For individuals

Efforts to remove the four-year degree requirement for certain federal cybersecurity contracting positions are being advanced by National Cyber Director Harry Coker and the Office of Management and Budget in a bid to strengthen the cybersecurity workforce, reports CyberScoop.

Ongoing intrusions leveraging an already patched critical privilege escalation flaw impacting Microsoft SharePoint, tracked as CVE-2023-29357, have been flagged by the Cybersecurity and Infrastructure Security Agency, which has added the issue to its Known Exploited Vulnerabilities catalog, The Hacker News reports.

CyberScoop reports that Russian state-sponsored threat operation Sandworm was noted by Forescout to not have been behind two separate hacking campaigns against Denmark's critical infrastructure last year, which were attributed to the hacking group by the country's SektorCERT.

Total recovery from a Russian ransomware attack in October at Kansas' court system was noted to be imminent by state Supreme Court Chief Justice Marla Luckert following this week's restoration of its case management system and free public portal for electronic court records, according to The Record, a news site by cybersecurity firm Recorded Future.

Hong Kong-based athleisure wear retailer Halara has commenced a probe into a data breach following the emergence of claims regarding the theft and leak of information from more than a million of its customers, reports BleepingComputer.

Wired reports that more than 4 million sensitive school records, including thousands of U.S. schools' active shooter emergency plans and other emergency planning documents, have been exposed due to internet-exposed web buckets owned by school software provider Raptor Technologies.

Are historical budget constraints limiting your cybersecurity program? Don't let old saws hold you back. It's time to revisit your budget with revolutionary future needs front of mind.