Cybersecurity

Iranian Nation-State Actor OilRig Targets Israeli Organizations

Sep 22, 2023THNCyber Attack / Malware Israeli organizations were targeted as part of two different campaigns orchestrated by the Iranian nation-state actor known as OilRig in 2021 and 2022. The campaigns, dubbed Outer Space and Juicy Mix, entailed the use of two previously documented first-stage backdoors called Solar and Mango, which were deployed to collect […]

Cybersecurity

Alcion, which provides backup and security services to enterprises, raises $21M | TechCrunch

As organizations shift their operations to the cloud, they’re experiencing more security incidents — the result of challenges around the transitions from on-premises to remote data and infrastructure management. According to a recent survey, 80% of companies experienced at least one cloud security issue in 2022, while 27% suffered a breach with a public cloud […]

Cybersecurity

FBI director urges private sector to work with the agency on cyber threats

FBI Director Christopher Wray urged private sector organizations to help the agency by coming forward with information regarding malicious cyber activity.  Wray told attendees at Mandiant’s annual mWISE 2023 conference Monday that many of the agency’s successful cyber operations in recent years were accomplished with the assistance of private sector partners. He emphasized organization would […]

Cybersecurity

Privacy concerns cast a shadow on AI’s potential for software development – Help Net Security

Organizations are optimistic about AI, but AI adoption requires attention to privacy and security, productivity, and training, according to GitLab. “The transformational opportunity with AI goes way beyond creating code,” said David DeSanto, CPO, GitLab. “According to the GitLab Global DevSecOps Report, only 25% of developers’ time is spent on code generation, but the data […]

Cybersecurity

Ransomware attacks hit record level in UK, according to neglected official data

Reported ransomware attacks on organizations in the United Kingdom reached record levels last year, when criminals compromised data on potentially more than 5.3 million people from over 700 organizations, according to a surprisingly neglected dataset published by the Information Commissioner’s Office (ICO). The true count of ransomware incidents is a known unknown for officials trying […]

Cybersecurity

75% of education sector attacks linked to compromised accounts – Help Net Security

69% of organizations in the education sector suffered a cyberattack within the last 12 months, according to Netwrix. Phishing and account compromise threaten the education sector Phishing and user account compromise were the most common attack paths for these organizations, while phishing and malware (such as ransomware) topped the list for other verticals. What’s more, […]

Cybersecurity

Avoidable digital certificate issues fuel data breaches – Help Net Security

Among organizations that have suffered data breaches 58% were caused by issues related to digital certificates, according to a report by AppViewX and Forrester Consulting. As a result of service outages, 57% said their organizations have incurred costs upwards of $100,000 per outage. According to the Forrester study, “Enterprise organizations have traditionally been less focused […]

Cybersecurity

The future of cloud security

As organizations around the world prioritize digitization, the focus on cloud security is rapidly growing. Security flaws such as limited visibility, lack of threat detection and response capabilities, and the inability to detect unknown threats or misconfigurations within cloud environments, can all have devastating consequences. Misconfigured cloud resources can cause unintentional data leaks, and an […]