May 20, 2024 at 10:37AM Eric Goldstein, the executive assistant director for cybersecurity at DHS’s CISA, is leaving for a private sector role. CISA director Jen Easterly confirmed his departure and praised his work. Goldstein will assume a cybersecurity leadership position, but the company has not been disclosed. He previously held roles at Goldman Sachs … Read more
April 22, 2024 at 09:33AM Shadowy Russian hacktivist group linked to cyberattack on Texas water system. Attempts reported in three small towns. Local officials claim public was not in danger. Cybersecurity firm links attack to Russian group with potential military ties. FBI and Homeland Security involved. Other foreign cyberattacks on U.S. water facilities also mentioned. … Read more
April 3, 2024 at 11:57AM The U.S. Cyber Safety Review Board criticized Microsoft for security lapses leading to breaches in Europe and the U.S. The DHS found the breach preventable and faulted Microsoft for operational and strategic decisions. The breach occurred due to a validation error in Microsoft’s source code. Recommendations include modern control mechanisms … Read more
November 20, 2023 at 09:33AM Johnson Controls has released patches for a critical vulnerability found in some of its industrial refrigeration products. The flaw, known as CVE-2023-4804, could allow unauthorized access to debug features. Impacted products include control panels used in the food and beverage industry worldwide. The patches fix the vulnerability that could potentially … Read more