Every day in cybersecurity is a reminder
Every day in cybersecurity is a reminder: perfection isn’t the goal, resilience is.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Malware
Ransomware Gangs Evolve: They're Now Recruiting Penetration Testers
A new and concerning cybersecurity trend has emerged. According to the latest Q3 2024 Cato CTRL SASE Threat Report from Cato Networks, ransomware gangs are now actively recruiting penetration testers to enhance the effectiveness of their attacks. This development signals a significant shift in the tactics employed by cybercriminals and underscores the need for organizations to remain vigilant in their defense strategies.
Python NodeStealer Targets Facebook Ads Manager with New Techniques
In September 2024, Netskope Threat Labs reported a Python-based NodeStealer targeting Facebook business accounts. NodeStealer collects Facebook and other credentials stored in the browser and its cookie data. For over a year, we have tracked and discovered multiple variants of this infostealer. It is now targeting new victims and extracting new information using new techniques. In this blog post, we will dissect the development of the Python NodeStealer from multiple samples in the wild.
Adware on the rise-Why your phone isn't as safe as you think
Adware continues to be the most widespread on-device malware, with new variants popping up in the PlayStore and older ones picking up steam.
Ransomware is doubling down-What you need to know about the recent surge
Our experts at Gen observed a 100% increase of ransomware activity quarter over quarter.
Unveiling LIMINAL PANDA: A Closer Look at China's Cyber Threats to the Telecom Sector
On Tuesday, November 19, 2024, Adam Meyers, CrowdStrike Senior Vice President of Counter Adversary Operations, will testify in front of the U.S. Senate Judiciary Subcommittee on Privacy, Technology, and the Law on Chinese cyber threats to critical infrastructure. Within his testimony, Adam will speak publicly for the first time about a China-nexus state-sponsored actor that CrowdStrike Counter Adversary Operations tracks as LIMINAL PANDA.
DSPM vs DLP: Unraveling the Differences
In this episode of Into the Breach, James Purvis and Drew Russell discuss the key differences between Data Loss Prevention (DLP) and Data Security Posture Management (DSPM). Drew explains that while DLP focuses on perimeter security, DSPM secures data at rest, offering a more proactive approach. Using a clever analogy, Drew illustrates how DSPM prevents issues before they occur, unlike DLP's reactive measures. They conclude by highlighting how both can work together to enhance data security.
Data Security in Healthcare #cisoconversations #shorts #healthcaredata #shorts
In this episode of CISO Conversations: EU Data Regulations, @Nicolas Groh is joined by @Anastasiya Kiseleva, @John Noble, and @Dr. Stefan Buttigieg, to discuss the importance of investing in secure, up-to-date digital infrastructure in healthcare.
Akira Ransomware: Published Over 30 New Victims on their DLS
The Akira ransomware group has been active since March 2023, targeting diverse industries across North America, the UK, and Australia. Operating as a Ransomware-as-a-Service (RaaS) model, Akira employs a double-extortion strategy by stealing sensitive data before encrypting it. According to their leak site, the group claims to have compromised over 350 organizations.
Data Security in the Cloud is on YOU
Cloud security isn’t just the vendor’s job– It’s a shared responsibility. Make sure you’re choosing a cloud partner who takes data protection as seriously as you should.