Jason Haddix Joins Flare As Field CISO

April 26, 2024 at 05:22PM Flare, a leader in Threat Exposure Management, welcomes renowned cybersecurity expert Jason Haddix as Field CISO. With a 20-year career and expertise from high-profile roles, Haddix’s strategic advisory role will enrich Flare’s approach to security challenges. His appointment affirms Flare’s commitment to staying ahead in the evolving cyber threat landscape. … Read more

2023: A ‘Good’ Year for OT Cyberattacks

April 24, 2024 at 10:26AM Waterfall Security Solutions and ICS Strive’s “2024 Threat Report” notes a 19% increase in cyberattacks causing physical consequences, with 68 attacks recorded in 2023. Despite the increase, ransomware attacks with physical impact decreased slightly, while hacktivist attacks remained constant. The report’s cautious approach, focusing on public disclosures, likely underestimates the … Read more

Nagomi Security Emerges From Stealth With $30 Million in Funding

April 24, 2024 at 09:15AM Nagomi Security, formerly Vena Security, emerged from stealth mode with a $30 million funding round led by TCV. Its platform optimizes existing cybersecurity tools by prioritizing risks, mapping security solutions to threats, and offering remediation plans. The company has seen rapid growth, garnering over $1 million in annual recurring revenue … Read more

Webinar: Learn Proactive Supply Chain Threat Hunting Techniques

April 23, 2024 at 08:27AM A webinar titled “Supply Chain Under Siege: Unveiling Hidden Threats” is being offered by industry experts to equip attendees with knowledge on identifying and neutralizing supply chain threats in the cybersecurity landscape. The session will cover the anatomy of supply chain threats, proactive threat hunting methodologies, case studies, practical steps … Read more

FBI Director Wray Issues Dire Warning on China’s Cybersecurity Threat

April 19, 2024 at 04:46PM FBI Director Wray warned about the significant threat posed by China-backed hackers to US national and economic security. He highlighted the malicious intentions of Chinese cyber attackers and urged immediate action from both private industry and government to fortify networks and respond to attacks. Additionally, he emphasized the need for … Read more

Miggo Launches Application Detection and Response (ADR) Solution

April 19, 2024 at 04:06PM Miggo, a cybersecurity startup, secured $7.5 million in seed funding for its Application Detection and Response (ADR) platform. It addresses critical blind spots in application security and aims to detect and respond to targeted attacks in real-time, particularly in the era of distributed application architecture. YL Ventures led the funding … Read more

MITRE says state hackers breached its network via Ivanti zero-days

April 19, 2024 at 03:03PM MITRE Corporation confirmed a state-backed hacking group breached its systems in January 2024 using two Ivanti VPN zero-days. The breach affected the NERVE network used for research. MITRE notified affected parties, authorities, and is restoring operational alternatives. The investigation found no impact on core systems and partners’ systems. CISA issued … Read more

Name That Toon: Last Line of Defense

April 16, 2024 at 01:08PM Summarizing the text, “Dark Reading is accepting cybersecurity-related captions for a chance to win a $25 Amazon gift card. Submissions can be sent via email, social media, or through Darkreading’s website. Last month’s winner was Bill Cote, a cybersecurity engineer at Leidos, with the caption ‘Our latest air-gapped user interface … Read more

You Against the World: The Offenders Dilemma

April 16, 2024 at 07:42AM The article emphasizes the need for careful selection of modeling, preparation, and fortification techniques to counter the wide array of tools that foreign attackers possess. It highlights the complexity of the offenders’ dilemma in the realm of security. It seems like this meeting discussed the challenges posed by foreign attackers … Read more

Palo Alto Networks fixes zero-day exploited to backdoor firewalls

April 15, 2024 at 09:04AM Palo Alto Networks is addressing a zero-day vulnerability that has been exploited since March 26th to backdoor PAN-OS firewalls. The flaw affects certain firewalls and can be exploited remotely to gain root code execution. Hotfixes have been released, and additional security measures are available. The active exploitation has been confirmed … Read more