Industrial Control Systems (ICS) have become a ubiquitous part of modern critical infrastructure. Automatic Tank Gauge (ATG) systems play a role in this infrastructure by monitoring and managing fuel storage tanks, such as those found in everyday gas stations. These systems ensure that fuel levels are accurately tracked, leaks are detected early, and inventory is managed efficiently.

Security practices in DevOps have evolved from being a minor concern to one of the main focus points, which resulted in the DevSecOps movement. It’s about “shifting security to the left” in the software development lifecycle – so the security measures are a fundamental component. Traditionally, security management was moved to the final stages of developing software, and it has proven its ineffectiveness in dealing with the challenges of modern software projects.

A phishing campaign is targeting GitHub users with phony CAPTCHA pages, according to researchers at McAfee. The phishing emails ask users to address a security vulnerability in a GitHub repository that they recently contributed to, and contain a link to find more information about the alleged vulnerability. This link leads to a fake CAPTCHA page that attempts to trick them into installing malware.

While today’s AI is focused on user-agent interactions, the real revolution is on the horizon, where AI agents will increasingly communicate, collaborate, and share data amongst agents. This shift brings unprecedented opportunities and new and complex data protection challenges.

A high severity OS command injection vulnerability, CVE-2024-8190, has been found in Ivanti Cloud Services Appliance (CSA) versions 4.6 Patch 518 and earlier. This flaw allows attackers with admin access to remotely execute malicious commands, potentially taking full control of the system. Ivanti has already released updates, but this command injection vulnerability is actively exploited in the wild, making immediate action critical.

We're happy to announce two new Veracode Scan products: Veracode Scan for Eclipse and Veracode Scan for Visual Studio. Building on the success and adoption of Veracode Scan in Visual Studio Code, IntelliJ, PyCharm, and Rider, we're releasing versions for Eclipse and Visual Studio. Now the power of Veracode’s outstandingly accurate Static Application Scanning is avaialble two of the most widely used and customer-requested IDE’s.

The public sector has faced a surge of cyber attacks in recent months, targeting state agencies, schools and local governments, severely affecting operations. Several recently released cyber industry reports show a steady or growing number of ransomware attacks so far in 2024. The examples below are just some of the cyber attacks against public sector organizations this past summer.

Data security leaders, take note: Nightfall has emerged as a frontrunner in G2's Fall 2024 reports, securing top positions in Data Loss Prevention Software, Data Security Software and Sensitive Data Discovery Software categories. This achievement reflects our unwavering commitment to excellence, as well as your trust in our AI-powered solutions. We extend our deepest gratitude to our valued customers and supporters, as your feedback helps us to drive innovation.

Security operations teams face escalating demands to promptly detect and respond to third-party cyber threats, largely due to the increasing number of data breaches occurring within an organization’s supply chain. An effective program to manage this type of cyber risk is essential for safeguarding sensitive data and maintaining business continuity.

London, UK, September 24th, 2024 – We are thrilled to announce that The Cyber Helpline has emerged victorious at this year’s National Cyber Awards, securing three prestigious awards! For the fourth year in a row, we have been honored as the Not-for-Profit Cyber Award winner, alongside recognition for individual achievements, including the Alan Turing Award (Rory Innes) and the Cyber Student of the Year Award (Alex Hardy).