Why Thoma Bravo Is Considering Taking SailPoint Public Again

Michael Novinson • September 16, 2024

Thoma Bravo has begun interviewing underwriters as it explores an initial public offering for SailPoint, Bloomberg reported last week. The private equity firm hasn't finalized details, including the timing of a potential listing for the identity governance and administration vendor.

Cyberwarfare / Nation-State Attacks

Moody's Ratings: Cyber Insurance Competition Up, Prices Down

Latest

Cyberwarfare / Nation-State Attacks

US Indicts Chinese National for Phishing for NASA Tech

David Perera • September 16, 2024

U.S. federal prosecutors indicted a Chinese national employed by a state-owned aerospace and defense conglomerate with a yearslong phishing campaign aimed at extracting software developed for NASA. Prosecutors said Song began sending out targeted emails in 2017.

Cloud Security

CloudImposer RCE Vulnerability Targets Google Cloud Platform

Prajeet Nair • September 16, 2024

Google patched a critical remote execution vulnerability in its cloud platform Cloud Composer service, "CloudImposer," which could have allowed attackers to compromise millions of servers, say researchers from Tenable. The CloudImposer vulnerability could lead to the Jenga Tower effect.

Governance & Risk Management

Breach-Weary Snowflake Moves to MFA, 14-Character Passwords

Akshaya Asokan • September 16, 2024

Data warehousing platform Snowflake rolled out default MFA - as well as a 14-character password minimum - to shore up security in the wake of a series of cyberattacks in June that hit high-profile customers including Santander Bank, Advance Auto Parts, LA Unified School District and Neiman Marcus.

Cybercrime

Ivanti Vulnerability Again Forces Emergency Patches

David Perera • September 16, 2024

Customers of internet appliance maker Ivanti face yet another hackable vulnerability. The Utah company warned customers Friday about exploitation of a Cloud Service Appliance detected in the wild. Ivanti said the vulnerability doesn't affect version 5; it released a patch on Sept. 10.

Cyberwarfare / Nation-State Attacks

More US Sanctions Against Predator Spyware Maker Intellexa

Akshaya Asokan • September 16, 2024

The U.S. Department of the Treasury ramped up pressure on makers and sellers of Predator commercial spyware through sanctions on five individuals and a Caribbean company accused of enabling tens of millions of dollars of surveillance malware transactions.

Artificial Intelligence & Machine Learning

Strider Secures $55M to Fuel AI Growth and Global Expansion

Michael Novinson • September 13, 2024

Strider Technologies has raised $55 million in a Series C funding round to strengthen its AI capabilities and fuel global expansion efforts. The money will enhance the company’s AI-driven insights, support business with government agencies, and fuel international expansion in Europe and Asia.

Critical Infrastructure Security

Remote Access Tool Sprawl Increases OT Risks

Prajeet Nair • September 13, 2024

Excessive deployment of remote access tools in operational technology environments expands attack surfaces and creates operational challenges, warn security researchers from Claroty. Remote access tools are essential, but they introduce numerous potential vulnerabilities that threat actors exploit.

Business Continuity Management / Disaster Recovery

ISMG Editors: Will Microsoft Rethink Windows Security?

Anna Delaney • September 13, 2024

In the latest weekly update, ISMG editors discussed the fallout from the CrowdStrike global IT outage on endpoint security tools, Mastercard's monumental acquisition of Recorded Future to bolster its cybersecurity portfolio, and the latest efforts by U.S. officials to secure the 2024 election.

Artificial Intelligence & Machine Learning

Irish Data Protection Commission Probes Google's AI Model

Akshaya Asokan • September 13, 2024

The Irish data regulator launched an investigation to determine Google's compliance with a European privacy law when it was developing its PaLM 2 artificial intelligence model. Google launched the multilingual generative AI model last year.

Critical Infrastructure Security

Chinese Crane Giant Poses Cybersecurity Threat to US Ports

Chris Riotta • September 13, 2024

Congress' Select Committee on the Chinese Communist Party published a report warning that Beijing could use a Chinese state-owned crane company that currently dominates the global ship-to-shore port crane market to disrupt and manipulate the United States maritime supply chain.

Cybercrime

Chinese-Speaking Hackers Manipulate SEO Rankings Globally

Prajeet Nair • September 13, 2024

A Chinese search engine optimization operation hacked more than 35 web servers and stole credentials in a campaign to boost the online rankings of malicious porn sites. Researchers from Cisco Talos dubbed the threat cluster DragonRank.

Artificial Intelligence & Machine Learning

Black Hat/DEF CON 2024: Latest Insights on Security and AI

Information Security Media Group • September 13, 2024

Welcome to Information Security Media Group's Black Hat and DEF CON 2024 Compendium featuring latest insights from the industry's top cybersecurity researchers and ethical hackers, as well as perspectives from CEOs, CISOs and government officials on the latest trends in cybersecurity and AI.