Ransomware Has Outsized Impact on Gas, Energy & Utility Firms

July 19, 2024 at 09:06AM Ransomware attacks on critical infrastructure sectors are escalating, with 67% of operators in the oil, energy, and utility sectors affected in 2023. Attacks on these sectors impact an average of 62% of systems and exploit software vulnerabilities as the primary attack vector. Recovery costs continue to rise, emphasizing the urgency … Read more

Streamlining IT Security Compliance Using the Wazuh FIM Capability

May 21, 2024 at 08:06AM File Integrity Monitoring (FIM) is crucial for IT security control, ensuring the integrity of files and system configurations. Compliance with cybersecurity standards is essential for businesses, and Wazuh offers an open source FIM capability, enabling real-time monitoring and detection of unauthorized file changes, aiding in meeting regulatory compliance and enhancing … Read more

UK Military Data Breach a Reminder of Third-Party Risk in Defense Sector

May 8, 2024 at 07:17PM The breach of data on over 225,000 UK military personnel from a payroll contractor highlights the security risks posed by external contractors to defense entities. This incident, the second in a year, underscores the vulnerable underbelly of defense supply chains. Calls for mandatory minimum cybersecurity standards for defense and critical … Read more

Shouldn’t Teams, Zoom, Slack all interoperate securely for the Feds? Wyden is asking

April 24, 2024 at 03:51PM Senator Ron Wyden proposed the Secure and Interoperable Government Collaboration Technology Act, aiming to ensure collaboration software used by federal agencies work together with end-to-end encryption. The legislation involves defining technology standards, mandating interoperability, and emphasizing cybersecurity. Despite potential opposition, the bill has received support from digital rights and privacy … Read more

Lurie Children’s Hospital back to pen and paper after cyberattack

February 5, 2024 at 09:50AM Cybercriminals have targeted Lurie Children’s Hospital in Chicago, causing significant operational disruption. The hospital’s network systems are offline, affecting email, phone, and internet services. Young patients have missed appointments, and some elective surgeries have been delayed. The hospital is open for emergencies and is working to minimize disruptions. Attribution for … Read more

Saudi Arabia Boosts Railway Cybersecurity

January 26, 2024 at 10:22AM SAR partners with “sirar by stc” to enhance cybersecurity for its transit network. The initiative aims to safeguard the extensive railway network in Saudi Arabia. The railway industry faces challenges in integrating modern tech while ensuring cybersecurity. Recorded breaches have led to service disruptions and data leaks in various railway … Read more

US government tells hospitals: Meet security standards or no federal dollars for you

January 10, 2024 at 03:37PM The White House is expected to propose rules requiring US hospitals to meet cybersecurity standards before receiving federal funding. This move aims to combat ransomware attacks on healthcare facilities. The rules, set to take effect this year, will link hospital IT security with funding. Stakeholders’ feedback will be valued, with … Read more