Executing Zero Trust in the Cloud Takes Strategy

January 9, 2024 at 12:38PM Zero-trust architecture is crucial for cloud cybersecurity, requiring specialized planning for proper implementation. Based on the meeting notes, the key takeaway is that zero-trust architecture is critical for cloud cybersecurity, but it requires specialized planning for proper implementation. Full Article

Cacti Monitoring Tool Spiked by Critical SQL Injection Vulnerability

January 9, 2024 at 12:38PM A critical vulnerability in Cacti’s web-based open source framework for monitoring network performance allows attackers to disclose its entire database. Exploiting this, along with a previously disclosed vulnerability, could lead to remote code execution. The severity of this issue is rated 8.8 out of 10. It’s not widespread but poses … Read more

Law Firm Orrick Reveals Extensive Data Breach, Over Half a Million Affected

January 5, 2024 at 11:24AM Orrick, Herrington & Sutcliffe, a law firm specializing in cyberattacks, disclosed that over 600,000 individuals were impacted by a data breach in early 2023. The breach involved unauthorized access to a portion of its network and compromised personal information of clients’ customers. Orrick has deployed additional security measures and reached … Read more

Update your white hat hacking skills with $70 off this training bundle

January 5, 2024 at 08:15AM The Ultimate 2020 White Hat Hacker Certification Bundle offers 10 courses taught by cybersecurity experts Nathan House and Joe Parys. The program covers various topics in ethical hacking, network security, Python for web applications, Nmap for network security checks, and certifications like CompTIA’s PenTest+ and Cybersecurity Analyst. Available for $39.99, … Read more

Orange Spain Faces BGP Traffic Hijack After RIPE Account Hacked by Malware

January 5, 2024 at 05:27AM On January 3, Orange Spain experienced an internet outage due to a threat actor using stolen admin credentials to manipulate BGP traffic. Personal data was not compromised, but browsing services were affected. The incident was linked to an employee’s system infiltration by Raccoon Stealer malware. Security flaws in RIPE’s system … Read more

Alert: Ivanti Releases Patch for Critical Vulnerability in Endpoint Manager Solution

January 5, 2024 at 03:27AM Ivanti has issued security updates for a critical flaw in its Endpoint Manager solution, posing a remote code execution risk. The vulnerability, rated 9.6 on the CVSS scale, affects EPM 2021 and 2022 prior to SU5. Ivanti also addressed multiple security flaws in its Avalanche enterprise mobile device management solution, … Read more

Driven Technologies Expands Expertise With Acquisition of ieMentor

January 4, 2024 at 05:40PM Driven Acquisition Inc, DBA Driven Technologies, a leading cybersecurity and cloud service provider in NY, acquires ieMentor, a Cisco Gold Partner. The acquisition bolsters Driven’s capabilities in Cisco security, networking, collaboration, and data center solutions. This expands the company’s workforce to 85 employees and enhances its service offerings, reinforcing its … Read more

Name That Edge Toon: Frosty the Steel Man

January 3, 2024 at 11:51AM Enter our cybersecurity caption contest by submitting your idea before Jan. 25, 2024. Send your entry to [email protected] with the subject line “The Edge January 2024 Toon,” or via social media on X/Twitter, Facebook, and LinkedIn. Last month’s winner was Scott Dowlen, IT manager at Odessa Separator Inc. Good luck! … Read more

SonicWall Buys Banyan Security For ZTNA Technology

January 3, 2024 at 11:33AM SonicWall acquires San Francisco startup Banyan Security, adding zero-trust network access tech to its offerings. The financial terms weren’t disclosed. Banyan Security, which raised $47M over two rounds, enables secure user-to-application connections and defends against real-time threats. The acquisition expands SonicWall’s portfolio to include SSE and ZTNA technologies, aligning with … Read more

CBS Parent National Amusements Discloses Year-Old Data Breach

December 27, 2023 at 07:30AM Over 80,000 individuals are being informed by National Amusements about a data breach that compromised their personal information in December 2022. The breach involved access to the company’s network and files containing personal data. While the impacted information includes financial account numbers, National Amusements is offering complimentary credit monitoring services … Read more