Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

There's good news for any business which has fallen victim to the Akira ransomware. Security researchers at anti-virus company Avast have developed a free decryption tool for files that have been encrypted since the Akira ransomware first emerged in March 2023. The ransomware has been blamed for a number of high profile attacks - including ones against universities, financial institutions, and even a daycare centre for children.

A selection of this week’s more interesting vulnerability disclosures and cyber security news. As always with leaks, time will tell if any data shows up confirming it or not. On the flip side, such a juicy trove could just be a scam directed at hackers.

Cyber risk uncertainty is growing. Despite massive spending worldwide to the tune of $173 billion, cyber attacks keep occurring. Ransomware attacks—a type of cyberattack that encrypts an organization's network or locks users out of their devices and requires a ransom before restoring access—are costing companies 20 days of downtime on average. Within the next few years, nearly half of companies worldwide will experience cyber attacks on their software supply chains.

We are all familiar with the importance of hygiene in our day-to-day lives so as not to get sick or spread germs to others; this same concept can also ring true in our digital lives by applying cyber hygiene habits to keep our privacy and security safe online. It is important to familiarize ourselves with these procedures to avoid common cybersecurity mistakes that can be detrimental to your online privacy, such as loss of files, corrupted data, or identity theft.

The recent release of Teleport 13 brings a much-anticipated feature allowing Teleport agents and Teleport Kubernetes Agents to be updated automatically. In this blog post, we'll look at why that's so important as well as how automatic agent updates work.

In this ongoing series, you’ll hear directly from the teams keeping Vanta—and most importantly, our customers—secure. Today’s post by Rob Picard and Jess Chang on the Security team explains why and how we migrated to WebAuthn as the mandatory way to log into Okta. ‍ ‍

Threat intelligence is one of the most potent weapons we have against digital hazards. Yet, many organizations remain uncertain about what it entails, how to apply it effectively, and what threat intelligence solution to choose. This lack of understanding could be detrimental as cyber threats continue to evolve, becoming more sophisticated and disruptive. So, what is threat intelligence, and how can it help bolster an organization’s security posture?

TSMC is the world's largest semiconductor company with the greatest value. The organization was founded in 1987 and is based in Taiwan. The organization is named of the ten most valuable companies in the world today and is a significant superpower in the electronics world. As the need for semiconductor chips increases, the company continues to increase in value. This massive company serves millions of customers overall. Even top-tier companies like TSMC aren't safe from cyber attacks.

A bait-and-switch scam is a practice in which a vendor lures in a buyer with a tempting offer for a great product that the vendor does not intend to sell. This usually means advertising a too-good-to-be-true deal which, when the buyer is “baited,” is then “switched” out for a different offer.

The necessity of a SIEM for organizations and their security teams has evolved dramatically over time. It has gone from edge use cases and compliance to the current preferred form of threat detection, hunting, and incident response. As the use cases have changed, so has the architecture. As a result, organizations that have been running their SIEM on-premises are now looking for modern architectures to reduce the workload on their analysts. The simple choice: SaaS, of course.