2024-03-28 Post a Comment

CISA publishes 447-page draft of cyber incident reporting rule

By-Jonathan Greig: The nationâ€™s top cybersecurity agency has unveiled the initial draft of a new rule detailing how critical infrastructure organizations need to report cyberattacks to the federal government. The Cybersecurity and Infrastructure Security Agency (CISA)Â postedÂ the 447-page set of regulations under the Cyber Incident Reporting for Critical Infrastructure Act to the Federal Register, allowing the public to comment on it. The law mandating the rulesÂ was passed in 2022Â and is intended […]

alt=Fortinet's security platform safeguards business data.

Cyber security

2024-03-13 Post a Comment

Vulnerability in 150K+ Fortinet Devices Let Hackers Execute Arbitary Code Remotely

By Guru Baran A critical security flaw identified as CVE-2024-21762 has been discovered in Fortinetâ€™s FortiOS and FortiProxy secure web gateway systems, potentially impacting around 150,000 devices worldwide. The vulnerability allows for unauthenticated remote code execution (RCE) by sending specially crafted HTTP requests to the affected machines. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that attackers actively exploit the flaw, adding it to its Known Exploited Vulnerabilities […]

alt=A laptop displaying a sign that reads "We have your data pay."

Cyber security

2024-03-10 Post a Comment

After collecting $22 million, AlphV ransomware group stages FBI takedown

By- DAN GOODIN The ransomware group responsible for hamstringing the prescription drug market for two weeks has suddenly gone dark, just days after receiving a $22 million payment and standing accused of scamming an affiliate out of its share of the loot. FURTHER READING US prescription market hamstrung for 9 days (so far) by ransomware attack The events involve AlphV, a ransomware group also known as BlackCat. Two weeks […]

Cyber security

2024-02-10 Post a Comment

Government hackers targeted iPhone owners with zero-days, Google says

Lorenzo Franceschi-Bicchierai@lorenzofb Government hackers last year exploited three unknown vulnerabilities in Appleâ€™s iPhone operating system to target victims with spyware developed by a European startup, according to Google. On Tuesday, Googleâ€™s Threat Analysis Group, the companyâ€™s team that investigates nation-backed hacking,Â published a reportÂ analyzing several government campaigns conducted with hacking tools developed by several spyware and exploit sellers, including Barcelona-based startup Variston. In one of the campaigns, according to Google, government […]

alt=Two individuals observing a computer screen displaying a padlock. Image relates to 'Cloud CISO Perspectives'.

Cyber security

2024-02-09 Post a Comment

Cloud CISO Perspectives: Executive lessons from our response to Reptar

Phil Venables VP, TI Security & CISO, Google Cloud Yousif Hussin Cybersecurity expert Welcome to the second Cloud CISO Perspectives for January 2024. In this edition, Iâ€™m turning the mic over to Yousif Hussin, who as a member of Googleâ€™s Vulnerability Coordination Center led our response to the recent serious zero-day CPU vulnerability Reptar. He talks about what important lessons executives can learn from how Google responds to critical zero-day […]