Cyberscoop.com

"Why security leaders should be obsessed with their most 'boring' systems."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 05 February 2026, 2141 UTC.

Content and Source:  "Cyberscoop.com."

https://mail.google.com/mail/u/0/#inbox/FMfcgzQfBkKBHgtxDvhzSKXsPVwCkPTh

URL--cyberscoop.com.

Please check email link, URL, or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Please use slider at bottom of post to read your selections.

CyberScooplinkedin facebook X


THURSDAY, FEB. 5, 2026
Two cybersecurity executives argue that organizations should prioritize securing unglamorous back-office systems. Another alleged member of a violent online collective has been arrested. And the National Cyber Director is laying out his collaboration vision for industry. This is CyberScoop for Thursday, February 5.
feature image

(Getty Images)

Become obsessed with the boring systems

In an op-ed, NightDragon CEO Dave DeWalt and Onapsis CEO Mariano Nunez argue that organizations must treat Enterprise Resource Planning (ERP) security as an existential threat following the September 2025 Jaguar Land Rover breach—Britain's costliest cyberattack—which forced six weeks of production shutdowns and caused a $1.2 billion revenue drop. The threat is escalating with SAP vulnerabilities growing 39% in 2025, exploit prices jumping 400% to over $250,000, and attackers exploiting vulnerabilities within 72 hours while organizations take weeks or months to patch—contributing to over 500 companies falling victim to the SAP NetWeaver zero-day in 2025. The authors recommend organizations present ERP risk in dollar terms, establish clear ownership between CISOs and CIOs, mandate tabletop exercises for ransomware scenarios, and ensure visibility through discovery, assessment, real-time monitoring, and incident response—especially as regulations like SOX, GDPR, SEC rules, NIS2, and DORA introduce personal liability for executives. Read the op-ed here.


CyberTalks | Feb 19, 2026

Join CyberTalks to hear from the nation's top government and technology experts on the front lines of cyber risk. This event serves as a powerful forum for exchanging ideas and best practices designed to bolster digital defenses. Ensure your team is equipped with the latest tactics to promote resiliency in an increasingly complex threat landscape. Register now!



Another alleged 764 member arrested

Aaron Corey, a 23-year-old New York man known as "Baggeth," was arrested and charged with receiving child sexual abuse material after allegedly running multiple 764-related chats and seeking CSAM from others in the nihilistic violent extremist collective, with investigators finding images and videos of children as young as 2 years old on his devices. The arrest is part of a broader law enforcement crackdown on 764, a sprawling network of thousands of people (typically ages 11-25) that coerces vulnerable children to produce CSAM, gore material, self-mutilation content, and other acts of violence using cybercriminal tactics. Multiple 764 members have been arrested in the past year, including alleged leaders Leonidas Varagiannis and Prasan Nepal who face life in prison for exploiting at least eight minors, and Alexis Aldair Chavez who pleaded guilty in December and faces up to 60 years for leading splinter group 8884. Matt Kapko has more.


ICYMI: National Cyber Director lays out his agenda

National Cyber Director Sean Cairncross called on industry Tuesday to help the Trump administration reduce cybersecurity regulatory burden and lobby Congress to pass a 10-year extension of the Cybersecurity Information Sharing Act of 2015, which provides legal protections for companies sharing cyber threat data with the government and has been stuck in short-term extensions. Cairncross said the administration wants to be a "partner" with industry rather than a "scold," contrasting with the Biden administration's approach of imposing more cybersecurity rules on the private sector, and urged companies to provide feedback on regulatory friction and frustrations with information sharing. He also asked industry to "show up and engage" with lawmakers to advocate for the legislation and said the administration's forthcoming cybersecurity strategy, developed with "heavy industry engagement," will be released "sooner rather than later." Tim Starks has more.


Workday Federal Forum | Apr 28, 2026

This forum explores how transforming while modernizing can empower agencies to restore strategic capabilities to HR. Learn how to build an adaptable, resilient, and mission-ready workforce. Discover AI's role in accelerating skills-based hiring, streamlining decision-making, and enabling HR teams to prioritize strategic, human-centered work.

Register today!



 

Comments

Popular posts from this blog

Cyber War News Today.

Cyber War News Today.

SecurityWeek Briefing