eSecurity Planet

JULY 6, 2021

After a series of highly publicized ransomware attacks this spring, the Kaseya attack most resembles the compromise of SolarWinds in late 2020. Kaseya’s flagship product is a remote monitoring and management (RMM) solution called the Virtual Systems Administrator (VSA) and is the product at the center of the current attack.

Ransomware 119

Ransomware B2B Software System Administration 119

Thales Cloud Protection & Licensing

NOVEMBER 24, 2020

Wed, 11/25/2020 - 05:55. While front line defense mechanisms like firewalls, anti-theft, anti-spyware, etc. Do the storage/system administrators also own and manage the encryption keys used for data-at-rest encryption? Mitigating Ransomware Attacks – Decoupling Encryption Keys From Encrypted Data.

Encryption 62

Encryption Ransomware Backups System Administration 62

eSecurity Planet

MARCH 25, 2022

Like in the case of SolarWinds in 2020, masked threat actors aren’t afraid to linger for months during reconnaissance. A few days later, IT systems started malfunctioning with ransom messages following. The system administrator did not configure standard security controls when installing the server in question.

VPN 117

VPN Software Authentication Encryption 117

CyberSecurity Insiders

FEBRUARY 9, 2021

According to Finances Online , most common cybersecurity attack vectors in 2020 include phishing (38%), network intrusions (32%), stolen/lost records (8%), and system misconfiguration (5%). Firewall administration and maintenance. System administration and maintenance. Network security troubleshooting.

B2B 70

B2B Cybersecurity Education Small Business 70

NopSec

MARCH 16, 2020

As for vulnerability identification, there have been lately a flurry of high risk threat-related vulnerabilities affecting remote connectivity systems. Did you have a preferential channel of communication with IT to communicate emergency security patching procedures for remote teleworking systems?

VPN 40

VPN Accountability Risk System Administration 40

Security Boulevard

SEPTEMBER 24, 2021

Patches in those systems can destabilize systems and kill people, so these industries are risk averse. They prefer to mitigate the threat in other ways, such as with firewalls and air gaps. If CISA still has it in their recommendations for election systems, then CISA is wrong. Yes, this approach is controversial.

Software 110

Software Computers and Electronics Accountability Firewall 110

Errata Security

SEPTEMBER 24, 2021

Patches in those systems can destabilize systems and kill people, so these industries are risk averse. They prefer to mitigate the threat in other ways, such as with firewalls and air gaps. If CISA still has it in their recommendations for election systems, then CISA is wrong. Yes, this approach is controversial.

Software 109

Software Computers and Electronics Accountability Firewall 109

eSecurity Planet

SEPTEMBER 10, 2021

The fourth biggest threat to public cloud security identified in CloudPassage’s report is unauthorized access (and growing – 53 percent, up from 42 percent in 2020). A defense-in-depth strategy that includes firewalls, anti-malware, intrusion detection, and access control has long been the standard for endpoint security.

Penetration Testing 131

Penetration Testing Encryption Risk Technology 131

SecureList

OCTOBER 12, 2023

The group started its activities in December 2020 and has been responsible for multiple sets of attacks against high-profile entities in Europe and Asia. ToddyCat is an advanced APT actor that we described in a previous publication last year. It allows the backdoor to receive UDP packets on port 49683.

Encryption 119

Encryption Passwords Malware Firewall 119

Digital Shadows

AUGUST 17, 2021

Going back a bit, it was also the top attack vector in 2020, 2019, 2018, 2017, 2016, and well, hopefully, you get the picture. It could be a system administrator who has access to sensitive defense information and recently just met an attractive fitness influencer on social media (hello, Iran !). Why should I care about Phish?

Phishing 52

Phishing Accountability Social Engineering Mobile 52