Black Hat Europe: Chaos Puts Cybersecurity in the Hot Seat

Mathew J. Schwartz • December 11, 2024

With everything in the world lately seeming to reach end states faster - sometimes referred to as the "super cycle" or accelerationism - cybersecurity professionals must help their organizations "organize to operate," said Black Hat Europe conference founder Jeff Moss at this year's annual event.

Cloud Security

The AI Wave Is Sweeping the Payments Industry

Latest

Application Security

Google Gemini 2.0 Introduced With Advanced AI for Developers

Michael Novinson • December 11, 2024

Google's latest AI model can natively process and output text, images and audio in the search giant's push toward more autonomous reasoning, planning and action. The company said Gemini 2.0 is designed for applications ranging from development and gaming to research and everyday assistance.

Artificial Intelligence & Machine Learning

AI Meets Fraud Prevention in LexisNexis-IDVerse Acquisition

Michael Novinson • December 11, 2024

To counter AI-driven fraud, LexisNexis acquired IDVerse, a London-based startup focused on document authentication and regulatory compliance. This acquisition aims to seamlessly integrate advanced tools into LexisNexis' fraud and identity platforms, enhancing global operations.

Attack Surface Management

Ransomware Hackers Exploiting Cleo Software Zero-Day

Prajeet Nair • December 11, 2024

File transfer software made by Cleo Communications is under active attack and a patch meant to stymie hackers doesn't fix the flaw, say security researchers from Huntress. Hackers exploit an arbitrary file-write vulnerability along with a feature that automatically executes files.

Cybersecurity Spending

US Defense Bill Includes Major Focus on Tech, AI and Cyber

Chris Riotta • December 11, 2024

An $895 billion National Defense Authorization Act features key provisions for significant investments in artificial intelligence, cybersecurity and quantum technology, including initiatives aimed at enhancing the Pentagon’s technological capabilities.

Artificial Intelligence & Machine Learning

GovWare 2024: Trust and Security in the Digital Era

• December 11, 2024

Welcome to ISMG's GovWare 2024 Compendium. GovWare, Singapore's premier cybersecurity trade event held as part of Singapore International Cyber Week, brought together a community of cybersecurity professionals, including policymakers, tech innovators and information security leaders.

Cyberwarfare / Nation-State Attacks

Chinese APT Groups Targets European IT Companies

Akshaya Asokan • December 11, 2024

A probable Chinese nation-state threat actor compromised Visual Studio Code and Microsoft Azure cloud infrastructure to target Western technology firms for espionage, security firms Tinexta Cyber and SentinelLabs said. The companies call the campaign "Operation Digital Eye."

Cybercrime

Krispy Kreme Discovers Cybersecurity Hole

David Perera • December 11, 2024

Fried dough lovers beware: doughnut juggernaut Krispy Kreme told U.S. federal regulators Wednesday it will have ongoing operational difficulties due to a cybersecurity incident. Shops are open and consumers can place orders in person. Online ordering in some parts of the United States is down.

Artificial Intelligence & Machine Learning

From Silos to Synergy: Gen AI Aligns IT and Security Teams

Rahul Neel Mani • December 11, 2024

Historically, IT and security teams have operated in silos, creating gaps in knowledge and response. Gen AI bridges this gap through natural language interfaces, enabling better communication and understanding between departments, said Druva CTO Stephen Manley.

Leadership & Executive Communication

Cybersecurity Gadgets to Hack Your Holiday Gift List

Brandy Harris • December 11, 2024

If you're a cybersecurity professional trying to come up with ideas for your holiday wish list (or maybe you’re a loved one trying to pick out the perfect gift), look no further! Here are some top picks that will thrill any cybersecurity practitioner.

Governance & Risk Management

Citrix Acquisitions Boost Zero Trust Defense for Hybrid Work

Michael Novinson • December 10, 2024

Citrix enhances its security for hybrid work by acquiring deviceTRUST and Strong Network. Purchasing these European startups boosts protection for VDI, DaaS and cloud development, empowering organizations to enforce zero trust principles and reduce risks across their hybrid environments.

Endpoint Security

OpenWrt Update Flaw Exposed Devices to Malicious Firmware

Anviksha More • December 10, 2024

A critical flaw in the updating service of a popular Linux operating system for embedded devices could enable hackers to compromise firmware with malicious images. OpenWrt developers patched the vulnerability, tracked as CVE-2024-54143, with a CVSS score of 9.3.

Artificial Intelligence & Machine Learning

CyberEdBoard Profiles in Leadership: David Ortiz

Anna Delaney • December 10, 2024

David Ortiz was building websites over 20 years ago when he first become exposed to cybersecurity. Back then, his biggest worry was denial-of-service attacks. Today, as a CISO of a global company, emerging AI threats related to phishing and deepfakes are what keeps him up at night.