizational breaches.

from Cybersecurity News https://ift.tt/1Dqbh4c

Daily malware activity doubled year over year for small businesses

Small business cybersecurity was analyzed in a recent Comcast report, finding that daily malware activity in 2023 roughly doubled since 2022.

from Cybersecurity News https://ift.tt/y96zWuf

Missouri school district announces data breach

Reeds Spring School District discovered in late September that threat actors had gained access to files between April 26, 2023 and May 18, 2023. 

from Cybersecurity News https://ift.tt/E9Ps2AL

Survey highlights 5 mounting pressures Chief Risk Officers face

A recent survey reveals Chief Risk Officers (CROs) are facing five pressures that require the acceleration in the transformation of the risk function to adapt to change.

from Cybersecurity News https://ift.tt/a0RtiH6

75% of Americans want government regulations for AI

The public perception of AI was analyzed in a recent report by IONOS, finding that 75% of respondents want some form of government oversight.

from Cybersecurity News https://ift.tt/406tEBu

The holiday season leads to a rise in business payment fraud

A payment security report found that three-fourths of business leaders are more concerned about business payment fraud during the holiday season.

from Cybersecurity News https://ift.tt/sJYvnAB

78% of fintech leaders report concern over compliance training

The current risks within the financial technology (fintech) sector and new compliance regulations were analyzed in a recent report by Fenergo. 

from Cybersecurity News https://ift.tt/fS9NiXq

10% of organizations have a formal AI policy in place

Security leaders were surveyed by ISACA on generative AI uses and policies within the workplace, finding 10% of organizations have a formal policy.

from Cybersecurity News https://ift.tt/zh4Ml2G

Cl0p named 'nastiest' malware of 2023

Malware threat actors in 2023 were ranked in a report by OpenText Cybersecurity, finding that the list was topped by four new ransomware groups.

from Cybersecurity News https://ift.tt/C6JkIRm

Connecting the wars: Intel analysis of Israel-Hamas and Russia-Ukraine

In Episode 17 of the Cybersecurity & Geopolitical Discussion from Security magazine, Ian Thornton-Trump, Philip Ingram and Lisa Forte analyze the Russia-Ukraine and Israel-Hamas wars.

from Cybersecurity News https://ift.tt/31CfOBT

Over 80% of security leaders have already received AI email attacks

The impact of AI on email security was analyzed in a recent report by Abnormal Security, finding 98% of security leaders are concerned about AI.

from Cybersecurity News https://ift.tt/9keMqY4

There were 11% more ransomware attacks in Q3 than Q2 2023

A recent global ransomware report by Corvus Insurance found that ransomware attack frequency up 11% over Q2 and 95% year-over-year (YoY).

from Cybersecurity News https://ift.tt/Ng1uKsS

62% of organizations perform vulnerability assessments and audits

Mainframe security was analyzed in a report finding that 51% of organizations run either all or the majority of core applications on the mainframe.

from Cybersecurity News https://ift.tt/7WJPgtl

Cybersecurity concerns grow among physical security professionals

As October brings cybersecurity awareness month into the spotlight, new research reveals that cybersecurity remains a key concern for physical security experts.

from Cybersecurity News https://ift.tt/EF0uwPl

City of Philadelphia discloses data breach

The city of Philadelphia released a notice regarding a data breach that occurred between May and July of 2023, including suspicious email activity. 

from Cybersecurity News https://ift.tt/X60hBEG

FTC works to reduce cross-border fraud

The FTC sent a report to congress in an attempt to extend the Undertaking Spam, Spyware and Fraud Enforcement With Enforcers Beyond Borders Act.

from Cybersecurity News https://ift.tt/3lUG0Dy

48% of organizations predict cyberattack recovery to take weeks

According to a cloud adoption report, 72% of respondents are using generative AI and 74% leveraging public cloud AI and analytics services.

from Cybersecurity News https://ift.tt/47Yd6zE

Over 200 million malicious emails were detected in Q3 2023

According to an email security report, 233.9 million malicious emails were detected in Q3 2023. 150,000 emails displayed previously unknown behaviors.

from Cybersecurity News https://ift.tt/fdXVMsY

39% of individuals use the same password for multiple accounts

According to a recent Yubico survey, 80% of respondents are concerned about the security of their online accounts and 39% admit to reusing passwords.

from Cybersecurity News https://ift.tt/V4uehUN

Phishing emails impersonating HR are on the rise

According to a recent phishing report, nearly one in three users are likely to click on a suspicious link or comply with a fraudulent request. 

from Cybersecurity News https://ift.tt/qovSiT6

Manufacturing is the top industry affected by ransomware in 2023

A recent Q3 ransomware report found a nearly 15% increase in ransomware activity since Q2 due to an increased number of ransomware groups.

from Cybersecurity News https://ift.tt/G5KhwyS

Report: Cyberattacks No. 1 cause of downtime and data loss

A new report reveals cyberattacks are the leading cause of IT downtime and data loss in 2023.

from Cybersecurity News https://ift.tt/054cfpL

Roles of AI, automation and humans in security

Jordan Lippel, Vice President of Sales at ECAMSECURE, discusses how security professionals can stay updated regarding integration of automation and AI into their security operations.

from Cybersecurity News https://ift.tt/1UFOKEB

6% of financial firms are confident in communications compliance

According to a report, 74% of respondents say it’s likely their employees are using unmonitored communications channels, up from 66% in 2022.

from Cybersecurity News https://ift.tt/vajM0DE

63% of organizations restore data after a ransomware attack

According to a recent data recovery report, 63% of organizations successfully restore their data when they experience a ransomware attack.

from Cybersecurity News https://ift.tt/KIxC2Zb

32% of organizations have banned the use of generative AI tools

The security concerns of generative artificial intelligence (AI) use within the workplace were analyzed in a recent report by ExtraHop.

from Cybersecurity News https://ift.tt/DQSkHuI

Report finds majority of enterprises expect an imminent cyberattack

A recently released report reveals more than half of senior leaders have no involvement in their company's cyber cases. 

from Cybersecurity News https://ift.tt/MFBC9Zb

Henry Schein announces data breach

Henry Schein announced that a part of the company's manufacturing and distribution business suffered a data breach on October 14, 2023.

from Cybersecurity News https://ift.tt/0VPuARo

Data privacy among top concerns for workplace generative AI use

Generative artificial intelligence use within the workplace was analyzed in a recent report, finding 9% of organizations feel prepared for the threat.

from Cybersecurity News https://ift.tt/LR4Xtrl

92% of business plan to move to passwordless technology

A recent report found that 55% of IT leaders surveyed feel they need more education on how passwordless technology works and/or how to deploy it.

from Cybersecurity News https://ift.tt/MtGH7ls

18% of African banking apps have vulnerable high severity secrets

The security of African financial service applications were analyzed in a recent report by Approov, finding sensitive data was left vulnerable.

from Cybersecurity News https://ift.tt/eICcPV6

Report uncovers critical cyber threats facing financial industry

A new report sheds light on the distinctive cybersecurity risks facing financial services organizations.

from Cybersecurity News https://ift.tt/1N2hKDe

79% of organizations say bots are more difficult to detect

Bot attacks were analyzed in a recent report by Kasada, finding that bot attacks were becoming increasingly difficult to detect by security teams.

from Cybersecurity News https://ift.tt/TKaPcgq

Encrypted pager use on the rise in healthcare since 2022

Healthcare communication methods were analyzed in a recent report by Spok Holdings, including budget constraints and security concerns.

from Cybersecurity News https://ift.tt/kZHecWh

First half of 2023 sees more ransomware victims than all of 2022

A recent Deep Instinct report found that more victims were affected by ransomware in the first half of 2023 than in the entirety of 2022.  

from Cybersecurity News https://ift.tt/c6GzLmF

Communicating cybersecurity risks with non-security personnel

Listen to the new episode of The Security Podcasts featuring Grayson Milbourne, Security Intelligence Director at OpenText Cybersecurity.

from Cybersecurity News https://ift.tt/UZxiuNC

Survey reveals critical security issues lead to DevOps delays

A report reveals more than 80% of survey respondents indicated a critical security issue in deployed software impacted DevOps delivery schedule in the last year.

from Cybersecurity News https://ift.tt/3oaWd9c

Threat actors exploit HTTP/2 vulnerability

In August of 2023, Cloudflare discovered a zero-day vulnerability developed by an unknown threat actor that exploits the standard HTTP/2 protocol.

from Cybersecurity News https://ift.tt/7zoyAF3

90% of CISOs faced at least one cyberattack in 2022

The security practices of Chief Information Security Officers and Chief Security Officers were analyzed in a recent report by Splunk Inc.

from Cybersecurity News https://ift.tt/ljqs9Sg

Survey: 97% face challenges securing IoT & connected devices

A new report reveals concerns and challenges modern businesses face when establishing digital trust in today’s connected world.

from Cybersecurity News https://ift.tt/aKoFw4I

The evolving cyber threat landscape

Common targets of cyberattacks in Q2 2023

from Cybersecurity News https://ift.tt/thVplya

FTC finds that social media scams lead to more losses than other scams

The Federal Trade Commission (FTC) released data finding that social media-based scams account for more losses than any other contact method. 

from Cybersecurity News https://ift.tt/2YsbJX4

Ahmed Fessi joins Medius as Chief Transformation & Information Officer

Ahmed Fessi was hired as Chief Transformation & Information Officer at Medius. Fessi brings 15 years' of experience with AI, data and cybersecurity.

from Cybersecurity News https://ift.tt/J4EAM1q

AI's role in future advanced social engineering attacks

The combination of AI's adaptive algorithms and data processing capabilities has empowered mal actors to develop complex social engineering attacks.

from Cybersecurity News https://ift.tt/kBQn85t

Canadian organizations unprepared for AI-driven cyber threats

A new survey reveals that Canadian organizations are unprepared to handle and recover from new cyber threats including artificial intelligence.

from Cybersecurity News https://ift.tt/bYD4FCf

Study: 37% intimidated, 39% frustrated with online security

A new survey reveals 39% of participants express frustration and 37% feel intimidated by the process of staying secure online.

from Cybersecurity News https://ift.tt/k2lPNIs

False Amazon callers one of the top phone scams in 2023

Phone call fraud and spam callers were analyzed in a recent report by Hiya, finding Amazon impersonation scams in the top scams of 2023.

from Cybersecurity News https://ift.tt/kILVSyu

Report: Ransomware dwell time hits low of 24 hours

Analysis from new annual report shows ransomware median dwell time has dropped from 4.5 days to less than 24 hours in a year.

from Cybersecurity News https://ift.tt/OPLD9US

69% of generative AI users are concerned their data might be misused

A recent Malwarebytes report found that online threats are affecting consumer behavior as 70% have experienced a cybersecurity threat while online.

from Cybersecurity News https://ift.tt/BVq2Fsl

Ransomware double-extortion attacks increased 72%

Malware, ransomware attacks and network security trends were analyzed in a recent report by WatchGuard, finding a rise in double-extortion attacks.

from Cybersecurity News https://ift.tt/6PYM5iw

Motel One Group discloses data breach

The Motel One Group announced that the company was the target of a cyberattack affecting address data and customer credit card information.

from Cybersecurity News https://ift.tt/OR3ID7M

81% of security leaders say that API security is a higher priority

According to a recent Noname Security report, API security is more of a priority for 81% of security leaders than it was 12 months ago.

from Cybersecurity News https://ift.tt/mjEVnNe

CISA kicks off 20th Cybersecurity Awareness Month

Cybersecurity and Infrastructure Security Agency announced the kickoff of the 20th Cybersecurity Awareness Month.

from Cybersecurity News https://ift.tt/F3x52Al

Financial sector sees rise in digital identity verification

According to a Juniper Research report, the rate of digital identity verification checks is on the rise in response to increased identity theft.

from Cybersecurity News https://ift.tt/CH0qRAj

Healthcare top infrastructure target for cyberattacks

According to the recent KnowBe4 report, healthcare is the top infrastructure topic for ransomware attacks with an increase in cyberattack frequency.

from Cybersecurity News https://ift.tt/03nDhB4

Government shutdown averted: What security leaders can learn

Here security leaders discuss what a government shutdown would mean for security professionals and how it could affect the security industry.

from Cybersecurity News https://ift.tt/zgtXqSW