Medusa ransomware has claimed over 40 victims in the first two months of 2025, including a confirmed attack on a US healthcare organization. This is almost twice the number of Medusa attacks observed in January and February 2024, according to… Read More "Medusa Ransomware Claims 40+ Victims in 2025"
Digital threats have led to new cybersecurity regulations that organizations from various industries must follow. Staying compliant with cybersecurity regulations can be legally required, depending on the type of regulation, and organizations face steep penalties if they are non-compliant. With… Read More "Choosing the Best Cybersecurity Compliance Software"
Mar 07, 2025Ravie LakshmananThreat Intelligence /Vulnerability Threat actors of unknown provenance have been attributed to a malicious campaign predominantly targeting organizations in Japan since January 2025. “The attacker has exploited the vulnerability CVE-2024-4577, a remote code execution (RCE) flaw in… Read More "PHP-CGI RCE Flaw Exploited in Attacks on Japan’s Tech, Telecom, and E-Commerce Sectors"
What is risk management? Risk management is the process of identifying, analyzing, and mitigating uncertainties and threats that can harm your company or organization. No business venture or organizational action can completely avoid risk, of course, and working too hard… Read More "What is risk management? Quantifying and mitigating uncertainty"
Industries that collect user data, such as finance, healthcare, and government, are high-profile targets for DNS attacks because the data is compelling for malicious actors. Incorporating a variety of security mitigations, including Domain Name System Security Extensions to prevent spoofing… Read More "DNS Security Extensions (DNSSEC) and Cybersecurity Risk"
Mar 07, 2025Ravie LakshmananSecurity Breach / Cryptocurrency Safe{Wallet} has revealed that the cybersecurity incident that led to the Bybit $1.5 billion crypto heist is a “highly sophisticated, state-sponsored attack,” stating the North Korean threat actors behind the hack took steps… Read More "Safe{Wallet} Confirms North Korean TraderTraitor Hackers Stole $1.5 Billion in Bybit Heist"
Funktionsweise: Die Qilin-Ransomware nimmt in erster Linie Windows- und Linux-Systeme ins Visier. In Unternehmensnetze hält die Malware meist Einzug über: legitime (gestohlene oder gekaufte) Zugangsdaten und Social-Engineering-Angriffe. Ziele: Qilin greift insbesondere Unternehmen in den USA und Europa an – mit… Read More "11 ruinöse Ransomware-Bedrohungen | CSO Online"
Since the launch of ChatGPT in late 2022, gen AI (generative artificial intelligence) has transformed nearly every facet of our lives, including our professions and workplace environments. Adoption has been driven by employees looking for faster, better ways to perform.… Read More "Unmasking Shadow AI: What Is it and How Can You Manage it?"
For more than a decade now, Russian cyberwarfare has used Ukraine as a test lab for its latest hacking techniques, methods that often target Ukrainians first before they’re deployed more broadly. Now Google is warning of a Russian espionage trick… Read More "A Signal Update Fends Off a Phishing Technique Used in Russian Espionage"
Security wiederum ist wie Qualität kein fertiges Produkt, sondern (wie bereits angemerkt) eine fortlaufende Disziplin. Sicherheit als eine Praxis zu betrachten, die ständig verfeinert werden muss, setzt die dafür nötige Energie frei. Sie sollten es als Segen betrachten, in einem… Read More "Positiv denken für Sicherheitsentscheider: 6 Mindsets, die Sie sofort ablegen sollten"
