Weekly Wrap: Accellion FTA Breaches and More

ByPR 24

Governance & Risk Management
,
Identity & Access Management
,
IT Risk Management

Discussion Tackles Critical Risk Management Issues

Anna Delaney (annamadeline) •
April 1, 2021    



Clockwise, from top left: Suparna Goswami, Anna Delaney, Mathew Schwartz and Tom Field






Four editors at Information Security Media Group discuss important cybersecurity issues, including dealing with attacks targeting the aging Accellion File Transfer appliance and taking steps to enhance employee authentication.

See Also: Live Webinar | Attacks on Cloud Infrastructure



The editors – Suparna Goswami, associate editor, Asia; Anna Delaney, director, productions; Mathew Schwartz, executive editor, Data Breach Today and Europe; and Tom Field, senior vice president, editorial; discuss:


Similar Posts

For Maximum Resiliency, Unleash Chaos Monkeys

For Maximum Resiliency, Unleash Chaos Monkeys

ByPR 24

Governance & Risk Management , IT Risk Management , Security Operations Opening RSA Conference Keynote Speeches Highlight Tactics for Sustainable Resiliency Mathew J. Schwartz (euroinfosec) • May 17, 2021     Could the theme of this year’s RSA Conference be anything other than resiliency? See Also: Webinar | Software Security: Prescriptive vs. Descriptive …

Baron Samedit Tryhackme Writeup. This is a Writeup of Tryhackme room… | by Shamsher khan | Apr, 2021

Baron Samedit Tryhackme Writeup. This is a Writeup of Tryhackme room… | by Shamsher khan | Apr, 2021

ByPR 24

This is a Writeup of Tryhackme room “Baron samedit” https://tryhackme.com/room/sudovulnssamedit Room link: https://tryhackme.com/room/sudovulnssameditNote: This room is free In January 2021, Qualys released a blog post detailing a terrifying new vulnerability in the Unix sudo program. Specifically, this was a heap buffer overflow allowing any user to escalate privileges to root — no misconfigurations required. This…

Hackers use GitHub server infrastructure for cryptomining

Hackers use GitHub server infrastructure for cryptomining

ByPR 24

A group of threat actors maintains an active attack targeting GitHub Actions systems with the intention of extracting cryptocurrency in a hacking variant known as cryptojacking. As you may remember, GitHub Actions is a CI/CD solution that makes it easier to automate particular resource flows, as well as allow for periodic task configuration. Apparently, this…

Belgium Interior Ministry Targeted in Cyber Attack

Belgium Interior Ministry Targeted in Cyber Attack

ByPR 24

The Belgian interior ministry has found itself the target of “sophisticated” cyber espionage, a spokesman told RTBF public television on Tuesday.  The Federal Public Service Interior’s communications director, Olivier Maerens, insisted, however, that the ministry’s servers were well protected and that the hackers had not succeeded in getting hold of the most sensitive data.  Federal…

Ransomware Actors Set Up a Call Center to Lure Victims

Ransomware Actors Set Up a Call Center to Lure Victims

ByPR 24

Fraud Management & Cybercrime , Fraud Risk Management , Next-Generation Technologies & Secure Development Microsoft Warns of Clever Social Engineering Using ‘BazaCall’ Malware Jeremy Kirk (jeremy_kirk) • August 3, 2021     Ransomware actors have set up a call center to trick victims into running a malicious macro in an Excel document, giving them control…

Disgruntled IT Contractor Sentenced in Retaliatory …

Disgruntled IT Contractor Sentenced in Retaliatory …

ByPR 24

Former contractor deleted 1,200 user accounts in revenge. A disgruntled IT contractor worker was sentenced today in federal court for hacking into the server of a Carlsbad, Calif., company and deleting over 1,200 Microsoft user accounts in retaliation for a bad performance review. The unnamed company had to shutter for two days while it dealt…