Just Like Windows: Linux Targeted by First-Ever UEFI Bootkit - UPDATED

Prajeet Nair • November 28, 2024

Cybersecurity researchers have discovered the first-ever UEFI bootkit designed to target Linux systems and subvert their boot process for malicious purposes. The "Bootkitty" malware, first uploaded to VirusTotal this month, appears to be more "proof of concept" than full-fledged threat, they said.

Governance & Risk Management

NIST IoT Device Security Framework to Get an Update

Latest

ISMG Editors: Major Crypto Mixer Decision Redefines Rules

Anna Delaney • November 29, 2024

In the latest weekly update, ISMG editors discussed Tornado Cash's landmark legal victory and what it means for crypto mixers, the impact of artificial intelligence on data privacy, and advancements in cybersecurity for which the industry can be thankful as it heads into 2025.

Encryption & Key Management

The Growing Quantum Threat to Enterprise Data: What Next?

Cdr Rishi Das S. (Retd) • November 29, 2024

As quantum computing continues to evolve, cybersecurity professionals and enterprise leaders must grapple with a future where current encryption technologies - on which our entire digital infrastructure is built - may no longer be secure. What next steps must they take now?

Cyberwarfare / Nation-State Attacks

T-Mobile Disputes Claims of Chinese Hack on Customer Data

Chris Riotta • November 27, 2024

T-Mobile disputed claims Wednesday that Chinese state-sponsored hackers breached its systems and stole customer data, warning that some U.S. communications networks may still be compromised and detailing how its layered defenses and third-party cybersecurity partnerships thwarted the attack.

CISA Red Team Finds Alarming Critical Infrastructure Risks

Chris Riotta • November 21, 2024

The U.S. cyber defense agency is urging critical infrastructure operators to learn from the experience of a volunteer red teaming test and not rely too heavily on host-based endpoint detection and response solutions at the expense of network layer protections.

Open XDR

N-able Strengthens Cybersecurity via $266M Adlumin Purchase

Michael Novinson • November 20, 2024

With Adlumin’s cloud-native XDR and MDR services, N-able consolidates its position as a leader in IT management. Buying the Washington D.C.-based security operations vendor for up to $266 million drives value through AI-powered threat detection and compliance solutions tailored for MSPs.

Data Loss Prevention (DLP)

Data Protection Startup Cyera Raises $300M on $3B Valuation

Michael Novinson • November 20, 2024

Cyera secures $300M in funding from Accel and Sapphire Ventures, doubling its valuation to $3 billion. The company is enhancing its data security platform by integrating DSPM with DLP and identity security capabilities, addressing enterprise demand for comprehensive solutions.

Cybercrime

Suspected Russian Hackers Infect 20,000 IoT Devices

Akshaya Asokan • November 18, 2024

A threat actor with suspected ties to Russian nation-state hackers has listed thousands of IoT devices as proxy networks within minutes of their initial compromise. A campaign that began in 2020 has so far infected 20,000 IoT devices, according to a new report by Trend Micro.

Operational Technology (OT)

Schneider Electric Warns of Critical Modicon Flaws

Prajeet Nair • November 13, 2024

French multinational Schneider Electric disclosed critical vulnerabilities in its Modicon M340, Momentum and MC80 programmable automation controllers. The vulnerabilities could allow unauthorized access, data manipulation and system interruptions.

Endpoint Detection & Response (EDR)

Trustwave, Cybereason Merge to Form an MDR Security Stalwart

Michael Novinson • November 12, 2024

SoftBank-backed merger between Trustwave and Cybereason brings together leading MDR, EDR, DFIR and threat intelligence capabilities. The combined organization aims to improve AI-driven detection and enhance Microsoft E5 support, targeting enterprise, mid-market, and public sector clients worldwide.

Application Security

Snyk Acquires Probely to Strengthen API Security for AI Apps

Michael Novinson • November 12, 2024

By buying DAST provider Probely, Snyk bolsters its platform with advanced API security testing for early SDLC stages. This acquisition aims to help developers identify and reduce vulnerabilities in AI-driven and API-heavy applications. Full integration into Snyk's platform is slated for early 2025.

Governance & Risk Management

IT as OT's Shield: Visibility Matters in Converged Defense

Prajeet Nair • November 4, 2024

As OT systems become more interconnected, traditional air gaps disappear, creating new risks, said Joseph Carson, chief security scientist and advisory CISO at Delinea. The convergence of IT and OT environments requires a stronger focus on protecting digital identities and access controls.

Endpoint Security

HardPwn 2024: A Researcher's Passion for Hacking IoT Devices

Athira Nair • November 1, 2024

Dennis Giese, a security researcher and engineer, built his first computer at around age 8 using spare parts. Years later, he hacked his first robotic vacuum cleaner. Giese reflects on his journey as a researcher and ethical hacker during HardPwn, a hardware hackathon hosted by Hardwear.io in Amsterdam.