With the advent of Artificial Intelligence (AI) the cybersecurity playing field has changed. Our data reveals that leaders face a dual mandate: fortifying defences against internal vulnerabilities while combating external AI-driven threats orchestrated by malicious actors. Download Cobalt's State of Pentesting Report 2024 and learn how your competitors are preparing for this new normal.
This week on Cyber Talent Insights, a three-part special series podcast, we provide guidance for individuals early in their career or considering a career change into cybersecurity. We’ll explore how to discover your niche in cybersecurity, how to stand out in this competitive market, how you can align personal interests with career goals, and the role certifications play in your career journey. Listen now.
President Biden on Saturday signed into law an expanded version of Section 702 of the Foreign Intelligence Surveillance Act (FISA), CBS News reports. Attorney General Merrick Garland stated, "This reauthorization of Section 702 gives the United States the authority to continue to collect foreign intelligence information about non-U.S. persons located outside the United States, while at the same time codifying important reforms the Justice Department has adopted to ensure the protection of Americans’ privacy and civil liberties."
The bill has been criticized by privacy advocates for its broad scope and invasive powers. Senator Ron Wyden (Democrat of Oregon) stated, "Searches have gone after American protesters, political campaign donors, even people who simply reported crimes to the FBI. The abuses have been extensive and well documented." The Guardian notes that the modified version of Section 702 allows the government to compel any service provider with access to communications equipment to hand over requested data.
Learn how to review your Active Directory and uncover vulnerabilities such as compromised passwords on inactive accounts, weak passwords on overprivileged accounts, or a widespread issue of poor access security throughout your organization. We also provide a complimentary tool to assist you in getting started.
Download this comprehensive guide to learn how you can audit your Active Directory for password-related security risks and start remediation on vulnerabilities.
The MITRE Corporation disclosed on Friday that one of its research and prototyping networks was breached by a suspected nation-state threat actor, BleepingComputer reports. The company explained in a blog post, "Starting in January 2024, a threat actor performed reconnaissance of our networks, exploited one of our Virtual Private Networks (VPNs) through two Ivanti Connect Secure zero-day vulnerabilities, and skirted past our multi-factor authentication using session hijacking. From there, they moved laterally and dug deep into our network’s VMware infrastructure using a compromised administrator account. They employed a combination of sophisticated backdoors and webshells to maintain persistence and harvest credentials."
Elevate your knowledge and skills with N2K's practice tests, designed to skill-check and help you conquer certifications like a pro. Whether you’re new IT or cyber, or ready to hone in on your technical or managerial skills, there's a certification to help. Check out N2K's catalog of practice tests and use promo code “NETWORK” to save 15% through 4/30/2024.
File transfer server CrushFTP has received a patch for an actively exploited vulnerability that allows users to escape the virtual file system (VFS) and access system files, SecurityWeek reports. CrushFTP said in an advisory, "Please take immediate action to patch ASAP. A vulnerability was reported today (April 19, 2024), and we patched it immediately. v10 version 10.71 is patched. v11 version 11.1.0 is patched. This vulnerability exists in the wild." CrowdStrike said in a Reddit post that the flaw is "being used in the wild in a targeted fashion."
Cybercrime knows no bounds, and a united front is our strongest defense. At RSA Conference™ 2024, May 6 – 9, we unite in San Francisco as a cybersecurity community, fostering learning, networking, idea exchange, and exploration of cutting-edge innovations. Join us as we face the future of cybersecurity head on. Learn more and register.
Today's issue includes events affecting China, Germany, Russia, Ukraine, and the United States.
Critical Forminator plugin flaw impacts over 300k WordPress sites (BleepingComputer) The Forminator WordPress plugin used in over 500,000 sites is vulnerable to a flaw that allows malicious actors to perform unrestricted file uploads to the server.
Presumably Chinese industrial spies stole VW data on e-drive technology (heise online) Between 2010 and 2015, suspected Chinese cyber spies captured around 19,000 files on e-mobility and drive technologies from the Volkswagen Group.
Ukrainian soldiers’ apps increasingly targeted for spying, cyber agency warns (The Record) CERT-UA is attributing the surge to a group tracked as UAC-0184, which was also recently spotted targeting an unnamed Ukrainian entity in Finland.
GitHub comments abused to push malware via Microsoft repo URLs (BleepingComputer) A GitHub flaw, or possibly a design decision, is being abused by threat actors to distribute malware using URLs associated with a Microsoft repository, making the files appear trustworthy.
CrushFTP File Transfer Vulnerability Lets Attackers Download System Fi (Infosecurity Magazine) CrushFTP is urging customers to download v11 of its file transfer platform, with attackers actively exploiting a vulnerability that allows them to download system files
Ransomware payments drop to record low of 28% in Q1 2024 (BleepingComputer) Ransomware actors have had a rough start this year, as stats from cybersecurity firm Coveware show that the trend of victims declining to pay the cybercriminals continues and has now reached a new record low of 28%.
Warrantless spying powers extended to 2026 with Biden’s signature (The Record) The president signed legislation that imposes modest changes on Section 702 of the Foreign Intelligence Surveillance Act.
For a complete running list of events, please visit the Event Tracker.
2024 State of the Space Industrial Base (Albuquerque, New Mexico, USA, May 29 - 31, 2024) Don’t miss out! Mark your calendars and join us for a dynamic hybrid workshop that is a “must attend” space industry event. Participants will learn how the strength of the industrial base has advanced in the last year, and they will contribute to progressing solutions that support the Space industrial base, increase prosperity and ensure national security. Please sign up to learn more about the 2024 Space Industrial Conference and SSIB Workshop! Stay tuned for more details about the 2024 Space Industrial Conference and SSIB Hybrid Workshop!
Spring 2024 CISSP Study Group presented by ISSA Central MD (Columbia, or virtual, Maryland, USA, Feb 20 - May 1, 2024) Our Study Group fosters a learning environment to better absorb and understand the material. This is much better than the alternative of cram it in and regurgitate it on a test immediately following. Our approach simply makes the information more useful and easier to interpret! You can attend each session in-person in Columbia, MD, or attend virtually on line.
SANS Pen Test Austin 2024 (Austin (and virtual), Texas, USA, Apr 22 - 27, 2024) At SANS Pen Test Austin 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
Insider Threat Program Development, Management & Optimization Live Web Based Training Course (Virtual, Apr 23 - 24, 2024) This highly sought after and very comprehensive training course, will ensure that the Insider Threat Program (ITP) Manager and other key stakeholders that support the ITP (Insider Threat Analyst, FSO, CSO, CISO, Human Resources, CIO - IT, Network Security, Counterintelligence Investigators, Behavioral Science Professionals, Legal Etc.), have the Core / Advanced Knowledge, Blueprint, Resources needed for developing, managing or optimizing an ITP. Students will be provided with an ITP Management Toolkit that provides an abundance of educational resources, templates and checklists for ITP development, management and optimization. All materials will be provided to the student in electronic format (Via Download) before the training. Our student satisfaction levels are in the exceptional range. Over 900+ individuals have attended this training course and received ITP Manager Certificates.
SANS Baltimore Spring 2024 (Baltimore (and virtual), Maryland, USA, Apr 28 - May 3, 2024) At SANS Baltimore Spring 2024, choose from 41 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC certifications!
World’s Top 50 Innovators 2024 (London, England, UK, May 8 - 10, 2024) We are thrilled to invite you to join us at one of the most prestigious events in the tech calendar, the World’s Top 50 Innovators 2024! Get ready to embark on an incredible journey of inspiration, creativity, and breakthrough technologies that will shape the future. Innovation is the driving force behind progress, and once again it’s time to celebrate the companies that are pushing the boundaries of what’s possible. Come and join us to learn what’s on the horizon, understand the bigger picture, and celebrate world-firsts and sensational achievements in the high-tech sectors. The format will be a series of Codex Talks, each of which is a concise presentation, lasting 15 minutes (or less), in which the speaker addresses a challenging question faced by their technology or industry today, and ends with a bold prediction for the future.
