New WatchGuard Threat Lab Report Uncovers Widespread Detection of 'Pandoraspear' Malware Targeting Enterprise Smart TVs
Analysis shows spike in endpoint malware detections, widespread targeting of Chromium-based browsers to start the year.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
#129 - Intel Chat: MSSN CTRL, GhostEngine, MITRE & BreachForums
In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel (slack.limacharlie.io).
The 443 Podcast - Episode 293 - Recall Windows Recall
This week on the podcast, we discuss a new Microsoft Windows feature that is shaping up to be a security nightmare. Before that, we discuss a new research initiative from the Advanced Research Projects Agency for Health (ARPA-H) that could make big improvements in healthcare cybersecurity. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.
SIM swapping, an ongoing threat
Although SIM swap scams or SIM swapping have been around for a number of years, it’s hard to pinpoint exactly when they first appeared. An ENISA report states that as early as April 2016, the British media reported an incident of bank account theft using this technique. In the United States, the first documented case of large-scale SIM swapping was the Joel Ortiz case in 2018.
RPC Endpoint Mapper Authentication and Hardening
This policy setting determines if RPC clients authenticate with the Endpoint Mapper Service when their call includes authentication data. The Endpoint Mapper Service on Windows NT4 (all service packs) is unable to process authentication data provided in this manner. Disabling this policy means RPC clients won’t authenticate with the Endpoint Mapper Service, but they can still communicate with it on Windows NT4 Server. The recommended state for this setting is: Enabled.
Navigating the NIS 2 Landscape - Part 1
The European Union (EU) is taking a significant step forward in the fight against cybercrime by introducing the Network and Information Systems Directive 2, or NIS 2. This directive represents a major overhaul of cybersecurity regulations across the continent, aiming to bolster defenses against the ever-evolving threats of the digital age. In this first of four blog posts, we will introduce the basics of NIS 2.
Evan Johnson - Defender Fridays - May 24, 2024
Evan Johnson, Co-founder and CEO of RunReveal, joined us for Defender Fridays.
How to Elevate Cybersecurity for Financial Services Companies
The technology landscape is changing rapidly, presenting new challenges for security in the financial services sector. Generative artificial intelligence, automation, data management, and integrated finance are just some of the trends that are transforming this landscape. As the demand for personalized experiences grows, the challenges of ensuring data security and privacy are increasing, among other things, making it harder to manage digital identities.
Mastering Your 2024 Endpoint Security Strategy
In IT, endpoints are the physical devices that connect to a network system. In a corporate environment, endpoints include mobile devices, desktop computers, laptops, servers, and other equipment employees use to access the network and other critical digital systems. A company with fewer than 50 employees typically averages around 22 endpoints, 50-100 employees average more than 100, and companies with more than 1,000 employees average nearly 2,000.
Why an outdated router can compromise your company's security
In today's digital age, where interconnectivity is the norm, routers act as custodians of business information. These devices, which can sometimes be undervalued, control data traffic between our devices and the global network. However, recent events have highlighted vulnerabilities that may affect a large number of routers, raising concerns about the protection of sensitive information handled by enterprises.