Cyber Defense Advisors

Month: November 2022

LockBit Dominates Ransomware Campaigns in 2022: Deep Instinct

The figures come from the 2022 Interim Cyber Threat Report by Deep Instinct

Cyber News, Cyber Threat Trends
  • by
  • November 1, 2022

Critical RCE Vulnerability Reported in ConnectWise Server Backup Solution

IT service management software platform ConnectWise has released Software patches for a critical security vulnerability in Recover and R1Soft Server Backup Manager (SBM). The issue, characterized as a “neutralization of Special Elements in Output Used by a Downstream Component,” could be abused to result in the execution of remote code or disclosure of sensitive information. ConnectWise’s

Cyber News, Cyber Threat Trends
  • by
  • November 1, 2022

Last Years Open Source – Tomorrow’s Vulnerabilities

Linus Torvalds, the creator of Linux and Git, has his own law in software development, and it goes like this: “given enough eyeballs, all bugs are shallow.” This phrase puts the finger on the very principle of open source: the more, the merrier – if the code is easily available for anyone and everyone to […]

Cyber News, Cyber Threat Trends
  • by
  • November 1, 2022

Connecting to an EC2 instance via SSH (and when you can’t)

ACM.98 Using our SSH key stored in Secrets Manager to log into an EC2 instance This is a continuation of my series of posts on Automating Cybersecurity Metrics. When I first started using AWS it was very confusing initially to understand how to set up an AWS EC2 instance and the related networking so I could […]

Cyber News, Cyber Threat Trends
  • by
  • November 1, 2022

The OSPO – the front line for secure open-source software supply chain governance

Organizations of every shape, size, and sector have embraced open-source software (OSS). The financial, medical, and manufacturing industries – and even national security – now use OSS to power their most critical applications and activities. However, this widespread adoption comes with pitfalls: a corresponding increase of almost 800% in software supply chain attacks according to […]

Cyber News, Cyber Threat Trends

Iran’s Digital Surveillance Tools Leaked

It’s Iran’s turn to have its digital surveillance tools leaked: According to these internal documents, SIAM is a computer system that works behind the scenes of Iranian cellular networks, providing its operators a broad menu of remote commands to alter, disrupt, and monitor how customers use their phones. The tools can slow their data connections […]

Cyber News, Cyber Threat Trends

Partner Summit 2022: Let’s Own the Opportunity to Build a World of Secure, Resilient Organizations

It’s Partner Summit week and, for me, it’s an important reminder that no one company, not even Cisco, can do it alone. Our partners provide diverse perspectives, expertise, and solutions offerings. Each partner plays a key part in delivering the outcomes and experiences our customers need, want, and expect. So, when we say, “Let’s Own […]

Cyber News, Cyber Threat Trends

3 inexpensive steps to secure IoT

IoT devices can be openings for attackers, causing major disruptions to businesses. Follow these three steps to secure your IoT devices. The post 3 inexpensive steps to secure IoT appeared first on TechRepublic.

Cyber News, Cyber Threat Trends

FTC Takes Enforcement Action Against EdTech Giant Chegg

Regulator’s order requires firm to improve data security practices

Cyber News, Cyber Threat Trends