-
Secret CIA Data Collection Program
PRIVACY PRIVACY Two US Senators claim that the CIA has been running an unregulated — and almost certainly illegal — mass surveillance program on Americans. The senator’s statement. Some declassified information from the CIA. No real details yet. Read More
-
Log4Shell: A Tale of Two Detection Techniques
PRIVACY PRIVACY Endpoint detection and response (EDR) can only take you so far in identifying Log4j exploit attempts. Here’s why dynamic checks are needed to uncover vulnerable versions of Log4j. When the Log4j vulnerability was disclosed at the tail end of 2021, it caused many IT teams to put down their well earned eggnog and…
-
Barclays: Scams Surged in Final Quarter of 2021
PRIVACY PRIVACY Reported scams surged by 17% in the final quarter of 2021 in the UK, while attempted scams increased by 70% over the same period Read More
-
F5 integrates application, cloud security in a unified SaaS platform
PRIVACY PRIVACY Aiming at enterprises that are managing increasingly complex IT infrastructure, F5 is releasing a new SaaS-based security, multicloud networking, and edge computing platform, F5 Distributed Cloud Services, as an expansion to its application delivery and security product portfolio. As part of the announcement, made at its annual Agility conference Tuesday, the company also…
-
How to secure microservices in a Zero-Trust environment
PRIVACY PRIVACY This blog was written by an independent guest blogger. Microservices architecture is a convenient way to silo different software services compared to traditional software architecture and design. However, with multiple microservices communicating amongst each other – the attack surface of the network is greatly increased. The security of such a system depends on…
-
Crypto Lender Agrees to Pay $100m in Fines
PRIVACY PRIVACY SEC cracks down in novel regulatory action Read More
-
Three-Fifths of Cyber-Attacks in 2021 Were Malware-Free
PRIVACY PRIVACY CrowdStrike report warns that threat actors are getting smarter at evasion Read More
-
Russia’s offensive cyber actions should be a cause for concern for CISOs
PRIVACY PRIVACY While acknowledging there are “not currently any specific credible threats to the U.S.,” Anne Neuberger, deputy national security advisor for cyber, continued how “we’ve been working with the private sector, engaging, sharing specific information, requesting that they act to reduce the cybersecurity risk of their organization, and providing very focused advice on how…
-
Ukraine Claims ‘Hybrid Warfare’ Already Underway
PRIVACY PRIVACY Government tries to reassure country amidst Russian disinformation effort Read More
-
Wazawaka Goes Waka Waka
PRIVACY PRIVACY In January, KrebsOnSecurity examined clues left behind by “Wazawaka,” the hacker handle chosen by a major ransomware criminal in the Russian-speaking cybercrime scene. Wazawaka has since “lost his mind” according to his erstwhile colleagues, creating a Twitter account to drop exploit code for a widely-used virtual private networking (VPN) appliance, and publishing bizarre…