Weekly Cyber Security News 22/02/2024
A selection of this week’s more interesting vulnerability disclosures and cyber security news. A rather cunning and slippery (see what I did there?) shell script to watch out for…
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
February 2024
Streamline compliance management with the Vanta & NinjaOne integration
We’re excited to share that Vanta now integrates with NinjaOne, a leading IT platform for endpoint management, security, and visibility. This integration offers a comprehensive solution for businesses striving to maintain high-security standards while ensuring compliance with regulations.
Global Police Op Deals A Major Blow To LockBit Ransomware Syndicate
Read also: Zeus kingpin pleads guilty, the Medibank hacker arrested, and more.
Copilot amplifies insecure codebases by replicating vulnerabilities in your projects
Did you know that GitHub Copilot may suggest insecure code if your existing codebase contains security issues? On the other hand, if your codebase is already highly secure, Copilot is less likely to generate code with security issues. AI coding assistants can suggest insecure code due to their limited understanding of your specific codebase. They imitate learned patterns or utilize available context without providing judgment.
Bring us the head of LockBit! $15 million bounty offered for information on leaders of notorious ransomware gang
A huge reward is being offered for information leading to the identification or location of any of the leaders of the LockBit ransomware gang. The bounty offer comes from the US State Department, following this week's disruption of the criminal organisation's activities. LockBit, which has been operating since 2020, has targeted thousands of victims around the globe, causing the loss of billions of dollars in both ransom payments and recovery.
Customizing Security with Security Configuration Management (SCM)
Many of the breaches of the past ten years have taken advantage of weak or nonexistent security settings. Conversely, for example, companies that configured their Docker application to the CIS recommended security settings for container users and privileges were not as vulnerable to container escape exploits. Arguably, a configuration change prevented many breaches. Security configuration management can make a huge difference in reducing an organization’s vulnerability.
Mobile Matters: Keep Your Data Safe
Some of you may remember when phones were primarily used for making phone calls. In today’s rapidly evolving digital landscape, our smartphones and tablets have transformed into multifunctional devices, serving as mini-computers, high-resolution cameras, and indispensable companions in our daily lives. They seamlessly keep us connected to the world, offering endless avenues for communication and entertainment.
The Expanding Web of Organizational Supply Chains and Security Risks || Razorthorn Security
In this video, we delve into the intricate web of organizational supply chains and the heightened complexities they bring to the realm of cybersecurity. With the interconnected nature of modern businesses, from retailers to manufacturers to insurers, the reliance on numerous other entities introduces a myriad of potential vulnerabilities. Join us as we explore the evolving landscape of malicious activities and data breaches, highlighting the exponential growth in complexity over the past two decades.
Why one in 20 people fall for dating scams - and how to not be one of them
Avast researchers have detected a sharp uptick in romance scams--and they're not always happening where you'd expect them to.
What to expect from a zero-click attack
We hear time and time again that humans are the biggest vulnerability in cybersecurity. For instance, the 2023 Verizon Data Breach Investigations Report (DBIR) states that 74% of data breaches investigated were caused by human error, such as social engineering attacks, flaws or misuse of systems.
The importance of Cybersecurity in online banking
In our digitized world, online banking has become an integral part of managing your finances, offering unparalleled convenience. However, with this convenience comes an increasing need for robust cybersecurity measures. As you embrace the ease of handling your financial affairs online, understanding the importance of cybersecurity becomes paramount.
The cyber security outlook for 2024: key trends
In this article, we outline likely threat landscape trends for 2024, based on what has been observed in 2023, and predict key areas of concern for the months ahead.