Warning: Over 2,000 Palo Alto Networks Devices Hacked in Ongoing Attack Campaign

November 21, 2024 at 11:57AM Approximately 2,000 Palo Alto Networks devices have reportedly been compromised due to recently disclosed security vulnerabilities. The flaws, CVE-2024-0012 and CVE-2024-9474, could enable malicious actions. Palo Alto warns that cyber attacks exploiting these weaknesses may rise and urges users to implement security measures and apply updates promptly. ### Meeting Takeaways … Read more

Wiz Buys Dazz for $450 Million

November 21, 2024 at 11:20AM SecurityWeek offers comprehensive cybersecurity news, covering various topics such as malware, ransomware, data breaches, and threat intelligence. It also features virtual events, webcasts, and an ICS Cybersecurity Conference. Subscribers can sign up for daily briefings to stay updated on the latest developments in the cybersecurity landscape. ### Meeting Takeaways 1. … Read more

ICS Security: 145,000 Systems Exposed to Web, Many Industrial Firms Hit by Attacks

November 21, 2024 at 08:37AM Censys reports over 145,000 internet-exposed industrial control systems (ICS) across 175 countries, with 38% in North America. The U.S. has 48,000 such systems. Many are vulnerable human-machine interfaces, particularly in water and agriculture sectors. Additionally, a Kaspersky survey reveals 90% of UK industrial firms faced cyberattacks, highlighting significant security concerns. … Read more

Mexico’s President Says Government Is Investigating Reported Ransomware Hack of Legal Affairs Office

November 21, 2024 at 08:22AM Mexico’s president announced that the government is probing a reported ransomware attack on the country’s legal affairs office, highlighting the seriousness of cybersecurity threats. **Meeting Takeaways:** 1. **Investigation Initiated**: Mexico’s president has announced that the government is actively investigating a ransomware hack that affected the country’s legal affairs office. 2. … Read more

Financial Software Firm Finastra Investigating Data Breach

November 21, 2024 at 07:51AM SecurityWeek offers comprehensive cybersecurity news, webcasts, and virtual events covering various topics, including malware, cybercrime, ransomware, and data protection. Subscribers can receive daily updates via the email briefing, ensuring they stay informed about the latest threats and expert insights in the cybersecurity landscape. ### Meeting Notes Takeaways 1. **SecurityWeek Overview**: … Read more

Now Online Safety Act is law, UK has ‘priorities’ – but still won’t explain ‘spy clause’

November 21, 2024 at 05:46AM The UK government has outlined plans under the Online Safety Act to enhance online safety by mandating platform providers to prevent online harms. It emphasizes protecting children and promoting collaboration with Ofcom. However, it lacks details on the controversial Section 122 regarding law enforcement access to private communications. ### Meeting … Read more

5 Scattered Spider Gang Members Indicted in Multi-Million Dollar Cybercrime Scheme

November 21, 2024 at 05:00AM Five alleged members of the Scattered Spider cybercrime group have been indicted for targeting U.S. companies through social engineering, stealing credentials to access crypto accounts and personal data worth millions. They face multiple charges, including wire fraud and identity theft, with potential sentences of up to 27 years. ### Meeting … Read more

US Gathers Allies to Talk AI Safety as Trump’s Vow to Undo Biden’s AI Policy Overshadows Their Work

November 20, 2024 at 10:07PM SecurityWeek provides a range of cybersecurity news and resources, including webcasts, virtual events, and conferences focused on themes like malware, data breaches, ransomware, and more. They offer a daily briefing newsletter for updates and insights, and a platform for connecting key cybersecurity professionals and discussions. ### Meeting Takeaways: 1. **SecurityWeek … Read more

Cyberattack at French hospital exposes health data of 750,000 patients

November 20, 2024 at 09:24PM A data breach at a French hospital compromised medical records of 750,000 patients, linked to a hacker known as ‘nears’. The threat actor claims access to over 1.5 million patient records and is selling access to multiple hospitals’ systems. Exposed data includes personal and medical information, raising phishing risks. ### … Read more

Chinese cyberspies, Musk’s Beijing ties, labelled ‘real risk’ to US security by senator

November 20, 2024 at 06:55PM Senator Richard Blumenthal warned that U.S. tech companies’ ties to China pose national security risks during a hearing on cybersecurity threats. CrowdStrike revealed its findings on Liminal Panda, a Beijing-backed cyber-espionage group targeting telecommunications networks. Blumenthal criticized companies like SpaceX and Apple for prioritizing profits over American security. ### Meeting … Read more