4 ways to keep the cybersecurity conversation going after the crisis has passed
CISO Bill Brown knows how high-profile cybersecurity breaches like SolarWinds can raise alarm bells among executives and board members when they become headline news.
Similar Posts
Watering Hole Attack Targeted Florida Water Utilities
Cybercrime , Fraud Management & Cybercrime , Next-Generation Technologies & Secure Development Dragos: Oldsmar City Employee Visited Rigged Site, But There’s No Connection to Incident Jeremy Kirk (jeremy_kirk) • May 19, 2021 The city hall of Oldsmar, Florida (Photo: City of Oldsmar) Investigators at industrial cybersecurity specialist Dragos say an employee of the…
Tips on Enhancing Supply Chain Security
3rd Party Risk Management , Governance & Risk Management , IT Risk Management NIST, CISA Highlight Key Steps to Take Akshaya Asokan (asokan_akshaya) • April 28, 2021 The U.S. Cybersecurity and Infrastructure Security Agency and the National Institute of Standards and Technology have released a report providing insights on how to enhance supply…
CVE-2021-26084 – Alert Detail – Security Database
Executive Summary Informations Name CVE-2021-26084 First vendor Publication 2021-08-30 Vendor Cve Last vendor Modification 2021-08-30 Security-Database Scoring CVSS v3 Cvss vector : N/A Overall CVSS Score NA Base Score NA Environmental Score NA impact SubScore NA Temporal Score NA Exploitabality Sub Score NA Calculate full CVSS 3.0 Vectors scores Security-Database Scoring CVSS v2 Cvss…
Australian businesses stop reporting ransomware attacks over exfiltration doubts – Security
Australian businesses are incorrectly relying on what they think is a loophole in notifiable data breach laws to avoid reporting ransomware infections. The Office of the Australian Information Commissioner (OAIC) warned that “a number of entities” in the six months to June 2021 didn’t report ransomware attacks because they could not prove whether or not…
Newly Patched Peloton API Flaws Exposed Users’ Private Data
Application Security , Endpoint Security , Incident & Breach Response Pen Test Partners: Millions Could Have Had Data Exposed Marianne Kolbasuk McGee (HealthInfoSec) • May 6, 2021 Photo: Peloton Security researchers say API flaws could have exposed the private data of millions of Peloton fitness equipment online service users for months before they…
Microsoft Fixes Exchange Server Zero-Day in May Patch Tuesday
Microsoft fixed 55 vulnerabilities yesterday including three zero-days not thought to have been exploited in the wild, one of which affected the under-fire Exchange Server. This month’s Patch Tuesday is lighter than many have been in recent months, but there were four critical CVEs for admins to address, alongside the three publicly disclosed bugs. Top…