Cyber Insurance Strategy Requires CISO-CFO Collaboration

Cyber-risk quantification brings together the CISO's technical expertise and the CFO's focus on financial impact to develop a stronger and better understanding of what's at stake.


https://www.darkreading.com/cyber-risk/c...laboration

How to Ensure Open Source Packages Are Not Landmines

CISA and OpenSSF jointly published new guidance recommending technical controls to make it harder for developers to bring malicious software components into code.


https://www.darkreading.com/application-...-landmines

NSA's Zero-Trust Guidelines Focus on Segmentation

Zero-trust architectures are essential protective measures for the modern enterprise. The latest NSA guidance provides detailed recommendations on how to implement the networking angle of the concept.


https://www.darkreading.com/remote-workf...gmentation

The Ongoing Struggle to Protect PLCs

A decade after Stuxnet, vulnerabilities in OT systems and programmable logic controllers remain exposed.


https://www.darkreading.com/ics-ot-secur...otect-plcs

CISA, NSA share best practices for securing cloud services


The NSA and the Cybersecurity and Infrastructure Security Agency (CISA) have released five joint cybersecurity bulletins containing on best practices for securing a cloud environment. [...]


https://www.bleepingcomputer.com/news/se...-services/

Microsoft says Russian hackers breached its systems, accessed source code


Microsoft says the Russian 'Midnight Blizzard' hacking group recently accessed some of its internal systems and source code repositories using authentication secrets stolen during a January cyberattack. [...]


https://www.bleepingcomputer.com/news/mi...urce-code/

UnitedHealth brings some Change Healthcare pharmacy services back online


Optum's Change Healthcare has started to bring systems back online after suffering a crippling BlackCat ransomware attack last month that led to widespread disruption to the US healthcare system. [...]


https://www.bleepingcomputer.com/news/se...ck-online/

QNAP warns of critical auth bypass flaw in its NAS devices


QNAP warns of vulnerabilities in its NAS software products, including QTS, QuTS hero, QuTScloud, and myQNAPcloud, that could allow attackers to access devices. [...]


https://www.bleepingcomputer.com/news/se...s-devices/

Critical Fortinet flaw may impact 150,000 exposed devices


Scans on the public web show that approximately 150,000 Fortinet FortiOS and FortiProxy secure web gateway systems are vulnerable to CVE-2024-21762, a critical security issue that allows executing code without authentication. [...]


https://www.bleepingcomputer.com/news/se...d-devices/

The Week in Ransomware - March 8th 2024 - Waiting for the BlackCat rebrand

We saw another ransomware operation shut down this week after first getting breached by law enforcement and then targeting critical infrastructure, putting them further in the spotlight of the US government. [...]


https://www.bleepingcomputer.com/news/se...t-rebrand/