Financial sector’s vendors lag behind it on cybersecurity
Listen to the article 3 min This audio is auto-generated. Please let us know if you have feedback. Dive Brief: Companies that supply financial organizations…
Category: CyberSecurityDive
Your AI-driven threat hunting is only as good as your data platform and pipeline
The data-centric foundation for modern threat hunting In cybersecurity, we’re told that AI is the future of threat hunting. But the dirty secret is that…
Hackers targeting Cisco IOS XE devices with BadCandy implant
A critical vulnerability in Cisco IOS XE is being exploited to install an implant called BadCandy in a renewed wave of attacks, according to warnings…
AI-based malware makes attacks stealthier and more adaptive
Listen to the article 5 min This audio is auto-generated. Please let us know if you have feedback. Dive Brief: Cyber threat actors have recently…
Researchers warn of flaws that allow manipulation of Microsoft Teams messages
Critical flaws in Microsoft Teams can be used to allow an attacker to manipulate messages, spoof notifications and even impersonate executives, according to a report…
Identity-based attacks need more attention in cloud security strategies
Listen to the article 3 min This audio is auto-generated. Please let us know if you have feedback. Dive Brief: Identity-related risks are the biggest…
Cybercrime groups team with organized crime in massive cargo theft campaigns
Financially motivated cyber gangs are working with organized crime to steal massive amounts of cargo through the abuse of remote monitoring tools, according to a…
Security leaders say AI can help with governance, threat detection, SOC automation
Listen to the article 3 min This audio is auto-generated. Please let us know if you have feedback. Dive Brief: Security professionals consider AI-based security…
Windows Server Update Service exploitation ensnares at least 50 victims
At least 50 organizations have been impacted by attacks targeting a critical vulnerability in Windows Server Update Service, with most of them located in the…
CISA, NSA unveil best-practices guide to address ongoing Exchange Server risks
The Cybersecurity and Infrastructure Security Agency and the National Security Agency on Thursday unveiled a best-practices guide to help organizations address security issues with their…
CISA updates guidance and warns security teams on WSUS exploitation
The Cybersecurity and Infrastructure Security Agency issued updated guidance on a critical vulnerability in Windows Server Update Service and urged security teams to immediately apply…
FCC will vote to scrap telecom cybersecurity requirements
The Federal Communications Commission will vote next month on whether to eliminate cybersecurity requirements for telecom carriers that the commission enacted under its previous leadership…