News
The thin line between saving a company and funding a crime
1+ hour, 42+ min ago (1705+ words) The pitfalls of ransomware negotiation are excessive " pinning the goals of cybercrime against victims and incident response firms that typically face no good options. Negotiators are charged with ensuring their clients don't break any laws by financially supporting sanctioned criminals,…...
Why cybersecurity cannot hire its way through the AI era
2+ week, 5+ hour ago (762+ words) Why cybersecurity cannot hire its way through the AI era'CyberScoop The cybersecurity industry has been battling a talent shortage and skills gap for years. Meanwhile, organizations need a new way to approach risk management proactively and more effectively. AI seems…...
Former incident responders plead guilty to ransomware attack spree
1+ mon, 1+ day ago (535+ words) Former cybersecurity professionals Ryan Clifford Goldberg and Kevin Tyler Martin pleaded guilty Thursday to participating in a series of ransomware attacks in 2023 while they were employed at cybersecurity companies tasked with helping organizations respond to ransomware attacks. Goldberg, who was…...
New cybersecurity guidance paves the way for AI in critical infrastructure
1+ mon, 1+ week ago (902+ words) The guidance gives operators a clearer map, and it reinforces that resilience grows when humans and machines work in partnership. The post New cybersecurity guidance paves the way for AI in critical infrastructure" appeared first on CyberScoop. Global cybersecurity agencies…...
US charges hacker tied to Russian groups that targeted water systems and meat plants
1+ mon, 1+ week ago (299+ words) The Justice Department has charged a Ukrainian national with conducting cyberattacks on critical infrastructure worldwide as part of two Russian state-sponsored hacking operations that targeted water systems, food processing facilities and government networks across the United States and allied nations....
UK cyber agency warns LLMs will always be vulnerable to prompt injection
1+ mon, 1+ week ago (348+ words) The UK's top cyber agency issued a warning to the public Monday: large language model AI tools may always contain a persistent flaw that allows malicious actors to hijack models and potentially weaponize them against users. When ChatGPT launched in…...
‘Stranger Things’ emerge when OT security is stuck in the past
1+ mon, 3+ week ago (560+ words) Nostalgia for "the good old days" ignores how much progress has been made since then. From the Purdue Enterprise Reference Architecture (PERA) model of the 1990s to more timely guidance from the Cybersecurity and Infrastructure Security Agency (CISA), organizations have a…...
Completed draft of cyber strategy emphasizes imposing costs, industry partnership
2+ mon, 2+ day ago (687+ words) A forthcoming Trump administration cyber strategy will have six pillars, two of which will be deterring malicious hackers and partnering with industry, executive branch officials said Tuesday. Top figures in the administration have been slowly unveiling details of the strategy,…...
FBI calls Akira ‘top five’ ransomware variant out of 130 targeting US businesses
2+ mon, 1+ week ago (542+ words) Federal cyber authorities shared new details Thursday about the Akira ransomware group's techniques, the tools it uses and vulnerabilities it exploits for initial access alongside the release of a joint cybersecurity advisory. Members of the financially motivated group, which initially…...
Cyber information sharing law would get extension under shutdown deal bill
2+ mon, 1+ week ago (267+ words) Legislation to end the federal government shutdown includes a provision that would extend an expired cybersecurity information sharing law through the end of January. Extension of the Cybersecurity Information Sharing Act of 2015 is something industry groups have coveted since even…...