Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

%term

Random but Memorable - Episode 13.2: Worst Computer Outage Apocalypse with Geoff White

What was the cause of the worst cyber event in history? In Watchtower Weekly, we unpack how a small bug in Crowdstrike software caused an outage apocalypse across the globe. Agony Aunt Roo also answers all your security woes in #Ask1Password. Plus, we welcome back friend-of-the-show Geoff White, for story time as he gives a peek into his latest book: Rinsed. Settle in, as Geoff reveals how much technology has revolutionized money laundering, from drug cartels washing their cash in Bitcoin to organized fraud gangs recruiting money mules on social media.

Application vulnerability management best practices

Over the years, application vulnerability management has been vital to DevSecOps — which emphasizes shared security responsibility across teams. However, as development practices have evolved, security teams must learn how to adapt and meet developers within their existing workflows. For example, containerization, infrastructure as code (IaC) AI coding assistants, and increased reliance on third-party code are all commonplace in the typical development lifecycle.

Introducing our report, CISO Perspectives: Separating the realityof AI fromthe hype

The explosion of AI has ignited both excitement and apprehension across various industries. While AI is undeniably having a positive impact on engineering and customer service teams, cybersecurity and IT practitioners remain cautious. Concerns about data privacy, the inflexibility of disparate tools, and the sensitive nature of many mission-critical workflows—which, more often than not, require some level of human oversight—fuel a deep mistrust of LLMs by these teams.

Hijacked: How Cybercriminals Are Turning Anti-Virus Software Against You

LevelBlue Labs has identified a new evolution in the toolset of threat actors. Threat actors are hijacking legitimate anti-virus software to carry out malicious activities undetected. A new tool, named SbaProxy, has been found masquerading as legitimate anti-virus components to establish proxy connections through a command and control (C&C) server.

New Malvertising Campaign Impersonates Google Authenticator

Researchers at Malwarebytes spotted a malvertising campaign that abused Google Ads to target people searching for Google Authenticator. If someone typed “Google Authenticator” into Google, the malicious ad would be at the top of the search results. The ad copied the website description from the real Google Authenticator, but would redirect users to a phishing site. “We can follow what happens when you click on the ad by monitoring web traffic,” the researchers explain.

EQT to acquire a majority stake in Acronis, Acronis continues to expand its platform for MSPs

Acronis is excited to announce that EQT, the largest European private equity firm, will acquire a majority stake in our company. The partnership between Acronis and EQT, the global investment organization, builds upon a shared growth vision, commitment to accelerating the expansion of its platform, and continued strong focus on customer service. The founders, management, and existing investors will remain significant minority shareholders.

Firmware Vulnerabilities Run Rampant in Cellular Routers

The current state of OT/IOT security is being repainted with a new coat of risk. The shade of color? Cellular routers and the vulnerabilities within firmware. In our new report with Finite State, our joint research explores the risks organizations face within the software supply chains of OT/IoT routers. Hardware has firmware – operational software – within its memory components.