CompTIA Supports Department of Defense Efforts to Strengthen Cyber Knowledge and Skills

April 23, 2024 at 04:59PM CompTIA announced that eight of its IT certifications are now part of the U.S. Department of Defense’s Cyber Workforce Qualification Program, aiming to develop a diverse workforce to safeguard the nation’s interests. These certifications cover 31 different roles within the cyber workforce, supporting a targeted and role-based approach to qualifying … Read more

Preparing for Cyber Warfare: 6 Key Lessons From Ukraine

April 17, 2024 at 10:14AM The conflict in Ukraine enters its third year, with cyber operations emerging as a pivotal battleground. Recent cyberattacks have targeted state agencies and financial institutions, underscoring the severity of the digital onslaught. Organizations must prioritize disaster recovery preparedness, personnel safety, backup strategies, cybersecurity training, defense mechanisms, incident response planning, and … Read more

Home Depot Hammered by Supply Chain Data Breach

April 8, 2024 at 05:16PM Home Depot confirmed employee data compromise via a third-party software vendor, with a “small sample” of employees’ names, corporate IDs, and email addresses exposed. The incident underlines the importance of choosing SaaS vendors with robust cybersecurity measures. Experts recommend testing vendors’ workflows with non-production data and conducting regular security best … Read more

US Health Dept warns hospitals of hackers targeting IT help desks

April 6, 2024 at 12:04PM The U.S. Department of Health and Human Services warns of hackers using social engineering to target IT help desks in the Healthcare and Public Health sector. They gain access by enrolling their own MFA devices and using AI voice cloning. Similar tactics are used by the Scattered Spider threat group. … Read more

iSoon’s Secret APT Status Exposes China’s Foreign Hacking Machinations

February 22, 2024 at 04:44PM Leaked documents expose collaboration between the Chinese government and the private sector firm iSoon in conducting cyber espionage on foreign entities, domestic dissidents, and ethnic minorities. The company’s operations, target list, rates charged, and use of known malware have been revealed. The documents also shed light on internal dynamics and … Read more

Google-Backed Israeli University Launches Cyber-Analyst Course

January 23, 2024 at 11:25AM Reichman Tech School, in partnership with PwC Next, has initiated a cyber-analyst training program to address the surge in cyberattacks on Israel. The program equips participants with information systems, operating systems, network expertise, and international standards. With tailored classes, CEO Talya Gazit underscores the importance of preparing the future workforce … Read more

African Organizations Aim to Fix Cybersecurity in 2024

December 26, 2023 at 07:06AM African nations are striving to bolster their cyber capabilities amid growing cybersecurity threats. In Nigeria, initiatives like the Cyber Hub and partnerships with the US aim to train a new generation of cybersecurity professionals and develop indigenous solutions. However, challenges persist, including a lack of specialized training programs and skilled … Read more

Are We Ready to Give Up on Security Awareness Training?

December 19, 2023 at 07:15AM Organizations are prioritizing security awareness training despite its low effectiveness. Employees express the need for practical experiences and time allocation for training. Moonlock’s Cybersecuritoons offers short-form cybersecurity content to fit into busy schedules. Feedback transforms and shapes the delivery of training, promoting a security culture and active participation. This evolving … Read more

Safeguarding Our Children’s Digital Future: A Call to Action

December 14, 2023 at 10:15AM Schools are increasingly targeted by cybercriminals, leading to grave consequences for students and the education sector. The reasons behind this vulnerability include aging IT infrastructure, inadequate cybersecurity expertise, and the increased use of technology by students without proper cybersecurity education. Urgent solutions include improving teacher salaries, reforming credit monitoring, and … Read more

Locking down Industrial Control Systems

November 30, 2023 at 03:53AM Global industrial automation spending hit $172.26 billion in 2022, with expected annual growth of 10.5% through 2030. As ICS deployments surge, security risks follow. SANS offers comprehensive ICS security training and resources to bolster defenses against these emerging threats, as per CISA’s call for collective cyber-defense action. Meeting Takeaways: 1. … Read more