Author: BankInfoSecurity.com RSS Syndication

GAO Report Recommends Additional Guidance for Healthcare Providers, PatientsAt the onset of the novel coronavirus public health emergency, regulators said they would not enforce certain potential HIPAA violations involving telehealth. But with that 202…

Read more →

Read the Article

Read more →

Read the Article

Read more →

Need Regulator for Bitcoin Spot Market, Says Financial Stability Oversight CouncilA council chaired by Treasury Secretary Janet Yellen and comprised of the heads of major federal financial regulatory agencies called on Congress to more closely regulate…

Read more →

Akamai’s Big Bets Around Security Compensate for a Struggling Content Delivery UnitThe steady barrage of acquisition reports around publicly traded digital experience vendor Akamai has intensified in recent weeks. The latest salvo landed Monday when St…

Read more →

Thief Retains $2M as ‘Bug Bounty,’ Loses $1M to Bot AttackA hacker exploited a smart contract bug to steal about $29 million from DEX aggregator Transit Finance. Within hours of the theft, the attacker returned nearly $19 million – but not before keepi…

Read more →

Hong Kong Privacy Office Says It Is ‘Disappointed’ With Breach NotificationUpscale Asian hotelier Shangri-La Group has copped to a data breach incident that may affect hundreds of thousands of guests. The hotel detected unauthorized access to its guest…

Read more →

Passwords are supported everywhere. But, says Andrew Shikiar, executive director of the FIDO Alliance, “they have been proven time and time again to simply be unfit for today’s networked economy.” In this episode of “Cybersecurity Unplugged,” Shikiar d…

Read more →

Rebecca Archambault, Senior Director Analyst at Gartner, Discusses Top IAM TrendsThe healthcare sector has long faced unique challenges involving identity and access management, but the novel coronavirus pandemic and various other key drivers are accen…

Read more →

CEO Dishes on How Government Has Struggled to See Across Its Application TerrainWhile vArmour has enjoyed success in banking, the U.S. government is now the fastest-growing part of its business. CEO Tim Eades says much of the government doesn’t unders…

Read more →

Lazarus Group Uses Social Engineering to Manipulate Victims to Download MalwareNorth Korea is using weaponized versions of open-source utilities to spy on the technology, defense and entertainment sectors worldwide. Microsoft says it spotted fake profi…

Read more →

Jeremy Grant Explains How Bill Would Create Standards, Funding for Online IDsA Senate committee this week approved a bill that would create governmentwide standards for identity verification and provide grants to help states and local agencies upgrade …

Read more →

Department Paid $110,000 in Rewards for Submitted Vulnerability ReportsThe U.S. Department of Defense uncovered almost 350 vulnerabilities in the department’s networks as part of its experimental bug bounty program launched on American Independence Day…

Read more →

Lazarus Group Uses Social Engineering to Manipulate Victims Into Downloading MalwareNorth Korean is using weaponized versions of open source utilities to spy on the technology, defense and entertainment sectors worldwide. Microsoft says it spotted fake…

Read more →

Venture Capital Firms Commit Up to $50M Each for Startups Using Cloudflare WorkersCloudflare has joined forces with 26 venture capital firms to provide up to $1.25 billion in financing to startups building on the company’s developer platform. The Worke…

Read more →

Also: Complying with PCI DSS 4.0 and Managing Security Budget CutsIn the latest weekly update, ISMG editors discuss how organizations can comply with the new PCI DSS 4.0 requirements, whether other countries should follow the U.S. lead on legislating s…

Read more →

Co-Founder & CEO Discusses Why the Company Is Seeking FedRAMP AuthorizationSecurity firms must increasingly follow U.S. government security requirements even if they don’t serve federal agencies themselves, says Avi Shua, Orca Security co-founder and C…

Read more →

Prosecutors Allege Both Doctors Aimed to Help Russia in Ukraine WarA Maryland couple faces federal indictment for an alleged conspiracy to provide the Russian government with military medical records. Anna Gabrielian and U.S. Army Maj. Jamie Lee Henry …

Read more →

No Patch Yet Available Although Exploitation Requires Authenticated AccessHackers, possibly Chinese, are exploiting Microsoft Exchange zero-day vulnerabilities to apparently implant backdoors and steal credentials. The computing giant says it doesn’t y…

Read more →

Read the Article

Read more →

Read the Article

Read more →

Onepoint Bid Follows Atos Proposal to Extract More Value From Beleaguered BusinessAtos turned down an unsolicited $4.12 billion offer from rival Onepoint to acquire the French conglomerate’s $4.8 billion cybersecurity, big data and digital business. At…

Read more →

OIG Security Audit of Texas VA Facility Found Familiar ProblemsA watchdog security audit of a south Texas VA center identified a variety of deficiencies related to legacy systems still in use years after no longer being supported with vendor updates. T…

Read more →

Threat Intel Shows Possible Chinese Cyberspying Campaign Targets VMware HypervisorsHackers may shift malware attacks into technical environments beyond the reach of endpoint detection and response, says Mandiant. The threat intel firm says it uncovered…

Read more →

The United States is arguably involved in a cyberwar against Russia and China – and appears to be losing. In this episode of “Cybersecurity Unplugged,” Tom Kellerman of Contrast Security and Richard Bird of Traceable.ai discuss what the U.S. government…

Read more →

ShiftRight Acquisition to Simplify Management, Operations Across DLP, CASB & CNAPPZscaler has bought out of stealth a startup established by the founders of Lacework to automate security management and dramatically reduce incident resolution time. Shif…

Read more →

The latest edition of the ISMG Security Report discusses what went wrong for Optus in the wake of one of Australia’s biggest data breach incidents, the state of code security today and the growing trend of private equity firms pursuing take-private deals.

Read more →

Read the Article

Read more →

Cybersecurity Veteran Focuses on Advising Government, Financial SectorsOver his 23-year career in cybersecurity, Tom Kellermann has focused on policy, endpoints and even strategic investments. Now, in his new role as senior vice president of cyber stra…

Read more →

Security Director Ian Keller Rants About Hospital Networks Being Internet-Connected”It’s stupid and adds zero value,” writes Ian Keller, director of security at a telecom company, about connecting hospital networks – and especially life-sustaining info…

Read more →

Cyber Insurers Limit Financial Exposure While Risk GrowsThe Department of Treasury and the Cybersecurity and Infrastructure Agency are soliciting comments on whether risks to critical infrastructure from a catastrophic cyber attack – and the concurrent…

Read more →

Vulnerabilities Appear Not to Have Been Exploited in the WildChat app WhatsApp patched two memory-related flaw that could be exploited by an attacker as a first step to installing smartphone malware on Android or Apple devices. WhatsApp vulnerabilities…

Read more →

Airline Says July Phishing Incident Exposed Personal Information of 1,700 PeopleAmerican Airlines says unauthorized access to its email system is behind a July data breach incident affecting more than 17,00 individuals. Someone synced with an employee’…

Read more →

ZecOps to Extend Jamf’s Ability to See Sophisticated Threats on Mac, iOS & AndroidJamf plans to buy startup ZecOps to extend its ability to detect and respond to sophisticated threats across Mac, iOS and Android devices. Jamf’s proposed acquisition wil…

Read more →

Confusion and Other Challenges Still Hinder Compliance Efforts, Says LetterHealthcare providers and their health IT vendors need more time to meet a pending federal deadline to comply with information-sharing regulations that pertain to an expanding se…

Read more →

Read the Article

Read more →

Read the Article

Read more →

NullMixer Opens Windows To Dozens of Malicious FilesA new malware dropper uncovered by Kaspersky targets would-be users of pirated software with a slew of nasty infections including backdoors, Trojan-Bankers, downloaders, spyware and more. The cybersec…

Read more →

CEO Shares Why Cloud Security Is the Fastest-Growing Part of SentinelOne’s BusinessIdentity protection, XDR, data analytics and cloud security have been SentinelOne’s biggest investment areas, says CEO Tomer Weingarten. Cloud has become the fastest-gro…

Read more →

Congress Backs Away From Requiring Manufacturers to Patch Medical DevicesA congressional deal will ensure the U.S. Food and Drug Administration can continue collecting fees from medical device manufacturers but at the price of dropping increased cybers…

Read more →