Recent Security News

  • U.S. Charges Iranian Hacker, Offers $10 Million Reward for Capture

    March 2, 2024 at 12:18AM The U.S. Department of Justice unsealed an indictment against an Iranian national, Alireza Shafie Nasab, for his alleged involvement in a cyber campaign targeting U.S. entities. The campaign involved spear-phishing and hacking techniques, leading to more than 200,000 victim devices being infected. Nasab faces significant prison time if convicted and…

    Read More

  • CISO Corner: Operationalizing NIST CSF 2.0; AI Models Run Amok

    March 1, 2024 at 05:44PM CISO Corner provides a weekly digest with cybersecurity articles for security operations readers and leaders. The current issue covers topics such as NIST Cybersecurity Framework 2.0, quantum-resistant encryption, managing AI models, SEC penalties for data breach disclosure, biometric regulation challenges, Iranian hacking group targeting aerospace and defense firms, microprocessor security…

    Read More

  • Air National Guardsman Teixeira to admit he was Pentagon files leaker

    March 1, 2024 at 05:11PM Jack Teixeira, the Air National Guardsman accused of leaking classified Pentagon documents, is expected to plead guilty in a US court. Teixeira allegedly shared the files and photos on social media to impress fellow gamers. An Air Force report blames Teixeira’s chain of command for letting the data leak happen.…

    Read More

  • Judge orders NSO to cough up Pegasus super-spyware source code

    March 1, 2024 at 04:43PM Israel-based NSO Group has been ordered by a California federal judge to share the source code for its Pegasus spyware with Meta’s WhatsApp due to a 2019 lawsuit for alleged spying on 1,400 users. The ruling covers the period from April 2018 to May 2020 and represents a legal setback…

    Read More

  • It’s 10PM, Do You Know Where Your AI Models are Tonight?

    March 1, 2024 at 04:08PM The explosive growth in AI will immensely complicate software supply chain security. AI and ML models, integral to AI applications, contribute to the complexity. Developers must understand and secure these models, but existing security tools are ill-equipped for this task. Consequently, a new approach called MLSecOps is needed to address…

    Read More