The Rolling Stones wanted to protect their space; we, as security practitioners, need to protect ours. Data ‘castles’ in the cloud are out there, and they’re constantly under siege. By drawing inspiration from a band that embodied personal freedom, we…
Category: EN
Over 50,000 Tinyproxy Servers Vulnerable to Critical RCE Flaw
A critical remote code execution (RCE) flaw, CVE-2023-49606, was found affecting nearly 52,000 Tinyproxy servers. This vulnerability was disclosed by Cisco Talos in December 2023, impacting versions 1.11.1 and 1.10.0 of Tinyproxy. This article has been indexed from Cyware News…
Law Enforcement Agencies Identified LockBit Ransomware Admin and Sanctioned Him
The FBI, UK National Crime Agency, and Europol have unmasked the identity of the admin of the LockBit ransomware operation, aka ‘LockBitSupp’ and ‘putinkrab’, and issued sanctions against him. This article has been indexed from Cyware News – Latest Cyber…
Forgepoint Capital boosts Nudge Security’s seed round
Nudge Security announced new funding from Forgepoint Capital, which joins Ballistic Ventures in bringing the fast-growing startup’s seed funding to $16.5 million. Forgepoint Co-Founder and Managing Director Alberto Yépez will join the Nudge Security board. “With its patented, turnkey…
AppViewX AVX ONE provides visibility, automation and control of certificates and keys
AppViewX announced AVX ONE, a fully integrated SaaS-based CLM platform for PKI, IAM, security, DevOps, cloud, platform and application teams. AVX ONE provides enterprise scale, visibility, automation and control of certificates and keys. It enables governance, and remediation, and crypto-agility…
New Relic introduces Secure Developer Alliance for enhanced security insights
New Relic launched Secure Developer Alliance. Industry leaders including FOSSA, Gigamon, Lacework, Aviatrix, and Opus are among the first to join the alliance, which provides them with pragmatic research, education, and guidance to implementing observable security. In addition, the Secure…
Hackers Exploiting LiteSpeed Cache Bug to Gain Full Control of WordPress Sites
A high-severity flaw impacting the LiteSpeed Cache plugin for WordPress is being actively exploited by threat actors to create rogue admin accounts on susceptible websites. The findings come from WPScan, which said that the vulnerability (CVE-2023-40000, CVSS score: 8.3) has been leveraged to set up bogus admin users…
UK Ministry of Defense disclosed a third-party data breach exposing military personnel data
The UK Ministry of Defense disclosed a data breach at a third-party payroll system that exposed data of armed forces personnel and veterans. The UK Ministry of Defense disclosed a data breach impacting a third-party payroll system that exposed data…
Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight
On the plus side, infosec’s a good bet for a long, stable career Interview This year is an unfortunate anniversary for information security: We’re told it’s a decade since ransomware started infecting corporations.… This article has been indexed from The…
Liongard unveils Managed Attack Surface Solution for SMBs, mid-market, and enterprise clients
Liongard unveils its latest innovation: the Managed Attack Surface Solution for SMBs, mid-market, and enterprise clients. This solution combines its ASM platform with the expertise of its extensive global managed IT service partner network, providing comprehensive visibility, protection and resources…
Accenture partners with Mandiant to improve cybersecurity operations
Accenture and Mandiant, part of Google Cloud, are teaming up to collaboratively deliver cyber resilience services to help organizations more efficiently detect, investigate, respond to and recover from cyberattacks. As part of the partnership, Accenture will utilize Mandiant Threat Intelligence,…
Bitwarden adds mobile passkey support for everyone
Bitwarden has announced the availability of mobile passkey support for everyone. Setting Bitwarden as the default passkey provider, users can generate and use passkeys seamlessly on mobile devices and desktop browsers, combining the convenience of synced vaults with the seamless…
Global Cybercrime Report 2024: Which Countries Face the Highest Risk?
Understanding a country’s cybersecurity readiness is vital in today’s environment. Using data analytics and machine learning, we can assess each nation’s cybersecurity strengths, weaknesses, and areas needing improvement. Exploring the cybersecurity rankings of different countries can help us make informed…
Relyance AI release Asset Intelligence and DSPM for data visibility and compliance
Relyance AI unveiled the release of Asset Intelligence and Data Security Posture Management, the first DSPM solution to bring together complete asset-level visibility and lineage to all sensitive enterprise data in the context of contractual and regulatory obligations. Security and…
Analyzing Synology Disks on Linux, (Wed, May 8th)
Synology NAS solutions are popular devices. They are also used in many organizations. Their product range goes from small boxes with two disks (I'm not sure they still sell a single-disk enclosure today) up to monsters, rackable with plenty of…
Ransomware hackers calling parents from their Children mobile phone numbers
A concerning trend has emerged, revealing the extent to which criminals perpetrating ransomware attacks are willing to go to extract money from their victims. Charles Carmakal, CEO of Mandiant, now under Google’s ownership, highlighted one such alarming scenario during the…
Safeguarding Your Family: Strategies for Achieving Data Security
In an age where digital information is omnipresent, ensuring the security of your family’s data has become paramount. From personal finances to sensitive documents and cherished memories, the digital landscape is filled with valuable assets that require protection. Here, we…
Google Simplifies Two-Factor Authentication Setup Process
Google has announced an update to its two-factor authentication (2FA) process, also known as 2-step Verification (2SV), aimed at simplifying the setup and making it easier for users to secure their accounts. The changes rolled out on Monday, May 6,…
97% of organizations hit by ransomware turn to law enforcement
Sophos has released additional findings from its annual “State of Ransomware 2024” survey. According to the report, among organizations surveyed, 97% of those hit by ransomware over the past year engaged with law enforcement and/or official government bodies for help…
Best API Security Product: Wallarm wins 2024 Cybersecurity Excellence Award
We are thrilled to announce that Wallarm has clinched the sought-after 2024 Cybersecurity Excellence Award, under the category Best API Security Product. Our unwavering commitment to pioneering solutions that safeguard digital ecosystems, and fortify API security amidst the evolving cyber…