Phishing Scams Tax Time Trauma: Cybercriminals File for Phishing Refunds. Your CISO Intelligence Read for Saturday 1st February 2025. It's that time of year, and the phishers are keen to be involved!
Cyber Incident Response and Awareness Hackers Aiming High, ENGlobal's Six Week Timeout, The Mishing Game, Remote Assistance: the Hackers' Latest Exploitation Tool, Influencers under Siege, and Taking A Bite Out of the Apple. It's CISO Intelligence for Friday 31st January 2025. Today's topics: cue the music for the smooth operators, the night they drove ENGlobal down, "It was only a pdf", when "the remote help" isn't what it seems, influencers: you thought you were safe? And what to do when the fruit is soured.
Cybersecurity Framework What's New, CISO? An Expensive Oops, New Doesn't Mean Safe, Greed is Good - Again, the FBI's Forum Wipeout, and Keeping History Alive. It's CISO Intelligence for Thursday 30th January 2025 In today's CISO Intelligence: keeping up with the threat landscape, PayPal's security lapse payout, even the latest apps aren't safe, the crypto hackers working hard for the money, a major win for the Feds, and hanging on to a whole lot of history.
Cyberattack Strategies New Cryptojacking Swing, The Hole in Kubernetes, SaaS Cloud Busting, E-Signatures: Trust and Verify, All-Singing-and-Dancing MDR, and AI: the Good, the Bad and the Ugly. It's all in CISO Intelligence for Wednesday 29th January 2025 You don't know what you've got 'til it deteriorates, GETting a whole lot more than expected, there's always a dark side, testing the E-signature phishing boundaries, MDR teams: much more than a monitoring service, and we really need to talk about AI.
Data Sovereignty Knowing Limits, Fool Me Twice, Not Minding the Gaps, Heavy on the Condiments, Groundhog Syndrome, and Old Habits Create Jeopardy. It's CISO Intelligence for Tuesday 28th January 2025! Today we're looking at data boundaries, when lessons not learned are repeated, more holes than substance, when over-seasoning leads to clogging the senses, the repetitive result of a self-inflicted mishap, and when "if it ain't broke don't fix it" is not a flex.
System Vulnerability MS's Cracked Windows, Patching up Oracle, A Chip in a Cornerstone, AI: The Great Automater, The Exit Bag Check, and Digital Alarm Bells Ringing in the Car Industry. It's CISO Intelligence for Monday 27th January 2025. Today's topics: hackers using the "sneak in/change account access/run rampant" technique, Oracle creating a veritable quilt to cover its flaws, issues with Apache's building blocks, AI easing the analyst's load, making sure leavers exit empty-handed, and a bumpy road trip into cybersecurity.
Identity & Access Management Another Brick in the Google Android Wall. The CISO Intelligence Sunday Read for 26th January 2025 Upping the Android gatekeeping ante.
Network Security Threats Magic Packets and Where to Find Them: A CISO Intelligence Mystic Read for Saturday 25th January 2025! The dark arts at work.
Domain Security Passwords and AI, Weak Spots Lead to Breaches, Aww...Ouch! A Name is Everything, Trojan Security, and Is it Really CERT-UA? It's CISO Intelligence for Friday 24th January 2025 Today's subjects: no, "password" won't do, even big dogs can be breached, don't be fooled by a cuddly-sounding label, won't someone think of the domain name, when security checks get phished, and cyber devils in disguise. Thank goodness it's Friday!
Threat Intelligence Verification CISA's New Fangs, Fact Check, Fact Check and Fact Check Again, Smooth Ransomware Operators, The Great Data Breach Lawsuit Gallop, Patches Galore, and Loose Lips: Security Breach. It's CISO Intelligence for Thursday 23rd January 2025. In today's issue, CISA now has more bite, always check sources before passing on information, smooth-talking hackers, you can't dance your way out of a lawsuit, there's a whole lot of patching going on, and when bragging becomes a security breach.
Encryption Tightening Shared Network Encryption Loopholes, The Healthcare Headache, Outlook Wobbles, Databases Scream for Help, Tripwire Raises it Game, and The Expired Domain Nightmare. It's CISO Intelligence for Wednesday 22nd January 2025 Today our subjects are: keeping the communications encryption chain secure, when healthcare is the patient, Outlook having the vapours, bum notes from poor database security, Tripwire setting new traps, and when lack of attention creates domain nightmares.
Web Application Security The Dangers of Straying from the Path, WhatsApp: Not Special for Envoys, FBI Snooped, Pixels and Privacy, Blocking Breaches, and Broadening Compliance Directives. It's CISO Intelligence for Tuesday 21st January 2025! Today's topics: do you know where you're going to? WhatsApp not being in the diplomatic bag, breaking through the Fed's defenses, the downside of the breadcrumb trail, holding back the breaches, and spreading the compliance net.