CISA Publishes Multi-Factor Authentication Guidelines to Tackle Phishing
The guidelines describe methods threat actors use to steal MFA credentials and how to defend against them
Cyber News, Cyber Threat Trends
- November 1, 2022
SHA-3 code execution bug patched in PHP – check your version!
As everyone waits for news of a bug in OpenSSL, here’s a reminder that other cryptographic code in your life may also need patching!
Cyber News, Cyber Threat TrendsLockBit Dominates Ransomware Campaigns in 2022: Deep Instinct
The figures come from the 2022 Interim Cyber Threat Report by Deep Instinct
Cyber News, Cyber Threat Trends
- November 1, 2022
Critical RCE Vulnerability Reported in ConnectWise Server Backup Solution
IT service management software platform ConnectWise has released Software patches for a critical security vulnerability in Recover and R1Soft Server Backup Manager (SBM). The issue, characterized as a “neutralization of Special Elements in Output Used by a Downstream Component,” could be abused to result in the execution of remote code or disclosure of sensitive information. ConnectWise’s
Cyber News, Cyber Threat Trends
- November 1, 2022
Last Years Open Source – Tomorrow’s Vulnerabilities
Linus Torvalds, the creator of Linux and Git, has his own law in software development, and it goes like this: “given enough eyeballs, all bugs are shallow.” This phrase puts the finger on the very principle of open source: the more, the merrier – if the code is easily available for anyone and everyone to […]
Cyber News, Cyber Threat Trends
- November 1, 2022
Connecting to an EC2 instance via SSH (and when you can’t)
ACM.98 Using our SSH key stored in Secrets Manager to log into an EC2 instance This is a continuation of my series of posts on Automating Cybersecurity Metrics. When I first started using AWS it was very confusing initially to understand how to set up an AWS EC2 instance and the related networking so I could […]
Cyber News, Cyber Threat Trends
- November 1, 2022
The OSPO – the front line for secure open-source software supply chain governance
Organizations of every shape, size, and sector have embraced open-source software (OSS). The financial, medical, and manufacturing industries – and even national security – now use OSS to power their most critical applications and activities. However, this widespread adoption comes with pitfalls: a corresponding increase of almost 800% in software supply chain attacks according to […]
Cyber News, Cyber Threat TrendsIran’s Digital Surveillance Tools Leaked
It’s Iran’s turn to have its digital surveillance tools leaked: According to these internal documents, SIAM is a computer system that works behind the scenes of Iranian cellular networks, providing its operators a broad menu of remote commands to alter, disrupt, and monitor how customers use their phones. The tools can slow their data connections […]
Cyber News, Cyber Threat TrendsPartner Summit 2022: Let’s Own the Opportunity to Build a World of Secure, Resilient Organizations
It’s Partner Summit week and, for me, it’s an important reminder that no one company, not even Cisco, can do it alone. Our partners provide diverse perspectives, expertise, and solutions offerings. Each partner plays a key part in delivering the outcomes and experiences our customers need, want, and expect. So, when we say, “Let’s Own […]
Cyber News, Cyber Threat Trends