Recent Security News

  • Laptop Maker Framework Says Customer Data Stolen in Third-Party Breach

    January 12, 2024 at 10:19AM Laptop maker Framework suffered a data breach when an employee at its external accounting partner, Keating Consulting, fell victim to a phishing attack. The compromised data includes personal information of impacted individuals. Framework is urging users to be cautious of phishing attempts impersonating the company and has taken steps to…

    Read More

  • Your Cybersecurity Budget Is a Horse’s Rear End

    January 12, 2024 at 10:14AM The design of the space shuttle and cybersecurity budgets are compared to the size of a horse’s hindquarters, suggesting that budget limitations are based on past budgets and may not adequately address current challenges. The article encourages a realistic assessment of cybersecurity programs and consideration of reengineering budget processes. Based…

    Read More

  • In Other News: WEF’s Unsurprising Cybersecurity Findings, KyberSlash Cryptography Flaw

    January 12, 2024 at 09:46AM A weekly cybersecurity roundup by SecurityWeek provides a concise compilation of noteworthy stories often overlooked. This week’s round-up includes the WEF’s cybersecurity report, a kyber vulnerability, a self-spreading botnet, Iranian APT attacking Albania, North Korean crypto theft, a new cybersecurity institute, disclosures of vulnerabilities, reports from Cloudflare, and patches for…

    Read More

  • Secure network operations for hybrid working

    January 12, 2024 at 09:44AM Webinar on remote working and network security. Remote work is here to stay, but security is crucial. Zscaler offers solutions for secure app access, traffic elimination, issue detection, and cost reduction. Join the webinar on 16 January at 6pm GMT/1pm ET/10am PT to learn more. Sponsored by Zscaler. Register to…

    Read More

  • Nation-State Actors Weaponize Ivanti VPN Zero-Days, Deploying 5 Malware Families

    January 12, 2024 at 09:18AM Suspected nation-state actors exploited two zero-day vulnerabilities in Ivanti Connect Secure VPN, deploying multiple malware families to gain backdoor access to devices. The attacks, attributed to a Chinese espionage actor, targeted less than 10 customers and are expected to be highly-targeted. Patches are anticipated on January 22. Mandiant identified the…

    Read More