Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

May 2023

IT Executive: Do you know how to prevent exposed access to critical assets?

A vulnerability is a software code error that hackers can use to gain direct access to an IT system. "Exposure" is an incident in which a previously detected weakness has been taken advantage of by an unauthorized actor in the network. Recent research suggests that only 2% of all exposures give attackers seamless access to critical assets, while 75% of exposure incidents along attack paths lead to "dead ends," preventing cybercriminals from reaching sensitive information.

How to avoid burnout in your cybersecurity team?

While cyberattacks have been on the rise in recent years, one of the biggest threats to organizations’ cybersecurity is fatigue in the IT team, which leads to burnout syndrome. Gartner predicts that half of security managers will change jobs by 2025 due to industry-wide burnout. A recent study reveals that 66% of cybersecurity professionals in Europe claim to have experienced fatigue during 2022. In addition, 51% say they have worked more than four hours extra a week above their scheduled hours.

The 443 Episode 244 - Naming APTs

This week on the podcast, we cover Microsoft's latest refresh of naming conventions for advanced persistent threat (APT) actors worldwide, as well as an update on two specific threat actors and their latest tactics. We also cover a ransomware event targeting a biotechnology company with an interesting twist. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.

How to protect yourself from a rainbow table attack with the help of MFA

Since 2013, World Password Day has been celebrated on the first Thursday of May and aims to foster better password habits. This event reminds us that passwords are the main guardians of our digital identities and that we must implement complex passwords such as passphrases capable of protecting us. In 2022 alone, 721.5 million exposed credentials were leaked online. As a result of these leaks, account takeover attacks (ATOs) are on the rise.

Here Come The Regulations 443 Podcast YouTube Short

This episode covers two new sets of cybersecurity regulations, fresh from the White House's National Cybersecurity Strategy publication, targeting different critical infrastructure sectors in the United States. We'll also cover the latest nation-state activity targeting network connectivity appliances and end with fun research into an oldie-but-goodie video game system.

An Update on Section 230 - The 443 Podcast - YouTube Short

In this week's episode, we look back to our initial monologue on Section 230 protections that allow social media and the Internet to function. We cap off the episode replay with a new discussion on a recent Supreme Court case that has the potential to dramatically impact the Internet as we know it.

Addressing the talent shortage with a unified security approach

The need for skilled cybersecurity personnel is having an impact on companies’ ability to stay secure. Despite the global cybersecurity workforce growing to 4.7 million in 2022, reaching record levels, according to data from the (ISC)2 2022 workforce study, there’s still a need for more than 3.4 million security professionals, an increase of 26% over 2021.

The 443 Episode 243 - TikTok is Banned, Kind Of

This week on the podcast, we cover the recent TikTok ban coming from the state of Montana and discuss whether it was justified and what the potential security impact is. Before that, we give an update on two US Supreme Court cases that were poised to potentially strip away Section 230 protections. We also highlight a new phishing-as-a-service (PaaS) platform that has yet again lowered the barrier for executing sophisticated attacks.

EP 239 MSPs Around the World Americas 443 Podcast YouTube Short

This week’s podcast comes from the WatchGuard Americas Apogee Partner Conference, where we bring on special guests Kevin Willette of Verus Corporation and Neil Holme of Impact Business Technology to discuss the challenges and opportunities MSPs and MSSPs will face in the coming years. This is the first of a multi-part series where we explore similar questions worldwide.

How to improve the cybersecurity of NGOs?

Digital transformation has reached all sectors, including non-governmental organizations (NGOs). These organizations have now become more dependent on technology to improve their ability to deliver and scale programs, engage with beneficiaries, and ensure an agile response to populations in need. Although this transformation delivers many benefits for NGOs, it has made them a viable and attractive target for cybercriminals.

Learnings from Discussing Identity Security with IDC

A few months ago, I had the pleasure of speaking with Jay Bretzmann, research vice president of security products at IDC. We discussed various security topics trending in 2023, including open identity standards, passwordless technologies like passkeys enabled by FIDO 2.0, and identity-first zero trust security strategies. It became clear that we had an opportunity to share these insights by turning our conversations into an Analyst Connection interview.

76% of vulnerabilities exploited in 2022 were up to 13 years old

Something as common and widely known as a software update can prevent major cyberattacks from happening, as they incorporate patches that fix system vulnerabilities. Prioritizing updates may seem a burdensome and inconvenient task for users, because computers and servers have to restart to perform installation, which interrupts users when they are working.

The 443 Episode 242 - An Interview with ChatGPT

This week on the podcast, Marc kick's Corey off the podcast and interview's ChatGPT to learn its thoughts on AI applications in cybersecurity, both on offense and defense. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.

MFA phishing: the cyberattack that is compromising big company networks

Cybercriminals are well versed in the tactic of phishing, which aim to trick users into revealing confidential information and gain unauthorized access to user accounts and compromise corporate networks. A new type of phishing attack has now emerged, known as MFA phishing, which manages to evade the key protection measures deployed by corporate networks.

What is the difference between XDR and SIEM?

Over the past twenty years, security information and event management (SIEM) platforms have been one of the key solutions for cybersecurity management, as they help security teams centralize attack and threat detection activities. The cybersecurity industry is now shifting towards a new type of solution known as extended detection and response (XDR). As the two technologies are similar and have overlapping capabilities, many people still don’t know how they differ.

The 443 Episode 241 - Securing Healthcare Tech

This week on the podcast, we cover two new malware research pieces, including the latest evolution of a delivery vehicle as old as time. After that, we cover recent regulations in the healthcare industry that have a chance to push the industry to a more secure future. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.

Webinar: How XDR Can Help MSPs Scale and Grow Their Businesses

Cyberattacks are becoming ever more sophisticated, leaving MSPs struggling to stay ahead of the game with their limited tools and fragmented views. Join us in this webinar as we explore XDR – a modern approach that helps strengthen cybersecurity capabilities and offers comprehensive protection for customers. Join us in this webinar, where we'll give you XDR essential concepts and the keys to free up overwhelmed security teams trying to triage and identify attacks with only narrow, disjointed attack viewpoints. We’ll be covering the following.

How can MSPs capitalize on business in 2023?

The managed service provider (MSP) industry continues to expand, and this trend is not likely to change any time soon. Even in the current economic situation, where recession is in sight, demand for MSPs remains strong, resulting in growth opportunities this year. This is backed by the fact that 58% of participants at WatchGuard's webinar Top 3 Growth Opportunities for MSPs in 2023 and Beyond believe that cybersecurity spending will be maintained going forwards.

Webinar: Six Best Practices to Help with Your Regulatory Compliance Program

Companies around the world today need to deal with a wide array of standards and regulations, many of which are specific to their industry vertical or region. But MSPs work with customers in many different verticals and need broad awareness across different industries. This webinar will highlight how there are common threads that will help with compliance with any regulation.

On May the 4th a Strong Password Be With You!

World Password Day falls on May the 4th this year, or “May the 4th Be With You!” for those who recognize this date as the annual celebration of Star Wars Day. For the 2023 observance of the latter, fans around the world (including myself) will rejoice as Carrie Fisher (aka “Princess Leia”) is honored with a posthumous star on the Hollywood Walk of Fame.

WatchGuard: The Global Leader in Unified Cybersecurity

WatchGuard's Unified Security Platform™ is uniquely designed for managed service providers to deliver world-class security that increases business scale and velocity while improving operational efficiency. Trusted by more than 17,000 security resellers and service providers to protect over 250,000 customers, the company’s award-winning products and services span network security and intelligence, advanced endpoint protection, multi-factor authentication, and secure Wi-Fi.

The 443 Episode 240 - Rustbuckets and Papercuts

This week on the podcast, we cover a recently discovered macOS malware attack that uses a multi-stage delivery mechanism. Before that, we discuss an actively-exploited vulnerability in the print management software PaperCut, as well as an update on the 3CX supply chain attack. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.