Explore

FactFableFactFable
Why a Threat Intel Analyst Matters More in Cloud Environments

Why a Threat Intel Analyst Matters More in Cloud Environments

As businesses move to the cloud, the security playbook changes. Here is why a threat intelligence analyst is essential for navigating the new landscape.
ReutersReuters
CenterPoint Energy discloses customer data breach in SEC filing

CenterPoint Energy discloses customer data breach in SEC filing

(Corrects advisory to say that a September 14 story was updated with the company's response in bullet 5) Sept 14 (Reuters) - CenterPoint Energy said in an SEC filing on Monday that the company had become aware in September of an online post by a third party claiming to have obtained a dataset of
Rapid ReadRapid Read
Texas Utility CenterPoint Energy Confirms Data Breach After Hacker Leaks Customer Information

Texas Utility CenterPoint Energy Confirms Data Breach After Hacker Leaks Customer Information

CenterPoint Energy, a Houston-based public utility serving approximately 7 million customers across Indiana, Minnesota, Ohio, and Texas, has confirmed a data breach. The company disclosed that an unauthorized third party obtained personal information belonging to a portion of its customers through one of its external-facing systems. This confirmation follows claims made by a hacker on a cybercrime forum on September 12, who alleged to have stolen 7.5 million customer records from the utility. CenterPoint Energy has initiated an investigation into the incident. The utility has stated that the cybersecurity incident has not affected the delivery of electric and gas services and does not anticipate a material impact from the data breach. This is not the first time CenterPoint Energy has been targeted; previous incidents in 2024 involved an access broker named AntiBrok3rs and another hacker, with stolen data believed to originate from the Cl0p ransomware group's 2023 MOVEit campaign, often through third partie...
FactFableFactFable
The Real Reason Security Engineers Disagree About What Blue Team Defenders Should Read

The Real Reason Security Engineers Disagree About What Blue Team Defenders Should Read

Ever wonder why cybersecurity experts give conflicting advice on what defenders should read? It's a clash of core philosophies about what defense really is.
FactFableFactFable
The Hidden Vulnerability Behind Third-Party Risk for a Healthcare Organization

The Hidden Vulnerability Behind Third-Party Risk for a Healthcare Organization

Discover the unseen security risks healthcare organizations face from third-party vendors and learn why standard compliance checks are not enough.
Rapid ReadRapid Read
CISA's CDM Program Prioritizes Speed and Unification to Combat Evolving Cyber Threats

CISA's CDM Program Prioritizes Speed and Unification to Combat Evolving Cyber Threats

The Cybersecurity and Infrastructure Security Agency (CISA) is emphasizing the need for its Continuous Diagnostics and Mitigation (CDM) program to become significantly faster and more unified in providing cybersecurity tools and capabilities to federal agencies. Richard Grabowski, acting branch chief of service delivery and deputy program manager for the CDM program, stated that current collaboration methods are insufficient for past threats and will be even less effective for future ones. The program's core goals are velocity, unification, and data-driven risk management. Velocity involves pushing responsible automation to allow experts to focus on novel threats, while unification aims to connect deployments meaningfully to stimulate reusable lessons learned. Data-driven risk management ensures agencies have timely, accurate data for first response during crisis-level events. The CDM program has been evolving since the SolarWinds breach, which compromised at least nine federal agencies, highlighting the n...
ReutersReuters
UK, US and Netherlands issue advisory on Iran-linked spyware

UK, US and Netherlands issue advisory on Iran-linked spyware

LONDON, Sept 15 (Reuters) - Britain, the United States and the Netherlands on Tuesday issued a joint cybersecurity advisory detailing spyware they say is used by Iranian state-linked actors to target dissidents, activists and journalists.
Rapid ReadRapid Read
CISO Shares Lessons from LockBit Ransomware Attack on University

CISO Shares Lessons from LockBit Ransomware Attack on University

Zach Lewis, CISO at the University of Health Science and Pharmacy (UHSP) in St. Louis, shared insights from a LockBit ransomware attack that hit the institution in summer 2023. The university successfully recovered without paying the ransom, a process that involved significant challenges. The attack began with an outage, followed by the discovery of the ransomware note after files were encrypted. Lewis emphasized the importance of having a strong rapport with the executive team, which had previously participated in a ransomware tabletop exercise, enabling them to trust his leadership during the crisis. Post-incident, UHSP bolstered its security by migrating applications and infrastructure to cloud and SaaS platforms and centralizing identity and user access control through an enterprise browser.
FactFableFactFable
The Real Reason Security Engineers Disagree About Identity Management for a Higher Education Institution

The Real Reason Security Engineers Disagree About Identity Management for a Higher Education Institution

Beyond the technical jargon, the debate over identity management in universities is a clash of culture: academic freedom versus cybersecurity control.
TrendlineTrendline
Jones Day Appoints Alexander Southwell to Lead Cybersecurity, Privacy Data Protection Practice in New York

Jones Day Appoints Alexander Southwell to Lead Cybersecurity, Privacy Data Protection Practice in New York

Jones Day Appoints Alexander Southwell to Lead Cybersecurity, Privacy Data Protection Practice in New York
TrendlineTrendline
Deloitte Seeks Senior Red Team Operator to Enhance Global Cyber Resilience

Deloitte Seeks Senior Red Team Operator to Enhance Global Cyber Resilience

Deloitte Seeks Senior Red Team Operator to Enhance Global Cyber Resilience
TrendlineTrendline
Fintechs Urged to Implement Continuous Identity Assurance to Combat Account Theft

Fintechs Urged to Implement Continuous Identity Assurance to Combat Account Theft

Fintechs Urged to Implement Continuous Identity Assurance to Combat Account Theft