Thousands of companies are unaware of the software lurking in the background on their devices. ThreatLocker® is offering free I.T. security health reports to organizations looking to harden their environment and mitigate the risks of shadow I.T., foreign software, nation-state attacks, and unpatched vulnerabilities. Get your free report today and visualize what is occurring within your organization on a single pane of glass.
Mark your calendar for our next CSO Perspectives Live on Thursday, December 19th at 2:00 PM EST. Join N2K’s Rick Howard, and Hash Table members Kim Jones and Steve Winterfeld for a look at the most impactful stories, threats, and events of the last 90 days. Register now.
French and Dutch police have dismantled the criminal encrypted messaging service MATRIX, BleepingComputer reports. MATRIX was an invite-only subscription service designed specifically for coordinating criminal activities. Europol says law enforcement has been gathering messages from the service for the past three months, stating, "More than 2.3 million messages in 33 languages were intercepted and deciphered during the investigation. The messages that were intercepted are linked to serious crimes such as international drug trafficking, arms trafficking, and money laundering." This information will be used to support additional investigations.
Security teams are facing a constant uphill battle. Between alert fatigue, repetitive manual tasks, endless false positives, inflexible technology, and the looming risk of burnout, it all adds up, making it tough for teams to stay ahead of threats.
That’s where effective workflow orchestration and automation comes in.
Discover how automation can empower analysts and engineers to automate their most repetitive, time-consuming tasks - regardless of complexity - in this guide from Tines. Get the guide today!
Officials from the US Cybersecurity and Infrastructure Security Agency (CISA) and the FBI said in a call with reporters yesterday that China's Salt Typhoon hackers likely still have access to critical telecommunications systems in the US, the Record reports. CISA and the FBI, along with their Five Eyes partners, have issued guidance for securing communications infrastructure against these attacks.
The agencies note, "As of this release date, identified exploitations or compromises associated with these threat actors’ activity align with existing weaknesses associated with victim infrastructure; no novel activity has been observed. Patching vulnerable devices and services, as well as generally securing environments, will reduce opportunities for intrusion and mitigate the actors’ activity."
In our eBook, Building an Identity Security Program, we provide a step-by-step guide to creating a resilient identity security framework. You'll learn how to integrate identity security into your overall security strategy, protect against threats like MFA attacks, and secure access across your entire organization. Don’t leave your organization vulnerable to identity-based attacks. Arm yourself with the knowledge and tools to defend your business. Download the eBook.
SailPoint has issued a patch for a maximum-severity vulnerability (CVE-2024-10905) affecting its identity and access management platform IdentityIQ, the Register reports. The Register notes that SailPoint hasn't yet released a security advisory for the flaw, and details on the vulnerability are sparse. According to its NVD description, the vulnerability is a directory traversal flaw that "allows HTTP access to static content in the IdentityIQ application directory that should be protected." The weakness affects "IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p2, IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p5, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p8, and all prior versions."
Dropzone AI has been recognized as a Gartner Cool Vendor, validating its role in transforming SOCs. With an AI SOC Analyst that autonomously investigates alerts 24/7, Dropzone AI helps security teams stay ahead by reducing alert fatigue and providing decision-ready insights. Discover how we're leading SOC innovation.
Today's issue includes events affecting China, France, the Netherlands, and the United States.
Malicious PyPI crypto pay package aiocpa implants infostealer code (ReversingLabs) The incident demonstrates how machine learning-based threat hunting can help development teams spot threats other tools miss.
BreakingWAF Technical Analysis (Zafran) Zafran’s research team discovered a pervasive misconfiguration bug in the implementation of popular web application firewall (WAF) services by Akamai, Cloudflare, Fastly, Imperva and others. The impacted WAF vendors are responsible for 90% of protected web applications worldwide.
’Tis the season to avoid holiday email scams (Barracuda) As the holidays approach, businesses are busier than ever, and cybercriminals know it. Along with cheer, joy, and giving, the holidays also bring an unfortunate surge in cyber scams.
Exploration of Parano - Multiple Hacking Tools’ Capabilities (CYFIRMA) EXECUTIVE SUMMARY At CYFIRMA, we are committed to delivering timely, in-depth analysis of emerging threats and the evolving tactics employed...
The Year in Review 2024: Today’s Insights, Tomorrow’s Outlook (Akamai) For 10 years, Akamai has published State of the Internet (SOTI) reports — in-depth analyses of the latest cybersecurity research and trends. These reports provide valuable insights into the evolving threat landscape and cybersecurity challenges faced by organizations worldwide.
Trustwave Launches Two New Microsoft Security Accelerators to Increase Security Maturity and Drive Cost Savings (Trustwave) December 3, 2024 – Chicago, IL – Trustwave today announced the launch of two new Microsoft Security accelerators.
Rubrik Launches Rubrik Annapurna for Amazon Bedrock to Accelerate Development of Gen AI Applications (Rubrik) Rubrik launches Annapurna for Amazon Bedrock, enhancing Gen AI app development with secure, fast access to enterprise data through a unified API service.
FusionAuth Announces First Customer Identity and Access Management (CIAM) Conference (FusionAuth) AuthCon empowers product and engineering teams with practical solutions for modern CIAM needs
Keeper Introduces Risk Management Dashboard for Enhanced Risk Visibility and Proactive Threat Mitigation (PR Newswire) /PRNewswire/ -- Keeper Security, the leading provider of zero-trust and zero-knowledge cybersecurity software protecting passwords, passkeys, privileged...
Onapsis Launches New Secure RISE Accelerator to Accelerate and De-Risk RISE with SAP Transformations (BusinessWire) New solution helps organizations more efficiently and securely execute their RISE with SAP transformations
Druva Strengthens AWS Ecosystem Support with Threat Hunting Capabilities for Amazon EC2 and Amazon RDS Air-Gapped Backups (Druva) With Druva’s 100% SaaS, cloud-native solution, you get peace of mind knowing that your backup data is completely isolated from your primary RDS data. Pair that with enhanced threat hunting capabilities and you’re equipped to detect threats faster, quickly stop the spread of infections, and ensure uninterrupted access to clean, recovery-ready data.
Semperis Announces Lightning Intelligence to Provide Easy SaaS Offering for Active Directory and Entra ID Security Posture Assessment - Semperis (Semperis) We protect the world’s largest and most complex environments from cyberattacks, data breaches, and operational errors. Read our press release "Semperis Announces Lightning Intelligence to Provide Easy SaaS Offering for Active Directory and Entra ID Security Posture Assessment " to learn more.
Nozomi Networks and Advens Team to Deliver Advanced Cybersecurity Services to Industrial and Critical Infrastructure Environments (PR Newswire) /PRNewswire/ -- Nozomi Networks Inc., the leader in OT and IoT security, and Advens today announced they have partnered to address growing demand in France and...
German Police Shutter Country’s Largest Dark Web Market (Infosecurity Magazine) Law enforcers in Germany have taken down dark web marketplace Crimenetwork and arrested a suspected administrator
For a complete running list of events, please visit the Event Tracker.
AWS re:Invent (Las Vegas, Nevada, USA, Dec 2 - 6, 2024) AWS re:Invent offers learning sessions on many topics in a variety of formats and at various levels so you can expand your knowledge and grow your skills at a pace that is right for you. Select a topic from the list to learn more about these opportunities at re:Invent.
ISC2 SECURE Washington, DC (Virtual, Dec 4 - 5, 2024) You’re invited to participate in powerful collaboration and discover the latest topics impacting the cybersecurity profession. Join us for ISC2 SECURE Washington, DC, Live online on December 4-5, 2024! Over two days of interactive sessions, cybersecurity experts will address common challenges shared by government entities and the private sector/industry - not just in DC but around the globe. After a number of major national and global cybersecurity incidents in 2024, its clear we're all part of one ecosystem that must remain a united front to ensure resilience in the face of threats. Make an impact on the security of your organization’s assets and data with actionable ideas and strategies from this important event. Members earn up to 7.5 CPE credits.
SecureWorld Pacific Virtual Conference (Virtual, Dec 11, 2024) Join with cybersecurity professionals for training and information sharing through an interactive online experience. Earn 6 CPE credits learning from nationally recognized industry leaders. The agenda offers 12+ educational presentations, including panel discussions, breakout sessions, and keynotes. Connect with your peers in the Networking Lounge, enter to win prizes, and see demos and resources from top solution vendors in the Exhibitor Hall.
GovSummit (Washington, DC, USA, Dec 11, 2024) In a world of escalating digital threats and disruptions, Splunk stands at the core of government agencies, equipping them with the solutions they need to stay resilient and ensure mission success, even in the face of the unexpected. Today, the power is in digital resilience.
