Should CIOs and CISOs Wear One Hat?

Sandhya Michu • September 19, 2024

As cloud computing, DevOps and automation continue to evolve, the lines between IT functions are fading, making security integral to these processes. Hiren Dave, CIO and CISO at Essen Health Care, shares how combining the roles of CIO and CISO improves risk management and communication.

Cyber Insurance

Eliminating the Need for Stored Credentials in Healthcare

Latest

Attack Surface Management

Picus Security Receives $45M to Enhance Exposure Management

Michael Novinson • September 19, 2024

Picus Security has received $45 million in funding led by Riverwood Capital. The investment will accelerate product development in exposure management, including attack surface management and automated pen testing. The company plans to expand further in the Americas, targeting key growth areas.

Critical Infrastructure Security

Raptor Train Botnet Infects 260,000 Devices Globally

Prajeet Nair • September 19, 2024

A Chinese state-sponsored botnet called Raptor Train has infected more than 260,000 IoT and office network devices to target critical infrastructure globally. The hackers used zero-days and known vulnerabilities to compromise more than 20 different types of devices to expand their botnet.

Finance & Banking

Are Pure-Play Threat Intel Vendors a Vanishing Breed?

Michael Novinson • September 19, 2024

Despite high-profile acquisitions in the space, pure-play threat intelligence firms still have a future in the marketplace, but they need to offer specialized intelligence capabilities that cyber defense teams can't find elsewhere, said Forrester analyst Brian Wrozek.

Cyberwarfare / Nation-State Attacks

Microsoft: Russian Cyber Proxies Targeting Harris Campaign

Chris Riotta • September 19, 2024

Microsoft warned the Kremlin is targeting the 2024 presidential election campaign of Vice President Kamala Harris with its wide-ranging election interference operations. Russian groups likely aligned with the Kremlin have shifted their focus to the Harris campaign in recent months.

Cybercrime

Breach Roundup: Cyberwar Is Too Hot for Insurers

Anviksha More • September 19, 2024

Munich Re said it can't insure cyberwar, it was Rhysida that hit the Seattle airport, Meta banned RT, Ivanti disclosed a flaw, hackers exploited construction software, AT&T settled with FCC, Transport of London is checking users, web servers pose big risk, and police disrupted a phishing network.

Governance & Risk Management

US FTC Reveals Vast Surveillance by Social Media, Streaming

Chris Riotta • September 19, 2024

The U.S. Federal Trade Commission on Thursday published a report detailing how the largest social media and streaming services surveil both users and nonusers across the web while collecting vast troves of data, pointing to significant privacy concerns for children and teens.

Endpoint Security

What's Next for Secure Communication After Exploding Pagers?

Mathew J. Schwartz • September 19, 2024

Secure communications in an age of network insecurity has focused mostly on encryption and fears of surveillance tracking. But as this week revealed to the dismay of terrorists and criminals alike, no OpSec measure is bulletproof to the effects of a corrupted supply chain.

Artificial Intelligence & Machine Learning

Beware the Great AI Bubble Popping

Rashmi Ramesh • September 18, 2024

If the bubble isn't popping already, it'll pop soon, say many investors and close observers of the AI industry. If past bubbles are a benchmark, the burst will filter out companies with no solid business models and pave the way for more sustainable growth for the industry in the long term.

Governance & Risk Management

Swiss Post to Strengthen Cybersecurity With Open Systems Buy

Michael Novinson • September 18, 2024

Swiss Post has signed an agreement to acquire Open Systems, a cybersecurity leader specializing in secure access service edge. The deal, expected to close by late 2024, will expand Swiss Post's offerings for secure digital communications for public and private organizations across Switzerland.

Artificial Intelligence & Machine Learning

California Enacts Laws to Combat Election, Media Deepfakes

Rashmi Ramesh • September 18, 2024

California enacted regulation to crack down on the misuse of artificial intelligence as Gov. Gavin Newsom on Tuesday signed five bills focused on curbing the impact of deepfakes. The Golden State has been on the national forefront of tech regulation.

Cybercrime

Australian Police Arrest Alleged Head of Ghost Encrypted App

Akshaya Asokan • September 18, 2024

An international law enforcement operation dismantled the Ghost encrypted messaging service in a takedown that resulted in the arrest of 51 suspects across three continents including alleged members of the Italian Mafia and motorcycle gangs. Australian police arrested Ghost's alleged administrator.

Artificial Intelligence & Machine Learning

Intezer's $33M Series C Funding to Fuel AI, Customer Support

Michael Novinson • September 18, 2024

Norwest Venture Partners led a $33 million Series C round to accelerate Intezer's product development, strengthen AI models and broaden security alert coverage. The funding will enable the New York-based company to offer more support for cloud security while growing its customer success teams.