The attack featured a unique, multistage malware and a likely Pulse Secure VPN exploit. A federal agency (Feds) has suffered a successful espionage-related cyberattack that led to a backdoor and multistage malware being dropped on its network. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an alert on Thursday, not naming Read more…
FBI believes device vendors won’t disable these protocols and warns companies to take preventive and protective measures. he Federal Bureau of Investigation sent an alert last week warning about the discovery of new network protocols that have been abused to launch large-scale distributed denial of service (DDoS) attacks. The alert Read more…
WASHINGTON — The Air Force is ensuring its mission essential cyber training goes on during the global COVID-19 pandemic but officials are also delaying some training related to the service’s networks. “When all this kicked off, we prioritized all of the mission essential courses that are supplying operators to the Read more…
The U.S. Cybersecurity and Infrastructure Security Agency is warning that threat actors are actively exploiting a remote code execution vulnerability in F5’s BIG-IP network products that can allow attackers to exfiltrate data, access networks, carry out commands, create or delete files and disable services. ee Also: Gartner 2019 Magic Quadrant for Integrated Risk Read more…
The US National Security Agency (NSA) has published guidance on how to properly secure IP Security (IPsec) Virtual Private Networks (VPNs) against potential attacks. Besides providing organizations with recommendations on how to secure IPsec tunnels, NSA’s VPN guidance also highlights the importance of using strong cryptography to protect sensitive info contained within traffic Read more…
Punching a time clock in and out isn’t how small businesses run these days. Employees are on the road, others are working from home, vendors are accessing your data at off hours – and you’re generating ideas 24/7. How do you maintain high security standards when employees and others may Read more…
We have our first large scale data breach of the decade, Toll. Toll, a transport and logistics network which delivers up to 95 million items globally every year, has temporarily shut down a number of its IT systems as a precautionary measure after suffering a cyber-security breach on Friday, according Read more…
Albany County in the state of New York has been struck by two separate cyber-attacks in three weeks. A five-figure ransom in Bitcoin was paid by Albany County Airport Authority (ACAA) earlier this month after their servers became infected with ransomware on Christmas day. Airport CEO Philip Calderone said that the authority Read more…
New legislation developed by DCMS and the NCSC may help guarantee the security and privacy of users of consumer IoT devices Rigorous new legislation is set to protect the security and privacy of millions of users of internet of things (IoT) devices across the UK under plans drawn up by the Department Read more…
A CISA release noting the guidance directs administrators to an analysis of Microsoft Office 365 The National Security Agency issued an advisory with technical guidance for procuring and securing systems reliant on cloud service providers amid a push for the government to adopt the technology. “With careful implementation and management, Read more…