The day's top cybersecurity news and in-depth coverage
February 12, 2022
The high-severity vulnerabilities that CISA has added to its patch-now list include SeriousSAM privilege escalation and SMB remote code execution. Read more â¶
A new rule issued by the OCC, Board of Governors of the Federal Reserve, and the FDIC requires banking organizations to notify federal regulators within 36 hours of certain security incidents. The ruling, titled Computer-Security Incident Notification Requirements for Banking Organizations and Their Bank Service Providers, is strengthening the need for enhanced visibility, real-time detection, and intelligent response in the banking industry. The mandatory ruling, which goes into effect on April 1 and becomes enforceable on May 1, is described as "an effort to help promote early awareness of emerging threats to banking organizations and the broader financial system."
SAP ICM vulnerability allows theft of credentials and session information, which can be used to launch ransomware and steal sensitive data.
Is that security trend hot or not? From tools and technologies to threats and tactics, the numbers don't lie.
Attend this 2-day virtual Summit to connect with InfoSec advice, tools, and solutions to help you prepare for unexpected and unknown threats.
Many organizations struggle to discover, classify, and manage Internet-facing assets, leaving them vulnerable to attack. In 2022, they will finally do something to address this.
Focusing on talent, technology, culture and leadership, the summit, held virtually February 15-17, will feature speakers from major companies, consultancies, and academia to help IT leaders navigate their way through the complexities of a vastly changed corporate landscape.
No one outside the IT department cares about your vulnerability metrics (or they shouldnât, anyway). They care about efficacy. And traditional stats donât show that, says columnist Andy Ellis.
For CISOs experiencing burnout, the impact goes beyond not bringing their A game to work; it puts their organizations at increased risk.
