SC Media

A Chinese advanced persistent threat group (APT) was able to roam the networks of an Asian telecommunications company for years without detection by using the China Chopper command shell malware, according to Sygnia. #cybersecurity #infosec

It's important to move beyond CAPTCHAs and use a human-verification solution that neither baffles users nor invades their privacy, such as Fastly's Bot Management tool. #cybersecurity #infosec #ITsecurity #IAM

As the use of artificial intelligence for everyday business purposes becomes commonplace, organizations and enterprises need to find ways to protect #AI and prevent its misuse. "If you think about what an AI account is, it's actually a machine account," Art Gilliland, CEO of identity-security provider Delinea, said in a recent interview. "It is a piece of software that's basically wanting to access other elements of your environment." #cybersecurity #IAM #ITsecurity #infosec

Tines' Matt Muller discussed the evolution from legacy SOAR tools to the next-gen solutions transforming the industry on a recent Security Weekly Productions podcast. Hear more about vulnerability management here: https://bit.ly/4l7YOZl #cybersecurity #infosec #ITsecurity

Silverfort's Hed Kovetz explained in a recent podcast with Security Weekly Productions that organizations are recognizing the need for a solution that can secure all types of identities, whether they are human, machine, privileged or non-privileged. #IAM #cybersecurity

The Morphing Meerkat phishing-as-a-service kit expanded its library of templates to 114 brand designs that could dynamically load phishing pages based on DNS mail exchange records, according to Infoblox. #cybersecurity #infosec #ITsecurity

A security evasion tool from the RansomHub malware group has been used by ESET North America researchers to trace and connect attacks conducted by three other cybercrime groups. #cybersecurity #infosec #ITsecurity

A team of university researchers from Denmark and India claim to have developed a novel technique capable of unmasking cybercriminals hiding behind VPNs, proxy servers and Tor browsers with up to 70% reliability. #cybersecurity #infosec #ITsecurity #IAM

Whether it’s RSAC, Black Hat, DEF CON, or the smaller-but-mighty community events like BSides or CactusCon, in-person events allow for those conversations in a way that chat groups just can’t replicate, says Microsoft's Sherrod DeGrippo. #cybersecurity #infosec #ITsecurity

The challenges of managing data leaks from the inside are real, whether the leak is intentional or not. Co-Founder and CEO Eran Barak told SC Media “Sensitive data leaks like these aren’t outliers — they’re reflections of a systemic issue across practically every organization, whether within the federal government or enterprises, highly regulated or not.” SC Media provides some great insight on the risk of data leaking from third-party communications platforms and inadvertent exposures in this article…