CISA Director Jen Easterly makes a virtual presentation at Black Hat 2021.

CISA's Easterly Unveils Joint Cyber Defense Collaborative

Scott Ferguson • August 5, 2021

The U.S. Cybersecurity and Infrastructure Security Agency is creating the Joint Cyber Defense Collaborative to build a national cybersecurity defense strategy based on collaboration between the public and private sectors, CISA Director Jen Easterly said at the Black Hat 2021 conference Thursday.

Business Continuity Management / Disaster Recovery

9 Ransomware Enablers - And Tactics for Combating Them

Latest

Cloud Security

How to Keep Developer Secrets, Secret

Information Security Media Group • August 5, 2021

Fix issues before they become security incidents.

Critical Infrastructure Security

Chinese Cyberthreats: The Impact on National Security

Dan Gunderman • August 5, 2021

The U.S. needs to devise ways to counter Chinese cyber activity - including the theft of intellectual property and cyberattacks on government networks and critical infrastructure - that poses a direct threat to national security, according to those who testified at a Senate hearing this week.

Next-Generation Technologies & Secure Development

Cybersecurity M&A Update: Five Firms Make Moves

Doug Olenick • August 5, 2021

Cybersecurity acquisitions continue at an intense pace, with Ivanti, Sophos, Deloitte Risk & Financial Advisory, Cerberus Sentinel and Feedzai all making moves to bolster their security portfolios.

Cyberwarfare / Nation-State Attacks

Anne Neuberger on Why No Sanctions Issued Against China Yet

Scott Ferguson • August 4, 2021

The Biden administration is attempting to build an international consensus on how to react to China's aggressive cyber actions, which is one reason why it held off sanctioning the country over attacks on vulnerable Microsoft Exchange servers, says Anne Neuberger, deputy national security adviser for cyber.

Containerization & Sandboxing

NSA, CISA Release Guidance on Kubernetes Security

Akshaya Asokan • August 4, 2021

The National Security Agency and the Cybersecurity and Infrastructure Security Agency have released new guidance on Kubernetes security, providing advice on securing container environments from supply chain threats, insider threats and data exfiltration risks.

COVID-19

COVID 19: What Delta Variant Means to Business Recovery

Tom Field • August 4, 2021

Infection numbers are surging in the southern U.S., states and cities are enacting new mask mandates and the fall flu season looms as the great unknown. Sound familiar? COVID-19 is back with the highly contagious Delta variant. Pandemic expert Regina Phelps discusses what that means for business recovery.

Governance & Risk Management

Report: 7 Federal Agencies Still Lack Basic Cybersecurity

Doug Olenick • August 3, 2021

A congressional report examining eight federal agencies found that seven continue to improperly protect sensitive data and do not meet basic cybersecurity standards.

Governance & Risk Management

Words With Friends Breach: Zynga's Case Set for Arbitration

Mathew J. Schwartz • August 3, 2021

A consolidated class action lawsuit filed against mobile game developer Zynga after it suffered a 2019 data breach looks set to be handled instead via arbitration. A judge notes that users agreed to arbitration in the terms and conditions, and so far, they've failed to prove they suffered any financial harm.

Fraud Management & Cybercrime

Ransomware Actors Set Up a Call Center to Lure Victims

Jeremy Kirk • August 3, 2021

Ransomware actors have taken a page from the playbooks of tech support scammers of yore by guiding victims to download malware through persuasion over the phone. Microsoft says the technique is more dangerous than it first realized.

Fraud Management & Cybercrime

Phishing Campaign Uses Live Chat, Leverages PayPal Brand

Prajeet Nair • August 3, 2021

In a new phishing scam that leverages the PayPal brand, attackers are using automated scripts and live chat as a way of compromising devices and bypassing secure email gateways.

Fraud Management & Cybercrime

Ransomware Attackers Eying 'Pure Data-Leakage Model'

Mathew J. Schwartz • August 2, 2021

A funny thing happened on the way to the nonstop ransomware payday: Some groups hit the wrong targets - Ireland's health system, a major U.S. fuel pipeline - resulting in the U.S. moving to much more aggressively disrupt their business model, says Bob McArdle, director of cybercrime research at Trend Micro.

Cybercrime

Thwarting Authorized Push Payment Fraud

Suparna Goswami • August 2, 2021

Behavioral biometrics can play an important role in mitigating the risk of authorized push payment fraud, says Reed Luhtanen, executive director at the U.S. Faster Payments Council.