Threats: Page 19
-
Cyberattacks spur demand for cyber insurance: Moody's
"This is a critical area that we're challenged with," Securities and Exchange Commission Chair Gary Gensler said, describing the agency’s sharper focus on cyber risk.
By Jim Tyson • Oct. 22, 2021 -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
Federal agencies warn of ransomware targeting water, wastewater treatment plants
Months after the attack on a Florida water treatment plant, the FBI, CISA and other agencies are concerned about a new round of threats to vulnerable municipal sites.
By David Jones • Oct. 18, 2021 -
Explore the Trendlineâž”
.shock via Getty ImagesTrendlineRisk Management
An esclation of cyber risks facing businesses and government has made cyber resilience a major priority.
By Cybersecurity Dive staff -
2021 ransomware bitcoin activity eclipses last year, Treasury finds
The number of suspicious activity report transactions is already up 30% over 2020 numbers and the agency has tracked billions of dollars in outgoing bitcoin payments potentially linked to ransomware.
By Samantha Schwartz • Oct. 18, 2021 -
Cybersecurity tool sprawl leading to burnout, false positives: report
Security operations teams are wasting time on false alerts due to managing a high number of tools that don't interact well with each other, Trend Micro found.
By David Jones • Oct. 13, 2021 -
Insider threat environment faces challenges amid changing corporate landscape
As remote work becomes permanent and employee turnover rises, companies face additional challenges in protecting sensitive data, according to a panel discussion at Mandiant Cyber Defense Summit.
By David Jones • Oct. 6, 2021 -
NIST urges supply chain to include cyber in risk management
Industries that rely heavily on technology are the best at incorporating cyber in their supply chain risk management plans, according to NIST's Jon Boyens.
By Samantha Schwartz • Oct. 5, 2021 -
REvil, DarkSide highlight surge in Q2 ransomware attacks: report
The government sector saw more ransomware attacks, while financial services companies faced increased threats in the cloud, according to McAfee Enterprise research.
By David Jones • Oct. 4, 2021 -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
With remote work, any employee could be an insider threat. How is CISA mitigating the risk?
CISA released a self-assessment tool which organizations can use to generate reports on their tolerance and capabilities for preventing insider threats.
By Samantha Schwartz • Sept. 30, 2021 -
Deep Dive
Microsoft, under attack from threat actors, positions itself as cyber guardian
The pandemic created more business opportunity, but malicious actors dogged the company's technology stack. Now, the very same products touted as security defense tools are under fire.
By David Jones • Sept. 29, 2021 -
Microsoft warns of new credential-stealing backdoor from SolarWinds threat actor
The newly identified malware, called FoggyWeb, has been observed since April and is used to steal from compromised AD FS servers.
By David Jones • Sept. 28, 2021 -
Ransomware compromises customer data in farm co-op attack
A Minnesota-based co-op became the second agricultural firm in recent days to be the target of ransomware, just weeks after the FBI and CISA warned of a wider threat to the industry.
By David Jones • Updated Sept. 24, 2021 -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
After 400 attacks, feds warn of Conti ransomware
Nearly a year after U.S. security agencies warned the healthcare sector about Ryuk, the same threat actors are reemerging as a risk to businesses.
By Samantha Schwartz • Sept. 23, 2021 -
Enterprises plan major investments as remote work escalates security risk: report
Companies face significant challenges in managing security as the work-from-home model moves from an emergency stopgap to a more permanent environment.
By David Jones • Sept. 22, 2021 -
Treasury sanctions crypto exchange Suex in push to thwart ransomware
While more legal measures await international cybercrime, the government is sending interim messages to ransomware gangs.
By Samantha Schwartz • Sept. 22, 2021 -
Fortinet credential drop linked to fissure in ransomware group
Researchers linked a new ransomware syndicate called Groove to the Fortinet VPN credential dump, following a rift involving affiliates of Babuk.
By David Jones • Sept. 10, 2021 -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
Ransomware capitalizes on holiday weekends. Feds urge vigilance over Labor Day
The FBI and CISA implored companies and agencies to backup data and use proactive threat-hunting measures to mitigate any potential attacks.
By David Jones • Sept. 1, 2021 -
What's at stake in a credential stuffing attack
Attackers gain a network foothold by using stolen credentials under the guise of an authenticated trusted employee or third party.
By Sue Poremba • Sept. 1, 2021 -
Opinion
Time to be less dramatic about ransomware
Security is an aspect of normal operations. Proactive, broad measures can mitigate the risk of whatever threat is currently present or yet to come.
By Patricia Muoio • Aug. 31, 2021 -
Facility management worried about OT cybersecurity, but few plan to fix it
Seven in 10 managers are concerned about having adequate levels of cybersecurity, but only one-third are planning new investments, Honeywell found.
By David Jones • Aug. 27, 2021 -
More threats target Linux, a foundation for the cloud, report finds
As enterprises embrace cloud, malicious actors are finding sophisticated methods to threaten users for computing power and data theft.
By David Jones • Aug. 25, 2021 -
Insider risk surges as resignations mount
Millions of U.S. workers are walking away from existing jobs, increasing the risk to corporate data and, in many cases, source code.
By David Jones • Aug. 13, 2021 -
Is XDR the next best security solution?
SOCs are still learning about extended detection and response and how to apply it to an existing security stack. But when properly deployed, it's an asset for incident response.
By Samantha Schwartz • Aug. 11, 2021 -
APT actors target Microsoft 365 using novel techniques
Nation states are combining old techniques with newer methods to establish persistence and steal valuable data from organizations.
By David Jones • Aug. 6, 2021 -
Initial access brokers sell a way in, widening the ransomware market
The most popular network access points sold on the dark web offer insight for security teams to better understand what is most vulnerable to ransomware.
By Samantha Schwartz • Aug. 2, 2021 -
OT cyberattacks could threaten human safety by 2025: Gartner
Critical infrastructure facilities are struggling to contain sophisticated malware and ransomware threats, Gartner research shows.
By David Jones • July 26, 2021