Cyber Insurance Claims Are Declining as Firms Take Ransomware Recovery Into Their Own Hands

These numbers are linked to an increasing number of ransomware recoveries, Databarracks said.

In previous years, the majority of organizations chose to pay out in the event of an attack.

Cyber_Security_Channel

Microsoft Apps for macOS Exposed to Library Injection Attacks

This could allow attackers to inject any library and run arbitrary code within the compromised application.

In turn, potentially leading to the exploitation of the app’s full set of permissions and entitlements.

Cyber_Security_Channel

❗️Cyber Security News is looking for VOLUNTEERS to join our team: Round 3

Our community is continuously growing and we are looking to further expand our team of specialists who work on delivering daily content from the world of cybersecurity.

At the moment we are searching for volunteers who would join our team and help us make this Community even better.

We are willing to reply to every candidate who applies to this position and provide all the needed information and explanation about the work process.

Responsibilities

• Conduct research on the Internet
• Format and publish posts to the channels of our community
• Offer creative ideas that would enhance content published within our community

Requirements

• Research skills
• Stable Wi-Fi connection
• Strong interest in cybersecurity
• A mobile device with installed Telegram app
• Up to date knowledge about trending topics, current events, etc.

Offerings

• Exchange of knowledge with colleagues from the field of cybersecurity (Team Chat)
• Experience as a manager/admin of a large cybersecurity community (great project to add to your CV)
• Opportunity to influence a growing community with a large audience (60,000+ members across different platforms)

If you have a friend/colleague who would be interested in this opportunity, feel free to send them this post!

Contacts

If you are interested in the above position or have any further questions, feel free to reach out – @cybersecadmin

- - - - -

@Cyber_Security_Channel

Why LinkedIn Developed Its Own AI-Powered Security Platform

The organization decided to streamline and maximize its system to better protect its user base and itself.

It decided to harness the power of AI to do so.

Other elements include:

1. Prompt and error handling (automatically refining prompts based on evolving context and user needs).

2. A fallback mechanism in case the original query doesn’t produce adequate results (preparing secondary queries).

3. Learning from past queries (to enrich future queries in the same context) — and more.

@Cyber_Security_Channel

NSA Issues Tips for Better Logging, Threat Detection in LotL Incidents

The guidelines are directed toward senior IT "decision makers," operational technology operators, and network administrator and operators, and focus on:

— Secure storage and log integrity
— Enterprise-approved logging policy
— Detection strategy for relevant threats
— Centralized log access and correlation

Cyber_Security_Channel

After Cybersecurity Lab Wouldn’t Use AV Software, US Accuses Georgia Tech of Fraud

One of the rules says that machines storing or accessing such "controlled unclassified information" need to have endpoint antivirus software installed.

But according to the US government, Antonakakis really, really doesn't like putting AV detection software on his lab's machines.

Cyber_Security_Channel

A Third of Organizations Suffer SaaS Data Breaches

Responding organizations said they worry most about lost IP (34%), reputational damage (30%) and breaches of customer data (27%).

Just 32% are confident in the security of corporate or customer data stored in their SaaS apps, down from 42% last year.

Cyber_Security_Channel

Apple, TikTok, Google, and Facebook Give Your Data to Law Enforcement Up to 80% of the Time

Google also disclosed “some” information to law enforcement when asked. In May 2023, 81% of requests made by law enforcement resulted in the disclosure of “some information.”

Big tech companies often don’t disclose what information was shared and tend to just say that “some” of the information was shared with law enforcement.

Cyber_Security_Channel

Africa Data Protection Association Launches E-Learning Platform on Data Protection

Available in French and English, the platform is aimed at a wide audience, including corporate executives, civil servants, and students, as well as any other profile wishing to learn.

It features interactive modules, case studies and online assessments, enabling learners to progress at their own pace.

Cyber_Security_Channel

7 Password Rules to Live by in 2024, According to Security Experts

For a simpler, more practical collection of guidelines, try the Secure Our World website, run by the Cybersecurity & Infrastructure Security Agency (CISA).

It's targeted at an audience of consumers without a technical background, which makes it a solid source of information you can share with friends and family to help them deal with common threats.

Cyber_Security_Channel

UK Staffing Agency Exposes Gig Workers: Passports, Visas, and More Made Public

On August 5th, during a routine investigation, our research team discovered a misconfigured Amazon AWS S3 bucket, which they managed to attribute to GigtoGig.

Unfortunately, the database, which contained 217,000 sensitive files, was exposed to the public, meaning that anyone could access it without having to enter a username and password.

Cyber_Security_Channel

🤝 Opportunity to Support the Cyber Security News Community

If you are looking to create a free Revolut account:

1. Do it via this link.
2. Follow the steps in the image.

Once you complete all the requirements, message us on Telegram @cybersecadmin.

To express our graditude, we will send you a unique cybersecurity-related gift.

Enjoy your Revolut account, and thank you for the support!

-----

@Cyber_Security_Channel

TfL Admits Some Services Are Down Following Cyber-Attack

“Due to the ongoing TfL-wide cybersecurity incident, we are currently able to process only a limited number of booking requests,” the notice read.

“In addition, many of our staff have limited access to systems and email and, as a result, we may be delayed or unable to respond to your query.”

Cyber_Security_Channel

Google AI Model Faces EU Data Privacy Investigation

Ireland’s Data Protection Commission (DPC) is examining whether the tech giant performed a legally required data protection impact assessment.

The organization is examining whether this action was done before processing European Union residents’ personal data.

Such details were used in its Pathways Language Model 2, according to a press release which was published on Thursday 12th of September.

A Google spokesman provided this statement:

“We take seriously our obligations under the GDPR and will work constructively with the DPC to answer their questions.”

@Cyber_Security_Channel

Where Are Governments in Their Zero-Trust Journey?

The deadline is prompting action.

With a goal in sight, federal agencies have a systematic and organized path toward stronger defenses.

In an era where cyber threats advance in sophistication and intensity, this proactive stance is paramount for securing critical systems and data.

This is something state and local governments must consider when fortifying for the future.

Cyber_Security_Channel

How Hackers Are Using Legitimate Tools to Distribute Phishing Links

These platforms are particularly popular in the education sector, a growing target for threat actors, as well as being commonly used by businesses and creative professionals.

Cyber_Security_Channel

Google Now Syncing Passkeys Across Desktop, Android Devices

To ensure that passkeys are kept end-to-end encrypted and protected, the internet giant has introduced a new Google Password Manager PIN, that the user will be prompted to provide when attempting to access a passkey.

Cyber_Security_Channel

Severe Unauthenticated RCE Flaw (CVSS 9.9) in GNU/Linux Systems Awaiting Full Disclosure

Interestingly, there has been a delay in assigning Common Vulnerabilities and Exposures (CVE) identifiers to this issue.

Margaritelli suggests that there should be at least three CVEs assigned, possibly up to six, due to the multifaceted nature of the vulnerabilities involved.

Cyber_Security_Channel