Tenable Cyber Watch: China’s ‘Volt Typhoon’ Targets U.S. Critical Infrastructure, BEC Attacks Skyrocket, and more
Interested in learning more about the White House’s core strategic priorities outlined in the National AI R&D strategic plan? Want to know how you can avoid falling victim to a business email compromise (BEC) attack? Curious to know how the Chinese ‘Volt Typhoon’ hackers are silently breaching U.S. critical infrastructure networks?
We’ve got you covered in this week’s edition of the Tenable Cyber Watch, our weekly video news digest highlighting three cybersecurity topics that matter right now.
Here’s what’s happening in cyber. Today, we’re talking:
- All about how the White House’s updates to its National Artificial Intelligence R&D Strategic Plan aim to ensure the safe and responsible use of AI. Find out what’s new.
- Microsoft warns of an increase in business email compromise attacks. More on what you need to know.
- The warning about Volt Typhoon, the hackers backed by the Chinese government that have been targeting U.S. critical infrastructure.
Every Monday at 9am ET, the Tenable Cyber Watch brings you cybersecurity news you can use. Watch this week’s episode below and subscribe to our playlist on YouTube.
Related Articles
Tenable Cyber Watch: See What Tenable Experts Predict for Cybersecurity in 2024
December 27, 2023This week's edition of Tenable Cyber Watch unpacks 2024 predictions for cloud security and operational technology. Also covered: the Tenable's Research team's cybersecurity predictions for 2024. ...
Cyber Watch: Cloud Security Tops CISO Worries, Securing Your Cloud Apps and Data, and more
December 25, 2023This week's edition of Tenable Cyber Watch unpacks the top cybersecurity concerns for CISOs and shares tips on how you can better secure your cloud apps and data. Also covered: Cloud adoption by financial institutions spiked in 2023.
Tenable Cyber Watch: Promoting AI Safety and Security, White House AI Cyber Challenge, and more
December 18, 2023This week’s edition of Tenable Cyber Watch unpacks why CISA urged AI vendors to apply secure by design practices to software products and takes a look back at some of the initiatives launched this past year to promote the safety and responsible use of AI. Also covered: How you could win millions in the White House AI Cyber Challenge?
CloudImposer: Executing Code on Millions of Google Servers with a Single Malicious Package
September 16, 2024Tenable Research discovered a remote code execution (RCE) vulnerability in Google Cloud Platform (GCP) that is now fixed and that we dubbed CloudImposer. The vulnerability could have allowed an attacker to hijack an internal software dependency that Google pre-installs on each Google Cloud Composer pipeline-orchestration tool. Tenable Research also found risky guidance in GCP documentation that customers should be aware of.
Cybersecurity Snapshot: Russia-backed Hackers Aim at Critical Infrastructure Orgs, as Crypto Fraud Balloons
September 13, 2024Critical infrastructure operators must beware of Russian military hacking groups. Plus, cyber scammers are having a field day with crypto fraud. Meanwhile, AI and cloud vendors face stricter reporting regulations in the U.S. And get the latest on AI-model risk management and on cybersecurity understaffing!
Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs (CVE-2024-43491)
September 10, 2024Microsoft addresses 79 CVEs with seven critical vulnerabilities and four zero-day vulnerabilities, including three that were exploited in the wild.
- Tenable Cyber Watch