New Regulations Make D&O Insurance a Must for CISOs
CISOs currently hold all of the responsibility to stop cyberattacks yet have none of the authority to fund the technological defenses that regulations require.
News & Updates
News & Updates
‘PhantomBlu’ Cyberattackers Backdoor Microsoft Office Users via OLE
The cyber campaign uses social engineering and sophisticated evasion tactics, including a novel malware-delivery method, to compromise hundreds of Microsoft Office users.
News & Updates
The New CISO: Rethinking the Role
Rising cybersecurity demands are changing the role of the head security officer. CISOs need to make a list, check it at least twice, and document every step.
News & Updates
‘Conversation Overflow’ Cyberattacks Bypass AI Security to Target Execs
Credential-stealing emails are getting past artificial intelligence’s “known good” email security controls by cloaking malicious payloads within seemingly benign emails. The tactic poses a significant threat to enterprise networks.
News & Updates
North Korea-Linked Group Levels Multistage Cyberattack on South Korea
Kimsuky-attributed campaign uses eight steps to compromise systems — from initial execution to downloading additional code from Dropbox, and executing code to establish stealth and persistence.
News & Updates
ML Model Repositories: The Next Big Supply Chain Attack Target
Machine-learning model platforms like Hugging Face are suspectible to the same kind of attacks that threat actors have executed successfully for years via npm, PyPI, and other open source repos.
News & Updates
Chinese APT ‘Earth Krahang’ Compromises 48 Gov’t Orgs on 5 Continents
The group uses pretty standard open source tooling and social engineering to burrow into high-level government agencies across the globe.
Cybersecurity Tools
AWS zero trust: A CISO’s path to improved cloud visibility & control
EXECUTIVE SUMMARY: It’s undisputed — the cloud has transformed how organizations operate. The cloud provides increased scalability, agility, and cost savings. However, the distributed nature of cloud environments has also introduced security challenges that traditional perimeter-based security models struggle to address. As cyber threats continue to evolve, one area in which CISOs need to adopt […]
The post AWS zero trust: A CISO’s path to improved cloud visibility & control appeared first on CyberTalk.
Security
Top 4 Industries at Risk of Credential Stuffing and Account Takeover (ATO) attacks
All industries are at risk of credential stuffing and account takeover (ATO) attacks. However, some industries are at a greater
Cybersecurity Tools
Green Business 101: How to Make Your Company Eco-Friendly
In this post, I will talk about Green Business and how to make your company eco-friendly. If you’ve recently started a business or have a business plan in the works, something to think about is making it a green business. In the world of today, businesses could do a lot more to help make this […]
The post Green Business 101: How to Make Your Company Eco-Friendly appeared first on SecureBlitz Cybersecurity.