Verkada’s Camera Debacle Traces to Publicly Exposed Server

Verkada’s Camera Debacle Traces to Publicly Exposed Server

Endpoint Security , Governance & Risk Management , Internet of Things Security ‘Arson Cat’ Hacker Tillie Kottmann Says She’s Not Worried About Law Enforcement Jeremy Kirk (jeremy_kirk) • March 12, 2021     Photo: Verkada Tales of unsecure IoT cameras come along with regularity. But it’s going to be tough to top the system-wide failure…

Norwalk’s Datto acquires Israeli cybersecurity firm

Norwalk’s Datto acquires Israeli cybersecurity firm

Datto Holding Corp. has acquired BitDam Ltd., an Israeli cyberthreat detection company. The financial terms of the acquisition were not disclosed. Weller BitDam’s cyberdefense platform secures collaboration tools, including M365 and Google Workspace, from ransomware, malware and phishing, by proactively defending against cybersecurity breaches within a user’s inbox, chat or cloud drive. “This acquisition marks…

Cowbell Cyber raises $20mn in Series A funding round

Cowbell Cyber raises $20mn in Series A funding round

AI-powered cyber insurer Cowbell has closed a $20 Million Series A funding round as it looks to scale its offering for continuous underwriting and closed-loop risk management. Cowbell Cyber’s closed-loop approach to cyber risk bundles cybersecurity awareness training, continuous risk assessment, and pre and post-breach risk improvement services. Brewer Lane Ventures led the investment with…

GAO: CISA Has Many Unfinished Tasks

GAO: CISA Has Many Unfinished Tasks

Critical Infrastructure Security , Governance & Risk Management , Government Audit Stresses Need for Better Communication With Companies Scott Ferguson (Ferguson_Writes) • March 12, 2021     Although the Cybersecurity and Infrastructure Security Agency has made significant strides since it was established in 2018, it still has important work to do to fulfill its cybersecurity…

Verkada’s Camera Debacle Traces to Publicly Exposed Server

Verkada’s Camera Debacle Traces to Publicly Exposed Server

Endpoint Security , Governance & Risk Management , Internet of Things Security ‘Arson Cat’ Hacker Tillie Kottmann Says She’s Not Worried About Law Enforcement Jeremy Kirk (jeremy_kirk) • March 12, 2021     Photo: Verkada Tales of unsecure internet-connected cameras come along regularly. But the latest installment seems especially egregious because it involves California-based Verkada,…

At Least 10 APT Groups Exploiting Flaws

At Least 10 APT Groups Exploiting Flaws

Cybercrime , Forensics , Fraud Management & Cybercrime Some Attacks Predate Microsoft Being Alerted to the Vulnerabilities, ESET Says Doug Olenick (DougOlenick) • March 11, 2021     Microsoft Exchange attack timeline (Source: ESET) Serious vulnerabilities in Microsoft Exchange have been exploited by at least 10 advanced persistent threat groups that have been collectively been…

ESET: More Than 10 APT Groups Exploiting Recent Microsoft Exchange Vulnerabilities

ESET: More Than 10 APT Groups Exploiting Recent Microsoft Exchange Vulnerabilities

There are more than 10 different advanced persistent threat (APT) groups exploiting recent Microsoft Exchange vulnerabilities, according to ESET research. Last week, Microsoft released out-of-band patches to fix multiple zero-day vulnerabilities believed to be being exploited by Chinese state-sponsored group Hafnium. The step was taken to protect customers running on-premises versions of Microsoft Exchange Server….