George Kurtz, co-founder, president and CEO, CrowdStrike (Image: CrowdStrike)

CrowdStrike Sales Growth Slows as SMB Clients Delay Spending

Michael Novinson • November 29, 2022

A longer sales cycle for small businesses and delayed subscription start dates for large enterprises have forced CrowdStrike to lower its sales forecast going forward. The Austin-based endpoint security company says deals with SMB clients took 11% longer to close in the fiscal quarter ended Oct. 31.

►

Application Security

Lorenz Ransomware Alert: Risk to Healthcare, Public Sector

Latest

Fraud Management & Cybercrime

Server Remains Down; India's Premier Healthcare Uses Paper

Prajeet Nair • November 29, 2022

India's flagship combined public medical university and hospital continues to grapple with the fallout of a cyber incident it underwent last Wednesday. Patient care services remain affected as of Tuesday as physicians and staff use manual processes in place of disabled electronic systems.

General Data Protection Regulation (GDPR)

UK Companies Fear Reporting Cyber Incidents, Parliament Told

Akshaya Asokan • November 29, 2022

U.K. businesses shy from involving police in cyber incident response for fear of regulatory consequences, lawmakers sitting on Parliament's Joint Committee on National Security Strategy heard. Allowing businesses to anonymously disclose incidents would result in more data, suggested a witness.

Critical Infrastructure Security

TSA Plans Cyber Risk Regulation for Pipeline and Rail Sector

David Perera • November 29, 2022

The oil pipeline and rail sectors could be required to implement cyber risk management following the Transportation Security Administration's initiation of a rule-making process. The Biden administration is pressuring critical infrastructure operators through voluntary measures and new regulation.

Industry Specific

Why Are HIPAA Fines Down 93% - With Data Breaches Soaring?

Marianne Kolbasuk McGee • November 29, 2022

Healthcare providers and their vendors often fear federal regulatory action, but do fines and corrective action many any difference at all? As breach cases have nearly doubled since 2018, federal fines dropped 93% in 2022, and some say the agency is understaffed and crippled by legal challenges.

Industry Specific

Cybersecurity Stigma: More Victims Avoid Saying 'Ransomware'

Mathew J. Schwartz • November 29, 2022

Is the ransomware problem getting better or worse? Unfortunately, gauging attack trends continues to be complicated by the fact that many incidents never come to light publicly and many victims are hesitant to say "ransomware" when describing what hit them, says Comparitech's Rebecca Moody.

Governance & Risk Management

Indiana Health Entity Reports Breach Involving Tracking Code

Marianne Kolbasuk McGee • November 28, 2022

An Indiana healthcare network, Community Health Network, is the latest medical entity to classify its use of online tracking code as a data breach reportable to federal regulators. It said the unauthorized access/disclosure breach affected 1.5 million individuals.

Geo Focus: The United Kingdom

UK Online Safety Bill Harms Privacy & Security, Experts Say

Akshaya Asokan • November 28, 2022

The United Kingdom is the newest front in the long-fought conflict over end-to-end encryption, as a slew of civil society groups urge the prime minister not to back legislation empowering regulators to force online intermediaries into providing decrypted messages.

Fraud Management & Cybercrime

Greater Toronto School Offline Following 'Cyber Incident'

Mihir Bagwe • November 28, 2022

Staffers reacted with incredulity after a cyber incident at a Greater Toronto school district kept systems offline and forced teachers to take attendance manually. Online learning and student Chromebooks were not working at Durham District School Board, which serves more than 74,000 students.

Cybercrime

A Look Ahead: Lisa Sotto's Privacy, Security Outlook in 2023

Michael Novinson • November 28, 2022

A multitude of state privacy laws taking effect in 2023 has forced organizations to revamp their compliance programs to incorporate the disparate requirements, says Lisa Sotto. Companies across every industry face a threat environment that's more active and malicious than ever before.

3rd Party Risk Management

Addressing the Shortage of Medical Device Cyber Talent

Marianne Kolbasuk McGee • November 28, 2022

The shortage of cybersecurity professionals in the United States includes a scarcity of expertise in medical device security, says Bill Aerts, senior fellow and managing director of the University of Minnesota's recently launched Center for Medical Device Cybersecurity.

Cybercrime

SharkBot Trojan Spread Via Android File Manager Apps

Prajeet Nair • November 26, 2022

The operators behind the banking Trojan SharkBot are targeting Google Play users to spread its malware masquerading as Android file manager apps that already have tens of thousands of installations, according to researchers from Bitdefender.

Cybercrime

ISMG Editors: The Rise of Info Stealing Malware

Anna Delaney • November 25, 2022

In the latest weekly update, Information Security Media Group Editors discuss current cybersecurity and privacy issues, including advice on strengthening off-hours defenses during the holiday season, emerging cybercrime trends in 2022, and Palo Alto's first big M&A since early 2021.