Cybersecurity

Nissan investigates cyberattack in Australia and New Zealand

Japanese carmaker Nissan has reported a cybersecurity incident involving its systems in Australia and New Zealand. In a statement on Wednesday, the company said that it is working with security researchers “to investigate the extent of the incident and whether any personal information has been accessed.” Nissan has also notified the relevant security authorities in […]

Cybersecurity

CISA performance goals program trims exploited CVEs

Dive Brief: The Cybersecurity and Infrastructure Security Agency said it is making progress toward reducing security risk since the October 2022 release of its cybersecurity performance goals program, the agency said Tuesday.  Since the release of the CPG program, organizations enrolled in the agency’s vulnerability scanning service have reduced their average number of known exploited […]

Cybersecurity

Alert: Threat Actors Can Leverage AWS STS to Infiltrate Cloud Accounts

Dec 06, 2023NewsroomAccess Management / Cloud Security Threat actors can take advantage of Amazon Web Services Security Token Service (AWS STS) as a way to infiltrate cloud accounts and conduct follow-on attacks. The service enables threat actors to impersonate user identities and roles in cloud environments, Red Canary researchers Thomas Gardner and Cody Betsworth said […]