incident response Archives - Page 2 of 15

Microsoft Connects USB Worm Attacks to ‘EvilCorp’ Ransomware Gang

Issued by: Security Week

According to fresh data from Redmond’s threat intelligence team, a ransomware-as-a-service gang it tracks as DEV-0206 has been caught rigging online ads to trick targets into installing a loader for additional malware previously attributed to EvilCorp. Even more ominously, Microsoft said its research teams discovered EvilCorp malware distribution tactics and observed behavior all over the…

Cloud Security, Malware & Threats

Snowflake Launches Cybersecurity Workload to Find Threats Across Massive Data Sets

Issued by: Security Week

Snowflake this week launched a new Cybersecurity workload that helps cybersecurity teams to better protect their enterprises using its platform and an extensive ecosystem of partners delivering security capabilities with connected applications, cybersecurity teams can quickly gain visibility and automation at cloud-scale. “With Snowflake’s Data Cloud, cybersecurity teams can break down data silos to enable…

Malware & Threats

Regulator Proposes $1 Million Fine for Colonial Pipeline One Year After Cyberattack

Issued by: Security Week

The PHMSA has proposed civil penalties of $986,000 for the operator of the largest fuel pipeline in the US for what it has described as control room management failures. In May 2021, Colonial Pipeline was forced to shut down operations after its systems became infected with ransomware. The attack involved the Russia-linked Darkside ransomware and…

Network Security

Amazon’s Shuttering of Alexa Ranking Service Hits Cybersecurity Industry

Issued by: Security Week

When accessing alexa.com, users are now greeted by an end of service notice that says the site was retired on May 1, 2022. Alexa was founded in 1996 and it was acquired by Amazon in 1999. Amazon announced its decision to retire the service in December 2021. The Alexa Top Sites and Web Information Service…

Network Security

Many Industrial Firms Say Cybersecurity Systems Cause Problems to Operations

Issued by: Security Week

Kaspersky reported recently that it only saw a small increase in the percentage of industrial control system (ICS) computers targeted in 2021, compared to the previous year. However, of the more than 300 respondents who took part in the latest survey, half reported seeing an increase in security incidents affecting ICS or other operational technology…

Network Security

Cybereason launches DFIR solution to automate incident response

Issued by: CSO

Endpoint protection vendor Cybereason has launched a new incident response (IR) solution to streamline and automate IR investigations. Digital Forensics Incident Response incorporates nuanced forensics artifacts into threat hunting, reducing remediation time by enabling security analysts to contain cyberattacks in minutes, the firm stated in a press release. The release comes in the wake of…

Malware & Threats

Wind Turbine Giant Nordex Scrambling to Recover From Cyberattack

Issued by: Security Week

The incident was publicly disclosed in early April, when the company announced that it shut down “IT systems across multiple locations and business units” to contain the issue. The company also said that the cyberattack was detected in its early stages, and that it immediately set up an incident response team to investigate and address…

Malware & Threats

Ransomware Payments, Demands Rose Dramatically in 2021

Issued by: Dark Reading

Ransomware attackers demanded dramatically higher ransom fees last year, and the average ransom payment rose by 78% to 541,010, according to data from incident response (IR) cases investigated by Palo Alto Networks Unit 42. IR cases by Unit 42 also saw a whopping 144% increase in ransom demands, to $2.2 million. According to the report,…

Malware & Threats

A Sheep in Wolf’s Clothing: Technology Alone is a Security Facade

Issued by: Security Week

After over 20 years in cybersecurity, I firmly believe that technology alone has not, and will not, win the war on cyberattacks. The idea of a purely technical solution providing lasting protection is flawed from the outset. The claims of security vendors that only bring technology to the cyber fight is the equivalent of a…

Application Security

HelpSystems to Acquire MDR Services Firm Alert Logic

Issued by: Security Week

Terms of the agreement were not disclosed The company’s MDR solution augments customers’ existing cybersecurity resources to protect on-premise, cloud, SaaS, and hybrid environments, and meet regulatory requirements, including PCI DSS, HIPAA HITECH, GDPR, Sarbanes-Oxley (SOX), SOC 2, NIST 800-171 and 800-53, ISO 27001, COBIT, and more. Houston, Texas-based Alert Logic, which claims more than…