Author: Staff Writer

Summary Points Detection and response are vital but only reactive; focusing solely on these overlooks the importance of thorough investigation to understand attack root causes and prevent recurrence. Investigation uncovers critical insights—such as vulnerabilities exploited and attacker methods—enabling organizations to learn from breaches and improve defenses. Neglecting investigation costs more than missed threats; it hampers continuous learning, resilience building, and the ability to identify underlying risks. Cybersecurity should evolve into a continuous learning process, integrating detection, response, and investigation to proactively strengthen defenses against future threats. Key Challenge The story highlights the limitations of a cybersecurity approach focused solely on…

Summary Points Acquisition Announcement: ServiceNow has agreed to acquire Armis for $7.75 billion, enhancing its cyber-physical security capabilities. Enhanced Security Platform: The acquisition will create a comprehensive security platform for managing risks across connected network assets, integrating IT, operational technology, and medical devices. Strategic Growth: This move is expected to significantly expand ServiceNow’s security market, tripling its opportunity in cybersecurity and accelerating its roadmap toward proactive solutions. Recent Expansion: This acquisition follows ServiceNow’s recent $2.85 billion purchase of MoveWorks, indicating a robust commitment to enhancing AI-driven enterprise solutions. The Strategic Move for Cybersecurity ServiceNow recently announced its decision to acquire…

Summary Points Guilty Pleas: Two US cybersecurity professionals, Ryan Goldberg and Kevin Martin, pleaded guilty for their roles in ALPHV/BlackCat ransomware attacks, successfully extorting victims between April and December 2023. Prolific Ransomware Gang: The BlackCat gang has targeted over 1,000 victims since its formation in early 2020, despite significant disruptions from law enforcement in late 2023. Cybersecurity Professionals Turned Criminal: Both defendants had backgrounds in cybersecurity, previously working for reputable firms, raising concerns about the ethical standards in the industry. Severe Penalties Ahead: Goldberg and Martin face up to 20 years in prison when sentenced on March 12, 2024, for…

Fast Facts Withdrawal of UL: UL LLC, the lead administrator for the FCC’s Cyber Trust Mark program, has withdrawn due to an investigation into its ties to China, casting doubt on the initiative’s future. Program Objective: Established during the Biden administration, the Cyber Trust Mark aimed to improve IoT device security and encourage consumers to prioritize security features in their purchases. Impact of Investigation: The FCC’s investigation into UL’s partnership with a Chinese firm has raised concerns over national security and the program’s viability. Uncertain Future: UL’s exit leaves the Cyber Trust Mark program’s progress uncertain, with the FCC yet…

Quick Takeaways Cybersecurity professionals are experiencing a mental health crisis, with 84% feeling stressed and 78% fearing blame for security incidents, leading to increased turnover intentions. Burnout is intensifying due to workloads, understaffing, and escalation pressures, with 81% of stressed workers considering leaving their roles, posing a significant business resilience risk. The root causes include constant vigilance, compliance overload, and structural issues like overwork and insufficient staffing, which threaten performance and increase breach risks. Organizations must prioritize mental health initiatives, foster a safe culture, reduce operational noise, and recognize employees to mitigate stress and retain vital cybersecurity talent. Underlying Problem…

Fast Facts Ampyx Cyber warns that Volt Typhoon poses a strategic, long-term threat to electric utilities by stealthily embedding within networks using legitimate credentials, not causing immediate disruption but maintaining covert access for future actions. The threat operates silently over months or years, blending into normal operations, making detection difficult; internal access to enterprise systems can enable attackers to undermine reliability during crises without directly manipulating control systems. Addressing this risk requires leadership to enhance visibility into access, monitor legitimate credential usage, secure remote and vendor pathways, and adopt resilience and disciplined operational practices—banning reliance solely on malware detection. Utilities…

Summary Points Higham Lane School temporarily closed due to a severe cyber-attack that disrupted critical IT services, including communication systems and management platforms. The school has engaged cybersecurity experts and external agencies to investigate and contain the breach, issuing a strict “Do Not Log In” warning to staff and students. Data breach reporting obligations are being followed, with the school cooperating with authorities and safeguarding officials to comply with GDPR and Data Protection Act 2018. The school advises students, especially Year 11 and Year 13 preparing for exams, to use external, safe online resources for revision until more information about…

Fast Facts Complex Endpoint Management: Midmarket IT teams face challenges with endpoint security due to an overload of devices, tools, and alerts—averaging 10 unique management and security tools, leading to increased complexity and alert redundancy. XDR as a Solution: Extended Detection and Response (XDR) consolidates security data and provides a unified visibility across the tech stack, enabling teams to correlate multiple telemetry sources and improve their security posture from a single console. Step-by-Step Integration: Prioritize integrating critical data sources—starting with endpoints, followed by firewall and identity data—to effectively manage security data and streamline incident response. Reducing Alert Fatigue: XDR enhances…

Summary Points Culture, not code, determines cyber success — strong organizational risk culture, guided by the ORCS framework, turns good intentions into disciplined behavior that defends trust amid VUCAD kondisi. Transforming risk culture involves 10 key dimensions — including leadership, ethics, decision-making, communication, technology, and continuous learning, which link behaviors to standards like ISO and NIST. Maturity levels guide progress — from ad hoc heroics to high-performing presilience, with focus on building and reinforcing behaviors sequentially rather than jumping levels. Embedding culture into operations drives sustainability — through measurable KPIs, leadership modeling, system reinforcement, and daily habits, enabling faster detection,…

Top Highlights Early Release: Ilya Lichtenstein, imprisoned for money laundering related to the 2016 Bitfinex hack, announced his early release on February 9, 2026, thanks to the First Step Act, a bipartisan criminal justice reform. Bitfinex Incident: Lichtenstein and his wife, Heather Morgan, pleaded guilty for their roles in a hack that involved the fraudulent transfer of 119,754 bitcoin, leading to one of the largest U.S. asset seizures. Cybersecurity Impact: Lichtenstein expressed a commitment to positively influence cybersecurity after serving his sentence, despite past criminal actions linked to exploiting vulnerabilities in Bitfinex’s systems. Notable Seizures: Authorities recovered approximately 94,000 bitcoin…