eSecurity Planet

SEPTEMBER 2, 2024

Users must examine their camera firmware and seek alternative or extra security steps to reduce risk. The problem: CVE-2023-22527 , a severe RCE vulnerability in Atlassian Confluence Data Center and Server, enables unauthenticated remote code execution. Victims of social engineering risked compromised systems and probable data theft.

Risk 59

Risk Firewall Firmware Engineering 59

eSecurity Planet

JANUARY 18, 2024

Cloud storage provides businesses with key benefits, such as flexibility, agility, business continuity, and faster deployment, all of which contribute to overall organizational responsiveness and better security. They cited lower risk, enhanced security, and cost savings as they go through migration.

Risk 126

Risk Backups Encryption DDOS 126

Digital Shadows

OCTOBER 29, 2024

Among these experienced affiliates is the “Scattered Spider” group, known for its custom tools and advanced social engineering skills, which helped RansomHub become the most active ransomware group in Q3 2024 (see Figure 1). In November 2022, IntelBroker reportedly used Endurance to target the US Federal Government.

Ransomware 88

Ransomware Encryption Technology Malware 88

eSecurity Planet

DECEMBER 7, 2023

Users can establish a symmetric key to share private messages through a secure channel, like a password manager. Unfortunately, while symmetric encryption is a faster method, it is also less secure because sharing the key exposes it to theft. It was updated by Chad Kime on December 7, 2023.

Encryption 111

Encryption Passwords Authentication Password Management 111

eSecurity Planet

OCTOBER 9, 2024

In June 2023, the Cybersecurity and Infrastructure Security Agency (CISA) published, alongside other security agencies, a guide on how to secure remote access software and listed other potential vulnerabilities created by these tools. This level of access can be problematic.

Software 64

Software Mobile Authentication Risk 64

Digital Shadows

OCTOBER 29, 2024

Among these experienced affiliates is the “Scattered Spider” group, known for its custom tools and advanced social engineering skills, which helped RansomHub become the most active ransomware group in Q3 2024 (see Figure 1). In November 2022, IntelBroker reportedly used Endurance to target the US Federal Government.

Ransomware 52

Ransomware Encryption Technology Malware 52

eSecurity Planet

MAY 28, 2024

Conduct user awareness training: Incorporate a focused training program into onboarding and workflow process so employees can learn about social engineering strategies, phishing risks, and cloud security best practices. Check out our extensive review on the best DevSecOps tools , covering their use cases, key features, and more.

Risk 72

Risk Cloud Migration DDOS Encryption 72

eSecurity Planet

DECEMBER 19, 2023

As 2023 draws to an end and cybersecurity budgeting is nearly complete, it helps to consider the year’s events and try to predict next year’s trends. 2023 cybersecurity issues will continue: Weak IT fundamentals, poor cybersecurity awareness, and ransomware will still cause problems and make headlines.

Cybersecurity 140

Cybersecurity CISO Government Technology 140