Ready, set, sanctions? If volunteer intelligence gatherers are correct, the US might have a good reason to impose sanctions on Russian infosec firm Kaspersky, which has been accused of helping Russia design drones used in the Ukrainian war ..read more

Exclusive Bad configurations, insecure versions of jQuery, and crummy cookies are some of myriad problems Five Chinese researchers examined the configurations of nearly 14,000 government websites across the country and found worrying lapses that could lead to malicious attacks, according to a not-yet-peer-reviewed study released last week ..read more

Customer Story Video Room & Board sells furniture to create warm, welcoming spaces for homes. So, when the world went remote, the Minnesota company immediately faced a huge challenge: to build an integrated security stack that was strong enough to protect company data -- as it crossed public clouds in coffee shops and homes, traveled back and forth between branch offices, and was transmitted to and from the company's network of design experts. The company tapped Cisco Umbrella to help build a safe experience, and to add DNS-layer security to internet traffic funneling in from many differen ..read more

Congress to hear how Citrix MFA snafu led to massive data theft, $870M+ loss UnitedHealth CEO Andrew Witty will tell US lawmakers Wednesday the cybercriminals who hit Change Healthcare with ransomware used stolen credentials to remotely access a Citrix portal that didn't have multi-factor authentication enabled ..read more

Asia In Brief PLUS: Huawei returns to top Chinese smartphone market; China's new IPv6 goals; Malaysia's golden VC Visa Japan's effort to start a business disposing of space junk is off to a promising start, after the ADRAS-J satellite spotted its first target and sent back images ..read more

Sponsored Post Check out the SANS CISO Primer for tips on hardening your organisation’s security posture in 2024 Ever get nostalgic for the good old days of cybersecurity protection? When attacks were for the most part amateurish and infrequent, and perhaps more in the nature of an occasional nuisance rather than a daily existential threat ..read more

Huawei is OK, but Xiaomi, OPPO, and Samsung are in strife. And Honor isn't living its name Many Chinese keyboard apps, some from major handset manufacturers, can leak keystrokes to determined snoopers, leaving perhaps three quarters of a billion people at risk according to research from the University of Toronto’s Citizen Lab ..read more

Systems Approach Machine learning has its place, just not in ways that suits today's hypesters Full disclosure: I have a history with AI, having flirted with it in the 1980s (remember expert systems?) and then having safely avoided the AI winter of the late 1980s by veering off into formal verification before finally landing on networking as my specialty in 1988 ..read more

Don't get too comfortable: 'Line Dancer' malware may be targeting other vendors, too A previously unknown and "sophisticated" nation-state group compromised Cisco firewalls as early as November 2023 for espionage purposes — and possibly attacked network devices made by other vendors including Microsoft, according to warnings from the networking giant and three Western governments ..read more

Their holiday options are now far more restricted The US has charged and sanctioned four Iranian nationals for their alleged roles in various attacks on US companies and government departments, all of whom are claimed to have worked for fake companies linked to Iran's military ..read more