Reddit Names Fredrick ‘Flee’ Lee as CISO

Second Ivanti EPMM Zero-Day Vulnerability Exploited in Targeted Attacks

SecurityWeek News Briefing | Monday, July 31, 2023 Reddit Taps Fredrick ‘Flee’ Lee for CISO Job Apple Lists APIs That Developers Can Only Use for Good Reason Second Ivanti EPMM Zero-Day Vulnerability Exploited in Targeted Attacks CISA Analyzes Malware Used in Barracuda ESG Attacks The Good, the Bad and the Ugly of Generative AI US, Australia Issue Warning Over Access Control Vulnerabilities in Web Applications Exploitation of Recent Citrix ShareFile RCE Vulnerability Begins Industry Reactions to New SEC Cyber Incident Disclosure Rules: Feedback Friday Last Day to Save on 2023 ICS Cybersecurity Conference Register by 7/31 to Save $400 The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cyber security. Join us in Atlanta SecurityWeek Expert Insights The Good, the Bad and the Ugly of Generative AI - Thinking through the good, the bad, and the ugly now is a process that affords us “the negative focus to survive, but a positive one to thrive.” (Marc Solomon) Cybersecurity Public-Private Partnership: Where Do We Go Next? - Sharing threat information and cooperating with other threat intelligence groups helps to strengthen customer safeguards and boosts the effectiveness of the cybersecurity sector overall. (Derek Manky) 10 Steps to Help Secure Your APIs - Securing APIs is a noble, though complex journey. Security teams can leverage these 10 steps to help secure their APIs. (Joshua Goldfarb) MOVEit: Testing the Limits of Supply Chain Security - The need for cyber resilience arises from the growing realization that traditional security measures are no longer enough to protect systems, data, and the network from compromise. (Torsten George) Verifying Software Integrity With Sigstore - Signing code is very important to defend against supply chain attacks, but it’s also one of the most cumbersome to implement for internal development. (Matt Honea) If You Missed It... Zimbra Patches Exploited Zero-Day Vulnerability CoinsPaid Blames North Korean Hackers for $37 Million Cryptocurrency Heist Weintek Weincloud Vulnerabilities Allowed Manipulation, Damaging of ICS Devices In Other News: Data Breach Cost Rises, Russia Targets Diplomats, Tracker Alerts in Android  US Senator Wyden Accuses Microsoft of ‘Cybersecurity Negligence’ CISO Conversations: Field CISOs From VMware Carbon Black and NetSPI RSS Feed | Webcasts | Virtual Events © 2023 Wired Business Media

SecurityWeek | 470 Atlantic Ave, 4th Floor, Boston, MA 02210 Unsubscribe cyberdefense974.77330@blogger.com Update Profile | Our Privacy Policy | Constant Contact Data Notice Sent by news@securityweek.com