Global operation EMERALDWHALE steals 15K cloud credentials

A global operation called EMERALDWHALE has resulted in the theft of more than 15,000 cloud service credentials.

from Cybersecurity News https://ift.tt/bYL4aSP

Software and IT vendors linked to 67% of energy sector breaches

Two-thirds (67%) of third-party energy sector breaches were caused by software and IT vendors. 

from Cybersecurity News https://ift.tt/OYVJnIf

Security leaders discuss the Cisco security incident

Security leaders discuss the recent Cisco security incident. 

from Cybersecurity News https://ift.tt/lcfFr3N

31 new ransomware groups were discovered in 2024

A report by Secureworks revealed a 30% year-over-year rise in active ransomware groups, which demonstrates fragmentation of an established criminal ecosystem.

from Cybersecurity News https://ift.tt/BvKFhAS

Only 24% of organizations are 'very confident' in their AI policies

According to recent data, a wave of artificial intelligence (AI) adoption is radically shifting how software goes from ideation to deployment.

from Cybersecurity News https://ift.tt/OYV18dX

99% of CISOs report fear over losing positions due to a data breach

Nearly all CISOs (99%) are worried about losing their positions if a breach occurs, with 77% of CISOs being very or extremely concerned.

from Cybersecurity News https://ift.tt/YAfaWyw

72% of European organizations are using AI in the workplace

According to a recent report, 53% of European organizations are confident employees are not properly utilizing generative AI.

from Cybersecurity News https://ift.tt/p4GYBTU

New macOS vulnerability allows unauthorized data access

A new macOS vulnerability could allow a malicious actor to evade an operating system’s Transparency, Consent, and Control (TCC) technology. 

from Cybersecurity News https://ift.tt/FJCVUxD

4 organizations charged with misleading cyber disclosures

The SEC has charged four public companies with misleading disclosures about cyber risks and intrusions.

from Cybersecurity News https://ift.tt/yZSw67f

Middle East Escalation, Humanitarian Law and Disinformation – Episode 25

In episode 25 of the Cybersecurity & Geopolitical Discussion, our trio of hosts pull apart the rapidly deteriorating situation in the Middle East.

from Cybersecurity News https://ift.tt/kH0GTRD

CISOs respond: 49% of CISOs plan to leave role without industry action

A survey shows that nearly half (49%) of CISOs do not believe there is a future for them in this role. CISOs are sharing their insights on this statistic. 

from Cybersecurity News https://ift.tt/vUq7xCH

Iranian cyber actors are targeting critical infrastructure entities

Iranian cyber actors are targeting critical infrastructure entities via brute force.

from Cybersecurity News https://ift.tt/YDztq4p

Research uncovers new attack method, security leaders share insights

Researchers at the University of Texas at Austin discovered a new attack method. 

from Cybersecurity News https://ift.tt/xhnuPts

34% of CIOs ranked securing the network as their number one priority

According to a recent report, 34% of chief information officers (CIOs) ranked securing the network as their number one priority. 

from Cybersecurity News https://ift.tt/UG73hT0

SolarWinds Help Desk software vulnerability added to CISA catalogue

Due to evidence of active exploitation, CISA added three vulnerabilities to its Known Exploited Vulnerabilities Catalogue.

from Cybersecurity News https://ift.tt/lHusM3r

A CISO’s guide to creating a cyber resilience toolkit

Every chief information security officer knows it isn’t a matter of “if” but “when” the systems that run their business will be disrupted in some way.

from Cybersecurity News https://ift.tt/TW4HERF

93% of hackers believe enterprise AI tools create a new attack vector

93% of hackers believe AI tools used by companies have opened up a new attack vector for malicious actors to exploit.

from Cybersecurity News https://ift.tt/nmGF9Kt

68% of healthcare workers experienced a supply chain attack

The effect of cybersecurity incidents on healthcare organizations was analyzed in a recent Proofpoint report.

from Cybersecurity News https://ift.tt/Dwg2PXt

Over 90% of phishing campaigns lead victims to malware

Phishing remains the primary method used by attackers to gain initial access to networks, according to a recent report.

from Cybersecurity News https://ift.tt/8gVCnAH

New iPhone feature could expose employees’ personal information

Cybersecurity researchers have discovered that Apple’s new “Mirroring” feature could expose an employee’s personal applications.

from Cybersecurity News https://ift.tt/nVTHvLd

Over half of tech leaders cite phishing as a top security concern

A report found that 33.9% of tech professionals report a shortage of AI security skills, particularly around emerging vulnerabilities like prompt injection.

from Cybersecurity News https://ift.tt/UTZyoGz

53% of survey respondents admit to paying over $500,000 ransom

A report found that 53% of organizations met ransom demands of more than $500,000 USD to recover access to encrypted systems and files.

from Cybersecurity News https://ift.tt/tvwZJ7y

39% of consumers admit to using generative AI on a weekly basis

Twenty-seven percent of employed survey respondents use privacy tools and settings to protect workplace information when using generative AI.

from Cybersecurity News https://ift.tt/pFBYQXs

More than one-third of tech professionals report AI skills shortage

New research has found a skills gap in AI security skills. 

from Cybersecurity News https://ift.tt/bEF1txh

60% of organizations manually gather employee data

According to a recent Envoy report, shifting workplace dynamics such as hybrid work policies have led to outdated data management processes.

from Cybersecurity News https://ift.tt/23ewL9Y

Researchers discover 14 new DrayTek vulnerabilities

14 additional network vulnerabilities in DrayTek routers were discovered in a recent Forescout Technologies report, putting user data at risk.

from Cybersecurity News https://ift.tt/OilJVGa

DDoS attacks surge in H2 2023

2023 saw an increase in DDoS attacks.

from Cybersecurity News https://ift.tt/oNpmW2D

35% of UK security leaders cite competition as cause of skills shortage

Issues faced by IT leaders in the U.K. were analyzed in a recent Hyve Managed Hosting report, including the current cybersecurity talent gap.

from Cybersecurity News https://ift.tt/IZJ4LH3

Finance industry most at risk for phishing attacks

Phishing attacks targeted the finance industry in H1 2024.

from Cybersecurity News https://ift.tt/AkSL9qX

Security leaders discuss the new vulnerability added to CISA’s catalog

CISA has issued a warning regarding a known, exploited vulnerability.

from Cybersecurity News https://ift.tt/Tmze7dJ

81% of U.S. workers have not been trained on generative AI

Security practices were analyzed in a recent report, finding that one in two office workers admit to using personal devices to log into work networks.

from Cybersecurity News https://ift.tt/XDEIQog

There was a 12% increase in brute force cyberattack techniques in 2024

Global threats were analyzed in a recent Elastic report. The report focused on security tools, malware attacks and cloud environment security.

from Cybersecurity News https://ift.tt/RxwLvok

45% of cybersecurity leaders are stressed about budget restraints

The stress of cybersecurity professionals was analyzed in a report finding that 38% of organizations are experiencing increased cybersecurity attacks.

from Cybersecurity News https://ift.tt/rQXTdsH

10% of IT professionals have zero visibility measures

A report found that 44% of IT security professionals rely on manual logging for service account visibility, while 10% admit to no visibility measures at all.

from Cybersecurity News https://ift.tt/TAXZeco

90% of U.S. companies admit to using AI in some capacity

The use of artificial intelligence (AI) by information technology (IT) professionals in the U.S. was analyzed in a recent report by GetApp. 

from Cybersecurity News https://ift.tt/CaStOFs

58% of organizations have experienced document-based identity fraud

Survey data shows a significant rise in the prevalence of video deepfakes, with a 20% increase in companies reporting incidents compared to 2022.

from Cybersecurity News https://ift.tt/GnHOeKb