Krebs on Security

JULY 8, 2021

The attackers exploited a vulnerability in software from Kaseya , a Miami-based company whose products help system administrators manage large networks remotely. Mandiant notified Kaseya after hearing about it from Alex Holden , founder and chief technology officer of Milwaukee-based cyber intelligence firm Hold Security.

Software 325

Software Ransomware System Administration Authentication 325

Heimadal Security

FEBRUARY 10, 2025

Complying with the regulation involves a combination of changes to workflows, employee behavior, and technology. There isnt a single turnkey solution that will make you compliant on […] The post 5 Best NIS2 Compliance Software and Solution Providers appeared first on Heimdal Security Blog.

Software 79

Software Government Technology 79

The Last Watchdog

OCTOBER 23, 2024

As small businesses increasingly depend on digital technologies to operate and grow, the risks associated with cyber threats also escalate. INE Security advises businesses to secure their network by using firewalls, encrypting data, and regularly updating security software. Cary, NC, Oct.

Small Business 162

Small Business Data breaches Backups Passwords 162

The Last Watchdog

AUGUST 29, 2023

Related: Pushing the fly-by-wire envelope This is especially true because systems are more interconnected and use more complex commercial software than ever before, meaning a vulnerability in one system could lead to a malicious actor gaining access to more important systems. Risks delineated Still, there have been many other incidents since.

Software 264

Software Risk Artificial Intelligence Cyber Attacks 264

Security Affairs

FEBRUARY 25, 2025

Russia’s NKTsKI warns financial sector organizations about a breach at major Russian IT service and software provider LANIT. LANIT Group (Laboratory of New Information Technologies) is one of Russia’s largest IT service and software providers. ” reads the security breach notification published by GosSOPKA.

Telecommunications 102

Telecommunications Software Technology Healthcare 102

Schneier on Security

JULY 25, 2024

As we experienced last week, a single problem in a small piece of software can take large swaths of the internet and global economy offline. In information technology, brittleness also results from the fact that hundreds of companies, none of which you;ve heard of, each perform a small but essential role in keeping the internet running.

Marketing 347

Marketing Software Internet Internet 347

Krebs on Security

APRIL 20, 2023

We learned some remarkable new details this week about the recent supply-chain attack on VoIP software provider 3CX. “This is the first time Mandiant has seen a software supply chain attack lead to another software supply chain attack,” reads the April 20 Mandiant report. Microsoft Corp.

Malware 323

Malware Software Technology Accountability 323

Krebs on Security

NOVEMBER 19, 2024

The financial technology firm Finastra is investigating the alleged large-scale theft of information from its internal file transfer platform, KrebsOnSecurity has learned. The original October 31 post from abyss0, where they advertise the sale of data from several large banks that are customers of a large financial software company.

Data breaches 285

Data breaches Banking Cybercrime Advertising 285

Security Affairs

OCTOBER 21, 2024

DevHub is a platform designed for developers to access resources, tools, and APIs to build and integrate applications with Cisco’s technologies. It provides a range of development resources, including SDKs (Software Development Kits), documentation, sample code, and learning materials for networking, security, and cloud infrastructure.

Cybercrime 132

Cybercrime Data breaches Technology Banking 132

The Last Watchdog

MARCH 24, 2025

There are two sides to this: 1) assessing a technology vendors cryptoagility efforts in your RFPs as a part of determining third-party tech supplier risk, 2) assessing a technology vendors capability to help you in your PQC migration as technology functionality you can use.

Encryption 130

Encryption Financial Services Technology Risk 130

Schneier on Security

OCTOBER 17, 2022

Suspected members of a European car-theft ring have been arrested : The criminals targeted vehicles with keyless entry and start systems, exploiting the technology to get into the car and drive away. Among those arrested feature the software developers, its resellers and the car thieves who used this tool to steal vehicles.

Hacking 363

Hacking Manufacturing Marketing Software 363

Schneier on Security

MAY 12, 2023

as a broad set of technologies being marketed to companies to help them cut their costs, the question becomes: how do we keep those technologies from working as “capital’s willing executioners”? Yet such software could easily still cause as much harm as McKinsey has. If you think of A.I. Alternatively, if you imagine A.I.

Risk 328

Risk Software Technology Marketing 328

The Last Watchdog

AUGUST 19, 2024

President Biden’s call for the mainstreaming of Software Bill of Materials (SBOMs) is a major step forward. He drew a vivid parallel between food safety and software security. The post Black Hat Fireside Chat: Why grasping the context of code is a recipe for keeping software secure first appeared on The Last Watchdog.

Software 173

Software Internet Internet Accountability 173

Schneier on Security

MARCH 1, 2021

Early in 2020, cyberspace attackers apparently working for the Russian government compromised a piece of widely used network management software made by a company called SolarWinds. For a while, in 2019, the update server’s password for SolarWinds’s network management software was reported to be “solarwinds123.”

Risk 363

Risk Government Marketing Software 363

Schneier on Security

NOVEMBER 15, 2022

The app also provides Egypt’s Ministry of Communications and Information Technology, which created it, with other so-called backdoor privileges, or the ability to scan people’s devices. It can also track people’s locations via smartphone’s built-in GPS and Wi-Fi technologies, according to two of the analysts.

Spyware 335

Spyware Technology Encryption Government 335

The Last Watchdog

DECEMBER 18, 2024

To wrap up our 2024 year-end roundtable, we turn our attention to new technologies and trends that are emerging to help bridge the gaps. Supply chain attacks will intensify through poisoned APIs and unchecked software dependencies. We can expect security teams feeling pressure to adopt new technology quickly.

Risk 173

Risk Threat Detection Technology Phishing 173

Security Affairs

JANUARY 17, 2025

The Unified Extensible Firmware Interface (UEFI) is a specification that defines a software interface between an operating system and platform firmware. The Secure Boot mechanism allows the execution of only software that is trusted by the Original Equipment Manufacturer (OEM). Greenware Technologies, Radix Technologies Ltd.,

Firmware 109

Firmware Technology Software Manufacturing 109

Schneier on Security

MARCH 9, 2021

…26% of companies Positive Technologies tested were vulnerable to WannaCry, which was a threat years ago, and some even vulnerable to Heartbleed. “The most frequent vulnerabilities detected during automated assessment date back to 2013­2017, which indicates a lack of recent software updates,” the reported stated.

Technology 362

Technology Software Malware 362

Krebs on Security

FEBRUARY 18, 2025

Rather, the missives are sent through the Apple iMessage service and through RCS , the functionally equivalent technology on Google phones. “The software can work from anywhere in the world,” Merrill said. Three individuals charged with using ghost tap software at an electronics store in Singapore.

Phishing 274

Phishing Mobile Scams Retail 274

Krebs on Security

DECEMBER 19, 2024

The cracked software is being resold as a cloud-based attack tool by at least two different services, one of which KrebsOnSecurity traced to an information technology firm based in Turkey. Araneida Scanner. LinkedIn finds this same altugsara[.]com Neither Altug Sara nor Bilitro Yazilim responded to requests for comment.

Hacking 225

Hacking Cybercrime Advertising Data breaches 225

Adam Shostack

JANUARY 2, 2025

is unlikely that re-certifying on a new platform is less than weeks of work, and for larger products, it could easily extend to person years of work, to maintain software that's already been sold. We can demand that vendors pay, even many years after the software has shipped.

Software 130

Software Insurance Architecture Government 130

Schneier on Security

JULY 12, 2024

Grace Hopper titled “Future Possibilities: Data, Hardware, Software, and People.” With digital obsolescence threatening many early technological formats, the dilemma surrounding Admiral Hopper’s lecture underscores the critical need for and challenge of digital preservation. So they won’t do anything.

Technology 323

Technology Software 323

Schneier on Security

AUGUST 29, 2023

The facial recognition technology is used by the Maine Bureau of Motor Vehicles to ensure no one obtains multiple credentials or credentials under someone else’s name, said Emily Cook, spokesperson for the secretary of state’s office.

Identity Theft 314

Identity Theft Technology Software 314

SecureWorld News

DECEMBER 23, 2024

Manufacturing systems, especially the ones that work with SCADA technology (Supervisory Control and Data Acquisition), IoT devices, and other critical technologies, depend heavily on efficient IT support to ensure that the downtime is minimal, and the performance is optimal.

Manufacturing 103

Manufacturing IoT Data collection Technology 103

The Last Watchdog

JANUARY 7, 2025

Joining MISA represents a significant milestone, demonstrates the company’s ability to deliver impactful security solutions while increasing adoption of their SCALR XDR offering and helping clients maximize their investment in Microsoft Security technologies. Philadelphia, Pa.,

Risk 130

Risk Penetration Testing Marketing Technology 130

Schneier on Security

FEBRUARY 2, 2023

It’s a controlled setting for what computer hackers do in real life: finding and fixing vulnerabilities in their own systems and exploiting them in others’ It’s the software vulnerability lifecycle. The competition occurred in a specially designed test environment filled with custom software that had never been analyzed or tested.

Artificial Intelligence 320

Artificial Intelligence Technology Software Hacking 320

Schneier on Security

MAY 24, 2024

The last ten years have seen a global market emerge for ready-made software that lets governments surveil their citizens and foreign adversaries alike and to do so more easily than when such work required tradecraft. The last ten years have also been marked by stark failures to control spyware and its precursors and components.

Marketing 327

Marketing Spyware Surveillance Government 327

Schneier on Security

DECEMBER 15, 2022

Security researchers found a software bug in the KmsdBot cryptomining botnet: With no error-checking built in, sending KmsdBot a malformed command­—like its controllers did one day while Akamai was watching­—created a panic crash with an “index out of range” error.

Technology 267

Technology Software 267

Joseph Steinberg

APRIL 25, 2023

It is hardly a secret that, for nearly 30 years, I have been warning about the danger posed to US national security by the simultaneous combination of our growing reliance on Chinese technology, and our general indifference to China’s huge technological “leaps forward” in the realm of cybersecurity.

Cybersecurity 244

Cybersecurity Artificial Intelligence Software Technology 244

Security Affairs

DECEMBER 30, 2024

DevHub is a platform designed for developers to access resources, tools, and APIs to build and integrate applications with Ciscos technologies. It provides a range of development resources, including SDKs (Software Development Kits), documentation, sample code, and learning materials for networking, security, and cloud infrastructure.

Data breaches 125

Data breaches Cybercrime Authentication Technology 125

The Last Watchdog

AUGUST 12, 2024

This is all part of Generative AI and Large Language Models igniting the next massive technological disruption globally. Highlights of what I learned: Coding level The continual monitoring and hardening of business software as it is being rapidly developed, tested and deployed in the field has become a foundational best practice.

Software 290

Software Technology Mobile Cybersecurity 290

The Last Watchdog

MARCH 12, 2025

Unlike conventional tools, its proprietary semantic reasoning technology understands application logic and behavior in real-time, allowing it to detect complex security flawsincluding business logic vulnerabilities, API misconfigurations, and runtime threatsthat other solutions often miss.

Risk 130

Risk Engineering Digital transformation Technology 130

Adam Shostack

JANUARY 2, 2025

Now that Chuck has proven to Acme that even lightweight threat modeling can save money and time, Acme decides to give him a training course so that he can uplevel these skills and apply them consistently to all software he develops. With the right skills to manage the automation, you optimize the value of that technology investment.

Technology 130

Technology Penetration Testing Software Mobile 130

Krebs on Security

JANUARY 7, 2021

The ongoing breach affecting thousands of organizations that relied on backdoored products by network software firm SolarWinds may have jeopardized the privacy of countless sealed court documents on file with the U.S. federal court system, according to a memo released Wednesday by the Administrative Office (AO) of the U.S.

Computers and Electronics 363

Computers and Electronics Software Engineering Accountability 363