AI research in the UK is vulnerable to nation-state hackers seeking to steal sensitive data and insights, a new report by the Alan Turing Institute has warned. The Institute urged the government and academia to develop a long-term strategy to… Read More "UK AI Research Under Threat From Nation-State Hackers"
Mar 10, 2025Ravie LakshmananCybersecurity / Newsletter Cyber threats today don’t just evolve—they mutate rapidly, testing the resilience of everything from global financial systems to critical infrastructure. As cybersecurity confronts new battlegrounds—ranging from nation-state espionage and ransomware to manipulated AI chatbots—the… Read More "New Attacks, Old Tricks, Bigger Impact"
Dabei gefährden toxische Sicherheitsentscheider jedoch nicht nur den Erfolg ihres Teams und treiben die Mitarbeiterfluktuation. Sie setzen durch ihr Verhalten auch ihre Organisationen erhöhten Risiken aus – argumentiert zumindest Forrester-Analystin Budge: “Wenn das Team mit gegenseitigen Schuldzuweisungen und internen Intrigen… Read More "Was toxische CISOs anrichten | CSO Online"
Efforts to tackle unauthorized, legacy copies of pen testing tool Cobalt Strike have gathered pace over the past two years, leading to an 80% reduction of the software observed in the wild, according to Fortra. The Cobalt Strike developer provided… Read More "Number of Unauthorized Cobalt Strike Copies Plummets 80%"
Deneen DeFiore, VP and CISO, United Airlines Deneen DeFiore / United Airlines DeFiore and CIO Jason Birnbaum got a head start on their relationship dynamics working at General Electric, where they didn’t interact as colleagues, but still gained exposure to… Read More "CISOs and CIOs forge vital partnerships for business success"
Mar 10, 2025Ravie LakshmananThreat Intelligence / Cybercrime A new mass malware campaign is infecting users with a cryptocurrency miner named SilentCryptoMiner by masquerading it as a tool designed to circumvent internet blocks and restrictions around online services. Russian cybersecurity company… Read More "SilentCryptoMiner Infects 2,000 Russian Users via Fake VPN and DPI Bypass Tools"
Cyberattacks are all too common in business today. If your own company is affected, quick but prudent action is required — and the C-suite suddenly must make decisions in areas they may otherwise be unfamiliar with. If executives are unprepared… Read More "Suite 404: Training executives for cyberattack response in a playful way"
In the early morning of July 19, a software update to CrowdStrike’s Falcon sensor started to cause one of the most extensive IT outages in history, affecting several industry sectors, including financial services, healthcare, transportation, and others. According to CrowdStrike,… Read More "CrowdStrike Outage: What Happened and How to Limit Future Risk"
.png?w=1140&resize=1140,855&ssl=1 "Effective Risk Management: The COSO ERM Framework")
Enterprise risk management (ERM) frameworks allow organizations to identify, assess, manage, and monitor risks across all levels of an organization. One of the most well-known approaches to ERM is the COSO ERM framework published by the Committee of Sponsoring Organizations… Read More "Effective Risk Management: The COSO ERM Framework"
%20(1).png?w=1140&resize=1140,855&ssl=1 "How to Prepare for a Cyber Essentials Plus Audit")
Cyber Essentials is a UK government-supported certification scheme that helps organizations protect themselves against cyber threats by providing a framework of basic security controls for safeguarding systems. Cyber Essentials Plus builds on this foundation by requiring a more in-depth, hands-on… Read More "How to Prepare for a Cyber Essentials Plus Audit"
