BlackByte Ransomware Breach: Can't Forget Compliance Basics

On Sunday, Feb. 13, the NFL’s San Francisco 49er organization issued a statement confirming they experienced a network security incident. Shortly after the incident, BlackByte ransomware gang listed the 49ers as one of their alleged victims. The 49ers franchise didn’t confirm if ransomware was involved, but it did state that only the corporate IT network was affected. As with all breaches, one commonality eventually appears: vulnerabilities.

Microsoft Office: VBA Blocked By Default in Files From the Internet

In January 2022, Microsoft announced that Excel 4.0 macros will be restricted by default, as a measure to protect customers against malware based on XLM 4.0 macros. As a more aggressive measure, on February 07, 2022, Microsoft announced that they will start blocking VBA macros for files downloaded from the internet.

Software supply chain risks to keep an eye on in 2022

As a supply chain security vendor, the growth is far from surprising for us at Bytesafe - with the supply chain being a noticeable security blind spot for many organizations. A massive 62% of organizations claim to have been impacted by supply chain attacks in 2021 alone. Incidents like log4j, ua-parser-js and colors.js/faker.js have once again shown that it’s vital to use services like the Bytesafe Dependency Firewall.

What is Cyber Threat Intelligence? Think like a Cybercriminal

Cyber threat intelligence (CTI) considers the full context of a cyber threat to inform the design of highly-targeted defensive actions. CTI combines multiple factors, including the motivations of cybercriminals and Indicators of Compromise (IOC), to help security teams understand and prepare for the challenges of an anticipated cyber threat.

Webinar: Box, urlscan, Tines: URL analysis & phishing automation

In this webinar, Tines co-founder Thomas Kinsella sits down with Del from Box, and Johannes from urlscan, to take a look at some key use cases running production – URL analysis and phishing. As well as walking through how Box has designed these processes in Tines, we also discuss reflect on what security teams, engineers, analysts, and threat hunters can learn from Box’s approach more generally.

Data Breach vs. Data Leak: What's the Difference?

Simply put, a data leak is when sensitive data is unknowingly exposed to the public, and a data breach is an event caused by a cyberattack. An example of a data leak is a software misconfiguration facilitating unauthorized access to sensitive resources - such as the major Microsoft Power Apps data leak in 2021. An example of a data breach is a cybercriminal overcoming network security controls to gain access to sensitive resources.

Magento security requires additional patch to fix sanitization vulnerability

As technology folks, we are often under a lot of pressure to fix some deployed code, update an infrastructure component, or patch some code. Often it’s with little notice and needs to be done 5 minutes ago. The gamble with any “zero turnaround” is the rush to fix now vs. taking the time to test and check.

Improve Clinical Trial Monitoring with Egnyte

Clinical trial monitors are vital to the efficient collection of high-quality data. They deploy trial information and protocol amendments from the sponsor to the sites, which ensures study progress. They also support endpoint analysis by collecting source data and by verifying adherence to the trial protocol.