CISA needs better workforce planning to handle operational technology risks, GAO says

March 9, 2024 0 Comments 0 tags

The Cybersecurity and Infrastructure Security Agency has an understaffed and often ill-equipped workforce to deal with risks to the nation’s key operational technology systems, the Government Accountability Office said in

White House advisory group says market forces ‘insufficient’ to drive cybersecurity in critical infrastructure

March 9, 2024 0 Comments 0 tags

A White House advisory board is recommending the federal government create new economic incentive programs to prod critical infrastructure owners and operators to raise their cybersecurity standards, develop new liability

Friday Squid Blogging: New Plant Looks Like a Squid

March 9, 2024 0 Comments 0 tags

Newly discovered plant looks like a squid. And it’s super weird: The plant, which grows to 3 centimetres tall and 2 centimetres wide, emerges to the surface for as little

Russian hackers accessed Microsoft source codeÂ

March 9, 2024 0 Comments 0 tags

In January, Microsoft disclosed that Russian hackers had breached the company’s systems and managed to read emails belonging to senior executives. Now, the company has revealed that the breach was

Essays from the Second IWORD

March 9, 2024 0 Comments 0 tags

The Ash Center has posted a series of twelve essays stemming from the Second Interdisciplinary Workshop on Reimagining Democracy (IWORD 2023). Aviv Ovadya, Democracy as Approximation: A Primer for “AI

Dropbox Used to Steal Credentials and Bypass MFA in Novel Phishing Campaign

March 9, 2024 0 Comments 0 tags

Darktrace reveals a novel phishing campaign where attackers leveraged legitimate Dropbox infrastructure to steal credentials before bypassing MFA

A Close Up Look at the Consumer Data Broker Radaris

March 9, 2024 0 Comments 0 tags

If you live in the United States, the data broker Radaris likely knows a great deal about you, and they are happy to sell what they know to anyone. But

A Taxonomy of Prompt Injection Attacks

March 9, 2024 0 Comments 0 tags

Researchers ran a global prompt hacking competition, and have documented the results in a paper that both gives a lot of good examples and tries to organize a taxonomy of

Apple Released Security Updates for Multiple Products

March 9, 2024 0 Comments 0 tags

Apple released security updates to address vulnerabilities in Safari, macOS, watchOS, tvOS, and visionOS. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.Â

Update to national cybersecurity strategy implementation plan coming before the end of summer

March 5, 2024 0 Comments 0 tags

MIAMI — Cybersecurity professionals can expect fresh reading materials in the coming months from the Office of the National Cyber Director, which aims to issue an update to the national