CINS Army Brief
Well He's Not Wrong
Our Take
Well he’s not wrong. This month’s highlight article is, admittedly, an Advertorial. That said, the author isn’t wrong about most organizations’ (particularly SMEs’) need for managed services to bridge the security gap.
Most Companies Can’t Handle Cybersecurity Alone
https://hbr.org/2023/05/most-companies-cant-handle-cybersecurity-alone
This is our CINS Army Brief for May 2023, curating the most interesting cyber news from the previous month. Learn more and subscribe here.
- Two-thirds of all 2022 breaches resulted from spear phishing
https://www.computerweekly.com/news/366538394/Two-thirds-of-all-2022-breaches-due-to-spear-phishing - New hyperactive phishing campaign uses SuperMailer templates: Report
https://www.csoonline.com/article/3697311/new-hyperactive-phishing-campaign-uses-supermailer-templates-report.html - Phishing campaign targets ChatGPT users
https://www.helpnetsecurity.com/2023/05/25/chatgpt-phishing/ - 3 Ways Hackers Use ChatGPT to Cause Security Headaches
https://www.darkreading.com/vulnerabilities-threats/3-ways-hackers-use-chatgpt-to-cause-security-headaches - Why We Should Establish Guardrails For Artificial General Intelligence Now
https://www.forbes.com/sites/forbestechcouncil/2023/05/01/why-we-should-establish-guardrails-for-artificial-general-intelligence-now/?sh=28ec28312ad5 - Make them pay: Hackers devise new tactics to ensure ransomware payment
https://www.csoonline.com/article/3696168/make-them-pay-hackers-devise-new-tactics-to-ensure-ransomware-payment.html - Anatomy of a Malicious Package Attack
https://www.darkreading.com/vulnerabilities-threats/anatomy-of-a-malicious-package-attack - ‘Volt Typhoon’ China-Backed APT Infiltrates US Critical Infrastructure Orgs
https://www.darkreading.com/endpoint/-volt-typhoon-china-backed-apt-infiltrates-us-critical-infrastructure - Microsoft: BEC Attackers Evade ‘Impossible Travel’ Flags With Residential IP Addresses
https://www.darkreading.com/endpoint/microsoft-bec-attackers-evade-impossible-travel-residential-ip-addresses - These medical IoT devices carry the biggest security risks
https://www.zdnet.com/article/these-medical-iot-devices-carry-biggest-security-risks/ - Three Ways Organizations Can Mitigate The Insider Threat Conundrum
https://www.forbes.com/sites/forbestechcouncil/2023/05/02/three-ways-organizations-can-mitigate-the-insider-threat-conundrum/?sh=612ad32b26e8 - Is misinformation the newest malware?
https://www.csoonline.com/article/3695014/is-misinformation-the-newest-malware.html - 5 ways AI-driven patch management is driving the future of cybersecurity
https://venturebeat.com/security/5-ways-ai-driven-patch-management-is-driving-the-future-of-cybersecurity/ - Is human threat hunting a fool’s errand?
https://www.helpnetsecurity.com/2023/05/15/automated-threat-hunting-processes/ - Three ways to leverage cyberpsychology to prevent attacks
https://www.scmagazine.com/perspective/emerging-technology/three-ways-to-leverage-cyberpsychology-to-prevent-attacks - You Must Look Beyond AI To Stay Ahead Of Today’s Cybersecurity Threats
https://www.forbes.com/sites/forbestechcouncil/2023/05/05/you-must-look-beyond-ai-to-stay-ahead-of-todays-cybersecurity-threats/?sh=65a8f53c31c3 - New Generative AI Tools Aim to Improve Security
https://www.darkreading.com/emerging-tech/new-generative-ai-tools-aim-to-improve-security - The government is very hackable, and they have your data
https://www.engadget.com/the-government-is-very-hackable-and-they-have-your-data-163034576.html - Why the Things You Don’t Know about the Dark Web May Be Your Biggest Cybersecurity Threat
https://thehackernews.com/2023/05/why-things-you-dont-know-about-dark-web.html - Bridgestone CISO: Lessons From Ransomware Attack Include Acting, Not Thinking
https://www.darkreading.com/ics-ot/bridgestone-ciso-lessons-ransomware-attack-acting-thinking - Talking Security Strategy: Cybersecurity Has a Seat at the Boardroom Table
https://www.darkreading.com/vulnerabilities-threats/talking-security-strategy-cybersecurity-has-a-seat-at-the-boardroom-table - Cybersecurity Leaders Suffer Burnout as Pressures of the Job Intensify
https://www.wsj.com/articles/cybersecurity-leaders-suffer-burnout-as-pressures-of-the-job-intensify-b0609ef1
