In Other News: KnowBe4 Product Flaws, SEC Ends MOVEit Probe, SOCRadar Responds to Hacking Claims

August 9, 2024 at 09:30AM SecurityWeek’s cybersecurity news roundup offers a concise compilation of important stories. This week’s stories include Chinese hackers exploiting an old Windows vulnerability, the creation of a new maturity model for cyber threat intelligence, vulnerabilities in Johnson Controls’ exacqVision, a significant browser vulnerability, findings by CrowdStrike, and more notable updates from … Read more

Orgs are having a major identity crisis while crims reap the rewards

February 21, 2024 at 03:23AM Identity-related threats, such as stolen credentials, pose a growing risk to network security. IBM X-Force and CrowdStrike report a significant increase in cyber attacks using legitimate credentials, with compromise of cloud account credentials being predominant. Meanwhile, phishing attacks remained a leading initial access vector. Adversaries target identities as the easiest … Read more