Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

A guest blog, written by Jaye Tilson, Field CTO at HPE Aruba. The healthcare industry, the very lifeline entrusted with safeguarding our most sensitive data, is under relentless attack. Cybercriminals see medical records, financial information, and even critical patient monitoring data as their golden goose, with breaches inflicting unimaginable harm. In this ever-evolving threat landscape, healthcare companies must prioritize building robust cybersecurity strategies.

Cyber threats can originate from anywhere around the globe. For services such as managed detection and response (MDR) to effectively defend against them requires a managed security service provider (MSSP) that likewise has a global footprint. The top 10 countries from which distributed denial-of-service attacks (DDoS) originate include China, Brazil, India, Indonesia, Russia, and Germany, according to data collected by the cloud services company Cloudflare. At the same time, the U.S.

In 2024, I hope to see significant growth and renewed optimism in the tech sector. Personally, I’m looking forward to the year ahead with positivity as Teleport enters an important period and a packed pipeline of significant enhancements to the platform. These capabilities are increasingly critical to a threat landscape that is centered on attacking identity and exploiting human behavior.

Infosys McCamish Systems (IMS) is a subsidiary of Infosys, a global outsourcing organization. IMS is primarily concerned with delivering life insurance and retirement solutions for clients of Infosys. Among those who use IMS’ services are nationwide organizations, including Bank of America. In November 2023, IMS was made aware of a cyberattack on their systems; the attack disrupted some of IMS’ applications and compromised the information of 57,028 people.

Uncover the startling surge in cyber threats from our Avast Q4/2023 Threat Report. Over 10 billion attacks last year reveal the critical need to pay attention.

Recent supply chain attacks, from SolarWinds to 3CX and MOVEit, illustrate the impact that can occur when a single widely used software platform is compromised, thereby enabling attackers to use this initial access as an entry point into any number of subsequent networks. Often the intention is to propagate malware or leverage sensitive data to extort victim organisations.

In the age of attack surface expansion, securing IT assets is no longer optional—it’s a necessity. IT and cybersecurity leaders must protect their organisation’s digital assets from increasing cyber threats. Cybersecurity Ventures predicts that cybercrime will cost the world $10.5 trillion annually by 2025, according to their report. This underscores the importance of having a robust security strategy in place.

The CVSS (Common Vulnerability Scoring System) is a widely used standard that produces a score between 0 and 10 to indicate the level of severity of a vulnerability. The most popular spot to find CVSS scores is on the National Vulnerability Database (NVD) website, where you’ll see CVSS scores for all CVE (Common Vulnerabilities and Exposures) IDs.

Vulnerability remediation is no small feat – especially if your security and remediation teams are understaffed and overwhelmed. Because vulnerabilities extend across the code, cloud, and infrastructure in your attack surface, and can vary drastically in their criticality, location, type, or affected systems, one-size-fits-all approaches are rarely the answer.