Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

July 2024

CrowdStrike's Incident Report | The 443 Podcast | Episode 299

Don’t miss the latest episode of The 443 - Security Simplified! In Episode 299, we dive into: CrowdStrike's post-incident report on the July 19th outage—what went wrong and key lessons for all software vendors. The intriguing story of how KnowBe4 hired a North Korean threat actor. Fresh research from Wiz on Artificial Intelligence tenant isolation.

The 443 Podcast - Episode 299 - CrowdStrike's Incident Report

This week on the episode, we walk through CrowdStrike's preliminary post incident report to understand exactly what happened during the July 19th outage and what all software vendors can learn from the event. After that, we cover a clever plot that lead to KnowBe4 hiring a North Korean threat actor. We end with some research from Wiz on Artificial Intelligence tenant isolation. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.

WatchGuard Endpoint Release Process

Recent news of a global IT disruption caused by a security vendor’s content update has driven important conversations about quality assurance processes for endpoint products and content updates. At WatchGuard, with more than 30 years of experience in this industry, we know well the sensitivity of the update process and wanted to take this opportunity to highlight the processes we have in place to protect our valued partner community and customers from the impacts of a flawed update rollout.

Security breaches in the supply chain increase by 68%

In today's digital landscape, businesses heavily rely on third-party software for their daily operations. This reliance has led to a surge in software supply chain attacks, which are becoming increasingly prevalent and sophisticated. These attacks exploit vulnerabilities in external tools or services to gain unauthorized access and compromise systems.

Ransomware: Attackers resort to old-school techniques and minimal investment

The modus operandi of cybercriminals is constantly changing. It comes as no surprise that, every so often, hackers switch up their methods to become more evasive. However, contrary to what we might imagine, these changes don’t always have to be innovative, or involve new attack strategies. Cybercriminals are increasingly opting to employ old-school techniques, and couple this with minimal investment.

Olympic Games Special: How to protect cybersecurity of sports organizations

Millions of spectators from around the world will flock to Paris this summer to attend the 2024 Olympic Games. The UEFA European Football Championship and the America's Cup are also taking place this summer, giving us weeks of massive sporting events on both sides of the Atlantic.

Top Security Threats Worldwide Q1 2024

Join WatchGuard CSO Corey Nachreiner and Security Engineer Trevor Collins as they discuss key findings from the WatchGuard Threat Lab’s Q1 2024 Internet Security Report. You’ll learn about the latest malware trends, like network-based detections dropping almost 50 percent, but endpoint detections rising over 75 percent. They’ll also cover the top network exploits, illustrate a common phish our DNS firewall blocked, and much more.

The 443 Podcast - Episode 298 - Global Security Outage

This week on the podcast we are with WatchGuard CSO, Corey Nachreiner and Trevor Collins as they explain the recent Global IT outage cause by a CrowdStrike update. We also follow-up on RockYou and the RockYou2024 data dump of 10 billion records. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.

How Identity Security Enhances Network and Endpoint Security

The intersection of identity, endpoint, and network security is becoming increasingly self-evident. Despite all their efforts, modern organizations continue to struggle to safeguard their data and prevent unauthorized access. The Verizon Data Breach Investigations report for 2024 continues to highlight that human elements were a component of 68% of breaches.

Understanding the Global IT Outage Caused by a CrowdStrike Update

Today’s global IT outage affecting Microsoft Windows users was caused by a bug in a CrowdStrike product (Falcon Strike) protection content update. The resulting widespread impact demonstrates an urgent importance for maintaining strong quality assurance (QA) processes before products or their updates are released into production.

No summer scares: 5 tips on how to keep your business cybersecure

Guiding employees' digital behaviors is key to avoiding potential cybersecurity breaches. However, remote work during summer weeks may disrupt normal routines and change the location of digital assets, leaving companies open to vulnerabilities. According to our latest Internet Security Report, malware detections on endpoints increased by more than 75% during the first months of the year.

WatchGuard Wins 2024 ChannelVision Visionary Spotlight Award

We’re excited to share that ChannelVision Magazine has recognized WatchGuard Technologies with a 2024 Visionary Spotlight Award for Cybersecurity in the program’s Business Technology category! The annual award program honors top industry players that have significantly advanced their channel and technological investments over the last year.

Grubi Joins The Kraken IT Team | The Last Stop | WatchGuard Technologies

Whether you’re an IT security pro, or a professional goaltender for the Seattle Kraken, being the Last Stop of Defense is an important role for any team. In this episode of The Last Stop, Seattle Kraken goaltender, Philipp Grubauer, joins the Kraken IT team and makes save after save to ensure their organization stays secure.

The 443 Podcast - Episode 297 - Blast RADIUS

This week on the podcast we discover the newly-disclosed protocol vulnerability in certain RADIUS implementations. Before that, we give an update on the continued fallout from the Snowflake customer databreaches including a new disclosure from AT&T. We also discuss a blog post from JFrog that details how they saved the world from what could have been the worst supply chain attack in history. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.

OpenSSH regreSSHion Vulnerability - The 443 Podcast - Episode 296

This week on #the443podcast, Corey Nachreiner and Marc Laliberte cover OpenSSH's recent critical vulnerability and what it means for systems administrators. Before that, we discuss the CDK Global ransomware attack impacting car dealerships across the U.S., a Korean internet service provider delivering malware to their customers, and a takeover of a popular JavaScript library gone hostile.

MDR for MSPs: the key to strengthening your portfolio and protecting your customers

Managed service providers (MSPs) are key players in enterprise security, providing critical security services for customers who often lack in-house teams to manage them. However, the cyberthreat landscape is growing increasingly complex and challenging, even for these experts.

WatchGuard Endpoint Security Wins 2024 Fortress Cybersecurity Award

We’re delighted to share that Business Intelligence Group has recognized WatchGuard Endpoint Security as a 2024 Fortress Cybersecurity Award winner! The annual awards program recognizes the world's leading companies and individuals who are at the forefront of cybersecurity innovation. Winners are selected based on their dedication to developing solutions, raising awareness, and defending against the growing threat of cyberattacks.

ThreatSync+ NDR: Bringing AI-Driven Threat Detection to Every Business

In a world where cybersecurity threats are ever evolving and increasingly sophisticated, businesses of all sizes need robust solutions to protect their networks. However, these solutions have traditionally been costly and complex. WatchGuard is changing that tradition with the launch of its new ThreatSync+ Network Detection and Response (NDR) solution.

Top 4 Most Common Cyberthreats to Organizations

In today's digital age, where cyberattacks are multiplying rapidly, understanding the threat landscape is essential for the survival of organizations. It is clear that cybercriminals are not resting on their laurels and are constantly developing new strategies. This forces businesses to stay ahead of the curve to protect their digital assets. Companies need to be aware of the most common cybersecurity threats and the appropriate protection measures to ensure the security of their sensitive information.

The 443 Podcast - Episode 296 - OpenSSH regreSSHion Vulnerability

This week on the podcast, we cover OpenSSH's recent critical vulnerability and what it means for systems administrators. Before that, we discuss the CDK Global ransomware attack impacting car dealerships across the us, a Korean internet service provider delivering malware to their customers, and a takeover of a popular JavaScript library gone hostile. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.

Ticketmaster Incident: How to protect your company's Cloud

Cloud systems were created to maintain information on a comprehensive, accessible, and flexible platform. Although this system is still preferred by many companies, especially multinationals, to facilitate access to information between different teams within organizations, irresponsible use of the Cloud can create serious problems for corporate cybersecurity. Ticketmaster is a recent case in point.