Category: News

Auto Added by WPeMatico

Application Security, bytedance, children, china, Cloud Security, Cyberlaw, Cybersecurity, Data Privacy, DevOps, disinformation, Donald Trump, Endpoint, Featured, Global Security News, Governance, Risk & Compliance, Humor, Incident Response, Industry Spotlight, malware, misinformation, Mobile Security, Most Read This Week, Network Security, News, online disinformation, Popular Post, president donald trump, privacy, Protecting Americans from Foreign Adversary Controlled Applications Act, SB Blogwatch, Security Awareness, Security Boulevard (Original), Social - Facebook, Social - LinkedIn, Social - X, Social disinformation, Social Engineering, social media, socialmedia, Spotlight, Spyware, Threats & Breaches, TikTok, TikTok Ban, Trump, vulnerabilities, Won’t somebody think of the children?

Trump U-Turn: TikTok’s On-Again/Off-Again U.S. Ban

January 21, 2025

Not For You: The Protecting Americans from Foreign Adversary Controlled Applications Act shouldn’t be enforced, orders President Trump. The post Trump U-Turn: TikTok’s On-Again/Off-Again U.S. Ban appeared first on Security Boulevard.

Forescout Report Detail Hunters International Ransomware Gang Tactics

January 21, 2025

An analysis of the operations of Hunters International, the ransomware-as-a-service platform that has been used to compromise more than 200 organizations, conducted by Forescout Technologies reveals the cybercriminal syndicate that created it is employing a wide range of new and old tactics and techniques. The post Forescout Report Detail Hunters International Ransomware Gang Tactics appeared…

Almost 10% of GenAI Prompts Include Sensitive Data: Study

January 21, 2025

A study by cybersecurity startup Harmonic Security found that 8.5% of prompts entered into generative AI models like ChatGPT, Copilot, and Gemini last year included sensitive information, putting personal and corporate data at risk of being leaked. The post Almost 10% of GenAI Prompts Include Sensitive Data: Study appeared first on Security Boulevard.

U.S. Treasury Sanctions Chinese Individual, Company for Data Breaches

January 20, 2025

The U.S. Treasury sanction a Chinese bad actor for participating in the hack of the agency’s networks and a Chinese for its involvement with Salt Typhoon’s attacks on U.S. telecoms. Meanwhile, the FCC calls for stronger cybersecurity measures for ISPs. The post U.S. Treasury Sanctions Chinese Individual, Company for Data Breaches appeared first on Security…

The Good, the Bad, and the Politics of Biden’s Cybersecurity Order

January 17, 2025

President Biden in the last few days of his administration issued an expansive cybersecurity EO that touched on issues like software supply chain, AI, and foreign adversaries. Many approved of the effort, though there were concerns that the incoming administration will simply shelve it. The post The Good, the Bad, and the Politics of Biden’s…

This is HUGE: Biden’s Cybersecurity Exec. Order — Big Parting Gift to Trump

January 17, 2025

Wow. Just Wow.: Joseph Robinette Biden Jr. hits the emergency “do something” button. The post This is HUGE: Biden’s Cybersecurity Exec. Order — Big Parting Gift to Trump appeared first on Security Boulevard.

Cohesity Extends Services Reach to Incident Response Platforms

January 17, 2025

Cohesity has extended its Cyber Event Response Team (CERT) service to include third-party providers of incident response platforms, including Palo Alto Networks Unit 42, Arctic Wolf, Sophos, Fenix24 and Semperis. The post Cohesity Extends Services Reach to Incident Response Platforms appeared first on Security Boulevard.

Security Concerns Complicate Multi-Cloud Adoption Strategies

January 17, 2025

While cloud adoption continues to drive digital transformation, the shift to the cloud introduces critical security challenges that organizations must address. The post Security Concerns Complicate Multi-Cloud Adoption Strategies appeared first on Security Boulevard.

FBI Deletes PlugX Malware From Computers Infected by China Group

January 15, 2025

A Chinese-based threat group called Mustang Panda was using a variant of the PlugX malware to infected U.S. Windows computers and steal information. The FBI, with help from French authorities and a private company, deleted the malicious code from more than 4,200 systems. The post FBI Deletes PlugX Malware From Computers Infected by China Group…

Allstate Violates Drivers’ Privacy, Texas AG Alleges

January 15, 2025

Don’t Mess With Texas Privacy: “We will hold all these companies accountable,” rants state attorney general Ken Paxton (pictured). The post Allstate Violates Drivers’ Privacy, Texas AG Alleges appeared first on Security Boulevard.

Google inks deal with The Associated Press to bring more real-time info to Gemini

January 15, 2025

In a bid to make its Gemini chatbot app more of one-stop shop, Google says it’s working with The Associated Press to build “a feed of real-time information” in Gemini. Jaffer Zaidi, Google’s VP of global news partnerships, said that the goal is to “further enhance the usefulness of results” in the Gemini experience. “As…

Sweet Security Leverages LLM to Improve Cloud Security

January 15, 2025

Sweet Security today added a cloud detection engine to its cybersecurity portfolio that makes use of a large language model (LLM) to identify potential threats in real-time. The post Sweet Security Leverages LLM to Improve Cloud Security appeared first on Security Boulevard.

Microsoft Sues Group for Creating Tools to Bypass Azure AI Security

January 14, 2025

Microsoft is suing 10 unknown people involved in a sophisticated scheme to exploit users credentials to access the vendor’s Azure OpenAI AI services, bypass security guardrails, and post harmful images using its cloud systems. The post Microsoft Sues Group for Creating Tools to Bypass Azure AI Security appeared first on Security Boulevard.

Commvault Adds Ability to Recover Entire Instances of Active Directory

January 14, 2025

Commvault today added an ability to automatically recover the instances of Microsoft Active Directory (AD) that have become primary targets of cybersecurity attacks. The post Commvault Adds Ability to Recover Entire Instances of Active Directory appeared first on Security Boulevard.

Critical Infrastructure Seeing Benefits of Government Program, CISA Says

January 14, 2025

CISA in two years has seen the number of critical infrastructure organizations signing up for its CPG services double, which has improved the overall security in most sectors, but more needs to be done to strengthen what has become a target adversarial state-sponsored threat groups. The post Critical Infrastructure Seeing Benefits of Government Program, CISA…

HHS Proposes Major Overhaul of HIPAA Security Rule in the Wake of Change Healthcare Breach

January 13, 2025

The new rules come in the wake of the Change Healthcare breach, which exposed the electronic personal health information of about 100 million Americans. The post HHS Proposes Major Overhaul of HIPAA Security Rule in the Wake of Change Healthcare Breach appeared first on Security Boulevard.

FunkSec: A New Ransomware Group Buoyed by AI

January 13, 2025

A new ransomware group called FunkSec claimed 85 victims in December but its members appear to be lesser-skilled hackers using generative AI and inflated attack numbers to bolster their capabilities and reputation, according to Check Point researchers. The post FunkSec: A New Ransomware Group Buoyed by AI appeared first on Security Boulevard.

Hackers Attack PowerSchool, Expose K-12 Teacher and Student Data

January 10, 2025

Giant education software provider PowerSchool reported that hackers using compromised credentials access a database and stole student and teacher data in an attack that the company said was not ransomware, though a ransom apparently was paid. Affected K-12 school districts are scrambling to alert parents and staffs. The post Hackers Attack PowerSchool, Expose K-12 Teacher…

Phishing Threats, GenAI Among Top Cybersecurity Risks in 2025

January 10, 2025

Organizations are facing escalating threats from phishing attacks, personal app usage and the widespread adoption of generative AI (GenAI) in workplaces. According to a Netskope report, phishing attacks surged in 2024, with enterprise employees clicking on phishing links at a rate nearly three times higher than in 2023. The study found phishing campaigns have evolved..…

Chinese-linked Hackers May Be Exploiting Latest Ivanti Vulnerability

January 9, 2025

Software maker Ivanti, which for more than a year has been plagued by security flaws in its appliance, unveiled two new ones this week, with Mandiant researchers saying that one likely is being activity exploited by China-linked threat groups. The post Chinese-linked Hackers May Be Exploiting Latest Ivanti Vulnerability appeared first on Security Boulevard.

Open Interfaces Needed to Cut Security Operations Costs & Boost Efficiency

January 9, 2025

While AI/ML and automation promise to help streamline and reduce security operation costs, these efforts could be significantly boosted by the increased availability of standard interfaces The post Open Interfaces Needed to Cut Security Operations Costs & Boost Efficiency appeared first on Security Boulevard.

Fortinet CISO Details ‘Phish-Free’ Phishing Scheme Using PayPal

January 9, 2025

A bad actor is using a Microsoft 365 test domain and a self-created distribution list to bypass traditional email protections and entice victims to hand over their PayPal account information in what Fortinet’s CISO is calling a “phish-free” phishing campaign. The post Fortinet CISO Details ‘Phish-Free’ Phishing Scheme Using PayPal appeared first on Security Boulevard.

Green Bay Packers Retail Site Hacked, Data of 8,500 Customers Exposed

January 8, 2025

The data of more than 8,500 customers were exposed during an attack on the Green Bay Packers online retail website in which the hackers were able to bypass security measure and install malicious code, steal customers’ names, addresses, and credit card information. The post Green Bay Packers Retail Site Hacked, Data of 8,500 Customers Exposed…

Insecure Medical Devices — Illumina DNA Sequencer Illuminates Risks

January 8, 2025

IEI-IEI, Oh: Running an obsolete OS, on obsolete hardware, configured with obsolete settings. The post Insecure Medical Devices — Illumina DNA Sequencer Illuminates Risks appeared first on Security Boulevard.

X hires former WSJ editor and bureau chief to lead news group

January 7, 2025

X, formerly Twitter, wants to make its platform a home to the future and news and journalism. On that front, the company has now hired John Stoll, a former editor and Detroit bureau chief at The Wall Street Journal to lead its news group and partnership team at X. The hiring news was announced on…

Exabeam Extends Scope and Reach of SIEM Platform

January 7, 2025

Exabeam today added a bevy of capabilities to its New-Scale Security Operations Platform, including support for open application programming interface (API) and an ability to search data stored in the LogRhythm security information event management (SIEM) platform it acquired last year. The post Exabeam Extends Scope and Reach of SIEM Platform appeared first on Security…

WordPress Plugin Exploited to Turn Legitimate Sites Into Phishing Traps

January 6, 2025

A WordPress plugin known as PhishWP, has been discovered on Russian cybercrime forums and is being exploited by cybercriminals to steal sensitive data from unsuspecting users. The post WordPress Plugin Exploited to Turn Legitimate Sites Into Phishing Traps appeared first on Security Boulevard.

China’s Salt Typhoon Attacks Guam entity; US Sanctions Chinese Company

January 6, 2025

China is continuing to target U.S. entities in its efforts regarding Taiwan, including using state-sponsored Flax Typhoon to compromise Guam infrastructure. U.S. are pushing back, with the Treasury Department sanctioning a Chinse cybersecurity firm accused of aiding in some of the attacks. The post China’s Salt Typhoon Attacks Guam entity; US Sanctions Chinese Company appeared…

Torq Adds Bevy of AI Agents to Automate Cybersecurity Workflows

January 6, 2025

Torq has extended the reach of the generative artificial intelligence (AI) capabilities spanning its security operations center (SOC) platform to now include multiple agents. The post Torq Adds Bevy of AI Agents to Automate Cybersecurity Workflows appeared first on Security Boulevard.

DigiCert Open Sources Domain Control Validation Software

January 6, 2025

DigiCert has made available a Domain Control Validation (DCV) library under an open-source software license as part of a larger effort to enable certificate authorities (CAs) to reduce total costs. The post DigiCert Open Sources Domain Control Validation Software appeared first on Security Boulevard.

VW Cars Leak Private Data of 800,000 — ‘Volksdaten’

December 30, 2024

Cariad, VW Group’s software arm, made this classic error. The post VW Cars Leak Private Data of 800,000 — ‘Volksdaten’ appeared first on Security Boulevard.

Health Care Data of Almost 1 Million ConnectOnCall User Exposed

December 23, 2024

A hack of health care services provider ConnectOnCall exposed the sensitive data of more than 914,000 users, the latest proof point of the growing interest threat actors have in targeting hospitals and other health care organizations. The post Health Care Data of Almost 1 Million ConnectOnCall User Exposed appeared first on Security Boulevard.

North Korean Hackers Stole $1.34 Billion in Crypto in 2024

December 20, 2024

North Korean hackers stole $1.34 billion in cryptocurrency in 2024, more than half of the $2.2 billion stolen in all crypto hacks, and the attacks by threat groups linked to the rogue nation are becoming more frequent and are happening more quickly. The post North Korean Hackers Stole $1.34 Billion in Crypto in 2024 appeared…

OPSWAT Acquires Fend to Extend Cybersecurity Reach Into OT Platforms

December 20, 2024

OPSWAT this week revealed it has acquired Fend, Inc. to further extend the reach of its cybersecurity portfolio into the realm of operational technology (OT). The post OPSWAT Acquires Fend to Extend Cybersecurity Reach Into OT Platforms appeared first on Security Boulevard.

CISA Mandates Federal Agencies Secure Their Cloud Environments

December 19, 2024

CISA is requiring all federal agencies to adopt stronger measures to improve their SaaS configurations and protect their complex cloud environments against growing threats from hackers, who are increasingly targeting third parties like cloud providers. The post CISA Mandates Federal Agencies Secure Their Cloud Environments appeared first on Security Boulevard.

Arctic Wolf Acquires Cylance Endpoint Security Platform to Further AI Ambitions

December 19, 2024

Arctic Wolf this week revealed it has acquired the Cyclance endpoint security platform from Blackberry for $160 million. The post Arctic Wolf Acquires Cylance Endpoint Security Platform to Further AI Ambitions appeared first on Security Boulevard.

CrowdStrike Allies With Salt Security to Improve API Security

December 18, 2024

CrowdStrike and Salt Security have extended their alliance to make it simpler to feed application programming interface (API) security data directly into a security information event management (SIEM) platform. The post CrowdStrike Allies With Salt Security to Improve API Security appeared first on Security Boulevard.

Attackers Can Find New APIs in 29 Seconds: Wallarm

December 17, 2024

Cybersecurity vendor Wallarm, using a honeypot, found that hackers can discover new APIs in 29 seconds and that APIs are now more targeted than web applications, highlighting the need to put a security focus on the increasingly popular business tools. The post Attackers Can Find New APIs in 29 Seconds: Wallarm appeared first on Security…

Rhode Island Benefits and Services Systems Hit by Ransomware

December 16, 2024

Hackers likely stole personal information such names, addresses, and SSNs in a ransomware attack on Rhode Island’s human services systems and are threatening to release the data as state and federal officials and Deloitte scrambling to mitigate the data breach. The post Rhode Island Benefits and Services Systems Hit by Ransomware appeared first on Security…

Hacker Uses Info-Stealer Against Security Pros, Other Bad Actors

December 13, 2024

An unknown hacker called MUT-1244 used information-stealing malware to not only grab sensitive data from cybersecurity professionals but also to steal WordPress credentials from other bad actors who had bought them on the dark web. The post Hacker Uses Info-Stealer Against Security Pros, Other Bad Actors appeared first on Security Boulevard.

Snowflake Will Make MFA Mandatory Next Year

December 12, 2024

Data warehousing firm Snowflake, which saw a lot of user accounts get hacked due to poor security hygiene, is making MFA mandatory for all user accounts by November 2025. The post Snowflake Will Make MFA Mandatory Next Year appeared first on Security Boulevard.

Charges Against CISOs Create Worries, Hope in Security Industry: Survey

December 12, 2024

A survey of IT security pros by cybersecurity firm BlackFog found that 70% of them said federal cases like that against SolarWinds’ CISO hurt their opinion about the position, but some said they expected the boards of directors would take the issues of security more seriously. The post Charges Against CISOs Create Worries, Hope in…

AI Slop is Hurting Security — LLMs are Dumb and People are Dim

December 12, 2024

Artificial stupidity: Large language models are terrible if you need reasoning or actual understanding. The post AI Slop is Hurting Security — LLMs are Dumb and People are Dim appeared first on Security Boulevard.