Latest

Software Bill of Materials (SBOM)

New Tool Aims to Simplify and Streamline SBOM Adoption

Chris Riotta  •  April 16, 2024

OpenSSF launched a new tool Tuesday in partnership with the Department of Homeland Security and the Cybersecurity and Infrastructure Security Agency to help simplify for federal agencies and private organizations the process of reading and generating software bills of materials.

Cybercrime

Steganography Campaign Targets Global Enterprises

Prajeet Nair  •  April 16, 2024

Financially motivated hackers are using the oldie-but-goodie technique of hiding malicious code in digital images to target businesses in Latin America, say security researchers. One image containing a PowerShell script results in Agent Tesla being loaded on the victim computer.

Fraud Management & Cybercrime

After XZ Utils, More Open-Source Maintainers Under Attack

Mathew J. Schwartz  •  April 16, 2024

Major open-source software projects are warning that more pieces of code than XZ Utils may have been backdoored by attackers, based on ongoing supply-chain attack attempts that have targeted "popular JavaScript projects," apparently seeking to trick them into sharing code maintainer rights.

Business Continuity Management / Disaster Recovery

Commvault Buys Appranix to Make Ransomware Recovery Quicker

Michael Novinson  •  April 16, 2024

Commvault purchased a cyber resilience vendor led by a longtime Hewlett-Packard manager to help enterprises get up and running faster after an outage or cyberattack. With Appranix, Commvault can reduce the time needed to rebuild after a ransomware attack from days or weeks to just hours or minutes.

Cyberwarfare / Nation-State Attacks

Kimsuky Uses Permissive DMARC Policies to Spoof Emails

Prajeet Nair  •  April 16, 2024

North Korean hackers with an affinity for establishing rapport with targets via social engineering and email are getting smarter about bypassing anti-spam protections and using tracking pixels, say researchers. The group, codenamed Kimsuky, has been operational since 2012.

Endpoint Security

Likely State Hackers Exploiting Palo Alto Firewall Zero-Day

Mihir Bagwe  •  April 15, 2024

Firewall appliance manufacturer Palo Alto Networks rushed out a hotfix Friday to a command injection vulnerability present in its custom operating system after security researchers spotted a campaign to exploit the zero-day starting in March, likely from a state-backed threat actor.

3rd Party Risk Management

Sisense Breach Highlights Rise in Major Supply Chain Attacks

Chris Riotta  •  April 15, 2024

Cybersecurity experts are sounding the alarm over a rise in supply chain attacks targeting the interconnected systems of global corporate giants after the top U.S. cyber agency urged Sisense customers to reset their credentials following an apparent hack.

►

Governance & Risk Management

New Foundation Sees Mental Health Tied to Cyber Resilience

Anna Delaney  •  April 15, 2024

In response to rising stress levels in cybersecurity, industry leaders, including CTO Sarb Sembhi of Virtually Informed, have launched the Mental Health in CyberSecurity Charter and Foundation to focus on mental health, high-pressure jobs and burnout in the field.

Zero Trust

Zero Trust Adoption: Where Are Enterprises Today?

Brian Pereira  •  April 15, 2024

Enterprises have deliberated on implementing zero trust for years, but vendors are overpromising and under-delivering on zero trust solutions. Gartner Vice President Analyst John Watts discusses the current adoption status and misunderstandings surrounding the framework.

Critical Infrastructure Security

Iran Launches Wave of Retaliatory Strikes at Israel

Prajeet Nair  •  April 14, 2024

Israel Defense Forces reported the launch of rockets by Iran from Lebanon into Israel on Saturday. Hezbollah militants claim responsibility, citing retaliation for recent Israeli actions and solidarity with Palestinians in Gaza, according to reports.

Artificial Intelligence & Machine Learning

UK Markets Authority Warns of AI Market Capture by Big Tech

Akshaya Asokan  •  April 12, 2024

The British antitrust authority warned Thursday that the market for foundational models is taking on "winner takes all" dynamics that could entrench a small number of providers. Firms with an outsize presence in offering compute or data resources could restrict access to critical inputs.

Application Security

PE Firm Accuses Synopsys of Breaching Exclusivity Agreement

Michael Novinson  •  April 12, 2024

A California private equity firm sued Synopsys and accused the systems design behemoth of breaching an exclusivity agreement by shopping its $525 million software integrity business. Sunstone Partners Management said it signed a letter of intent to acquire Synopsys' security testing services unit.