Content Paint

cybersecurity

NIST’s CSF 2.0: Governance now at the heart of new cybersecurity framework. Is it helpful?

Some CIOs and CISOs use customised versions of NIST's CSF as a tool to communicate cybersecurity progress to the board.

Beat the bear's cloud incursions with canaries says Five Eyes

Service accounts, MFA bombing and residential proxies are being widely deployed by APT29.

US Treasury confirms $9 billion ICBC ransomware impact

"ICBC’s inability to access its systems caused securities to be delivered for settlement with no funds backing the trades"

screenconnect vulnerability connectwise cvss 10

"There might be active exploitation attempts across common AWS IP space"

13,000 unpatched Ivanti appliances exposed as attacks escalate, firmware analysis shocks users.

“Security” product shipped with a 13-year-old, unsupported base OS and software libraries with 973 vulnerabilities; 111 of which have publicly known exploits available.

This former teenage hacker, turned CEO, is putting the spotlight on attack surface management

"In Gartner's mind, everyone's moving away from VPNs; VPNs don't exist anymore. But this is not a ‘rip out an appliance, and then shove something else in' job..."

Fortinet patches MORE pre-auth RCEs, with exploits reported. Ivanti also slips out a fresh VPN fix...

"Disable SSL VPN (disable webmode is NOT a valid workaround..."

European cybersecurity labels are coming. Who's signed up?

Scheme will pave the way for upcoming certification schemes: EUCS on cloud services and EU5G on 5G security

AnyDesk hacked

"We can confirm that the situation is under control" is not the world's greatest incident response report we've seen.

Search the site

Your link has expired. Please request a new one.
Your link has expired. Please request a new one.
Your link has expired. Please request a new one.
Great! You've successfully signed up.
Great! You've successfully signed up.
Welcome back! You've successfully signed in.
Success! You now have access to additional content.