Implementing Data Classification Practices: Draft NIST SP 1800-39A Available for Comment
The National Cybersecurity Center of Excellence (NCCoE) has released a preliminary draft of NIST Special Publication (SP) 1800-39A, Implementing Data…
April 2023
Chinese Hackers Using MgBot Malware to Target International NGOs in Mainland China
The advanced persistent threat (APT) group referred to as Evasive Panda has been observed targeting an international non-governmental organization (NGO)…
Peugeot Customer Data in Peru Exposed Due to Misconfigured Environment File
Peugeot, the French automobile manufacturer, has suffered a significant data leak affecting its customers in Peru. The incident exposed sensitive…
Elon Musk Has a Second Alt Twitter Account That He Stole From Another User
Can you truly have an alt account if everyone in the world knows about it? The best answer may come…
Browser Security Survey: 87% of SaaS Adopters Exposed to Browser-borne Attacks
The browser serves as the primary interface between the on-premises environment, the cloud, and the web in the modern enterprise.…
AI to Aid Democracy
There’s good reason to fear that A.I. systems like ChatGPT and GPT4 will harm democracy. Public debate may be overwhelmed…
7,413 People Were Impacted by Alaska Railroad Data Breach
Alaska Railroad Corporation reported a data breach incident that occurred in December 2022 and they discovered it on March 18th,…
Pro-Russia hacking group executed a disruptive attack against a Canadian gas pipeline
Pro-Russia hacking group Zarya caused a cybersecurity incident at a Canadian gas pipeline, the critical infrastructure sector is on alert.…
Apache Superset Vulnerability: Insecure Default Configuration Exposes Servers to RCE Attacks
The maintainers of the Apache Superset open source data visualization software have released fixes to plug an insecure default configuration…
Embracing zero-trust: a look at the NSA’s recommended IAM best practices for administrators
By now, most of the industry has realized we’re seeing a shift from the legacy perimeter-based security model to an…