Mastering the cybersecurity tightrope of protection, detection, and response

In this Help Net Security interview, Chester Wisniewski, Director and Global Field CISO at Sophos, discusses the shifting ransomware landscape, the risks posed by quantum decryption threats, and the role of vendor security validation. Wisniewski notes … Continue reading Mastering the cybersecurity tightrope of protection, detection, and response

SailPoint IPO Signals Bright Spot for Cybersecurity

In a signal move for the cybersecurity sector, identity and access management (IAM) vendor SailPoint has made its return to public markets.
The post SailPoint IPO Signals Bright Spot for Cybersecurity appeared first on SecurityWeek.
Continue reading SailPoint IPO Signals Bright Spot for Cybersecurity

IT Teams Worry About Increasing Cost of Cyber Tools From AI Features, While Criminals Barely Use Them

Most IT leaders believe generative AI will increase the cost of their security tools, according to Sophos research. But, by the looks of cyber crime forums, hackers are barely using AI. Continue reading IT Teams Worry About Increasing Cost of Cyber Tools From AI Features, While Criminals Barely Use Them

Ransomware attackers are “vishing” organizations via Microsoft Teams

The “email bombing + posing as tech support via Microsoft Teams” combination is proving fruitful for two threat actors looking to deliver ransomware to organizations, and they seem to be ramping up their efforts. “Sophos MDR has obser… Continue reading Ransomware attackers are “vishing” organizations via Microsoft Teams

Ransomware in 2024: New players, bigger payouts, and smarter tactics

In 2024, ransomware remained the top cybersecurity threat to organizations worldwide. New groups filled the void left by law enforcement crackdowns, targeting businesses with record-breaking ransom demands and sophisticated tactics. In this article, yo… Continue reading Ransomware in 2024: New players, bigger payouts, and smarter tactics

Cleo patches zero-day exploited by ransomware gang

Cleo has released a security patch to address the critical vulnerability that started getting exploited while still a zero-day to breach internet-facing Cleo Harmony, VLTrader, and LexiCom instances. Version 5.8.0.24 of the three products, which was pu… Continue reading Cleo patches zero-day exploited by ransomware gang

US Sanctions Chinese Cybersecurity Firm for 2020 Ransomware Attack

Chinese cybersecurity firm Sichuan Silence has been sanctioned for exploiting a vulnerability in Sophos firewalls used at critical infrastructure organizations in the U.S. Continue reading US Sanctions Chinese Cybersecurity Firm for 2020 Ransomware Attack