For providers

SiliconAngle reports that Cloud Security Alliance has unveiled the cybersecurity sector's first-ever zero-trust training and credential program dubbed "Certificate of Competence in Zero Trust" amid the growing need for zero-trust in information security.

Almost two-thirds of city and county officials noted having inadequate cybersecurity budgets even though 55% had increased spending this year, compared with 7% who noted reduced cybersecurity allocations, StateScoop reports.

Mounting cyberattacks against K-12 schools and libraries across the U.S. since the school year began in August have prompted the Federal Communications Commission to propose a new "Schools and Library Cybersecurity Pilot Program," reports The Record, a news site by cybersecurity firm Recorded Future.

SecurityWeek reports that three new vulnerabilities impacting SAP software have been addressed as part this month's Security Patch Day.

Vulnerable Apace ActiveMQ instances impacted by the maximum severity bug, tracked as CVE-2023-46604, could be exploited to achieve arbitrary code execution from memory through a new proof-of-concept exploit, The Hacker News reports.

Denmark had operations at 22 of its energy firms significantly disrupted in ongoing coordinated intrusions that involved the exploitation of a vulnerability in Zyxel firewalls since May, which is the country's largest cyberattack yet, according to The Record, a news site by cybersecurity firm Recorded Future.

Samsung has disclosed that its UK online store was impacted by a cyberattack, which compromised data from purchasing customers between July 1, 2019, and June 30, 2020, reports BleepingComputer.

ALPHV/BlackCat criminals alleged digital lending firm MeridianLink failed to report a breach the hacking group executed.

Plume claimed to be subjected to data breach Hackread reports that U.S. smart Wi-Fi service provider Plume was claimed to have had more than 20GB of files from its Wi-Fi database stolen by threat actors introducing themselves as MonkeyInject.

BleepingComputer reports that U.S. financial software firm MeridianLink has been snitched on by the ALPHV/BlackCat ransomware operation in a complaint filed with the U.S. Securities and Exchange Commission, alleging the company's failure to disclose a purported cyberattack within the SEC's four-day breach notification limit.