See Falcon Fusion in Action

Breach containment is a race against time. Falcon Fusion, integrated within the CrowdStrike Falcon® Platform, harnesses AI and automation to expedite incident detection and response. Experience how Falcon Fusion streamlines security workflows, enabling teams to take down threats 108 days quicker on average, providing a swift and strategic defense that keeps adversaries at bay.

CVE-2023-41265, CVE-2023-41266 & CVE-2023-48365: Multiple Vulnerabilities in Qlik Sense Enterprise Actively Exploited

Arctic Wolf has recently worked multiple incident response cases where we have observed ransomware groups exploiting CVE-2023-41265, CVE-2023-41266 & CVE-2023-48365 to gain initial access. On August 29, 2023, Qlik published a support article detailing two vulnerabilities which when successfully exploited in tandem could lead to an unauthenticated threat actor achieving remote code execution (RCE). CVE-2023-41266.

Users Fall for Smishing Attacks 6-10 Times More Than Email-Based Attacks

With organizations heavily focusing on protecting the corporate endpoint, cybercriminals are switching focus onto mobile devices where users are more prone to fall for their social engineering tactics. We consume so much content from people you don’t personally know that it’s not part of your everyday process to stop and be critical of what’s being presented to you. And that’s exactly what cybercriminals are taking advantage of.

Mobile Security in the Age of Smartphones: Tips for Users and Developers

Smartphones have become ubiquitous with today’s digital world, serving as a central hub for personal and professional activities. This widespread use has escalated the importance of mobile security, making it a critical concern for both users and developers. As cyber threats evolve, so does the need for robust mobile security measures.

AI Integration Dilemma: Cost Challenges for Small Businesses vs. Power Play of Tech Giants #podcast

In this insightful video, we delve into the complex landscape of AI integration and its potential cost barriers for smaller organizations. The good news? When it comes to chatbots (CHT), leveraging data access APIs and seamless integration doesn't necessarily mean breaking the bank on AI engine costs. You pay for what matters – the data journey to their APIs.

Qlik Sense Exploited in Cactus Ransomware Campaign

Arctic Wolf Labs has observed a new Cactus ransomware campaign which exploits publicly-exposed installations of Qlik Sense, a cloud analytics and business intelligence platform.[1] Based on available evidence, we assess that all vulnerabilities exploited were previously identified by researchers from Praetorian [2,3]. For more information on these vulnerabilities, see the advisories published by Qlik (CVE-2023-41266, CVE-2023-41265, and CVE-2023-48365) as well as our Security Bulletin.

Who Knew Neanderthals were so High-Tech?

Researchers at ESET describe various types of scams launched by users of Telekopye, a telegram bot that assists in crafting social engineering attacks. The scammers call their victims “mammoths,” so ESET has dubbed the scammers “Neanderthals.” The first type of scam is simply financial data theft via phishing sites.

Critical Infrastructure Protection: Cybersecurity in the Public Sector

Protecting critical infrastructure has become an indispensable aspect of national security and public welfare. Critical infrastructure, encompassing essential systems such as power grids, transportation networks, water supply systems, and communication channels, forms the backbone of a nation’s economy, security, and health.

Supply Chain Cybersecurity: Ensuring the Security of the Digital Ecosystem

The digital ecosystem is an intricate web of interconnected technologies and processes. Within this network, supply chain cybersecurity has emerged as a critical component to safeguard against the growing threat landscape. As supply chains become increasingly digital, they also become more vulnerable to cyber attacks that can disrupt operations and compromise sensitive data.

Random but Memorable - Episode 11.9: Modern Cloud Threat Socks with Datadog

Should businesses be worried about the AI security threat? How do we protect our children's devices from malware? We dive into all that and more in Watchtower Weekly. Plus, we sat-down with Jason and Nimisha from Datadog to discuss some of the challenges of securing the cloud and why it's important to get cloud security right. We also unveil a new 1Password SIEM integration with Datadog that gives you greater visibility into the security posture of your business, all from one central location! 🤖🐕