Cloud Security: The Imperative of Penetration Testing "Defenders think in lists, attackers think in graphs," remarked John Lambert from Microsoft, encapsulating the contrasting mindsets of cybersecurity defenders and attackers. This fundamental difference underscores the need for organizations to adopt an attacker’s viewpoint in bolstering their cybersecurity measures. While traditional defense…
Two UK Teenagers Convicted for LAPSUS$ Hacking Activities Targeting Major Tech Firms A jury in London has convicted two teenagers for their roles in the notorious LAPSUS$ hacking group, also known as Slippy Spider. This gang has been linked to a series of high-profile cyberattacks against leading technology companies, employing…
Bolster Appoints Rod Schultz as CEO to Address Internal Data Security and AI-Driven Threats Rod Schultz has been appointed as the new CEO of Bolster, a Silicon Valley-based brand security startup, with a mandate to expand the company’s focus from protecting brands against external threats to addressing internal data security…
Regulators Urge Enhanced Security for Third-Party Services Following CrowdStrike Outage In light of the significant disruption caused by a cybersecurity incident involving CrowdStrike, the U.K. Financial Conduct Authority (FCA) has issued a directive urging financial institutions to bolster their preparedness against similar outages. This follows a global incident in July…
Weekly Cybersecurity Newsletter: Key Developments and Insights In the latest edition of our cybersecurity newsletter, we delve into pressing updates from the digital security landscape, highlighting significant vulnerabilities and emerging threats that demand the attention of business owners and professionals alike. This week’s discussion covers the types of cyber threats…
Several widely-used Android applications on the Google Play Store have been identified as vulnerable due to a path traversal vulnerability known as the “Dirty Stream” attack. This flaw could enable malicious applications to overwrite files within the affected apps’ home directories. According to Dimitrios Valsamaras from the Microsoft Threat Intelligence…
Cyber Attacks Linked to Gaza-Based Threat Actor Targeting Israeli Organizations A recent series of cyber attacks has been traced back to a threat actor based in Gaza, primarily focusing on Israeli private-sector entities in the energy, defense, and telecommunications sectors. Findings were disclosed by Microsoft in its fourth annual Digital…
Cozy Bear, a hacking group linked to the Russian government, is executing a new phishing campaign that is impacting over 100 organizations worldwide. Utilizing sophisticated tactics, the attackers are employing signed Remote Desktop Protocol (RDP) files disguised as legitimate documents to establish remote access and extract sensitive information. Organizations should…
An alarming trend has emerged as the AvosLocker ransomware group has been implicated in attacks targeting crucial infrastructure sectors across the United States, with some incidents surfacing as recently as May 2023. This information comes from a comprehensive cybersecurity advisory jointly issued by the U.S. Cybersecurity and Infrastructure Security Agency…
