In late January, the UK’s National Cyber Security Centre (NCSC) issued the draft of its Code of Practice on Cybersecurity Governance. The document's goal is to raise the profile of cyber issues with organizational directors and senior leaders and encourage them to shore up their defenses from cyber threats.

CVE-2022-39327 is a code injection vulnerability that affects the command-line interface for Microsoft Azure (Azure CLI). The vulnerability allows an attacker to execute arbitrary commands on a Windows machine that runs an Azure CLI command with untrusted parameter values. The vulnerability was discovered by GitHub Security Lab and reported to Microsoft on October 7, 2022. Microsoft released a patch for the vulnerability on October 25, 2022, in version 2.40.0 of the Azure CLI.

The SecurityScorecard Global Third-Party Breach Report uses the world’s largest proprietary risk and threat dataset to provide unique insights into the intricate web of supply chain vulnerabilities exploited by ransomware groups. As the digital landscape continues to evolve, so too do the tactics of cyber adversaries. Ransomware groups, in particular, have honed in on a prime target: the software supply chain.

In recent years almost every company has been utilizing technological solutions like artificial intelligence which has given rise to the importance of Compliance automation. It is a practice to protect the sensitive information of the companies. Hence, Compliance automation software keeps track of the company’s internal systems. Businesses process automation to achieve the main goals of the organizations effectively with the least amount of monitoring.

February 28, 2024 | By Sagi Brody As the Chief Technology Officer at Opti9, I’ve spent over two decades navigating the ever-evolving landscape of digital infrastructure. According to the Ransomware Trends Report 2023, at least 93% of cyberattacks targeted backup infrastructure. Clearly, cyber criminals are becoming more proficient in the ability to take your data for ransom.

In cloud-native software development, ensuring the supply chain security of containerized applications in Kubernetes (K8s) environments is of utmost importance. With the continuous evolution of threats, safeguarding your containerized applications at every stage is not a choice anymore; it is an absolute necessity. With Calico’s vulnerability management, you can scan container images across three pivotal application lifecycle stages: Let’s break down the scanning guardrails offered by Calico.

We all know cybersecurity is a team sport—one that is enhanced and optimized by the collective knowledge of a committed community.

Some of the most common ways ransomware is delivered are through phishing emails, drive-by downloads, exploit kits and RDP exploits. According to Malwarebytes’ 2024 State of Malware report, in 2023 the number of known ransomware attacks increased by 68% from the previous year. The report also found that the largest ransom demanded in 2023 was $80 million.