Ransomware Attacks against Water Treatment Plants
According to a report from CISA last week, there were three ransomware attacks against water treatment plants last year. WWS Sector cyber intrusions from 2019 to early 2021 include: In August 2021, malicious cyber actors used Ghost variant ransomware against a California-based WWS facility. The ransomware variant had been in…
Free BlackByte decryptor released, after researchers say they found flaw in ransomware code
With so much bad news about ransomware in the headlines every day, it’s good to share some good news. Security experts at Trustwave have released a free decryption tool that can be used by BlackByte ransomware victims to decrypt and recover their files. That’s right – you don’t need to…
8 top multifactor authentication products and how to choose an MFA solution
Today’s credential-based attacks are much more sophisticated. Whether it’s advanced phishing techniques, credential stuffing, or even credentials compromised through social engineering or breaches of a third-party service, credentials are easily the most vulnerable point in defending corporate systems. All these attacks key on traditional credentials, usernames and passwords, which are…
Ways To Prevent Supply Chain Attacks
Here, we will show you ways to prevent supply chain attacks. Your supply chain is the lifeblood of your business. When it works properly, you are able to get a lot of work done efficiently while making your customers happy to work with you. But there is a lot of…
Cybersecurity Experts Warn of a Rise in Lyceum Hacker Group Activities in Tunisia
A threat actor, previously known for striking organizations in the energy and telecommunications sectors across the Middle East as early as April 2018, has evolved its malware arsenal to strike two entities in Tunisia. Security researchers at Kaspersky, who presented their findings at the VirusBulletin VB2021 conference earlier this month,…
How To Watch YouTube Videos That Are Blocked In Your Country
Want to watch YouTube videos blocked in your country? Read on! YouTube may be a fantastic and the most popular online video platform. Unfortunately, it has some annoying restrictions as well. One of those irritating things is not being able to watch a video because of a geographical location. The…
Crawler Hints Update: Cloudflare Supports IndexNow and Announces General Availability
In the midst of the hottest summer on record, Cloudflare held its first ever Impact Week. We announced a variety of products and initiatives that aim to make the Internet and our planet a better place, with a focus on environmental, social, and governance projects. Today, we’re excited to share…
Why Database Patching Best Practice Just Doesn’t Work and How to Fix It
Patching really, really matters – patching is what keeps technology solutions from becoming like big blocks of Swiss cheese, with endless security vulnerabilities punching hole after hole into critical solutions. But anyone who's spent any amount of time maintaining systems will know that patching is often easier said than done.…
Tunnel: Cloudflare’s Newest Homeowner
Cloudflare Tunnel connects your infrastructure to Cloudflare. Your team runs a lightweight connector in your environment, cloudflared, and services can reach Cloudflare and your audience through an outbound-only connection without the need for opening up holes in your firewall.Whether the services are internal apps protected with Zero Trust policies, websites…
White House international ransomware initiative outlines hopes and challenges
The White House’s Counter-Ransomware Initiative event, facilitated by the National Security Council (NSC), concluded two days of public-facing and closed-door sessions. Present were ministers and representatives from more than 30 countries and the European Union. [ Learn how recent ransomware attacks define the malware's new age and 5 reasons why…
The Missouri Governor Doesn’t Understand Responsible Disclosure
The Missouri governor wants to prosecute the reporter who discovered a security vulnerability in a state’s website, and then reported it to the state. The newspaper agreed to hold off publishing any story while the department fixed the problem and protected the private information of teachers around the state. […]…
Microsoft’s very bad year for security: A timeline
So far, 2021 has proved to be somewhat of a security annus horribilis for tech giant Microsoft, with numerous vulnerabilities impacting several of its leading services, including Active Directory, Exchange, and Azure. Microsoft is no stranger to being targeted by attackers seeking to exploit known and zero-day vulnerabilities, but the…
6 zero trust myths and misconceptions
Interest in zero trust is surging, according to IDG’s 2020 Security Priorities Study, with 40% of survey respondents saying they are actively researching zero trust technologies, up from only 11% in 2019, and 18% of organizations indicating they already have zero trust solutions, more than double the 8% in 2018.…
Over 30 Countries Pledge to Fight Ransomware Attacks in US-led Global Meeting
Representatives from the U.S., the European Union, and 30 other countries pledged to mitigate the risk of ransomware and harden the financial system from exploitation with the goal of disrupting the ecosystem, calling it an "escalating global security threat with serious economic and security consequences." "From malign operations against local…
Is Your Data Safe? Check Out Some Cybersecurity Master Classes
Since cybersecurity is definitely an issue that’s here to stay, I’ve just checked out the recently released first episodes of Cato Networks Cybersecurity Master Class Series. According to Cato, the series aims to teach and demonstrate cybersecurity tools and best practices; provide research and real-world case studies on cybersecurity; and bring…