Cyber protection made intuitive and affordable

December 13, 2024 at 09:42AM The 2024 MITRE ATT&CK Evaluation highlighted Cynet as the only vendor achieving 100% Detection Visibility and Protection, detecting all threats without false positives. The evaluation serves as a critical benchmark for cybersecurity solution effectiveness, emphasizing the importance of choosing the right vendor for SMEs and MSPs seeking reliable protection. ### … Read more

PoC Exploit Published for Unpatched Mitel MiCollab Vulnerability

December 6, 2024 at 06:38AM WatchTowr warned of an unpatched vulnerability in the Mitel MiCollab platform, allowing attackers to access restricted resources. Over 16,000 instances are affected, with an arbitrary file read flaw requiring admin authentication to exploit. Mitel has released patches for related vulnerabilities and recommends users update to the latest version. **Meeting Takeaways:** … Read more

Latrodectus malware and how to defend against it with Wazuh

December 5, 2024 at 10:41AM Latrodectus is a sophisticated malware family targeting corporate networks and financial institutions, leveraging advanced tactics like phishing and dynamic API resolution for data theft while evading detection. It utilizes a modular design for adaptability and persistence. Effective defenses include employee training, endpoint security, network segmentation, and regular updates. ### Meeting … Read more

Pegasus Spyware Infections Proliferate Across iOS, Android Devices

December 4, 2024 at 03:09PM Researchers from iVerify revealed seven new Pegasus spyware infections affecting journalists and officials on iPhone and Android devices, spanning attacks from 2021 to 2023. This underscores the underestimated prevalence of mobile spyware, as traditional security measures frequently fail to detect such threats. Regular device updates and user education are vital … Read more

Cybersecurity M&A Roundup: 49 Deals Announced in November 2024

December 2, 2024 at 11:37AM In November 2024, a record 49 cybersecurity M&A deals were announced, contributing to a total of 178 deals in the first half of the year, the slowest since 2021. Notable acquisitions include Belden’s purchase of Voleatech, Bitsight’s acquisition of Cybersixgill, and CrowdStrike’s buy of Adaptive Shield. ### Meeting Takeaways: Cybersecurity … Read more

Hackers abuse Avast anti-rootkit driver to disable defenses

November 23, 2024 at 04:12PM A new malware campaign leverages an outdated Avast Anti-Rootkit driver to disable security components and evade detection. By targeting processes from various security vendors, the malware can operate undetected. Researchers recommend using signature-based rules and Microsoft’s vulnerable driver blocklist to mitigate such risks. ### Meeting Takeaways: 1. **Emerging Malware Threat**: … Read more

How to master endpoint security

November 22, 2024 at 06:20AM The “Secure Everything for Every Endpoint” webinar, hosted by Tim Phillips and featuring Sam Duckett from Kaseya, addresses the complexities of endpoint security. Key takeaways include the importance of integrated management, automation to diminish human error, and a unified strategy to enhance protection across diverse devices. The webinar is available … Read more

Microsoft Launches Windows Resiliency Initiative to Boost Security and System Integrity

November 20, 2024 at 07:34AM Microsoft has announced a Windows Resiliency Initiative to enhance security and reliability, introducing features like Quick Machine Recovery and user-mode security tools. Updates include a hardware-backed security baseline, administrator protection, personal data encryption, and a bug bounty expansion. These developments align with the Secure Future Initiative launched in November 2023. … Read more

Simplifying endpoint security

November 15, 2024 at 10:59AM Kaseya’s webinar on November 20th at 11am GMT/8AM ET will address the challenges of managing diverse endpoints as digital footprints expand. Experts will discuss the benefits of consolidating security tools into a single platform to streamline management, automate processes, and enhance endpoint protection. Register to learn more. **Meeting Takeaways: Webinar … Read more

Ivanti Patches 50 Vulnerabilities Across Several Products

November 13, 2024 at 08:03AM Ivanti has addressed numerous vulnerabilities by releasing fixes for Endpoint Manager, Avalanche, Connect Secure, Policy Secure, and Secure Access Client, enhancing security across these products. **Meeting Takeaways:** 1. **Release of Fixes:** Ivanti has issued fixes addressing multiple vulnerabilities. 2. **Affected Products:** The vulnerabilities were found in the following products: – … Read more