Newsletters

Elon Musk has blamed a ‘massive cyberattack’ for widespread X outages experienced by tens of thousands of users globally.

A subgroup of the Russia-linked Seashell Blizzard is tasked with broad initial access operations to sustain long-term persistence.

An anonymous Russian-speaking hacker is claiming to have stolen the login credentials of 20 millions OpenAI users and is offering the data for sale on the dark web.

An Alberta Crown corporation says it recently experienced “network issues” after it was the target of a cyberattack.

The US Treasury Department notified lawmakers that a China state-sponsored actor infiltrated Treasury workstations in what officials are describing as a “Major Incident”.

FBI and CISA officials said it was impossible to predict when the telecommunications companies would be fully safe from interlopers.

The expenses related to the recent cybersecurity incident suffered by US oil giant Halliburton reached $35 million by the end of September, according to the company’s latest financial report.

Threat actors have been sending out phishing emails that purport to come from artificial intelligence company OpenAI, informing recipients that their “latest subscription payment for ChatGPT was unsuccessful” and instructing them to click on a link to update payment information.

Cyber threats to water systems, electrical grids, and the space sector are on the rise, but new resources, policies, and strategies could help.

With this final rule, DoD establishes the Cybersecurity Maturity Model Certification (CMMC) Program in order to verify contractors have implemented required security measures necessary to safeguard Federal Contact Information (FCI) and Controlled Unclassified Information (CUI).

A report from insurer QBE predicts that the world will experience 211 significant cyber attacks this year, marking 105% increase over four years.

Once a radical idea, zero trust is now the dominant paradigm in enterprise security, largely supplanting the older perimeter-defense model.

The FBI warns of North Korean threat actors conducting social engineering campaigns targeting employees in the cryptocurrency industry.

NIST has formally published three post-quantum cryptography standards from the competition it held to develop cryptography able to withstand the anticipated quantum computing decryption of current asymmetric encryption.

Delta Air Lines has reportedly hired a prominent law firm to help the Atlanta-based carrier pursue potential damages from CrowdStrike and Microsoft following the global tech outages that caused a slew of internal computer issues and prompted thousands of canceled flights earlier this month.

AT&T reportedly paid a hacker more than $370,000 to remove stolen customer data. In an extraordinary turn of events, the ransom may not have gone to those responsible for the breach.

The New York Times has warned a number of its freelance associates that their data may have been stolen in a recent attack on its GitHub repositories.

With Canadians reporting millions in financial losses due to cybercrime, the auditor general is warning that the federal government ‘does not have’ the capacity or tools to fight cybercrime effectively, citing a series of alarming examples where agencies fell short.

In a filing to the Maine Attorney General, Nissan North America (NNA) admitted a major cybersecurity incident that happened on November 7th, 2023.

Cybersecurity is no longer a backroom IT concern but a pivotal agenda item in boardroom discussions. The surge in cyber threats, coupled with their capacity to disrupt business operations, erode customer trust, and incur significant financial losses, underscores the strategic value of robust cybersecurity measures.

The developers of a notorious 2FA account security bypass tool have launched an updated version of their “as-a-service” kit that is targeting Microsoft 365 and Gmail account holders.

Nist’s cybersecurity framework (CSF) now explicitly aims to help all organizations - not just those in critical infrastructure, it’s original target audience to manage and reduce risk.

LockBit is now running from backup servers and has a new Dark Web Presence after their site’s recent takedown by the FBI and international partners.

A critical vulnerability in Shim could allow a network attacker to bypass secure boot and take over a vulnerable Linux system.

In 2024, quantum industry experts from technology companies and analyst firms predict a year rich in quantum technology and hardware advancements and deployments, with an increased focus on securing the digital landscape against quantum threats.