Researchers find numerous Apple AirPlay vulnerabilities allowing “wormable” exploits over Wi-Fi

Security researchers have discovered major vulnerabilities in Apple’s AirPlay protocol that may allow attackers to hijack devices without user interaction. This exploit, known as “AirBorne,” comprises 23 individual bugs, of which 17 have official CVEs, enabling zero-click remote code execution on susceptible systems. Cybersecurity firm Oligo has identified multiple critical flaws in Apple’s native AirPlay […]

Read More →

Zero Trust everywhere: How MGM Resorts found agility and security with Zscaler

In a world where cybersecurity breaches feel relentless, MGM Resorts is breaking the mould by embracing a zero trust approach with Zscaler. This case study showcases how the hotel and entertainment giant has adopted modern security frameworks to enhance agility and maintain robust cybersecurity across its diverse operations. Source: CIO Key Points MGM Resorts is […]

Read More →

SBOMs (as well as HBOMs and CBOMs) as Cybersecurity Facilitators

Summary Software Bills of Materials (SBOMs) are increasingly becoming vital tools in the realm of cybersecurity. They help organisations locate, assess, and mitigate software risks by keeping track of software updates and vulnerabilities throughout a product’s lifecycle. As modern software integrates components from various sources, including open source, SBOMs serve as a definitive list of […]

Read More →

DuPage County, Ill., Cyber Attack Shutters Justice Systems

The DuPage County’s justice systems are in disarray following a significant ransomware attack that has forcibly taken offline various essential offices, including the sheriff’s department and courthouse. The incident was first detected at approximately 2:30 a.m. on Monday. Source: GovTech Key Points A ransomware attack has disrupted the systems of the sheriff’s office, circuit clerk’s […]

Read More →

Homeland Security Secretary Noem urges partnerships to guide future of CISA, backs secure by design

Homeland Security Secretary Kristi Noem recently highlighted the importance of partnerships to steer the Cybersecurity and Infrastructure Security Agency (CISA) forward. Speaking at the RSA conference, she advocated for principles of “secure by design” and requested feedback on reauthorising the Cybersecurity Information Sharing Act of 2015, aiming for greater integrity and security in America’s cybersecurity […]

Read More →

Should States Take Responsibility For Their Own Cybersecurity?  Why Not?

Recently, a new executive order signed by the U.S. president has shifted some responsibility for improving cybersecurity from the federal government to individual states. This comes as concerns grow regarding cyber attacks that have exposed vulnerabilities in the nation’s critical infrastructure. The executive order aims to empower states to take charge of their own cybersecurity, […]

Read More →

UK cyber security reform takes shape

The UK government is rolling out a Cyber Security and Resilience Bill aimed at bolstering the country’s cyber defences. This new legislation is designed to update existing laws and provide a more robust response to emerging cyber threats, thereby ensuring the protection of essential services and digital infrastructure. Key Points The Bill enhances the UK’s […]

Read More →