Inside Rackspace's cybersecurity operations center (Photo: Rackspace)

Rackspace Hosted Exchange Still Offline Over Security Issue

Prajeet Nair • December 5, 2022

Thousands of Rackspace customers continue to face hosted Microsoft Exchange Server outages after the managed services giant took the offering offline after being affected by an unspecified security incident Thursday. Rackspace urges affected customers to at least temporarily move to Microsoft 365.

Breach Notification

Lorenz Ransomware Alert: Risk to Healthcare, Public Sector

Latest

Cyberwarfare / Nation-State Attacks

Microsoft Warns of Growing Russian Digital Threats to Europe

Akshaya Asokan • December 5, 2022

Russian actors may be more willing this winter to use digital tools to coerce and influence Europe away from its support of Ukraine, computing giant Microsoft warns. The Kremlin has at its disposal ransomware and active digital disinformation operations.

Cyberwarfare / Nation-State Attacks

Fresh CryWiper Wiper Malware Aims to Destroy Russian Data

Mathew J. Schwartz • December 5, 2022

Windows systems in Russia are being stalked by a new Trojan that purports to be ransomware but is really designed to wipe PCs and leave them unrecoverable, security researchers say. Dubbed CryWiper, it's one of a number of wipers - mostly targeting Ukraine - seen in the wild this year.

Fraud Management & Cybercrime

Hacked French Hospital Suspends Emergency Operations

Mihir Bagwe • December 5, 2022

A French hospital in the Parisian suburbs scrambled to respond to a weekend cyber incident by transferring patients, directing emergency cases elsewhere and bringing on additional staffers to observe patients. The incident does not appear to have spread beyond the Hospital Center of Versailles.

Security Information & Event Management (SIEM)

Securonix Taps Ivanti, BMC, SAP Vet Nayaki Nayyar as New CEO

Michael Novinson • December 5, 2022

Securonix has snagged longtime Ivanti, BMC Software and SAP executive Nayaki Nayyar as CEO to strengthen product capabilities and customer experience. One of a handful of female CEOs in the vendor community, she doubled Ivanti's total addressable market during her 30 months as president.

Cyberwarfare / Nation-State Attacks

A Look Ahead: David Pollino on Evolution of the CISO Role

Tom Field • December 5, 2022

From the invasion of Ukraine to the conviction of a former Uber CISO and the Musk takeover of Twitter, it's been a watershed year for cybersecurity concerns. Veteran CISO David Pollino reflects on 2022 and looks ahead to the challenges - and opportunities - that await in 2023.

Identity & Access Management

OneSpan CEO on Joining Identity Verification and e-Signature

Michael Novinson • December 4, 2022

Bringing OneSpan's identity verification and e-signature businesses together in the cloud will allow the company to secure the whole customer transaction life cycle, says CEO Matt Moynahan. Customers want security capability that is seamlessly integrated and interwoven across their entire workflow.

Incident & Breach Response

New Zealand Health Insurer Investigates IT Provider Hack

Mihir Bagwe • December 4, 2022

New Zealand private health insurer Accuro says an investigation into a cyber incident at a third party IT infrastructure provider so far has not revealed evidence of a data breach affecting its 34,000 customers. Customers should expect delayed service in claims processing.

Industry Specific

Top Cybersecurity Challenges Facing Healthcare Providers

Marianne Kolbasuk McGee • December 3, 2022

With the surge in ransomware and other major hacking incidents affecting third-party suppliers, it is more critical than ever for healthcare sector entities to diligently scrutinize threats and risks involving their vendors, says Denise Anderson, president and CEO of the Health-ISAC.

Fraud Management & Cybercrime

Cuba Ransomware Targeting Critical Infrastructure, Feds Warn

Prajeet Nair • December 2, 2022

The U.S. federal government says the Cuba ransomware gang actively targets critical infrastructure and that its criminal efforts have netted it $60 million so far. The group has recently modified its techniques, says an alert from the FBI and the Cybersecurity and Infrastructure Security Agency.

Cloud Security

Pediatric EMR Vendor Hack Affects 2.2 Million

Marianne Kolbasuk McGee • December 2, 2022

A hacking incident at a cloud-based electronic health records software vendor affects dozens of the company's pediatric practice clients and more than 2.2 million of their patients and other individuals. The breach spotlights several common but serious risks.

Critical Infrastructure Security

Tories: Firms Should Pay More for Cybersecurity Regulation

Akshaya Asokan , David Perera • December 2, 2022

The Conservative U.K. government said it will propose updates to the country's main cybersecurity regulation, including a requirement for the private sector to reimburse the public sector for enforcement activities. The government downplayed concerns that it could create perverse incentives.

Cloud Security

Clumio CEO on Why AWS S3 Buckets Pose a Giant Security Risk

Michael Novinson • December 2, 2022

The need for AWS security has increased as S3 buckets have evolved from a dumping ground for data to the home for critical cloud-native applications, says Clumio co-founder and CEO Poojan Kumar. Information in S3 buckets is susceptible to both accidental deletions and cyberattacks.