2023-09-13 - Security World Trend Now

Claroty Revolutionizes Cyber-Physical Risk Reduction with New Vulnerability & Risk Management Capabilities

Patel Maya1 year ago011 mins

## Claroty Enhances SaaS Platforms for Cyber-Physical Systems Risk Management **NEW YORK, Sept. 13, 2023** – Claroty, a leading cyber-physical systems (CPS) protection company, has announced significant enhancements to its Software-as-a-Service (SaaS) platforms’ vulnerability and risk management (VRM) capabilities. These enhancements aim to empower security teams in evaluating and strengthening their organization’s risk posture concerning…

Navigating the Depths of Online Security: NordVPN Unveils Sonar to Combat Phishing Attacks

Emma Thompson1 year ago011 mins

NordVPN Launches AI-Enabled Browser Extension Sonar to Fight Cybercrimes Introduction NordVPN, a leading cybersecurity company, has unveiled Sonar, an experimental AI-enabled browser extension designed to help internet users identify phishing emails and protect themselves from cybercrimes. As phishing attacks become increasingly automated, endangering internet users’ security, NordVPN aims to combat this threat by using artificial…

Navigating the Complex Landscape: Safeguarding Rail Cybersecurity

Nguyen Michael1 year ago09 mins

Rail Cybersecurity: Safeguarding a Complex Landscape The Appeal and Vulnerabilities of Railways Rail transportation remains one of the most popular modes of travel and plays a critical role in the US economy. The sheer volume of goods and people moved by railways makes them an appealing target for cyber threat actors. Imagine the disruption if…

Addressing the Cyber Alert Gap: Recommendations for Corporate Boards

Nguyen Michael1 year ago010 mins

Government CISA Advisory Committee Urges Action on Cyber Alerts and Corporate Boards Introduction The Cybersecurity and Infrastructure Security Agency’s (CISA) advisory committee has delivered a comprehensive list of recommendations to CISA Director Jen Easterly. These recommendations aim to enhance cybersecurity expertise on corporate boards of directors, develop a national cybersecurity alert mechanism, and ensure the…

The Urgent Call for Stringent Federal Mandates on Medical-Device Cybersecurity

Morgan Sarah1 year ago06 mins

New FDA Regulations Require Stronger Cybersecurity Measures for Medical Devices Introduction On October 1, the US Food and Drug Administration (FDA) will end the grace period for compliance with new cybersecurity regulations for medical device makers. These regulations, which were implemented in March, require manufacturers to submit plans for monitoring and patching post-market cybersecurity vulnerabilities,…

Kubernetes Admins Urged to Act Quickly and Secure Clusters Against Rising RCE Vulnerabilities

Emma Thompson1 year ago07 mins

New Kubernetes Vulnerabilities Expose Windows Endpoints to Remote Code Execution A recent report from Akamai has highlighted two new high-severity vulnerabilities in Kubernetes that leave all Windows endpoints on an unpatched cluster susceptible to remote code execution (RCE) with system privileges. The findings build upon previous research into the CVE-2023-3676 vulnerability reported last July. According…

Unmasking the Threats: Unraveling the XSS Vulnerabilities in Microsoft Azure HDInsight

Patel Maya1 year ago08 mins

Microsoft Azure HDInsight Faces Scrutiny for Multiple XSS Vulnerabilities Microsoft’s cloud security practices have come under scrutiny once again as it recently patched eight severe vulnerabilities in various Apache services in Azure HDInsight, the company’s managed big data analytics service. The discovery of these vulnerabilities, categorized as cross-site scripting (XSS) issues, raises concerns about the…

Failing LockBit Ransomware Gives Birth to the ‘3AM’ Attack: A New Menace on the Rise

Patel Maya1 year ago08 mins

In a Recent Attack, Hackers Deploy 3AM Ransomware After Failing to Execute LockBit The Attack In a recent attack against a construction company, hackers attempted to deploy LockBit ransomware but were unsuccessful. However, they were able to break through using a second ransomware called 3AM, which had never been seen before. Researchers from Symantec reported…

AuthMind Scores $8.5 Million in Seed Funding to Revolutionize IT Disaster Recovery Technology

Emma Thompson1 year ago07 mins

AuthMind Raises $8.5M in Seed Funding for ITDR Technology Maryland-based startup AuthMind has secured $8.5 million in seed-stage funding to develop security software in the Identity Threat Detection and Response (ITDR) category. The funding round was led by Ballistic Ventures, a cybersecurity-focused venture capital firm known for its investments in cloud and data security startups….

The Rise of Keystroke Exploits: A Stealthy Threat to Password Security

Morgan Sarah1 year ago07 mins

Exploit Steals Passwords: A New Threat to WiFi Security The Background In the ever-evolving landscape of cybersecurity threats, researchers from universities in China and Singapore have unveiled a new security gap that allows attackers to steal passwords by tapping into the user’s keystrokes. Termed as “Wiki-Eve,” this attack takes advantage of a feature in wireless…