CISA Director Jen Easterly to Step Down

November 19, 2024 at 12:26PM SecurityWeek offers extensive resources on cybersecurity news, including articles, virtual events, and conferences on various topics like malware, data breaches, and risk management. Subscribers can receive daily briefings for the latest insights and developments in the cybersecurity landscape. Unsubscribe anytime if desired. ### Meeting Takeaways: 1. **Cybersecurity Coverage**: – The … Read more

Russian Phobos Ransomware Operator Extradited to US

November 19, 2024 at 10:33AM SecurityWeek Network offers comprehensive resources on cybersecurity news, covering topics such as malware, cybercrime, ransomware, and data protection. It features events like the ICS Cybersecurity Conference and provides newsletters for updates on threats and expert insights in the cybersecurity field. Subscriptions can be managed easily. ### Meeting Takeaways 1. **Cybersecurity … Read more

Threat Actor Turns Thousands of IoT Devices Into Residential Proxies

November 19, 2024 at 08:53AM SecurityWeek offers a range of cybersecurity resources, including news on malware, data breaches, and threat intelligence. It features webcasts, events, and a daily briefing newsletter covering various topics like cloud security, risk management, and industrial cybersecurity. Users can subscribe for updates or unsubscribe at any time. ### Meeting Takeaways 1. … Read more

Hackers Redirect $250,000 Payment in iLearningEngines Cyberattack

November 19, 2024 at 08:06AM iLearningEngines reported a cybersecurity incident involving the theft of $250,000 due to unauthorized access and wire misdirection. The company anticipates significant operational impacts for Q4 2024 but does not foresee long-term effects. The incident may be linked to a business email compromise scheme. No ransomware group has claimed responsibility. **Meeting … Read more

Akira Ransomware Drops 30 Victims on Leak Site in One Day

November 19, 2024 at 07:21AM SecurityWeek offers comprehensive cybersecurity news, webcasts, and virtual events, covering topics such as malware, cyberwarfare, ransomware, and various security domains. Their resources include a daily briefing newsletter and opportunities for industry engagement through conferences and forums. Subscribers receive updates on the latest threats and insights. ### Meeting Takeaways 1. **Cybersecurity … Read more

Palo Alto Patches Firewall Zero-Day Exploited in Operation Lunar Peek

November 19, 2024 at 04:40AM SecurityWeek Network offers comprehensive cybersecurity news, covering topics like malware, cybercrime, data breaches, and more. It features webcasts, virtual events, and resources for professionals, including newsletters and forums for CISOs. Subscribe for updates on the latest threats and expert insights, with the option to unsubscribe anytime. **Meeting Notes Takeaways:** 1. … Read more

Palo Alto Networks patches two firewall zero-days used in attacks

November 18, 2024 at 03:57PM Palo Alto Networks has released security updates for two zero-day vulnerabilities in its Next-Generation Firewalls (CVE-2024-0012 and CVE-2024-9474). These flaws allow unauthorized access and privilege escalation, affecting a small number of devices. The U.S. cybersecurity agency has urged federal agencies to patch systems by December 9. ### Meeting Notes Takeaways: … Read more

Palo Alto Networks Releases IoCs for New Firewall Zero-Day

November 18, 2024 at 08:19AM The CISO Forum Virtual Summit sessions are now available for instant viewing. SecurityWeek offers extensive resources on various cybersecurity topics, including malware, ransomware, incident response, and risk management. Subscribe to their Daily Briefing Newsletter for the latest news and expert insights. Unsubscribe anytime. ### Meeting Takeaways: 1. **CISO Forum Virtual … Read more

CISA Warns of Two More Palo Alto Expedition Flaws Exploited in Attacks

November 15, 2024 at 06:05AM CISA has included two additional vulnerabilities, CVE-2024-9463 and CVE-2024-9465, related to Palo Alto Networks Expedition, in its KEV catalog due to their exploitation in attacks. **Meeting Takeaways:** 1. **New Vulnerabilities Added**: CISA has added two vulnerabilities related to Palo Alto Networks Expedition to its KEV catalog. – CVE-2024-9463 – CVE-2024-9465 … Read more

The Vendor’s Role in Combating Alert Fatigue

November 14, 2024 at 01:03PM The commentary emphasizes the importance of vendor responsibility in addressing alert fatigue in cybersecurity. It argues that vendors should enhance their tools with smart filtering, automation, actionable alerts, and continuous engagement to help customers manage alerts effectively. A partnership approach is essential for combating modern cyber threats. ### Meeting Takeaways: … Read more