Daniel Trauner News Today

2024 will be a year dominated by artificial intelligence-created deepfakes and advanced phishing attacks, but also new AI-based detection applications to help defenders. These are among the predictions from companies that provide cybersecurity solutions. We've collected comments from over 30 vendors to give infosec pros an idea of what they will face in the next

As AI technology advances, cyber defenders are spending more on the technology to defend against malicious actors who currently hold an asymmetric advantage in deploying new AI-generated threats.

The rate of damaging data breaches will continue to pick up over the next year, experts warn - and it’s on businesses to be prepared.

One expert compares aggressive or tricky security testing to ambulance chasing sales tactics, creating a negative association that gets in the way of the constructive relationship building between security and other areas of the business.

As financial firms embrace security awareness training to instill good cyber-hygiene, getting employees to stick to the rules has been a challenge, especially at a large organization where people might often be working remotely.

TSA formalizes new cybersecurity rules for critical pipeline owners and operators - SiliconANGLE

SHARE The city of Austin, Texas, is reported to have been hacked and a Russian state-sponsored group is suspected to be behind the intrusion. First reported today by The Intercept, which references documents prepared by the Microsoft Threat Intelligence Center that have not been publicly released, the hack has been traced to mid-October. It’s said to have been used as a jumping-off point for more attacks. The Russian advanced persistent threat group Berserk Bear, which may be linked to Russ...

FireEye on Sunday said that an investigation it was conducting into a breach of its own network last week uncovered a threat actor widely distributing a backdoor dubbed SUNBURST by hiding it in legitimate updates of SolarWinds Orion network management technology. SUNBURST (SolarWinds.Orion.Core.BusinessLayer dot dll) is a sort of first-stage Trojan that the attackers were using to drop additional payloads for escalating privileges, lateral movement, and data theft on infected networks, FireEye�...

Security vendor FireEye uncovered the SolarWinds campaign when investigating a breach of its own network recently that resulted in several of its offensive hacking tools being stolen. As expected, the targeted attack has once again focused attention on the long-standing issue of supply chain and third-party security. It has also raised alarm about the extent to which Russian advanced persistent threat (APT) actors and threat actors from other countries may have insinuated themselves into, and a...

minute read Share this article: Meanwhile, FireEye has found a kill switch, and Microsoft and other vendors are quickly moving to block the Sunburst backdoor used in the attack. SECOND UPDATE A perfect storm may have come together to make SolarWinds such a successful attack vector for the global supply-chain cyberattack discovered this week. Researchers said that includes  its use of a default password (“SolarWinds123”) that gave attackers an open door into its software-updat...