YouTube video by USCSB

The US government is urging water and wastewater systems to secure internet-exposed HMIs against cyberattacks. Hacktivists have manipulated these interfaces, causing chaos in operations. To prevent such shenanigans, facilities should disconnect HMIs, use strong passwords, and implement MFA. As always, never underestimate the power of not having your water pumps go rogue.

GenAI integration is a hot topic for cybersecurity leaders, but not at any price, says a CrowdStrike survey. While 64% are exploring GenAI tools, only 6% have implemented them. ROI is favored over cost, yet concerns about data exposure and AI hallucinations persist. A platform approach is preferred for multifaceted use.

The university's incident website blocks search engines from listing the site, making it more difficult for affected individuals to find the website in search results.

CISA's adding spice to its Known Exploited Vulnerabilities Catalog with two new stars: a Windows Kernel-Mode Driver flaw and an Adobe ColdFusion issue. They're the cybersecurity world's latest "bad boys," with CISA urging agencies to fix them before they crash the party.

The target list also includes the EU, ESET researchers can reveal

From Joyce to 21st-century feminism to a new on-screen reimagining: why this millennia-old poem and its complicated hero continue to inspire

Hackers launched a cyber attack on Showjumping Ireland — but issued a ransom demand threatening to release stolen data to the wrong organisation.

This week, Steve and Leo discuss the recent 'Salt Typhoon' hack of U.S. telecom providers by China, TPM 2.0 requirement for Windows 11, Microsoft's newly hacked Windows

In classified settings, lawmakers have often asked national security officials why American cyber forces don’t go on the attack more often, one senator said.

The lawsuits accuse Deloitte of negligence, breach of implied contract, and unjust enrichment, and seek compensatory damages, reimbursement of out-of-pocket costs, and injunctive relief.

A sophisticated attack campaign targeting organizations in Japan and other East Asian countries. The threat actor, identified as APT-C-60, is employing a clever social engineering tactics.

'It's a double-edged sword,' security researchers tell The Reg

YouTube video by THAI PRESS

The latest edition of the Seriously Risky Business cybersecurity newsletter, now on Lawfare.

State outlets, which put considerable resources into amassing millions of followers on Elon Musk’s social media platform, have recently seen their growth plateau.

According to the government, the demands are necessary to mitigate the risk to national security around “intellectual property relating to the manufacture of dual-use products which are subject to exp...

EagleMsgSpy, a Chinese surveillance tool by Wuhan Chinasoft Token, exploits mobile devices for data collection.

The BADBOX scheme deploys the Triada malware on various devices like smartphones and tablets

Germany's BSI disrupts BADBOX malware targeting 30,000 devices, halting ad fraud, data theft, and proxy misuse.

Iranian cybercriminals, linked to CyberAv3ngers, used custom malware called IOCONTROL to infiltrate US and Israeli water and fuel systems. They could have potentially shut down fuel services and stolen payment data. Their antics highlight a new era of cyber mischief, where hacking gas stations is the new way to pump up chaos.

VPNs were once the superhero cape of remote connectivity, but now they're more like the outdated spandex of cybersecurity, with vulnerabilities that cybercriminals love to exploit. Organizations are moving towards Zero Trust Network Access (ZTNA) for better security and user experience. It's like swapping a leaky rowboat for a sleek yacht!

Germany's Federal Office of Information Security (BSI) has unplugged the BADBOX malware operation, putting a stop to its malicious antics. With outdated Android devices serving as unwitting accomplices, this digital heist involved ad fraud and data collection. Consumers are now urged to disconnect affected gadgets pronto! Remember, BADBOX might be lurking in your tech!