Why the Employee Experience Is Cyber Resilience
The modern workplace is changing at a pace never seen before in history. A lot of this stemmed from COVID and remote work necessities, with 74% of CFOs noting they’ve adopted some kind of telecommuting policies due to coronavirus challenges. Now, more than ever, the employee experience (EX) is critical for keeping us connected and…
Linux Trojan XorDdos Attacks Surge, Targeting Cloud, IoT
Cybercriminal use of the Linux Trojan known as XorDdos is on the rise, according to a new report, which found a 254% increase in malicious activity against Linux endpoints using the malware over the last six months. It was first discovered in 2014, and the Microsoft 365 Defender Research Team explained in a recent blog…
C-Suite Must Mitigate Siloes to Mitigate Security Risks
As organizations grow, functions that started as one person’s job get split across multiple organizational units and multiple executives, often without thoughtful planning. Specialization enables experts to dig deep into each job but creates several problems: A lack of a single accountable executive (or worse, having multiple executives, each of whom manages part of the…
Seven Signs That Your Consumers are Ready for Passwordless Authentication
Customer demand for passwordless authentication has grown exponentially since smartphones first began offering built-in biometric readers. While we all crave a less complicated login experience, the average consumer has been clamoring for it for more than five years. In fact, Mastercard sponsored an Oxford University study of consumer sentiment that discovered just that. A staggering…
Microsoft Flags Attack Targeting SQL Servers With Novel Approach
Microsoft Security Intelligence this week tweeted a warning about an attack campaign targeting SQL servers and using a new approach to evade PowerShell monitoring. Instead of PowerShell, these threat actors are using sqlps.exe, a utility that comes standard with every version of SQL and functions as a “wrapper for running SQL-built CMDlets, to run commands…
Lacework Integrates Kubernetes Features to Enhance Security Across Multi-Cloud Environments
Lacework, the data-driven cloud security company, today announced new features added to the Polygraph® Data Platform which provide enhanced visibility and protection in Kubernetes environments. Through Kubernetes audit log monitoring, integration with the Kubernetes admission controller, and Infrastructure as Code (IaC) security, Lacework customers can now further minimize risks in build time and automate discovery…
XDR Isn’t Enough to Protect Your Organization: The Importance of Adversary Detection and Response
It’s more difficult than ever to protect our infrastructure, government, and businesses from becoming victims of well-funded, skilled adversaries. From the Log4j vulnerability to the SolarWinds hack to the Colonial Pipeline cyberattack, organizations are more vulnerable to cyberattacks than ever before. In fact, 87% of enterprises across 11 countries have fallen victim to cyberattacks in…
SecurityWeek to Host Threat Intelligence Summit Virtual Event on May 18th
The Threat Intelligence Summit is a virtual conference that allows attendees from around the world to immerse in a virtual world to explore and discuss the latest trends and insights on cyber threat intelligence (CTI). Sessions throughout the summit and expo will examine tools and technologies to help maximize the value of threat intelligence and…
Researchers Devise New Type of Bluetooth LE Relay Attacks
Meant to provide significantly reduced power consumption and costs at communication ranges similar to those provided by Bluetooth, BLE is used for a broad range of applications in sectors such as automotive, healthcare, security, home entertainment, and more. BLE proximity authentication is typically to unlock or keep unlocked products such as cars, smart locks, access…
Critical Zyxel Firewall Bug Under Active Attack After PoC Exploit Debut
Zyxel firewalls are under active cyberattack after a critical security vulnerability was disclosed last week that could allow unauthenticated, remote arbitrary code execution. The bug (CVE-2022-30525, CVSS 9.8) was silently patched in April, but no public disclosure was made until last Thursday, May 12, when Rapid7 released a technical report on the issue. It also…
