Tim Eades of vArmour on Expanding From Banking to Government

Michael Novinson • October 3, 2022

While vArmour has enjoyed success in banking, the U.S. government is now the fastest-growing part of its business. CEO Tim Eades says much of the government doesn't understand the relationships and dependencies among vArmour's applications or the consequences of an application going down.

Governance & Risk Management

Zscaler Buys Workflow Automation Firm ShiftRight for $25.6M

Latest

Access Management

Evolving IAM Challenges in Healthcare and Other Sectors

Marianne Kolbasuk McGee • October 3, 2022

The healthcare sector has long faced unique challenges involving identity and access management, but the novel coronavirus pandemic and various other key drivers are accentuating those issues, says Rebecca Archambault, senior director analyst at Gartner.

Breach Notification

Shangri-La Hotels Hit by Data Breach Incident

Mihir Bagwe • October 3, 2022

Upscale Asian hotelier Shangri-La Group has copped to a data breach incident that may affect hundreds of thousands of guests. The hotel detected unauthorized access to its guest database in July but didn't notify guests or regulators until September.

Access Management

Passwords Are Unfit - So Why Do We Still Have Them?

Steve King • October 3, 2022

Passwords are supported everywhere. But, says Andrew Shikiar, executive director of the FIDO Alliance, "they have been proven time and time again to simply be unfit for today's networked economy." In this episode of "Cybersecurity Unplugged," Shikiar discusses how to move beyond passwords.

Business Continuity Management / Disaster Recovery

Pentagon Bug Bounty Program Uncovers 350 Vulnerabilities

Prajeet Nair • October 1, 2022

The U.S. Department of Defense uncovered almost 350 vulnerabilities in the department's networks as part of its experimental bug bounty program launched on American Independence Day. The weeklong bug bounty challenge called "Hack U.S." ran from July Fourth to July 11.

Fraud Management & Cybercrime

North Korea Trojanizing Open-Source Software

Mihir Bagwe • September 30, 2022

North Korea is using weaponized versions of open-source utilities to spy on the technology, defense and entertainment sectors worldwide. Microsoft says it spotted fake profiles of supposed job recruiters who really are Pyongyang hackers manipulating victims into downloading Trojans.

Governance & Risk Management

DOJ: Army Doc, Wife Sought to Leak Health Records to Russia

Marianne Kolbasuk McGee • September 30, 2022

A Maryland couple faces federal indictment for an alleged conspiracy to provide the Russian government with military medical records. Anna Gabrielian and U.S. Army Maj. Jamie Lee Henry supplied an undercover FBI agent with medical records of military personnel.

3rd Party Risk Management

ISMG Editors: Will Others Follow US Lead to Legislate SBOMs?

Anna Delaney • September 30, 2022

In the latest weekly update, ISMG editors discuss how organizations can comply with the new PCI DSS 4.0 requirements, whether other countries should follow the U.S. lead on legislating software bills of materials, and key strategies for CISOs preparing for an economic downturn.

Governance & Risk Management

VA Center's IT Legacy Flaws Common at Other Health Entities

Marianne Kolbasuk McGee • September 29, 2022

A watchdog security audit of a south Texas VA center identified a variety of deficiencies related to legacy systems still in use years after no longer being supported with vendor updates. The findings represent the state of security at many organizations across the healthcare sector, experts say.

Cloud Security

Malware Shifting to Virtual Environments, Warns Mandiant

Prajeet Nair • September 29, 2022

Hackers may shift malware attacks into technical environments beyond the reach of endpoint detection and response, says Mandiant. The threat intel firm says it uncovered a novel malware family targeting VMware hypervisors and virtual machine appliances.

Application Security

Tom Kellermann's New Mission: Secure the Code

Tom Field • September 29, 2022

Over his 23-year career in cybersecurity, Tom Kellermann has focused on policy, endpoints and even strategic investments. Now, in his new role as senior vice president of cyber strategy at Contrast Security, his mission is to protect code security - particularly in the public and financial sectors.

Cybercrime

Examining What Went Wrong for Optus

Anna Delaney • September 29, 2022

The latest edition of the ISMG Security Report discusses what went wrong for Optus in the wake of one of Australia's biggest data breach incidents, the state of code security today and the growing trend of private equity firms pursuing take-private deals.

Cyberwarfare / Nation-State Attacks

Cyberwar: Assessing the Geopolitical Playing Field

Steve King • September 29, 2022

The United States is arguably involved in a cyberwar against Russia and China - and appears to be losing. In this episode of "Cybersecurity Unplugged," Tom Kellerman of Contrast Security and Richard Bird of Traceable.ai discuss what the U.S. government and companies need to do to win this cyberwar.