November 2021 - Page 4 of 5 - Cyber Security Minute

A Journey in Organizational Resilience: Supply Chain and Third Parties

Issued by: Security Intelligence

The next stop on our journey focuses on those that you rely on: supply chains and third parties. Working with external partners can be difficult. But, there is a silver lining. Recent attacks have resulted in an industry wake-up call when it comes to cybersecurity resilience. You see, the purpose of using external partners is…

Vulnerabilities

Device Exploits Earn Hackers Over $1 Million at Pwn2Own Austin 2021

Issued by: Security Week

Pwn2Own Austin has focused on hacking devices and ZDI described it as the largest Pwn2Own to date. White hat hackers earned $362,500 on the first day of the event, $415,000 on the second day, $238,750 on the third day, and $65,000? on the fourth day. Sixty-one bugs were disclosed at the contest — exploits typically…

Malware & Threats

6 Potential Long-Term Impacts of a Data Breach

Issued by: Security Intelligence

A data breach can destroy a business. For small- and medium-sized businesses (SMB), this is really especially concerning, as 60% will shut down within six months of the attack. While larger companies and agencies likely won’t have to shut their doors, they, too, suffer serious consequences. There are financial costs, which Ponemon Institute and IBM…

Software Security

Compliance-as-a-Service Platform Laika Raises $35 Million

Issued by: Security Week

The new funding round was led by J.P. Morgan Growth Equity Partners. All previous investors participated as well, including Canapi, Dashfund, Bain Capital Ventures, Nyca, and ThirdPrime. Laika says it will use the funds to build additional automation, to add audit experiences to its platform, and to invest in growth and market momentum. The New…

Malware & Threats

Tens of thousands unpatched GitLab servers under attack via CVE-2021-22205

Issued by: Help Net Security

Attackers are actively exploiting an “old” vulnerability (CVE-2021-22205) to take over on-premise GitLab servers, Rapid7 researcher Jacob Baines warns. The additional bad news is that at least half of the 60,000 internet-facing GitLab installations the company detects are not patched against this issue. What are the attackers doing with these servers? Damian Menscher, a security…

Network Security

House Passes Two Bills to Improve Small Business Cybersecurity

Issued by: Security Week

One of the bills, the Small Business Administration (SBA) Cyber Awareness Act, was introduced by Reps. Young Kim (R-CA) and Jason Crow (D-CO). It aims to strengthen the capabilities of the SBA when it comes to handling and reporting cyber threats that affect small businesses. The SBA Cyber Awareness Act would expand the SBA’s cybersecurity…

Network Security

Another Cybersecurity Awareness Month Has Passed and Little Has Changed

Issued by: Security Week

Last month we celebrated the 18th year of the Cybersecurity Awareness Month, which was previously known as National Cybersecurity Awareness Month. Under the slogan “Do Your Part. #BeCyberSmart”, the Cybersecurity and Infrastructure Security Agency (CISA) together with the National Cyber Security Alliance (NCSA) each year encourage individuals and organizations to own their role in protecting…

Application Security

Application Security Startup Wabbi Raises Over $2 Million in Seed Funding

Issued by: Security Week

The funding round was led by Mendoza Ventures, with participation from Cisco Investments and several other companies and angel investors. Wabbi plans on using the money to scale its team. The company offers a continuous security platform designed to help organizations develop secure software. Its capabilities include vulnerability management, policy management and compliance monitoring, and…

Malware & Threats

BlackMatter ransomware group announces shutdown. But for how long?

Issued by: Blog Malwarebytes

The BlackMatter ransomware gang has announced they are going to shut down their operation, citing pressure from local authorities. And pressure there is. Only two weeks ago, we wrote about a warning that the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the National Security Agency (NSA) had issued over…