Your blog category
The U.S. Securities and Exchange Commission (SEC) has officially confirmed a cyberattack on its X account, revealing that the breach was a result of a SIM-swapping attack on the cell phone number associated with the account. The incident of the SEC X account hacked, which occurred on January 9, 2024, initially involved the dissemination of…
The BlackBasta ransomware group has claimed two new victims, Southern Water and Asahi Glass Co., adding them to their dark web portal. The cybercriminals, however, have not disclosed details about the extent of the attack, compromised data, or the motive behind the intrusion. What adds to the urgency is the ransomware group’s ominous deadline for…
Cyber recovery vendors Cyber recovery doesn’t always come in a single product but tends to be part of a platform or offer as part of other products. IDC states that cyber recovery is not a capability unto itself, but rather a combination of capabilities. Below we list 10 vendors that cover cyber recovery. Acronis Cyber…
Australia has taken a historic step by publicly revealing and imposing cyber sanctions on a Russian hacker implicated in the 2022 ransomware attack on Medibank. This marks the first instance of Australia utilizing such penalties. The cyber intrusion targeted Medibank, one of Australia’s largest private health insurers, compromising personal data from 9.7 million customers, including…
Jan 23, 2024NewsroomVulnerability / Device Security Apple on Monday released security updates for iOS, iPadOS, macOS, tvOS, and Safari web browser to address a zero-day flaw that has come under active exploitation in the wild. The issue, tracked as CVE-2024-23222, is a type confusion bug that could be exploited by a threat actor to achieve…
According to a recent cybersecurity report by Armis, geopolitical issues are affecting the cybersecurity landscape. The report found that cyberwarfare grew more widespread in 2023. The top industries exposed to attack from Chinese and Russian actors were those within manufacturing, educational services and public administration. In manufacturing, .cn and .ru domains contributed to an average…
As usual, a lot has happened in the Amazon Web Services (AWS) universe this past week. I’m also excited about all the AWS Community events and initiatives that are happening around the world. Let’s take a look together! Last week’s launches Here are some launches that got my attention: Amazon Elastic Container Service (Amazon ECS)…
For the past few years, Fidelity Investments has been moving a significant percentage of its applications to a cloud-based infrastructure. As part of that transition, Fidelity has consolidated its analytics data into its Enterprise Analytics Platform, which is engineered using the Snowflake Data Cloud, making it easier for teams and departments across the company to…
Jan 22, 2024NewsroomCyber Attack / Hacking Media organizations and high-profile experts in North Korean affairs have been at the receiving end of a new campaign orchestrated by a threat actor known as ScarCruft in December 2023. “ScarCruft has been experimenting with new infection chains, including the use of a technical threat research report as a…
Several public and popular libraries abandoned but still used in Java and Android applications have been found susceptible to a new software supply chain attack method called MavenGate. “Access to projects can be hijacked through domain name purchases and since most default build configurations are vulnerable, it would be difficult or even impossible to know…