Rockwell Automation Hires Stephen Ford as Chief Information Security Officer

March 13, 2024 at 12:45PM Stephen Ford has joined Rockwell Automation as VP and Chief Information Security Officer. With prior experience at McKesson Corporation, HP, and academic institutions, Ford holds a bachelor’s degree in computer science, an MBA from Prairie View A&M University, and a master’s degree from Harvard University. He will report to Chris … Read more

Demystifying a Common Cybersecurity Myth

March 13, 2024 at 12:21PM OPSWAT CEO Benny Czarny analyzes the challenges of securing file upload cybersecurity, emphasizing the limitations of three common tools used alone: anti-malware scanning, web application firewalls, and sandboxing. OPSWAT’s MetaDefender Platform offers a comprehensive defense-in-depth strategy combining multiple antivirus engines, deep content disarm and reconstruction, proactive data loss prevention, and … Read more

Why You Need to Know Your AI’s Ancestry

March 13, 2024 at 10:33AM AI is rapidly transforming daily life but can be used for good or harm. Data quality is crucial as bad data leads to cybersecurity vulnerabilities and misinformation. Secure-by-design and curated data training are proposed solutions. The urgency to address AI security is emphasized, as it impacts critical systems and national … Read more

PixPirate Android Banking Trojan Using New Evasion Tactic to Target Brazilian Users

March 13, 2024 at 10:09AM PixPirate Android banking trojan utilizes new method to elude detection and steal sensitive data in Brazil. The malware hides its icon from the victim’s device, making the operations inconspicuous. Employing SMS and WhatsApp, it uses a downloader app to install and execute its main fraudulent activities, posing a significant threat … Read more

ChatGPT Plugin Vulnerabilities Exposed Data, Accounts

March 13, 2024 at 09:27AM Salt Security analyzed ChatGPT plugins and uncovered vulnerabilities that could be exploited to access sensitive data and take over accounts on third-party websites. These vulnerabilities affected the OAuth authentication process, potentially leading to unauthorized data access and account takeovers. Vendors were promptly notified and patches were implemented. Additionally, future GPTs … Read more

Nozomi Networks Raises $100 Million to Expand Industrial Cybersecurity Business

March 13, 2024 at 09:27AM Nozomi Networks, an industrial and IoT cybersecurity firm, secured $100 million in a Series E funding round, with total funds now exceeding $250 million. Mitsubishi Electric and Schneider Electric joined as investors. The funding will assist in scaling product development and supporting global go-to-market efforts. Nozomi has emphasized the potential … Read more

Stanford University Data Breach Impacts 27,000 Individuals

March 13, 2024 at 08:33AM Stanford University notified 27,000 individuals of a ransomware attack on its Department of Public Safety. The attack, discovered in September 2023, occurred in May, and the Akira ransomware group claimed responsibility for stealing personal information. Stanford is providing identity theft protection services and has no evidence of misuse of the … Read more

US Seizes $1.4 Million in Cryptocurrency From Tech Scammers

March 13, 2024 at 08:33AM US law enforcement seized $1.4 million worth of Tether tokens in a tech support scam targeting elderly victims. Perpetrators posed as tech support employees and bank representatives to fraudulently obtain victims’ funds, totaling over $12.5 billion in reported losses for 2023. The FBI identified and froze the fraudsters’ accounts, with … Read more

Stanford University failed to detect ransomware intruders for 4 months

March 13, 2024 at 08:08AM Stanford University confirmed a ransomware incident, admitting to detecting it four months after the breach. The attack targeting the Department of Public Safety exposed 27,000 individuals’ information. The university notified affected individuals and offered credit monitoring and security enhancement. Perpetrators, Akira, demand, but Stanford refused to pay. Akira has targeted … Read more

LockBit ransomware affiliate gets four years in jail, to pay $860k

March 13, 2024 at 07:46AM Russian-Canadian cybercriminal Mikhail Vasiliev sentenced to 4 years in prison by Ontario court for involvement in LockBit ransomware gang, with restitution of $860,000 to Canadian victims and potential extradition to the U.S. LockBit, a ransomware-as-a-service operation, has faced disruption by law enforcement, but despite relaunching, analysis suggests its activities are … Read more