Matt Russo, director of product security, Medtronic

Tips to Improve Medical Device Vulnerability Communications

Marianne Kolbasuk McGee • May 13, 2022

New Health Sector Coordinating Council guidance aims to help medical device makers improve their communications regarding security vulnerabilities in their products, says Matt Russo, a security leader at Medtronic and a member of the task group that developed the document.

3rd Party Risk Management

Bill Requires Medical Device Makers to Enhance Cybersecurity

Latest

Blockchain & Cryptocurrency

Proof of Concept: How Can We Improve Industry Collaboration?

Anna Delaney • May 23, 2022

In this edition, Ari Redbord and Grant Schneider join ISMG editors to discuss the challenges ahead for the U.S. government as it plans to roll out EDR deployments at more than half of federal agencies this year, how stable the stablecoin economy really is and how to improve industry collaboration.

Business Continuity Management / Disaster Recovery

Conti Ransomware Group Retires Name After Creating Spinoffs

Mathew J. Schwartz • May 20, 2022

The Russian-language criminal syndicate behind the notorious Conti ransomware has retired that brand name, after having already launched multiple spinoffs to make future operations more difficult to track or disrupt, threat intelligence firm Advanced Intelligence reports.

Access Management

Five Eyes Alliance Advises on Top 10 Initial Attack Vectors

Mihir Bagwe • May 18, 2022

Poor security configurations, weak controls and gaps in authentication protocols are among the common initial access vectors "routinely exploited" by threat actors, the Five Eyes cybersecurity alliance says. Firms offering cybersecurity services weigh in on the gaps and implementation challenges.

Access Management

Proof of Concept: Apple/Microsoft/Google Back Passwordless

Anna Delaney • May 16, 2022

In the latest "Proof of Concept," Lisa Sotto, Jeremy Grant and ISMG editors discuss the significance of Apple, Google and Microsoft supporting the FIDO protocol's passwordless sign-in standard, progress made on Biden's cybersecurity executive order and updates on U.S. cybersecurity and privacy laws.

Business Continuity Management / Disaster Recovery

Hybrid War: 'It's Going to Get a Lot Worse'

Anna Delaney • May 11, 2022

Russia's use of wiper malware, DDoS attacks and targeted disinformation show it no longer depends on traditional methods in its war with Ukraine. John Walker, a professor and counterintelligence expert, says organizations need to be "more realistic" about how they handle cyberattacks.

Access Management

Apple, Google, Microsoft Unite to Make Passwordless Easier

Michael Novinson • May 7, 2022

Apple, Google and Microsoft are joining forces to back a standard that will allow websites and apps to offers passwordless sign-ins across devices and platforms. The three OS and browsing giants have put their weight behind a common passwordless sign-in standard created by the FIDO Alliance.

Endpoint Security

Mosyle Raises $196M to Strengthen Apple Security Platform

Michael Novinson • May 4, 2022

Mosyle closed a $196 million funding round to expand beyond mobile device management and provide a holistic security platform for Apple devices. The company wants to boost adoption of Mosyle Fuse, which combines MDM, endpoint security, encrypted DNS, identity management and app management.

Business Continuity Management / Disaster Recovery

Minimizing Damage From Ransomware Attacks Requires Planning

Mathew J. Schwartz • May 2, 2022

As ransomware-wielding attackers continue to target businesses large and small, the organizations that respond best and escape most unscathed from such attacks are those that already have in place well-honed, rehearsed plans, says ransomware expert and attorney Guillermo Christensen of Ice Miller.

Access Management

ISMG Editors: Bitcoin or Monero - What Do Criminals Prefer?

Anna Delaney • April 29, 2022

In this edition, four ISMG editors discuss important cybersecurity issues, including how virtual currency Monero is becoming the main alternative to Bitcoin as the crypto choice for criminals, the challenges involved in an identity-centric Zero Trust approach and how to influence change in culture.

Business Continuity Management / Disaster Recovery

Cybercrime: Ransomware Attacks Surging Once Again

Mathew J. Schwartz • April 28, 2022

Ransomware attacks have come storming back after experiencing their typical end-of-the year decline. Security researchers report that the greatest number of known victms has been amassed by Lockbit, followed by Conti, Hive and Alphv/BlackCat.

Endpoint Security

Are Rewards Effective in Combating Nation-State Cybercrime?

Anna Delaney • April 28, 2022

This ISMG Security Report analyzes the U.S. State Department's reward offer of up to $10 million for information about Russian military hackers implicated in NotPetya. It also examines how ransomware may evolve and the new cybersecurity draft guidance issued by the Food and Drug Administration.

Business Continuity Management / Disaster Recovery

FBI Alert: Have You Been Bitten by BlackCat Ransomware?

Mathew J. Schwartz • April 25, 2022

Has your organization been bitten by BlackCat ransomware, aka Alphv? If so, the FBI wants to hear details about how attackers broke in, cryptocurrency wallet addresses used to receive ransoms and other information that could help law enforcement authorities better track and block future attacks.