@CyberSecDive

We provide business journalism into the most impactful news and trends shaping cybersecurity.

 Washington, DC
Joined September 2020
  • Tweets2.2K
  • Following14
  • Followers2K
1.3KMedia
Don't miss our preview of what to expect from #cybersecurity this year. cybersecuritydive.com/trendl…

Cybersecurity Dive Trendline on The Cybersecurity Dive Outlook on 2023

Inside the rapidly changing world of The Cybersecurity Dive Outlook on 2023. Access the Cybersecurity Dive Trendline

cybersecuritydive.com
1
5
3,169
CISA promises proactive defense in new strategic plan: cybersecuritydive.com/news/c… (by @ericgeller)

CISA promises proactive defense in new strategic plan

The beleaguered agency, still recovering from major workforce cuts, promised to deepen partnerships and stay ahead of evolving threats.

cybersecuritydive.com
10
Large businesses’ cybersecurity insurance claims are now less frequent but more expensive: cybersecuritydive.com/news/c… (by @ericgeller)

Large businesses’ cybersecurity insurance claims are now less frequent but more expensive

AI-powered attacks and hidden supply-chain weaknesses are making insurers’ work more difficult, according to a new report.

cybersecuritydive.com
61
PHP exploitation moves at slower-than-expected pace, but millions remain at risk: cybersecuritydive.com/news/p… (by David Jones)

PHP exploitation moves at slower-than-expected pace, but millions remain at risk

Security researchers flag botnet activity, but successful compromises have yet to break through.

cybersecuritydive.com
52
Agentic AI helps hackers level up, even without detailed instructions: cybersecuritydive.com/news/a… (by @ericgeller)

Agentic AI helps hackers level up, even without detailed instructions

Low-skilled hackers are likely to become a lot more dangerous over the next 12 months, CrowdStrike warned.

cybersecuritydive.com
1
61
Weak encryption certificates could have let hackers easily spoof websites: cybersecuritydive.com/news/w… (by @ericgeller)

Weak encryption certificates could have let hackers easily spoof websites

Major web browsers blocked the eMudhra TLS certificates to prevent them from being weaponized.

cybersecuritydive.com
66
Russia-linked hackers broke into NATO shipbuilder in latest espionage campaign: cybersecuritydive.com/news/r… (by @ericgeller)

Russia-linked hackers broke into NATO shipbuilder in latest espionage campaign

Symantec, which discovered the operation, urged companies to scan their networks for signs of compromise.

cybersecuritydive.com
1
58
FBI, CISA warn that SafePay ransomware poses threat to critical infrastructure: cybersecuritydive.com/news/f… (by David Jones)

FBI, CISA warn that SafePay ransomware poses threat to critical infrastructure

The group has been linked to a 2025 attack targeting technology firm Ingram Micro.

cybersecuritydive.com
46
Critical PHP vulnerabilities expose vast majority of websites to potential compromise: cybersecuritydive.com/news/p… (by @ericgeller)

Critical PHP vulnerabilities expose vast majority of websites to potential compromise

The serious flaws in popular website software prompted government agencies to urge organizations to take their sites offline until they could be fixed.

cybersecuritydive.com
69
Ransomware groups expand targeting of Palo Alto Networks vulnerability: cybersecuritydive.com/news/r… (by David Jones)

Ransomware groups expand targeting of Palo Alto Networks vulnerability

Multiple threat actors have exploited a high-severity flaw in the company’s GlobalProtect portal.

cybersecuritydive.com
69
AI security hiring focuses on red-teaming, SOC orchestration and governance: cybersecuritydive.com/news/a… (by @ericgeller)

AI security hiring focuses on red-teaming, SOC orchestration and governance

Roles mitigating AI deepfakes and overseeing post-quantum encryption rollouts are on the horizon, according to a new report.

cybersecuritydive.com
1
63
ConnectWise suspends Cloud Backup service as hacker targets Microsoft 365 users: cybersecuritydive.com/news/c… (by David Jones)

ConnectWise suspends Cloud Backup service as hacker targets Microsoft 365 users

Managed service providers said an attacker used compromised credentials to gain access to tenants.

cybersecuritydive.com
1
1
1
99
Boards confident on cybersecurity, AI oversight, but tech changes outpace readiness: cybersecuritydive.com/news/c… (by @ericgeller)

Boards confident on cybersecurity, AI oversight, but tech changes outpace readiness

Nearly half of corporate directors think board members need cybersecurity expertise, a new survey found.

cybersecuritydive.com
1
41
China-nexus espionage actor targets BeyondTrust support tool in zero-day campaign: cybersecuritydive.com/news/c… (by David Jones)

China-nexus espionage actor targets BeyondTrust support tool in zero-day campaign

Researchers say the hacker is harvesting credentials and stealing sensitive information.

cybersecuritydive.com
1
76
Open-source security rests on understanding risks, scaling fixes: cybersecuritydive.com/news/o… (by @ericgeller)

Open-source security rests on understanding risks, scaling fixes

Developers should coordinate security work to make the most of their interconnected ecosystem, IBM said in a new report.

cybersecuritydive.com
59
Internet exposure of AI tools, ICS devices continues to grow: cybersecuritydive.com/news/a… (by @ericgeller)

Internet exposure of AI tools, ICS devices continues to grow

Vulnerability disclosures and hacking campaigns haven’t made much of a dent in the amount of important infrastructure left online, a new report found.

cybersecuritydive.com
77
Thousands of refrigerator devices remain exposed following French cyberattack: cybersecuritydive.com/news/t… (by David Jones)

Thousands of refrigerator devices remain exposed following French cyberattack

The investigation points to a much wider risk for industrial systems across the globe.

cybersecuritydive.com
1
1
394
Hacker targets Ivanti Connect Secure in chained exploitation: cybersecuritydive.com/news/h… (by David Jones)

Hacker targets Ivanti Connect Secure in chained exploitation

Researchers warn the attacker is taking multiple steps to clean up forensic evidence after an attack. 

cybersecuritydive.com
1
118
Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests: cybersecuritydive.com/news/n… (by @ericgeller)

Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests

The latest operation targeted “laptop farms” across Texas that allegedly aided North Korea’s moneymaking plots.

cybersecuritydive.com
1
2
112
Microsoft, Health-ISAC and partners take down popular phishing kit services: cybersecuritydive.com/news/p… (by @ericgeller)

Microsoft, Health-ISAC and partners take down popular phishing kit services

The three marketplaces helped hackers impersonate major businesses and governments. Microsoft now controls the markets’ domain names.

cybersecuritydive.com
76
Dangerous flaws in refrigeration equipment were disclosed months before retail attacks: cybersecuritydive.com/news/r… (by David Jones)

Dangerous flaws in refrigeration equipment were disclosed months before retail attacks

Hundreds of French supermarkets faced a sophisticated cyberattack, allowing hackers to manipulate industrial controls.

cybersecuritydive.com
86
Load more