Critical Patch Out for Month-Old Pulse Secure VPN 0-Day Under Attack

A threat actor has leaked approximately 20 million BigBasket user records containing personal information and hashed passwords on a popular hacking forum. BigBasket is a popular Indian online grocery delivery service that allows people to shop online for food and deliver it to their homes. This morning, a well-known seller of data breaches known as…

Defense DOD wants industry to continue with CMMC prep amid program review   The Pentagon wants defense contractors to keep pushing forward with preparing for the implementation of the Cybersecurity Maturity Model Certification program despite pending results from its internal review, which could bring significant changes to the program. Dr. Christine Michienzi, chief technology officer…

3rd Party Risk Management , Breach Notification , Critical Infrastructure Security REvil Malware Suspected of Infecting Scores of IT Management Companies, Clients Akshaya Asokan (asokan_akshaya) • July 3, 2021     UPDATED July 3, 11:30 a.m. EDT See Also: Rapid Digitization and Risk: A Roundtable Preview IT management software vendor Kaseya sustained a suspected…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has provided a new guidance called “Best Practices for MITRE ATT&CK Mapping”, which is designed to help network defenders to better understand adversary behavior. The main objective is to encourage a common language in threat actor analysis, showing threat intelligence analysts how to map attackers…

State television named the suspect as 43-year-old Reza Karimi. It showed a passport-style photograph of a man it identified as Karimi, saying he was born in the nearby city of Kashan, Iran. The report also aired what appeared to be an Interpol “red notice” seeking his arrest. The arrest notice was not immediately accessible on…

Fraud Management & Cybercrime , Fraud Risk Management , Governance & Risk Management Stuart McKenzie of FireEye on the Importance of Testing Defenses Anna Delaney (annamadeline) • April 21, 2021     Stuart McKenzie, SVP, Mandiant Services, EMEA, FireEye Ransomware attacks now routinely feature multifaceted extortion efforts, and defenses need…