Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
Weekly Cybersecurity Recap July 14
Healthcare companies and insurance providers were hard hit this week in a slew of data breaches. Some of the breaches happened long ago, while others are fresh, but either way, it's clear that medical companies are being targeted heavily by hackers. The list of companies includes the Charles George VA Medical Center, ARx Patient Solutions, Advanced Medical Management, and Imagine360 LLC. We also can't skip over the fact that oil giant Shell was hit by a breach as well.
Analysis of CVE-2023-2868 Exploitation: Campaign Targeting U.S. Entities Using Barracuda Email Security Gateway
CVE-2023-2868, a vulnerability in the Barracuda ESG was announced on May 23. On June 15th, a report surfaced, attributing the exploitation of this vulnerability to a threat actor group tracked as UNC4841, which analysts believe is conducting espionage on behalf of the Chinese government. SecurityScorecard’s STRIKE Team consulted its datasets to identify possibly affected organizations.
Top 5 security concerns for infrastructure as code
Infrastructure as code (IaC) has changed how we deploy and manage our cloud infrastructure. Instead of having to manually configure servers and networks with a large operations team, we can now define our service architecture through code. IaC allows us to automate infrastructure deployment, scale our entire fleet of servers, document a history of changes to our architecture, and test incremental changes to the network.
Tutorial: Wi-Fi Troubleshooting Fundamentals
In this WatchGuard support video, you'll learn Wi-Fi troubleshooting fundamentals.
The Rising Threat of Cyber Warfare: Protecting Nations and Private Companies
Join us as we delve into the alarming reality of the Cyber Wolf, an ongoing phenomenon that extends far beyond the conflict in Ukraine. From nation-state actors to various global players, we are witnessing a significant increase in cyber warfare-related attacks and tests worldwide. In this gripping discussion, we explore the pressing question: it's not a matter of if, but when will this happen to us?
Octiga's New M365 Conditional Access Policy Baselines and Migration Process| Latest Release!
Hey there! In this video, I wanted to update you on the latest release from Octiga. We have introduced new conditional access policy baselines that offer more control over user inclusions, group and role inclusions/exclusions, and the ability to set a generalized template for conditional access policies.
Keeper: Protecting Small Business from Ransomware Attacks
Ransomware is now a multi-billion dollar industry. Weak passwords are responsible for 75% of ransomware attacks, as well as over 80% of data breaches. It's vital that businesses take proactive steps now to prevent ransomware attacks.
Cyberint: The Rise Of Malvertising
In recent months, threat actors have adopted a new technique for driving traffic to phishing sites: malicious advertisements on search engines and social media platforms. Known as "malvertising," this new technique poses major risks for consumers and businesses alike. Join Cyberint for a webinar on malvertising as Threat Intelligence Team Lead Or Shichrur covers the following topics: Cyberint Threat Intelligence Analyst Yehonatan Wiesel will discuss a recent case study of a malicious ad campaign impersonating a Cyberint customer's brand on major search engine advertising platforms.
Sysdig: Strengthen Profitability with Sysdig Cloud Security, Powered by Runtime Insights
Together with our partners, Sysdig helps SecOps and DevOps teams modernize with a comprehensive approach to securing the cloud.
Code Intelligence Finds New Vulnerability in protobufjs: CVE-2023-36665
As part of Code Intelligence's ongoing efforts to improve the security of open-source software it continuously tests open-source projects with its JavaScript fuzzing engine, Jazzer.js, in Google's OSS-Fuzz. Recently Code Intelligence uncovered a new Prototype Pollution vulnerability in protobufjs (CVE-2023-36665) using its newly integrated Prototype Pollution bug detector. The vulnerability puts affected applications at risks of remote code execution and denial of service attacks.