Citrix Acquisitions Boost Zero-Trust Defense for Hybrid Work

Michael Novinson • December 10, 2024

Citrix enhances its security for hybrid work by acquiring deviceTrust and Strong Network. Purchasing these European startups boosts protection for VDI, DaaS and cloud development, empowering organizations to enforce zero-trust principles and reduce risks across their hybrid environments.

Artificial Intelligence & Machine Learning

Sixgen's Kyrus Acquisition Boosts National Cybersecurity

Latest

Cloud Security

Financial Sector Turning to Multi-Vendor Cloud Strategies

Chris Riotta • December 10, 2024

Financial institutions are increasingly adopting multi-cloud strategies to mitigate rising cyber risks and comply with complex regulations, according to a new report. The move enhances flexibility and disaster recovery, though challenges remain, from implementation costs to a growing skills gap.

Breach Notification

Hospital Notifies 316,000 of Breach in Christmas 2023 Hack

Marianne Kolbasuk McGee • December 10, 2024

A Massachusetts hospital is notifying 316,000 people that their information was compromised in a cyberattack discovered nearly a year ago on Christmas 2023. Cybercriminal group Money Message had claimed that it stole 600 gigabytes data, posting patient and employee records on the dark web.

Endpoint Security

OpenWrt Update Flaw Exposed Devices to Malicious Firmware

Anviksha More • December 10, 2024

A critical flaw in the updating service of a popular Linux operating system for embedded devices could enable hackers to compromise firmware with malicious images. OpenWrt developers patched the vulnerability, with a CVSS core of 9.3 and tracked as CVE-2024-54143.

Cyberwarfare / Nation-State Attacks

US Indicts, Sanctions Alleged Chinese Sophos Firewall Hacker

David Perera • December 10, 2024

The U.S. federal government rolled out its heavy guns Tuesday against a Chinese hacker allegedly at the center of a zero-day exploit used to hack firewalls made by Sophos, unsealing an indictment, rolling out sanctions and offering $10 million for information leading to the suspect's arrest.

Artificial Intelligence & Machine Learning

CyberEdBoard Profiles in Leadership: David Ortiz

Anna Delaney • December 10, 2024

David Ortiz was building websites over 20 years ago when he first become exposed to cybersecurity. Back then, his biggest worry was denial-of-service attacks. Today, as a CISO of a global company, emerging AI threats related to phishing and deepfakes are what keeps him up at night.

Cybercrime

Moody's: Hackers Aim for Big Payouts, Supply Chain Attacks

David Perera • December 9, 2024

Improved cybersecurity will result in ransomware hackers targeting larger organizations to wring out high dollar extortion payments and intensified focus on supply chain attacks, predicts Moody's Ratings. The share of ransomware victims willing to meet criminal demands for money is at record lows.

Governance & Risk Management

Rhode Island Schools Deploy DNS Service to Tackle Ransomware

Chris Riotta • December 9, 2024

Rhode Island will become the first state in the nation to launch a statewide cybersecurity tool for K-12 schools, offering enhanced protection against ransomware threats with a new, no-cost, federally funded service that will shield 136,000 students across 64 school districts.

3rd Party Risk Management

FDA Urges Blood Suppliers to Beef Up Cyber

Marianne Kolbasuk McGee • December 9, 2024

The Food and Drug Administration is urging blood suppliers - a recent target of attacks - to bolster their cybersecurity practices to prevent and mitigate cyber incidents that could affect the supply and safety of critical blood and blood components used for transfusions and other patient care.

Artificial Intelligence & Machine Learning

Shaping the Future: How Gen AI Is Transforming 3D Design

Rahul Neel Mani • December 9, 2024

At AWS re:Invent 2024, Autodesk unveiled its innovative vision for generative AI in design. From Project Bernini's billion-parameter foundation model to sustainable workflows powered by AWS, the company is transforming 3D CAD design and shaping the future of creativity.

Cybercrime

Are We Winning Against Cybercriminals or Losing?

CyberEdBoard • December 9, 2024

Cybercriminals are launching relentless attacks. The potential for breaches and exploitation has increased as the world has become more connected, raising an urgent question: Are we winning the fight against cybercriminals, or are we just sinking deeper into their grasp?

Black Hat

Previewing Black Hat Europe 2024 in London: 20 Hot Sessions

Mathew J. Schwartz • December 9, 2024

Black Hat Europe returns to London with more than 45 keynotes and briefings tackling everything from bootloader bugs and flaws in artificial intelligence and large language model tools, to disrupting fake online brokerages and remotely hacking Volkswagen entertainment systems to track vehicles.

Cyberwarfare / Nation-State Attacks

Spyware Campaign Targets Sino Minority Groups Via WeChat

Anviksha More • December 6, 2024

A possible Chinese state threat group is targeting vulnerabilities in messaging apps to deliver spyware in cross-platform devices used by members of ethnic minorities targeted for repression by Beijing. Trend Micro dubs the group "Earth Minotaur."