Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

cyberint

On The Hunt for Hunters Ransomware: Origins, Victimology and TTPs

Aug 20, 2024 By Adi Bleih In Cyberint
Amid the disruption of the Hive ransomware group by law enforcement agencies, Hunters International emerged onto the cyber scene in Q3 of 2023, displaying notable technical similarities with Hive, hinting at an evolutionary progression or branch-off from the dismantled group. This transition underscores the adaptive nature of cybercriminal networks, persisting in their illicit activities despite law enforcement actions.
Read Post
securitysenses

The Role of ISO 27001 in Enhancing Information Security

Aug 20, 2024 By SecuritySenses In SecuritySenses
In today's digital age, information security is paramount for organizations of all sizes and industries. Protecting sensitive data from cyber threats, unauthorized access, and other vulnerabilities is a critical concern. One of the most effective frameworks for achieving robust information security is ISO 27001. This international standard provides a comprehensive approach to managing and safeguarding information assets. This article delves into the role of ISO 27001 in enhancing information security, exploring its key principles, benefits, and implementation strategies.
Read Post
manageengine

Strengthening your defenses: Aligning Firewall Analyzer with the new PCI DSS v4.0 standards

Aug 19, 2024 By Firewall Analyzer In ManageEngine
According to IBM’s 2023 Cost of a Data Breach Report, the global average cost of a data breach is $4.45 million. This includes expenses related to detection, response, and post-breach costs. Moreover, non-compliance can result in regulatory fines. For instance, GDPR violations can lead to fines of up to €20 million or 4% of the company’s annual global turnover, whichever is higher. The challenges don’t stop there.
Read Post
cyjax

Data-leak site emergence continues to increase

Aug 19, 2024 By Adam Price In CYJAX
As the threat landscape continues to develop, ransomware and data brokerage groups constantly emerge, develop, and disband. Cyjax observed a relatively high level of data-leak site (DLS) emergence in July 2024, with a total of nine new sites. For reference, the highest observed number of ransomware groups that have emerged in a single month is ten (September 2022).
Read Post
Trustwave

The Bug Stops Here: Using DevSecOps Workflows for Pest-Free Applications

Aug 19, 2024 By David Broggy In Trustwave
Developers and cybersecurity have an interesting relationship. Developers have no problem with security operations just as long as they’re not involved or adding security doesn’t slow down their development cycle. Thankfully, well-documented security operations — known as DevSecOps — assist with the software development lifecycle (SDLC) and perform mostly invisibly from the developer’s perspective.
Read Post
kroll

Anatomy Of A Vulnerability: ScreenConnect From Publication To Exploitation

Aug 19, 2024 By Kroll In Kroll
In a security bulletin on February 19, ConnectWise announced critical vulnerabilities (CVE-2024-1708 & CVE-2024-1709) to its on-premises ScreenConnect product (identified and responsibly reported by one of Kroll’s SOC analysts), allowing attackers to takeover an organization’s ScreenConnect. The vulnerability, trivial to exploit, allows anonymous individuals to a create system admin account on publicly exposed instances of the product.
Read Post
graylog

MITRE ATT&CK: API-based Enterprise Techniques and Sub-techniques

Aug 19, 2024 By The Graylog Team In Graylog
Imagine you have a backpack with a granola bar buried at the bottom and a tenacious tiny dog who loves snacks. Even though the dog shouldn’t be able to reach that granola bar stored away carefully, it managed to open a zipper and snoop through the contents to eat the snack. From an IT environment standpoint, Application Programming Interfaces (APIs) are the backpack carrying sensitive – but appealing to attackers – data.
Read Post
levelblue

How to Use Mailvelope for Encrypted Email on Gmail

Aug 19, 2024 By Kushalveer Singh Bachchas In LevelBlue
In the previous blog we covered how to use PGP keys for encrypting and decrypting emails on desktop clients like Thunderbird and Outlook. Now, let's take a look on securing your emails without too much hassle using OpenPGP on webmail services like Gmail using the Mailvelope extension for Google Chrome.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.