A Cyber-Readiness Checklist and Guide
Fortinet’s FortiGuard Labs team has assembled a readiness checklist focused on standard cyber hygiene and more to help in fighting against destructive cyber threats. Read to learn more.
Read MoreComputer Security Articles
RSS Reader for Computer Security Articles
How Microsoft can help reduce insider risk during the Great Reshuffle
Credit to Author: Emma Jones| Date: Mon, 28 Feb 2022 17:00:00 +0000
These are exciting and demanding days for organizations adapting to hybrid work realities, including a wider distributed workforce and more rapid change in employee roles. These dramatic shifts drive business resilience and upside in a world still coping with pandemic disruptions.
The post How Microsoft can help reduce insider risk during the Great Reshuffle appeared first on Microsoft Security Blog.
Read MoreMITRE Sightings Report Provides Guidance on Key Cyberattack Techniques
The Sightings Report based on research run by MITRE CTID in collaboration with organizations such as FortiGuard Labs analyzes attacks and provides contextual, actionable threat intelligence. Read more about how this report can help.
Read MoreHow Crisis Text Line crossed the line in the public’s mind: Lock and Code S03E05
Credit to Author: Malwarebytes Labs| Date: Mon, 28 Feb 2022 16:55:48 +0000
This week on Lock and Code, we discuss Crisis Text Line’s data-sharing agreement with its for-profit partner, which has upset many people.
The post How Crisis Text Line crossed the line in the public’s mind: Lock and Code S03E05 appeared first on Malwarebytes Labs.
Read MoreIn a time of war, it’s important to stay secure
Credit to Author: Susan Bradley| Date: Mon, 28 Feb 2022 06:09:00 -0800
As Russia invaded Ukraine, seeing the disruption in the world occur in near real time on social media brought poignancy to what was happening. While I don’t know anyone in Ukraine, I know many people who have friends or family members that have been impacted by the war. Ukraine has many technology ties around the world. It’s also been a source of cyberattacks, which is why there’s extra concern about what we can do to protect ourselves in case of attack. (Eastern Europe has often been the source of many of the ransomware attacks that occur around the world.)
So what can tech users do to ensure you protect yourself from possible cyberattacks arising from the conflict?
Behavioral Analytics is getting trickier
Credit to Author: Evan Schuman| Date: Mon, 28 Feb 2022 03:00:00 -0800
Behavioral analytics is one of the best authentication methods around — especially when it’s part of continuous authentication. Authentication as a “one-and-done” is something that simply shouldn’t happen anymore. Then again, I’ve argued the same thing about using unencrypted SMS as a form of multi-factor authentication and I sadly still see that being used by lots of Fortune 1000 firms.
Oh well.
Although most enterprise CISOs are fine with behavioral analytics on paper (on a whiteboard? As a message within Microsoft Teams/GoogleMeet/Zoom?), they’re resistant to rapid widespread deployment because it requires creating a profile for every user — including partners, distributors, suppliers, large customers and anyone else who needs system access. Those profiles can take more than a month to create to get an accurate, consistent picture of each person.
Conti and Karma actors attack healthcare provider at same time through ProxyShell exploits
Credit to Author: gallagherseanm| Date: Mon, 28 Feb 2022 12:30:19 +0000
An unpatched Microsoft Exchange Server let both ransomware actors in; Karma just stole data, while Conti encrypted.
Read MoreTrickBot takes down server infrastructure after months of inactivity
Credit to Author: Pieter Arntz| Date: Mon, 28 Feb 2022 12:15:31 +0000
After months of spam silence, TrickBot has pulled the plug on its server infrastructure. Is this the end of an era?
The post TrickBot takes down server infrastructure after months of inactivity appeared first on Malwarebytes Labs.
Read More