A selection of this week’s more interesting vulnerability disclosures and cyber security news. For a daily selection see our twitter feed at #ionCube24. If Microsoft can’t get it right, what hope do us mere mortals have?
In my previous article, I proposed ways that modern network-derived evidence applies to the cyber kill chain—a concept created by Eric Hutchins, Michael Cloppert, and Rohan Amin that changed how security teams approach defending their digital assets. This article focuses on an evolved, non-linear version of the kill chain called the “kill web.”
In today's rapidly evolving digital landscape, data stands as the linchpin of modern business operations. However, safeguarding sensitive data has grown into a formidable challenge for enterprises in recent times. The surge in data volume and escalating threats are not the sole culprits; the pivotal shift toward digitalization has prompted organizations to migrate their data and IT infrastructure to a diverse blend of private and public clouds.
At the recent Permissionless II, Fireblocks CEO and Co-Founder, Michael Shaulov announced the launch of the non-custodial wallets-as-a-service (WaaS) in his keynote “From Hesitation to Innovation: How Brands Can Successfully Navigate the Web3 Maze” to a standing-room-only audience. This blog features resources to help guide you as you build in Web3, including the keynote at Permissionless, white papers, a new webinar, and technical documentation.
The latest MGM Resorts ransomware attack demonstrates why cyber insurance is critical as part of a multi-layered security strategy. In our last blog, we discussed the recent Las Vegas cyber incidents and how no organization is completely safe. The original cyber incident at MGM Resorts occurred on September 10, 2023 — nearly two weeks ago now – and the company and its valued customers are still feeling its effects.
According to a recent data dump on a hacker forum, credit giant TransUnion was recently the victim of a data breach. It's unclear whether the company itself was breached, but it does appear that TransUnion customers have been compromised. Find out more to see what the potential risk is to you, if any.
In the fast-paced world of software development, the clash between developers and security experts could greatly benefit from some much-needed balance. On one side, developers strive for success based on metrics like delivery time, deployment frequency, and number of features. On the other side, security professionals are measured on vulnerability and compliance metrics.
CrowdStrike is raising the bar for proactive detection and response with the introduction of CrowdStrike Falcon® Counter Adversary Operations Elite, the industry’s first and only white-glove service created to rapidly disrupt sophisticated adversaries with the fusion of industry-leading intelligence and threat hunting.*
