Fear, panic and Log4j: One year later

The Latest

• 

  Microsoft taps security demand to drive M365 amid fragmented market

  A top company executive said a key driver is to bundle its cybersecurity capabilities with office productivity applications, as customers look to consolidate vendors.

  Strategy

• 

  Sponsored by Gartner Peer Insights

  The State of Digital Leadership

  Gartner Peer Insights data and opinion explores: 'Are you a good digital leader?'

• 

  Rackspace says ransomware disrupted its Hosted Exchange business

  The incident could lead to further interruptions and a loss of revenue at its Hosted Exchange business, the company warned. 

  Breaches

• 

  Ransomware attacks shift beyond US borders

  U.S.-based organizations remain the top target for ransomware gangs, but the scale of that misfortune is waning, according to Moody’s.

  Cyberattacks

• 

  Infostealer malware surges on dark web amid rise in MFA fatigue attacks

  Lapsus$, one of the most prolific ransomware actors of 2022, has utilized such tactics to breach a number of high-profile organizations.

  Threats

• 

  7 of this year’s biggest cybersecurity stories

  From vendor evolution to the long-term effects of high-profile attacks, the cybersecurity industry is rapidly evolving. Take a look at our top stories to understand just how much has changed.

  Strategy

• 

  Cuba ransomware group hitting US organizations in 5 critical sectors

  The group and its affiliates have shifted tactics in 2022. Top targets include organizations in finance, government, healthcare, manufacturing and IT.

  Cyberattacks

• 

  Cyber Safety Review Board to probe Lapsus$ ransomware spree

  Following an inaugural review of Log4j, the board will investigate the threat actor’s prolific campaign of cyber extortion against major companies, including Uber, T-Mobile and Nvidia.

  Cyberattacks

• 

  AWS builds a lake for multivendor security data sharing

  Security data is scattered and often stored in fragments from multiple sources. AWS wants to centralize that in a single data lake.

  Strategy

• 

  LastPass breach fallout spreads to expose customer data

  Details are scant but since the breach is a continuation from an attack on the company’s development system, “the keys to the kingdom” might be in the wrong hands, one expert said.

  Breaches

• 

  CrowdStrike CEO: SMB deals delayed as enterprises hold firm on cyber spend

  Fears of a recession are impacting the cybersecurity investments of smaller organizations and enterprises in different ways, George Kurtz said.

  Strategy

• 

  Walmart security, operating at a vast scale, turns to automation

  Security operations centers, part of Walmart Global Tech, process 6 trillion data points each year, a feat unattainable through manual methods. 

  Strategy

• 

  AWS CEO stresses the core elements of cloud security

  Adam Selipsky described security as a prerequisite for organizations to trust cloud infrastructure. And for that, he claimed, AWS is the best in the game.

  Strategy

• 

  Deep Dive

  Where is AWS in the cybersecurity conversation?

  The cloud leader doesn’t emphasize security and share information at the same level as its competitors. Experts say that's by design.

  Strategy

• 

  The top security and tech conferences to attend in 2023

  From pure-play security to leadership events, here are some of the must-attend events for strategy-minded executives next year.

  Leadership & Careers

• 

  FCC bans imports of telecom gear from China-based companies

  The latest in a series of orders aligns the agency’s equipment authorization process with national security policies.

  Policy & Regulation

• 

  As companies tighten tech spend, demand for cybersecurity services grows

  Managed service providers can help fill talent needs and tame costs, but that strategy may require additional risk mitigation.

  Strategy

• 

  Growing Mastodon security community grapples with CISA impersonators

  An infosec.exchange account impersonating CISA Director Jen Easterly was suspended by the Mastodon instance administrator Monday, as the security community searches for a Twitter alternative.

  Strategy

• 

  ‘Tis the season for shopping and scams, CISA warns

  Adversaries exploit individuals hunting for the best deals online during the holiday shopping season. If a deal looks too good to be true, trust your instincts — it's not.

  Threats

• 

  Defense Department launches zero trust, phasing out perimeter defense strategy

  Private sector partners say the rollout will raise the security bar to better protect the entire defense industry ecosystem.

  Strategy

• 

  Security awareness training needs a revamp

  Too often security training is seen as a negative experience and a time to reprimand those who make security gaffes. But old strategies aren’t working. It’s time for a redo. 

  Strategy

• 

  Three-quarters of retail, hospitality applications have security flaws

  Nearly 1 in 5 vulnerabilities in the retail and hospitality industry are considered high severity, Veracode found, creating considerable risks to the organization. 

  Vulnerability

• 

  Where will the security community turn, if not Twitter?

  A consistent stream of credibility hits could cause lasting damage for cybersecurity and those who flock there.

  Strategy

• 

  Palo Alto Networks reports strong fiscal Q1 as security needs outpace economic fears

  The security firm also agreed to buy Cider Security, boosting its software supply chain security business.

  Strategy

• 

  Offshore oil and gas at risk of potentially catastrophic cyberattack: GAO

  A report warns the industry could see an attack that rivals the deadly 2010 Deepwater Horizon disaster and urges Interior Department officials to stand up safeguards.

  Policy & Regulation

• 

  Tech sector execs see potential recession as a business opportunity

  Technology company leaders are preparing for economic downturn by investing selectively in the workforce and new technologies, according to EY survey.

  Strategy

More stories