Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Security

manageengine

Supporting your remote workforce: Automatic cached credentials update

Sep 18, 2024 By ADSelfService Plus In ManageEngine
In today’s increasingly remote work environment, IT administrators face the challenge of ensuring end users can securely and seamlessly access company resources from anywhere. A critical aspect of this is managing passwords, particularly when users are away from the domain network. These remote users greatly benefit from cached credentials, or the domain username and password hash stored locally on users’ machines after a successful domain-connected login.
Read Post
Featured Post
11:11 systems

Data Resilience and Protection in the Ransomware Age

Sep 18, 2024 By Sam Woodcock, Director of Cloud Strategy and Enablement In 11:11 Systems
Data is the currency of every business today, but it is under significant threat. As companies rapidly collect and store data, it is driving a need to adopt multi-cloud solutions to store and protect it. At the same time, ransomware attacks are increasing in frequency and sophistication. This is supported by Rapid7's Ransomware Radar Report 2024 which states, "The first half of 2024 has witnessed a substantial evolution in the ransomware ecosystem, underscoring significant shifts in attack methodologies, victimology, and cybercriminal tactics."
Read Post
one identity

Active Roles release 8.2: Enhancements for hybrid cloud and Entra ID

Sep 18, 2024 By Vipin Jain In One Identity
You may already be using Active Roles to manage privileged access, identity and Active Directory (AD) from a single pane of glass. But now, you can get more. Active Roles release 8.2 is poised to offer multiple new features that support customers who are migrating to the cloud and applying web-based resources during the continuing market evolution. It also introduces enhancements to management within Entra ID.
Read Post
knowbe4

SANS Releases Guide to Address Rise in Attacks on Manufacturing and Industrial Control Systems

Sep 18, 2024 By Stu Sjouwerman In KnowBe4
Increased ransomware attacks on industrial control systems (ICS), mixed with general ICS insecurity found across the manufacturing sector, has given rise to a guide specifically addressing this risk. Manufacturing has been a target of ransomware for quite some time — I’ve even covered a recent attack focused on credential harvesting.
Read Post
CrowdStrike

CrowdStrike Announces Falcon Identity Protection Innovations for Entra ID and Privileged Access

Sep 18, 2024 By Ryan Terry - Ross Penny In CrowdStrike
In the critical and constantly evolving identity security space, organizations are focused on three essential needs: While identity security disciplines like identity security posture management (ISPM), identity threat detection and response (ITDR) and privileged access management (PAM) address various aspects of these needs, none offer a complete solution.
Read Post
Arctic Wolf

CVE-2024-38812: Critical RCE Vulnerability Fixed in VMware vCenter Server and Cloud Foundation

Sep 18, 2024 By Andres Ramos In Arctic Wolf
On September 17, 2024, Broadcom released fixes for a critical vulnerability impacting VMware vCenter Server and Cloud foundation, tracked as CVE-2024-38812. This vulnerability is a heap-overflow flaw in the implementation of the DCERPC protocol that a remote attacker can use to send specially crafted network packets to vCenter Server, potentially leading to Remote Code Execution (RCE).
Read Post
knowbe4

North Korean Hackers Target Software Developers With Phony Coding Tests

Sep 18, 2024 By Stu Sjouwerman In KnowBe4
Researchers at ReversingLabs warn that North Korea’s Lazarus Group is targeting software developers with phony job interviews. The threat actors are posing as employees of major financial services firms and send coding assessment tests as part of the interview process. Our team recently recorded a webinar that covers this exact topic, as our cybersecurity experts discuss how we spotted the red flags and stopped it before any damage was done.
Read Post
CrowdStrike

CrowdStrike Next-Gen SIEM Innovations Slash Response Time and Simplify SIEM Migrations

Sep 18, 2024 By Kasey Cross In CrowdStrike
Are your legacy technologies slowing down your security operations? You’re not alone. Seventy percent of critical incidents take over 12 hours to resolve. Legacy SIEMs burden security teams with endless manual processes and agonizingly slow search speeds, delaying investigation and response while increasing the risk of a breach. The future of security requires next-gen SIEM technology built for scale and speed, powered by automation and AI.
Read Post
Subscribe to Security

Copyright © 2024 OpsMatters™. All rights reserved.