Grip Security Releases 2025 SaaS Security Risks Report

October 24, 2024 at 05:50PM Grip Security’s report, “2025 SaaS Security Risks,” reveals that 90% of SaaS applications remain unmanaged, posing significant risks for organizations. With a 40% increase in SaaS applications and rising usage of AI tools, the need for a collaborative, identity-driven security approach is critical to mitigate these vulnerabilities effectively. **Meeting Takeaways … Read more

Ransomware Attacks on Industrial Firms Surged in Q2 2024

August 15, 2024 at 11:10AM Industrial cybersecurity firm Dragos reported a significant increase in ransomware attacks on industrial organizations in Q2 2024 compared to Q1, with 29 of 86 ransomware groups active. The US and Europe were most targeted, and the manufacturing sector was a primary focus. Resurgence of certain groups and evolving tactics indicate … Read more

Black Basta-Linked Attackers Target Users with SystemBC Malware

August 14, 2024 at 02:15PM An ongoing social engineering campaign linked to the Black Basta ransomware group involves multiple intrusion attempts aiming at credential theft and deploying the SystemBC malware dropper. Threat actors use tactics such as email bombing, phone calls, and fake solutions to persuade users to download legitimate remote access software for deploying … Read more

Would Making Ransom Payments Illegal Result in Fewer Attacks?

July 31, 2024 at 10:09AM According to Netwrix’s “2024 Hybrid Security Trends Report,” ransomware and other malware attacks are major security incidents. There’s debate about making ransomware payments illegal. While banning payments might eliminate cybercriminals’ incentive, it could lead to complex ethical and legal issues, including underreporting and disproportionate impact on small businesses. A multifaceted … Read more

Seemplicity 2024 Remediation Operations Report: Rising Exposure Management Risk

July 22, 2024 at 04:52PM Seemplicity has released the 2024 Remediation Operations Report, based on a survey of 300 U.S. cybersecurity professionals. Key findings include a growing security budget, increased reliance on automation in vulnerability management, and the anticipated impact of AI in the field. The report also highlights the challenges and opportunities presented by … Read more

How MFA Failures are Fueling a 500% Surge in Ransomware Losses

July 2, 2024 at 07:07AM The cybersecurity threat landscape has seen a substantial rise in average ransomware payments, with increases over 500%. The surge is attributed to cybercriminals better targeting organizations for larger ransom payments, as well as the utilization of Generative AI in creating convincing phishing attacks. Implementing next-generation MFA technologies, including biometrics, is … Read more

Why attack surfaces are expanding

June 21, 2024 at 11:06AM Join Cloudflare and The Register for an exclusive cybersecurity webinar on June 25th to gain insights on the expanding attack surfaces, effective strategies to manage vulnerabilities, and real-world case studies from leading organizations. Don’t miss this opportunity to enhance your security posture. Register now to secure your spot. Based on … Read more

Resurgence of Ransomware: Mandiant Observes Sharp Rise in Criminal Extortion Tactics

June 5, 2024 at 08:00AM Mandiant’s new threat research revealed a resurgence in criminal extortion in 2023, with more ransomware investigations and a 75% increase in data leak site postings. The use of data exfiltration and breach-shaming in ransomware attacks is growing, with criminals exploring payment in Monero cryptocurrency. The report highlights evolving ransomware techniques … Read more

Zero-Day Attacks and Supply Chain Compromises Surge, MFA Remains Underutilized: Rapid7 Report

May 23, 2024 at 07:22AM Zero-day attacks and supply chain mass compromise events are on the rise, with inadequate use of MFA, according to Rapid7’s 2024 Attack Intelligence Report. The report highlights a growing number of zero-day exploits and mass compromise events, driven by growing sophistication of cybercriminals and potential non-disclosure of vulnerabilities by vendors. … Read more

Outsourcing Security Without Increasing Risk

May 22, 2024 at 02:40AM The increasing cybersecurity incidents and data privacy regulations drive demand for cybersecurity. Survey forecasts a 13% annual spending increase through 2025 and highlights challenges. Outsourcing is favored, with 81% of executives using outside vendors. Experts suggest evaluating internal resources and strategically outsourcing to balance costs and improve security outcomes. Keaton … Read more