Image: Shutterstock

CloudSEK Pins Blame for Hack on Other Cybersecurity Firm

Akshaya Asokan • December 7, 2022

Indian cybersecurity firm CloudSEK says another cybersecurity firm used a compromised collaboration platform credential to obtain access to its training webpages. CEO Rahul Sasi did not identify the alleged perpetrator and says the hacker did not obtain access to the company code base and database.

►

Big Data Security Analytics

A Look Ahead: John Kindervag's Zero Trust Outlook for 2023

Latest

Endpoint Security

Novel Botnet Dubbed 'Zerobot' Targets Slew of IoT Devices

Prajeet Nair • December 8, 2022

A novel botnet dubbed "Zerobot" by Fortinet researchers is taking advantage of vulnerabilities in a slew of networking equipment and networked cameras with an emphasis on equipment manufactured in East Asia. The botnet exploits 21 separate vulnerabilities.

Black Hat

Cybersecurity Pros: Fresh Challenges Face 'Next Generation'

Mathew J. Schwartz • December 8, 2022

As the potential harm posed by technology increases, the cybersecurity stakes are changing, warned speakers at Black Hat Europe. With governments taking a greater interest in regulating cybersecurity - and perhaps practitioners - experts urged practitioners to collectively guide their own destiny.

Cybercrime

Ransomware Defense: Common Mistakes to Avoid

Anna Delaney • December 8, 2022

This week's edition of the ISMG Security Report discusses the mistakes enterprises commonly make when building ransomware defenses, the cybersecurity capabilities being built by the U.S. Department of Energy, and the first female CEO at Securonix - one of only a handful in the vendor community.

Encryption & Key Management

Apple to Enable End-to-End Encryption of iCloud Backups

David Perera • December 7, 2022

Smartphone giant Apple says that starting later this year, users can enable end-to-end encryption of iPhone backups stored in the company's commercial cloud. Apple took pains to frame its announcement in the context of cloud computing data breaches.

Artificial Intelligence & Machine Learning

As Complexity Challenges Security, Is Time the Solution?

Mathew J. Schwartz • December 7, 2022

"Who here thinks your network or environment will become more complex next year?" a cybersecurity veteran asked the audience at Black Hat Europe this week in London. As attackers' capabilities continue to improve, Jeff Moss said defenders must learn to succeed or fail faster.

Endpoint Detection & Response (EDR)

SentinelOne Pushes Upmarket to Minimize Effects of Slowdown

Michael Novinson • December 6, 2022

SentinelOne plans to go after more Fortune 500 and Global 2000 organizations as the economic downturn prompts customers to shrink the size of their purchases. Over the past year, the company doubled the number of clients spending at least $100,000 and $1 million with SentinelOne annually.

Fraud Management & Cybercrime

Rackspace Confirms Exchange Outage Caused by Ransomware

Akshaya Asokan • December 6, 2022

Ransomware lies behind the ongoing outage of hosted Exchange services at Rackspace, the company disclosed in a Tuesday update. The company did not disclose any particular ransomware actor. It told federal regulators that the outage is likely to create a financial loss.

Cybercrime

US Prosecutors Unspool xDedic Criminal Marketplace Cases

Prajeet Nair • December 6, 2022

The 2019 seizure by U.S. law enforcement of online criminal marketplace xDedic is paying dividends for lawyers unrolling prosecutions of accused fraudsters who allegedly obtained compromised credentials from the site. The FBI and IRS estimate that xDedic facilitated more than $68 million in fraud.

DevSecOps

Profiles in Leadership: Kalpesh Doshi

Mihir Bagwe • December 6, 2022

Kalpesh Doshi has come a long way in cybersecurity. When he started out, some people mistakenly thought he was a security guard. Today, he has two decades of experience in information security, security audits, risk management and data protection, regulations, global standards and compliance.

Governance & Risk Management

Zero Trust Continuous Authentication: Getting It Right

Suparna Goswami • December 6, 2022

An important aspect of zero trust is continuous adaptive authentication, in which a user is authenticated continuously throughout the session, but implementing this technology poses many practical challenges. Three experts discuss ways to overcome technical issues and user resistance to change.

Application Security

Snyk's Iain Rose on How to Secure Cloud-Native Environments

Michael Novinson • December 5, 2022

Organizations should build apps and design development workflows in a way that embraces how quickly cloud-native architectures change, says Snyk Solutions Engineer Iain Rose. Unlike traditional on-premises environments, containerized applications are designed to be ephemeral, Rose says.

Security Information & Event Management (SIEM)

Securonix Taps Ivanti, BMC, SAP Vet Nayaki Nayyar as New CEO

Michael Novinson • December 5, 2022

Securonix has snagged longtime Ivanti, BMC Software and SAP executive Nayaki Nayyar as CEO to strengthen product capabilities and customer experience. One of a handful of female CEOs in the vendor community, she doubled Ivanti's total addressable market during her 30 months as president.