5 Critical Components of Effective ICS/OT Security
It’s no secret that the industrial control system (ICS) attack surface is rapidly expanding (PDF). From advancements in business digitalization, IT-OT convergence, and Internet of…
Day: March 9, 2023
‘Skinny’ Cyber-Insurance Policies Create Compliance Path
“Everybody says it, so it must be true” is an example of the bandwagon logical fallacy. In the context of cyber insurance, the argument goes…
Iranian APT Targets Female Activists With Mahsa Amini Protest Lures
A well-known Iranian threat group, Cobalt Illusion, has been linked to a spear-phishing campaign that is using the protests surrounding the death of Mahsa Amini…
Critical RCE Bug Opens Fortinet’s Secure Web Gateway to Takeover
Fortinet is warning users to patch a critical remote code execution (RCE) vulnerability in the FortiOS operating system, and in the FortiProxy secure Web gateway.…
New Critical Flaw in FortiOS and FortiProxy Could Give Hackers Remote Access
Fortinet has released fixes to address 15 security flaws, including one critical vulnerability impacting FortiOS and FortiProxy that could enable a threat actor to take…
Iranian Hackers Target Women Involved in Human Rights and Middle East Politics
Iranian state-sponsored actors are continuing to engage in social engineering campaigns targeting researchers by impersonating a U.S. think tank. “Notably the targets in this instance…
Does Your Help Desk Know Who’s Calling?
Phishing, the theft of users’ credentials or sensitive data using social engineering, has been a significant threat since the early days of the internet –…
IceFire Ransomware Exploits IBM Aspera Faspex to Attack Linux-Powered Enterprise Networks
A previously known Windows-based ransomware strain known as IceFire has expanded its focus to target Linux enterprise networks belonging to several media and entertainment sector…
Hackers Exploiting Remote Desktop Software Flaws to Deploy PlugX Malware
Security vulnerabilities in remote desktop programs such as Sunlogin and AweSun are being exploited by threat actors to deploy the PlugX malware. AhnLab Security Emergency…
Cado Security Banks $20M in Series B Funding
Cado Security, a British startup building technology for cloud forensics and incident response, has closed a $20 million funding round to fuel ambitious expansion plans.…
