One Identity released global survey results that revealed that 37% of IT professionals rated rapid changes in their AD/AAD environment as the key impact of COVID-19 on their organization’s identity management team. Given the unique challenges of the sudden shift to remote work amidst COVID-19, businesses should look toward integrating AD/AAD with a strong privileged access management (PAM) solution in order to harness the full value of AD and AAD, dramatically increasing the security of their IT environments.
CISA, MITRE, and GMU collaborated to explore and analyze current and evolving security procedures and technologies to improve school security—primarily against active assailants
December 15, 2020
The Cybersecurity and Infrastructure Security Agency (CISA) released a report from a School Security Simulation Experiment (SIMEX) focused on current security procedures and technologies to improve both physical and operational security in K-12 schools. The two-week SIMEX, conducted jointly with MITRE and George Mason University in August, served as a pilot to determine whether a SIMEX is a viable tool that can be used to evaluate policies, technologies, and procedures related to school safety in the future.
The US Secret Service hosted a virtual Cyber Incident Response Simulation for financial services, real estate, retail and hospitality executives who trained on mitigation strategies for a simulated business email compromise (BEC) attack. Business Email Compromise is a sophisticated scam targeting both businesses and individuals performing a transfer of funds. The scam is frequently carried out when a subject compromises legitimate business e-mail accounts through social engineering or computer intrusion techniques to conduct unauthorized transfers of funds.
The FBI released detailed data on nearly 7.7 million criminal offenses reported via the National Incident-Based Reporting System (NIBRS) in 2019. The Uniform Crime Reporting (UCR) Program’s latest report, NIBRS, 2019, presents data about victims, known offenders, and relationships for offenses reported in 23 categories with 52 offenses. It also presents arrest data for those crimes, as well as 10 additional categories for which only arrest data is collected.
The town of Oxford, Connecticut and its public schools will receive a grant from the U.S. Department of Justice, Community Oriented Policing Services to create a security operations center (SOC) with three personnel monitoring the district's four school campuses.
The Cybersecurity and Infrastructure Security Agency (CISA) issued an Emergency Directive 21-01, in response to a known compromise involving SolarWinds Orion products that are currently being exploited by malicious actors.
Hackers working on behalf a foreign government are believed to be behind a highly sophisticated attack into a range of key government networks, including in the Treasury and Commerce Departments, and other agencies. The hackers had free access to their email systems.
After a successful launch earlier this year, Carnegie Mellon researchers introduced the latest version of the IoT Privacy Assistant, an app and digital infrastructure that enables users to discover IoT devices nearby, learn about the data they collect and any controls they might possibly give, such as opting in or out of their data collection and use practices.