World Tour Survey: IT Operations’ Hands-on Defense

December 3, 2024 at 02:24PM Cybercriminals are enhancing their attacks using generative AI, increasing risks for businesses. A survey of over 750 cybersecurity professionals reveals rising concerns among IT operations teams regarding operational blind spots and prioritization of vulnerabilities. Effective communication with security operations is vital for addressing these challenges and ensuring security protocols are … Read more

Bolster resilience against 2025 cyber threats

November 27, 2024 at 01:44PM The MITRE Engenuity ATT&CK Evaluations provide essential insights for cybersecurity leaders by simulating real-world threats to assess vendor performance. The upcoming 2024 results will highlight advancements in detection and response. This webinar by Cynet will elaborate on unique features of the evaluations to help organizations enhance their security strategies. ### … Read more

How Learning to Fly Made Me a Better Cybersecurity CEO

November 27, 2024 at 10:10AM The author reflects on how their passion for flying has influenced their career in cybersecurity. They emphasize the importance of a layered defense strategy, thorough understanding of environments, continuous learning, routine practice, and proactive risk mitigation. These principles foster resilience and improvement within both aviation and cybersecurity fields. **Meeting Takeaways:** … Read more

Why Cybersecurity Leaders Trust the MITRE ATT&CK Evaluations

November 26, 2024 at 10:24AM The 2024 MITRE ATT&CK Evaluation results will provide cybersecurity leaders with critical insights into vendor performance against simulated real-world threats. A Cynet-hosted webinar will summarize key findings and offer practical guidance on leveraging the evaluations. The upcoming assessments will feature nuanced scenarios, including ransomware and North Korean tactics. ### Meeting … Read more

Intruder Launches Intel: A Free Vulnerability Intelligence Platform For Staying Ahead of the Latest Threats

November 26, 2024 at 07:12AM Intruder launched Intel, a free vulnerability intelligence platform, to help organizations prioritize critical CVEs amidst the noise. Intel tracks trending vulnerabilities, assigns ‘hype scores,’ and provides expert insights and real-time updates. It consolidates vital information, ensuring users can effectively assess and respond to emerging threats in cybersecurity. ### Meeting Takeaways: … Read more

Visio Trust Raises $7 Million for Third-Party Risk Management Platform

November 25, 2024 at 08:32AM Visio Trust, a third-party risk management provider, has raised $7 million, bringing its total funding to $24 million. The San Francisco-based startup, founded in 2020, utilizes AI to deliver security intelligence for enterprise customers. The new funds will enhance its artifact-based platform and support AI governance for risk reduction. **Meeting … Read more

Cloud Security Startup Wiz to Acquire Dazz in Risk Management Play

November 21, 2024 at 04:16PM Wiz, a cloud security provider, has announced its acquisition of Israeli startup Dazz for $450 million. This deal enhances Wiz’s offerings, including their new Wiz Code product. The acquisition aims to improve risk management and remediation, allowing security teams to efficiently address vulnerabilities across various platforms. **Meeting Notes Takeaways:** 1. … Read more

Fintech giant Finastra investigates data breach after SFTP hack

November 20, 2024 at 03:58PM Finastra confirmed a cybersecurity incident involving compromised credentials on November 7, 2024, with a threat actor selling stolen data. An investigation shows no evidence of broader breaches beyond their Secure File Transfer Platform. The impact assessment is ongoing, and affected clients will be contacted directly. Finastra previously faced a ransomware … Read more

Navigating third-party risks

November 19, 2024 at 09:42AM SailPoint is hosting a webinar on December 3rd at 11 AM ET, focusing on managing third-party risks to enhance security and compliance. Key topics include identifying vulnerabilities, effective access controls, and fostering a culture of compliance. Attendees will receive actionable insights to improve defenses against external threats. ### Meeting Takeaways … Read more

Threat Actor Turns Thousands of IoT Devices Into Residential Proxies

November 19, 2024 at 08:53AM SecurityWeek offers a range of cybersecurity resources, including news on malware, data breaches, and threat intelligence. It features webcasts, events, and a daily briefing newsletter covering various topics like cloud security, risk management, and industrial cybersecurity. Users can subscribe for updates or unsubscribe at any time. ### Meeting Takeaways 1. … Read more