Japanese Sports Brand Mizuno Hit with a Ransomware Attack
Read also: Google and Adobe address zero-day flaws, the US issues an alert over Russian hackers, and more.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Welcoming Fugue as we build the future of developer-first cloud security
Today, I am excited to announce Snyk’s acquisition of Fugue and welcome their team to the Snyk family. The addition of Fugue to Snyk’s platform will allow us to continue our mission to help developers find and fix security issues in the applications they create, by providing visibility into the security of applications and the cloud services they use. But it’s about more than just visibility of the cloud posture.
CVE-2022-24086 Vulnerability alert for websites using Magento Ecommerce
Magento has been a much used and loved e-commerce platform since its initial release in 2008. One of the things I’ve always loved about Magento is its ability to grow as ecommerce businesses grow. Starting as a self-hosted version (which I’ve used extensively as a developer over the years), Magento now has clear support and management options available via Adobe or third party ecosystem partners.
AvosLocker - the Rising Star of Ransomware
AvosLocker is a relatively new ransomware written in C++ that was first seen in June 2021. Their business model is ‘Ransomware-as-a-Service’ (RaaS), and even though they have been operating for less than a year now, they’ve been successful overall when it comes to victims. The group openly and publicly tries to recruit new members to its team and operates a TOR leak site, showcasing the latest victims, as all other ransomware groups do.
CloudCasa Adds to Cyber Resilience with Kubernetes Security Posture Reviews
CloudCasa was built to provide data protection services for Kubernetes and cloud native workloads. As a SaaS backup solution for Kubernetes, CloudCasa was designed from the ground up to be a secure, well-architected, SaaS platform that improves a customer’s security posture against sophisticated cyber-attacks.
Best Practices and Pitfalls for Using Open Source Components in Fintech
Financial technology companies are at the forefront of banking evolution, driving innovation and fighting to stay ahead of both the large bank behemoths and the next wave of fintech companies coming along behind them. In this webinar, Peak6 Director of Open Source, and Snyk Field CTO and Field CISO, discuss best practices for secure development in highly regulated Fintech companies.
How to Automate Workflows with Falcon Spotlight
Description: In this video, we will see how CrowdStrike customers can integrate Falcon Spotlight with their existing ticketing tools to orchestrate the remediation of vulnerabilities.
Preview-Only Links
When sharing sensitive content, consider using Egnyte’s preview-only links to prevent recipients from downloading a file, printing it, or copying its contents. Confidently share sensitive data without compromising security.
Between Two Cones | Mitigating Construction Project Risks with CCPI
In this video, CPPI’s Director of Technology, Brad Buckles, and Egnyte’s Senior Manager of AEC, Nick Decker, discuss mitigating risk in construction projects. Brad outlines his three pillars of risk management: safety, scheduling, and financial, and the tools, techniques, and proactive steps that CPPI takes to reduce their exposure and impact. Between Two Cones is a recurring leadership series featuring AEC experts speaking on the latest trends and most significant challenges the industry faces. Whether you’re a seasoned professional or new to the industry, there is something for everyone.
U.S. government warns that sensitive data is being stolen from defence contractors
The Federal Bureau of Investigation (FBI), Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA), and National Security Agency (NSA) have joined forces to publish a joint warning that Russian hackers have targeted defence contractors to steal sensitive data.