Kubernetes Security Recommendations Were Published by the NSA and CISA

Kubernetes Security Recommendations Were Published by the NSA and CISA

One of the more popular solutions used when deploying, scaling, and managing containerized apps in the Cloud, the Kubernetes containers are often threat actors’ targets. This is the main reason that made the NSA and CISA publish a set of recommendations to help organizations strengthen their security. Source The 52-page cybersecurity technical report released by…

White House Takes on Securing Critical Infrastructure Control Systems

White House Takes on Securing Critical Infrastructure Control Systems

Attacks targeting critical infrastructure have been on the rise in recent years. Back in 2019, for instance, 56% of utility professionals responsible for overseeing risk in their organizations’ operational technology (OT) assets told Siemens and the Ponemon Institute that they experience at least one shutdown or operational data loss event a year. That’s about the…

Ransomware Attack on Corona Virus Italian Vaccination Registration System

Ransomware Attack on Corona Virus Italian Vaccination Registration System

A Cyber Attack has reportedly disrupted the Corona Virus vaccine registration system from morning hours of today and authorities are clueless on when the digital vaccine registration system will be working normally. Going deep into the details, the population living in Lazio Region, including some from Rome were badly affected by the attack that is…

7 Federal Agencies Still Lack Basic Cybersecurity

7 Federal Agencies Still Lack Basic Cybersecurity

Governance & Risk Management , Government , Industry Specific Congressional Report Highlights a Lack of Progress Doug Olenick (DougOlenick) • August 3, 2021     A congressional report examining eight federal agencies found that seven continue to improperly protect sensitive data and do not meet basic cybersecurity standards. See Also: Live Panel | How Organizations…

SolarWinds hackers compromised email accounts of employees at 27 US Attorneys’ offices

SolarWinds hackers compromised email accounts of employees at 27 US Attorneys’ offices

Threat actors behind the widespread SolarWinds cyberespionage campaign breached Microsoft Office 365 email accounts belonging to employees at 27 US attorneys’ offices, the US Department of Justice said Friday. The list of impacted offices includes several large and high-profile ones like those in New York, Los Angeles, Miami, Washington and the Eastern District of Virginia….

Chinese threat actors compromising telecoms, report warns

Cyber-security firm Cybereason’s ‘DeadRinger’ research has highlighted attack trends emanating from China that leverage third-party service providers to compromise multiple targets. Meanwhile in the UK, cyber-security managers admit to facing increased threats. Cybereason has revealed its discovery of several previously unidentified cyber-attack campaigns infiltrating major telecommunications providers across Southeast Asia. In the report, titled ‘DeadRinger:…

Ransomware Actors Set Up a Call Center to Lure Victims

Ransomware Actors Set Up a Call Center to Lure Victims

Fraud Management & Cybercrime , Fraud Risk Management , Next-Generation Technologies & Secure Development Microsoft Warns of Clever Social Engineering Using ‘BazaCall’ Malware Jeremy Kirk (jeremy_kirk) • August 3, 2021     Ransomware actors have set up a call center to trick victims into running a malicious macro in an Excel document, giving them control…