#SecurityBestPractices

Microsoft MFA AuthQuake Flaw Enabled Unlimited Brute-Force Attempts Without Alerts

by

December 11, 2024 at 09:42AM A critical vulnerability in Microsoft’s multi-factor authentication (MFA) was identified, allowing attackers to bypass security easily without user notice. Labeled AuthQuake, the flaw stemmed from inadequate rate limits and extended code validity. Microsoft addressed the issue in October 2024, tightening security measures to enhance MFA effectiveness. **Meeting Takeaways: Dec 11, … Read more

OWASP Releases AI Security Guidance

by

November 4, 2024 at 08:22AM OWASP launched new security guidance for managing risks related to large language models and generative AI applications, part of the Top 10 for LLM Application Security Project. Resources include strategies for deepfake defense, AI security best practices, and a landscape guide for security solutions, aimed at enhancing organizational readiness against … Read more

Open Source Package Entry Points May Lead to Supply Chain Attacks

by

October 15, 2024 at 06:06AM Entry points in open-source packages across various programming languages are vulnerable to exploitation, posing risks for supply chain attacks. This highlights the need for enhanced security measures to protect against such vulnerabilities. The article is based on a post from SecurityWeek. **Meeting Takeaways:** 1. **Vulnerability Highlighted**: Entry points in software … Read more

Experts Warn of Critical Unpatched Vulnerability in Linear eMerge E3 Systems

by

October 10, 2024 at 08:46AM Cybersecurity researchers have identified an unpatched vulnerability (CVE-2024-9441) in Nice Linear eMerge E3 access controllers, allowing remote command execution. It has a CVSS score of 9.8. The vendor has not yet provided a fix. Experts advise isolating affected devices and implementing security measures to mitigate risks. ### Meeting Takeaways – … Read more

US, Allies Release Guidance on Event Logging and Threat Detection

by

August 23, 2024 at 08:03AM The US and its allies released a joint guidance document, “Best Practices for Event Logging and Threat Detection,” focusing on defining a baseline for event logging in organizations. The guidance emphasizes the importance of security best practices, sharing responsibilities, capturing high-quality cyber security events, and structured log formats to support … Read more

Fighting Back Against Multi-Staged Ransomware Attacks Crippling Businesses

by

August 6, 2024 at 09:42AM Ransomware attacks have evolved from indiscriminate victims to targeted, multi-staged attacks. Attackers infiltrate organizations, eavesdrop on emails, and exfiltrate critical data before encrypting computers and demanding a ransom. This modern method renders traditional recovery systems useless. Ransomware has become organized, with syndicates offering ransomware-as-a-service and state-sponsored attackers joining in. Organizations … Read more

‘Phantom’ Source Code Secrets Haunt Major Organizations

by

June 27, 2024 at 05:52AM Aqua Security’s research reveals a significant number of “phantom” secrets persist within Git-based Source Code Management systems, posing security risks for top organizations. These include leaked secrets granting access to cloud environments, internal infrastructure, API tokens, and network devices of major companies. Aqua emphasizes the challenges in accurately detecting and … Read more

Why SaaS Security is Suddenly Hot: Racing to Defend and Comply

by

June 13, 2024 at 07:48AM Financial cyber-attacks prompt tighter compliance regulations in the financial sector, with other industries expected to follow. Many companies lack efficient methods for managing SaaS security and compliance tasks. Free SaaS risk assessment tools offer incremental upgrades to help meet budget and security needs. Understanding financial sector cyber compliance is key … Read more

Developing a Plan to Respond to Critical CVEs in Open Source Software

by

June 7, 2024 at 10:09AM The tech industry faced wake-up calls in 2020 and 2021 with incidents like SolarWinds, Log4j, and Kaseya’s VSA, emphasizing the critical need to refine response strategies to vulnerabilities and supply chain attacks. Both large and small organizations must prioritize comprehensive asset inventories and software bills of materials to effectively respond … Read more

Chinese APT Hacks 48 Government Organizations

by

March 19, 2024 at 09:57AM A hacking group, Earth Krahang, believed to be linked to the Chinese company I-Soon, has compromised numerous foreign government entities. The group is accused of conducting cyberespionage and targeting over 70 organizations across 23 countries, primarily in Asia and America. They have used various tactics, including spear-phishing emails and deploying … Read more