Unexpected Lessons Learned From the CrowdStrike Event

July 25, 2024 at 02:44PM Many organizations are facing global IT issues due to a defect in CrowdStrike’s Falcon sensor content update, impacting operations across sectors. This event highlights the importance of improving cyberattack response capabilities. Lessons include evaluating detection speed, prioritizing recovery, executing business continuity plans effectively, and addressing supply chain risks to enhance … Read more

The CEO Is Next

June 11, 2024 at 10:11AM Government agencies are increasingly seeking to hold corporate CEOs personally liable for inadequate cybersecurity investment. The focus has shifted from security leaders to the CEOs, as executives are now being held accountable for cyber harm and the allocation of resources. This trend towards regulation by enforcement is driven by the … Read more

Dark Reading Confidential: The CISO and the SEC

May 10, 2024 at 11:22AM Transcript Summary: Episode: Dark Reading Confidential, Episode 1 Summary: The episode explores the evolving relationship between CISOs and the Security and Exchange Commission (SEC). Guests discuss the challenges faced by CISOs, the need for greater regulatory understanding of the cybersecurity landscape, and propose solutions such as a remediation safe harbor … Read more

GHC-SCW: Ransomware gang stole health data of 533,000 people

April 9, 2024 at 02:08PM Non-profit healthcare provider GHC-SCW experienced a ransomware attack in January, compromising the personal and medical data of over 500,000 individuals. Despite the breach, the attackers were unable to encrypt the compromised devices. GHC-SCW took preventive security measures and advised affected individuals to monitor their communications for any suspicious activity. The … Read more

Cyberattack on CVS Group veterinary clinics disrupts operations

April 8, 2024 at 10:51AM Veterinary services provider CVS Group suffered a cyberattack disrupting IT services at its UK and international practices. The company responded by isolating and shutting down affected IT systems causing operational disruption. The incident led to the acceleration of migrating infrastructure to the cloud for enhanced security. The cyber-attack has not … Read more

CISO Corner: CIO Convergence, 10 Critical Security Metrics, & Ivanti Fallout

February 16, 2024 at 07:12PM “CISO Corner” offers curated articles for security operations and leadership. It covers topics such as security metrics, convergence of CISO & CIO roles, FCC’s new breach reporting rules, budget trends in the Middle East & Africa, and concerns about Ivanti VPN vulnerabilities. For detailed information, visit Dark Reading’s website. From … Read more

CISA’s Water Sector Guide Puts Incident Response Front & Center

January 24, 2024 at 03:50PM Water and wastewater utilities were given guidance by US Cybersecurity and Infrastructure Security Agency (CISA) to bolster their response to cyberattacks. The guide emphasizes incident response planning, highlights resource constraints for the sector, and examines recent cyber incidents targeting utilities. The water sector faces unique challenges in addressing these cyber … Read more

Nissan is investigating cyberattack and potential data breach

December 6, 2023 at 09:01AM Nissan is investigating a cyberattack on its Australian and New Zealand systems, potentially exposing personal data. Customers have been warned of scam risks. The company’s global response team is assessing the impact. Dealerships remain unaffected, and government cyber agencies are informed. Restoration efforts are underway. Meeting Takeaways: 1. Nissan is … Read more

Japan’s space agency suffers cyber attack, points finger at Active Directory

November 29, 2023 at 02:00AM Japan’s JAXA confirmed a suspected cyber breach, instigating a partial network shutdown for investigation with no sensitive data believed stolen. The agency, previously hacked in 2016 and 2012, also faces setbacks from two failed rocket launches despite past launch successes and recent successful engine tests. Meeting Takeaways: 1. JAXA Cybersecurity … Read more