CSO US First Look
The day's top cybersecurity news and in-depth coverage
November 22, 2024
North Korean fake IT workers up the ante in targeting tech firms
North Korean groups are now leveraging deepfake technologies when trying to scam companies into hiring fake IT workers, while adding exfiltration and extortion to their campaigns.
Read more
17 hottest IT security certs for higher pay today
Cybersecurity certifications can pave a path to lucrative career advancement. But timing the job market with the right credentials can be challenging. Here are the certs providing the largest pay boosts right now.
Job termination scam warns staff of phony Employment Tribunal decision
Phishing campaign preys on the worries of employees, says expert
Finastra investigates breach potentially affecting top global banks
Alleged theft involved 400 GB of customer and internal data presumably containing sensitive financial details.
Rising ClickFix malware distribution trick puts PowerShell IT policies on notice
IT teams should revisit PowerShell restrictions as an increasingly used click-and-fix technique has users self-serving fake system issues by invoking malicious PowerShell scripts themselves, reducing suspicion.
Act fast to snuff out employee curiosity over 'free' AI apps
Criminals are taking advantage of interest in AI to persuade users to download malware in the guise of useful apps.
What CISOs need to know about the SECâs breach disclosure rules
Security leaders can face personal liability peril for security fails or misleading disclosures to the SEC and navigating the reporting guidelines is not always a straightforward task.