April 2 2024 Cyber Threat Intelligence Briefing
This weeks' briefing covers: Dive deeper: playlist of Kroll's Weekly Cyber Threat Intelligence Briefings: Cyber Threat Intelligence Briefings.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
XZ Utils Vulnerability: CVE-2024-3094
On March 28th, Red Hat released an advisory for CVE-2024-3094 which is a critical vulnerability identified in XZ Utils – a widely used data compression software included in many Linux distributions. This vulnerability stems from a backdoor inserted in versions 5.6.0 and 5.6.1 of XZ Utils and has been given a CVSS score of 10 out of 10, indicating its severity as critical.
Operationalizing Threat Intelligence with Attack Surface Management
Threat Intelligence is an important capability that many SOCs use to improve their security posture. Understanding what threat actors are targeting and how, can aid in everything from threat hunting to incident response. However, organizations often struggle with how to operationalize threat intelligence data they receive in order to actually accomplish this.
ThreatQuotient Partners with the Electricity Information Sharing and Analysis Center as a Member of its Vendor Affiliate Program
ThreatQuotient will contribute subject matter expertise to the E-ISAC to support the defense of North America's electricity grid against cyber attacks.
Five ways your business can bridge the cybersecurity skills gaps to find and keep top talent
We hear a lot about the cybersecurity skills gap, which the latest research puts at 3.4 million globally. There are lots of reasons why organizations find themselves dealing with a skills deficit — from an actual dearth of qualified talent to internal factors including turnover, lack of budget/competitive wages, limited opportunities for growth and promotion, and lack of training. One aspect that is within a company’s control, but is often unremarked, is unrealistic hiring practices.
March 26 2024 Cyber Threat Intelligence Briefing
This weeks' briefing covers: Dive deeper: Full playlist of Kroll's Weekly Cyber Threat Intelligence Briefings: Cyber Threat Intelligence Briefings.
The Cyber Threat Intelligence Analyst - Speaking Your Language
One issue that is raised frequently is the way in which security or IT teams struggle to speak the “business language” to members of the senior leadership that take the final decisions on spending and investment.
Unveiling Blind Spots Navigating Threat Intelligence Alignment in Government Agencies
Join us as we delve into the critical importance of using the right threat intelligence tailored to the unique identity of your organization. Discover insights from a recent encounter with a major government agency responsible for key elements of the UK economy, where the lack of awareness about their own data protection and adversaries was startling.
"Know your attack surface, and start to use intelligence to understand what threats are most relevant to your business"
When it comes to cybersecurity and online protection, many regional ISP and telco providers are very late to the party to defend against malicious actors, like in the case of Russian APT groups. The COVID-19 crisis outlined the importance of the internet and computers. However, it also emphasized the importance of online security. One report showed that over 7.9 billion records had been exposed by data breaches from January to September of 2019.
CrowdStrike Counter Adversary Operations Demo
Adversaries are getting faster, so if you aren’t being proactive, you’re already too late. Watch how CrowdStrike Counter Adversary Operations unifies our industry-leading threat intelligence and hunting teams with integrated offerings to stop modern breaches and raise adversaries’ cost of doing business.