Financial Sector Turning to Multi-Vendor Cloud Strategies

Chris Riotta • December 10, 2024

Financial institutions are increasingly adopting multi-cloud strategies to mitigate rising cyber risks and comply with complex regulations, according to a new report. The move enhances flexibility and disaster recovery, though challenges remain, from implementation costs to a growing skills gap.

Cyberwarfare / Nation-State Attacks

Upwind Raises $100M to Thwart Cloud Security Vulnerabilities

Latest

Governance & Risk Management

Citrix Acquisitions Boost Zero-Trust Defense for Hybrid Work

Michael Novinson • December 10, 2024

Citrix enhances its security for hybrid work by acquiring deviceTrust and Strong Network. Purchasing these European startups boosts protection for VDI, DaaS and cloud development, empowering organizations to enforce zero-trust principles and reduce risks across their hybrid environments.

Endpoint Security

OpenWrt Update Flaw Exposed Devices to Malicious Firmware

Anviksha More • December 10, 2024

A critical flaw in the updating service of a popular Linux operating system for embedded devices could enable hackers to compromise firmware with malicious images. OpenWrt developers patched the vulnerability, with a CVSS core of 9.3 and tracked as CVE-2024-54143.

Artificial Intelligence & Machine Learning

CyberEdBoard Profiles in Leadership: David Ortiz

Anna Delaney • December 10, 2024

David Ortiz was building websites over 20 years ago when he first become exposed to cybersecurity. Back then, his biggest worry was denial-of-service attacks. Today, as a CISO of a global company, emerging AI threats related to phishing and deepfakes are what keeps him up at night.

Artificial Intelligence & Machine Learning

Satya Nadella's Vision for Microsoft: AI, AI and AI

Yamini Kalra • December 10, 2024

Advanced AI took the center stage at Microsoft Ignite 2024. Reflecting on AI as the "most transformative technology of our time," CEO Satya Nadella set the tone for Microsoft's future where every facet of technology is integrated with AI in all key aspects - productivity, collaboration and security.

Identity & Access Management

Astrix's $45M Series B Targets Non-Human Identity Security

Michael Novinson • December 10, 2024

Astrix raises $45 million to advance AI agent security and expand its global presence. The company plans to double its workforce, focusing on anomaly detection and fingerprinting techniques for non-human identities along the correlating information about human and non-human identities.

Governance & Risk Management

Rhode Island Schools Deploy DNS Service to Tackle Ransomware

Chris Riotta • December 9, 2024

Rhode Island will become the first state in the nation to launch a statewide cybersecurity tool for K-12 schools, offering enhanced protection against ransomware threats with a new, no-cost, federally funded service that will shield 136,000 students across 64 school districts.

Artificial Intelligence & Machine Learning

Shaping the Future: How Gen AI Is Transforming 3D Design

Rahul Neel Mani • December 9, 2024

At AWS re:Invent 2024, Autodesk unveiled its innovative vision for generative AI in design. From Project Bernini's billion-parameter foundation model to sustainable workflows powered by AWS, the company is transforming 3D CAD design and shaping the future of creativity.

Cybercrime

Are We Winning Against Cybercriminals or Losing?

CyberEdBoard • December 9, 2024

Cybercriminals are launching relentless attacks. The potential for breaches and exploitation has increased as the world has become more connected, raising an urgent question: Are we winning the fight against cybercriminals, or are we just sinking deeper into their grasp?

Black Hat

Previewing Black Hat Europe 2024 in London: 20 Hot Sessions

Mathew J. Schwartz • December 9, 2024

Black Hat Europe returns to London with more than 45 keynotes and briefings tackling everything from bootloader bugs and flaws in artificial intelligence and large language model tools, to disrupting fake online brokerages and remotely hacking Volkswagen entertainment systems to track vehicles.

Cyberwarfare / Nation-State Attacks

Spyware Campaign Targets Sino Minority Groups Via WeChat

Anviksha More • December 6, 2024

A possible Chinese state threat group is targeting vulnerabilities in messaging apps to deliver spyware in cross-platform devices used by members of ethnic minorities targeted for repression by Beijing. Trend Micro dubs the group "Earth Minotaur."

Breach Notification

Hacker Extorts HDFC Life for Breach of 16 Million Records

Jayant Chakravarti • December 6, 2024

A threat actor who claims to have stolen 16 million customer records from HDFC Life is demanding a $6.9 million ransom to keep from selling it on the darkweb. The stolen records of the Indian insurance giant are being advertised for sale beginning Dec. 6 for 200,000 tether, or $200,000.

Fraud Management & Cybercrime

Dutch Counter-Ransomware Initiative Led to Global Takedowns

Akshaya Asokan • December 6, 2024

A Dutch public and private sector anti-ransomware initiative has contributed to ransomware disruptions globally, found an assessment from the University of Leiden. "Project Melissa" was launched in 2023 by Cybersafe Netherlands, the Dutch National Cyber Security Center and security companies.