US, Allies Release Guidance on Securing OT Environments
October 2, 2024. New guidance from government agencies in the US and allied countries provides organizations with details on how to design, implement, and manage safe and secure operational technology (OT) environments. OT is deeply integrated into critical infrastructure organizations’ complex environments, and business decisions such as ...
Ransomware Hits Critical Infrastructure Hard, Costs Adding Up
Oct 4, 2024 · ICS/OT. Ransomware Hits Critical Infrastructure Hard, Costs Adding Up. Report finds most organizations have suffered financial impact of $500,000 or more from cyberattacks on cyber-physical systems over past year. The financial impact of a cyberattack targeting a cyber-physical system (CPS) can reach up to $1 million, as affected organizations ...
Harmonic Raises $17.5M to Defend Against AI Data Harvesting
October 2, 2024. Harmonic, an early stage startup working on software to mitigate against unregulated AI apps harvesting company data at scale, has attracted $17.5 million in new funding as venture capital investors double down on AI security companies. The British company said the Series A raise was provided by Next47, a venture investment ...
Kaspersky’s US Exit Sparks Outrage as UltraAV Takes Over Systems ...
September 24, 2024. For the past several days, Windows users in the US have been storming the internet with concerns over the silent, forced transition from Kaspersky’s endpoint security products to UltraAV, seeking advice on how to remove the new antivirus from their systems. The switch was an expected one, after the US banned Kaspersky’s ...
Third Recent Ivanti Vulnerability Exploited in the Wild
CVE-2024-7593 is the third Ivanti product vulnerability patched in recent months that has been exploited in the wild. By. Eduard Kovacs. September 25, 2024. A vulnerability affecting Ivanti’s Virtual Traffic Manager application delivery controller is being exploited in the wild. This is the third flaw for which Ivanti customers have received ...
CISO Salary Surge: Fewer Job Changes, Bigger Paychecks for …
Oct 3, 2024 · Experience is also important. “Two-thirds of CISOs with top-quartile compensation have at least eight years’ tenure, 69% have held the top security job at multiple companies and 61% have cross-industry experience,” notes the report.. “Our CISO compensation analysis found tenured CISOs (with eight to 15 years of CISO experience) who held CISO or senior security …
Millions of Kia Cars Were Vulnerable to Remote Hacking
September 27, 2024. Vulnerabilities in a website dedicated to Kia vehicle owners could have allowed attackers to remotely control millions of cars, security researcher Sam Curry says. The issues, the researcher explains, could have allowed attackers to gain control of key vehicle functions in roughly 30 seconds, using only the car’s license ...
Jenkins Patches High-Impact Vulnerabilities in Server and Plugins
Ionut Arghire. October 3, 2024. Open source CI/CD automation tool Jenkins has released patches for multiple high- and medium-severity vulnerabilities in the server and several plugins. Patches were rolled out for two medium-severity flaws in Jenkins, one leading to the exposure of multi-line secrets and another to creation restriction bypass.
Microsoft Confirms Exploited Zero-Day in Windows Management …
Ryan Naraine. October 8, 2024. Microsoft issued an urgent warning on Tuesday about an actively exploited code execution vulnerability in a Windows component used for system configuration and monitoring. The zero-day, tagged as CVE-2024-43572, is documented as a remote code execution issue in Microsoft Management Console (MMC), an oft-targeted ...
Critical Nvidia Security Flaw Exposes Cloud AI Systems to Host …
September 26, 2024. A critical vulnerability in Nvidia’s Container Toolkit, widely used across cloud environments and AI workloads, can be exploited to escape containers and take control of the underlying host system. That’s the stark warning from researchers at Wiz after discovering a TOCTOU (Time-of-check Time-of-Use) vulnerability that ...