Security News

Ostrich Cyber-Risk is a comprehensive cyber risk assessment and reporting application that makes it simple for CISOs and Security Leaders to accurately identify and assess their unique financial and operational risks from a single pane of glass. Built by cybersecurity experts and utilizing the NIST CSF and CIS 18 frameworks, Ostrich encourages communication and simplifies reporting. Our application is designed to deliver the business-critical, industry-specific information you need to improve your cybersecurity posture.

1. Kimsuky’s GoldDragon cluster and its C2 operations   Secure List, August 25, 2022
2. We need to think about ransomware differently   Help Net Security, August 25, 2022
3. How to navigate payment regulations without compromising customer experience   Help Net Security, August 25, 2022
4. How CISOs can safeguard security in CI/CD environments   Help Net Security, August 25, 2022
5. Ransomware dominates the threat landscape   Help Net Security, August 25, 2022
6. Organizations changing cyber strategy in response to nation-state attacks   Help Net Security, August 25, 2022
7. Avast Ransomware Shield for businesses prevents unauthorised access   Help Net Security, August 25, 2022
8. DataMotion No-Code Experience delivers secure content exchange to the customers   Help Net Security, August 25, 2022
9. Privitar Modern Data Provisioning Platform provides self-service access to data in real time   Help Net Security, August 25, 2022
10. Cyware adopts Traffic Light Protocol 2.0 to enhance threat intelligence sharing capabilities   Help Net Security, August 25, 2022
11. ReasonLabs Online Browser Security protects consumers from complex and rapidly-evolving cyber threats   Help Net Security, August 25, 2022
12. BrandPost: Beyond the Cyber Buzzwords: What Executives Should Know About SASE   CSO from IDG, August 25, 2022
13. BrandPost: Doing More with Less: The Case for SOC Consolidation   CSO from IDG, August 25, 2022
14. Virginia Consumer Data Protection Act: What You Need to Know?   Information Security Buzz, August 25, 2022
15. Windows Terminal is now the default terminal in Windows 11 dev builds   Bleeping Computer, August 24, 2022
16. Quantum ransomware attack disrupts govt agency in Dominican Republic   Bleeping Computer, August 24, 2022
17. GitLab ‘strongly recommends’ patching critical RCE vulnerability   Bleeping Computer, August 24, 2022
18. Quivr raises $3.55 million to help people create a secure digital identity   Help Net Security, August 24, 2022
19. 443ID expands leadership team to meet the needs of a growing customer base   Help Net Security, August 24, 2022
20. Contrast Security appoints Tom Kellermann as SVP of Cyber Strategy   Help Net Security, August 24, 2022
21. Cloud Range RightTrak Cyber Aptitude Assessment improves cybersecurity hiring process   Help Net Security, August 24, 2022
22. CISA: Just-Disclosed Palo Alto Networks Firewall Bug Under Active Exploit   Dark Reading, August 24, 2022
23. Efficient 'MagicWeb' Malware Subverts AD FS Authentication, Microsoft Warns   Dark Reading, August 24, 2022
24. Ransomware Gang Demands $10M in Attack on French Hospital   Dark Reading, August 24, 2022
25. VMware LPE Bug Allows Cyberattackers to Feast on Virtual Machine Data   Dark Reading, August 24, 2022
26. New Zero-Trust Maturity Data: Charting Your Own Organization   Dark Reading, August 24, 2022
27. WannaCry explained: A perfect ransomware storm   CSO from IDG, August 24, 2022
28. How 2023 cybersecurity budget allocations are shaping up   CSO from IDG, August 24, 2022
29. Cybersecurity Experts On Facebook Glitch   Information Security Buzz, August 24, 2022
30. Experts Reaction To Poor Security At Twitter   Information Security Buzz, August 24, 2022
31. A-Level Results 2022 – Tech Industry Experts React   Information Security Buzz, August 24, 2022
32. Ransomware updates & 1-day exploits   Secure List, August 24, 2022
33. Twitter Whistleblower Complaint: The TL;DR Version   Threat Post, August 24, 2022
34. RansomEXX claims ransomware attack on Sea-Doo, Ski-Doo maker   Bleeping Computer, August 24, 2022
35. Hackers use AiTM attack to monitor Microsoft 365 accounts for BEC scams   Bleeping Computer, August 24, 2022
36. Highlighting What should be Patched First at the Endpoint   Bleeping Computer, August 24, 2022
37. Plex warns users to reset passwords after a data breach   Bleeping Computer, August 24, 2022
38. Fake Chrome extension 'Internet Download Manager' has 200,000 installs   Bleeping Computer, August 24, 2022
39. Pirated 3DMark benchmark tool delivering info-stealer malware   Bleeping Computer, August 24, 2022
40. How attackers use and abuse Microsoft MFA   Help Net Security, August 24, 2022
41. Critical RCE bug in GitLab patched, update ASAP! (CVE-2022-2884)   Help Net Security, August 24, 2022
42. Unusual Microsoft 365 Phishing Campaign Spoofs eFax Via Compromised Dynamics Voice Account   Dark Reading, August 24, 2022
43. Nearly 3 Years Later, SolarWinds CISO Shares 3 Lessons From the Infamous Attack   Dark Reading, August 24, 2022
44. Acronis' Midyear Cyberthreats Report Finds Ransomware Is the No. 1 Threat to Organizations, Projects Damages to Exceed $30 Billion by 2023   Dark Reading, August 24, 2022
45. Why Empathy Is the Key to Better Threat Modeling   Dark Reading, August 24, 2022
46. CyberRatings.org Announces New Web Browser Test Results for 2022   Dark Reading, August 24, 2022
47. Report: Financial Institutions Are Overwhelmed When Facing Growing Firmware Security and Supply Chain Threats   Dark Reading, August 24, 2022
48. Researchers warn of darkverse emerging from the metaverse   CSO from IDG, August 24, 2022
49. Sophisticated BEC scammers bypass Microsoft 365 multi-factor authentication   CSO from IDG, August 24, 2022
50. New ransomware HavanaCrypt poses as Google software update   CSO from IDG, August 24, 2022
51. Why business email compromise still tops ransomware for total losses   CSO from IDG, August 24, 2022
52. Why Phishing Simulation Programs Aren’t Enough   Phish Me, August 24, 2022
53. Compromised Microsoft Dynamic 365 Customer Voice account used for Phishing attack   Phish Me, August 24, 2022
54. Breaching airgap security: using your phone’s compass as a microphone!   Naked Security - Sophos, August 24, 2022
55. Dueling Clauses, or, not all Fraud is the Same   KnowBe4, August 24, 2022
56. [BUDGET AMMO] Companies Are Ditching Cybersecurity Insurance as Premiums Rise, Coverage Shrinks   KnowBe4, August 24, 2022
57. Teach Two Things to Decrease Phishing Attack Success   KnowBe4, August 24, 2022
58. How to Protect Your OT Network — Without Disrupting Operations   Fortinet Blog, August 24, 2022
59. Cyberinsurance exclusions for State-Backed Cyberattacks! - Foley & Lardner LLP   (eDiscovery), August 24, 2022