Mark Sexton, principal consultant, Clearwater

Medical Device Cybersecurity: The Top Challenges

Marianne Kolbasuk McGee • June 24, 2019

Identity and access management continues to be a top medical device cybersecurity challenge, says security expert Mark Sexton of the consultancy Clearwater, who offers a variety a risk mitigation tips.

Governance

House Approves Lifting HHS Ban on Unique Patient IDs

Latest

Cyberwarfare / Nation-state attacks

Chinese Hackers Play Operator With Global Telcos

Mathew J. Schwartz • June 25, 2019

Attackers - likely operating from China - have been surreptitiously hacking into global telecommunications providers' networks to quietly steal metadata and track subscribers - and those with whom they communicate - as part of an ongoing cyber espionage operation, warns security firm Cybereason.

Identity & Access Management

The Evolution of IAM in the Cloud

Geetha Nandikotkur • June 25, 2019

More organizations are deploying single sign-on mechanisms when they move to software-as-a-service applications to help enhance authentication and control access, says Moshe Ferber, chairman of the Israeli chapter of the Cloud Security Alliance.

Cyberwarfare / Nation-state attacks

DHS: Conflict With Iran Could Spur 'Wiper' Attacks

Jeremy Kirk • June 24, 2019

Iran is increasing its malicious cyber activity against the U.S, which could manifest in attacks that render computers unusable, a top U.S. cybersecurity official says. The warning comes after the U.S. reportedly targeted Iranian computer systems in response to the downing of a surveillance drone.

Cybercrime

Alleged AlphaBay Moderator Faces Racketeering Charge

Scott Ferguson • June 24, 2019

An alleged moderator of the AlphaBay underground marketplace has been indicted for facilitating sales on the darknet site before law enforcement shut it down.

3rd Party Risk Management

Developing a Robust Third-Party Risk Management Program

Suparna Goswami • June 24, 2019

Too many organizations around the world take a "bare minimum" approach to third-party risk management, says Jonathan Ehret, founder of the Third Party Risk Association, who offers risk mitigation insights.

3rd Party Risk Management

NASA's Jet Propulsion Lab a Frequent Hack Victim: Audit

Scott Ferguson • June 21, 2019

Hackers have repeatedly stolen valuable data - including launch codes and flight trajectories for spacecraft - from NASA's Jet Propulsion Laboratory in recent years, according to a new inspector general audit, which describes weak security practices.

Cybercrime

Hacked With Words: Email Attack Sophistication Surges

Mathew J. Schwartz • June 21, 2019

The early days of email attacks - so much noise in the form of malware, spam and links - have given way to attacks that often rely on little more than words, and email gateways often struggle to arrest social engineering ploys, says Michael Flouton of Barracuda Networks.

Fraud Management & Cybercrime

Life Beyond Blocking: Adopting Behavior-Based Cybersecurity

Mathew J. Schwartz • June 21, 2019

Many cybersecurity tools are designed to block or allow specific activities based on prescribed rules, but with insider breaches continuing, enterprise protection also requires real-time reaction to actual user behavior, says Carl Leonard of Forcepoint.

Privileged Access Management

Privileged Attack Vectors: Key Defenses

Mathew J. Schwartz • June 21, 2019

Attackers crave insider-level access to IT infrastructure and regularly target insiders - and especially administrators- to steal their credentials, says BeyondTrust's Karl Lankford, who advises organizations to ensure they manage, monitor and audit all privileged access.

Identity & Access Management

Mitigating Insider Threats With IAM

Nick Holland • June 21, 2019

Provisioning and deprovisioning employee credentials is a critical component of mitigating insider threats, says Andrew Clarke of One Identity, who discusses the importance of identity and access management.