D3FEND Framework Seeks to Lay Foundation for Cyber Defense
The MITRE project, funded by the National Security Agency, aims to create a foundation for analyzing and discussing cyber defenses and could shake up the vendor community.First ATT&CK, now...
High-Level FIN7 Member Sentenced to 7 Years in Prison
Andrii Kolpakov, who served as a high-level pentester for the criminal group, was also ordered to pay $2.5 million in restitution.Ukrainian national Andrii Kolpakov has been sentenced to seven...
Despite Heightened Cyber-Risks, Few Security Leaders Report to CEO
A new report suggests that top management at most companies still don't get security.Despite mounting concerns over data breaches and the growing sophistication of the threat landscape, top management at...
When Will Cybersecurity Operations Adopt the Peter Parker Principle?
Having a prevention mindset means setting our prevention capabilities to "prevent" instead of relying on detection and response.The recent attacks caused by the Darkside ransomware attack impacted not just the...
Microsoft Tracks New BazaCall Malware Campaign
Attackers use emails to prompt victims to call a fraudulent call center, where attackers instruct them to download a malicious file.Microsoft Security Intelligence is tracking an active BazaCall malware...
VMs Help Ransomware Attackers Evade Detection, But It’s Uncommon
Some ransomware attackers use virtual machines to bypass security detection, but adoption is slow for the complicated technique.Security researchers have discovered another ransomware group using virtual machines (VMs) to...
Data Leaked in Fertility Clinic Ransomware Attack
Reproductive Biology Associates says the data of 38,000 patients may have been compromised in the April cyberattack.Reproductive Biology Associates says the data of approximately 38,000 people may have been...
Did Companies Fail to Disclose Being Affected by SolarWinds Breach?
The SEC has sent out letters to some investment firms and publicly listed companies seeking information, Reuters says.The US Securities and Exchange Commission (SEC) has reportedly opened a probe...
Identity Eclipses Malware Detection at RSAC Startup Competition
All 10 finalists in the Innovation Sandbox were focused on identity, rather than security's mainstay for the last 20 years: Malware detection. At the recent RSA Conference, malware detection...
Baltimore County Public Schools’ Ransomware Recovery Tops $8M
The school district has spent seven months and a reported $8.1 million recovering from the November attack.Baltimore County Public Schools (BCPS) has reportedly spent more than $8.1 million recovering...
