Tenable

MARCH 17, 2023

Learn about CISA’s new program to help critical infrastructure organizations stamp out vulnerabilities associated with ransomware attacks. 1 - CISA program detects ransomware vulnerabilities in critical infrastructure The U.S. 1 - CISA program detects ransomware vulnerabilities in critical infrastructure The U.S. Plus, a U.S.

Infrastructure 52

Infrastructure Groups ChatGPT Generative AI 52

Tenable

MAY 27, 2021

The Department of Homeland Security has issued key guidance for oil and gas operations in the wake of recent cyberthreats. Here are three practical ways to disrupt attack paths in your OT infrastructure. . The DHS- TSA 2021-1 Pipeline Directive. On May 28, 2021, the U.S. pipeline operations. pipeline operations.

Security 98

Security Guidelines Infrastructure Systems Review 98

Palo Alto Networks

SEPTEMBER 1, 2021

Critical Infrastructure Blog Series. It's only mid-year and already 2021 has proven to be a watershed year of attacks on critical infrastructure (CI). Securing today's CI and operational technology (OT) is paramount. Critical Infrastructure Are Highly Attractive Targets.

Infrastructure 68

Infrastructure Weak Development Team WAN IoT 68

Palo Alto Networks

OCTOBER 1, 2021

I'm excited to share the news that Palo Alto Networks has been recognized as a Leader in the 2021 Gartner Magic Quadrant WAN Edge Infrastructure ! Both enterprises and Managed Service Providers (MSP) continue to select Prisma SD-WAN with its powerful security integrations for a complete secure access service edge (SASE) solution.

WAN 93

WAN Infrastructure Artificial Intelligence Artificial Inteligence 93

Tenable

JANUARY 20, 2023

Plus, NIST mulls major makeover of its Cybersecurity Framework. Also, the struggle to develop secure apps is real. Then check out how Uncle Sam plans to use AI and ML to boost cybersecurity. Almost 70% of organizations' SDLCs are missing critical security processes. Learn all about the spike in CISO job satisfaction.

Software Review 62

Software Review Artificial Inteligence SDLC Technical Review 62

Tenable

APRIL 13, 2021

One month after disclosing four zero-day vulnerabilities in Exchange Server, Microsoft addresses four additional vulnerabilities discovered by the National Security Agency (NSA). On April 13, as part of its April 2021 Patch Tuesday release , Microsoft addressed four critical vulnerabilities in Microsoft Exchange Server. CVE-2021-28480.

Authentication 99

Authentication Network Enterprise Organization 99

Tenable

APRIL 20, 2021

Threat actors are leveraging a zero-day vulnerability in Pulse Connect Secure, for which there is no immediate patch scheduled for release. On April 20, Pulse Secure, which was acquired by Ivanti last year, published an out-of-cycle security advisory (SA44784) regarding a zero-day vulnerability in the Pulse Connect Secure SSL VPN appliance.

Authentication 133

Authentication Malware Research Government 133

Tenable

JULY 14, 2022

Learn about well-known vulnerabilities and attacks and how they affected critical infrastructure — from Phone Phreaking to recent ransomware. Cyberattacks against critical infrastructure are on the rise. Cybersecurity and Infrastructure Security Agency (CISA) — are the most frequent victims of ransomware, according to the study.

Infrastructure 52

Infrastructure Transportation Internet System 52

Tenable

APRIL 15, 2024

But, as it is more integrated into the DIB, OT introduces new security challenges. Ensuring the security of OT systems helps the DoD maintain operational effectiveness, essential to the mobilization, deployment and sustainability of military operations. Manufacturing was the top attacked industry in 2021, reporting 23.2%

Energy 62

Energy Analysis Scalability System 62

Tenable

MARCH 29, 2024

The 52-page report, titled “ Managing Artificial Intelligence-Specific Cybersecurity Risks in the Financial Services Sector, ” touches on cybersecurity and fraud protection; fraud threats; the regulatory landscape; and major challenges and opportunities. This week, the U.K.

Systems Review 65

Systems Review Weak Development Team Banking System 65

Palo Alto Networks

NOVEMBER 22, 2021

What would attract nearly 10,000 security professionals across 100+ countries to take time from a busy life in cyber defense? Palo Alto Networks Ignite — a three-day event, November 15-18, 2021 — brought together customers, executives, technologists, security experts, threat researchers and policy makers.

Weak Development Team 85

Weak Development Team Cloud Network IoT 85

Tenable

NOVEMBER 4, 2022

Get the latest on salary trends for CISOs and cybersecurity pros; CISA’s call for adopting phishing-resistant MFA; the White House’s ransomware summit; and more! and Canada improved this year compared with 2021 as employers paid up to retain their cybersecurity chiefs amidst a shortage of qualified candidates for these jobs.

Trends 102

Trends Authentication Recruiting Banking 102

Tenable

JUNE 23, 2023

Department of Justice announced a reward of up to $10 million for information on the group – or on any attackers targeting U.S. critical infrastructure. That’s why a recent IANS Research blog post about building an incident response process for ransomware caught our eye. Check out the details below.

Cloud 53

Cloud Systems Review Data Disaster Recovery 53

Tenable

OCTOBER 4, 2023

In 2021, the U.S. Infrastructure Investment and Jobs Act created the State and Local Cybersecurity Grant Program (SLCGP) to help state, local, tribal and territorial (SLTT) governments address an ever-evolving cybersecurity threat landscape. Objective 3: Implement security protections commensurate with risk.

Programming 63

Programming Meeting How To Government 63

Tenable

SEPTEMBER 2, 2022

The quantum computing risk for critical infrastructure. Securing machine learning systems. Shifting security left – meaning, starting security checks earlier in the software development process – has been widely hailed. Developers rank a lack of security training and knowledge as their main security-related challenge.

Security 52

Security Software Review Artificial Inteligence Technical Review 52

Tenable

DECEMBER 12, 2021

Apache Log4j Flaw: A Fukushima Moment for the Cybersecurity Industry. Mon, 12/13/2021 - 00:55. The discovery of a critical flaw in the Apache Log4j software is nothing short of a Fukushima moment for the cybersecurity industry. Hide From Blog. Blog Section. Blog Category. Container security.

Industry 111

Industry Open Source System Enterprise 111

Tenable

MAY 25, 2023

Background On May 24, several international agencies — including the Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI) and the National Security Agency (NSA) in the U.S, Reports suggest that the group has been active since “at least 2021.” island territory of Guam.

Malware 52

Malware Windows Groups Internet 52

Tenable

APRIL 12, 2024

Background On April 12, Palo Alto Networks released a security advisory for a critical command injection vulnerability affecting PAN-OS, the custom operating system (OS) Palo Alto Networks (PAN) uses in their next-generation firewalls. Learn more about Tenable One , the Exposure Management Platform for the modern attack surface.

Network 118

Network Firewall Software Review Systems Review 118

Tenable

FEBRUARY 9, 2024

critical infrastructure through exploitation of known vulnerabilities Background On February 8, Fortinet published an advisory (FG-IR-24-015) to address a critical flaw in FortiOS, its network operating system. and international agencies. CISA, NSA and FBI warns of pre-positioning by Volt Typhoon in U.S.

Malware 121

Malware Authentication Infrastructure Analysis 121

Palo Alto Networks

JULY 15, 2021

Having digital readiness and a robust cybersecurity offering is key to growth in this sector. We are thrilled to announce that we have become a member of the Retail and Hospitality Information Security and Analysis Center ( RH-ISAC ) council. We’re excited to help improve retail and hospitality cybersecurity.

Security 71

Security Retail Network IoT 71

Tenable

JULY 15, 2022

Topics that are top of mind for the week ending July 15 | Government cybersecurity efforts tripped by technical debt. Neglect SaaS security at your own risk. Lessons learned about critical infrastructure security. 1 – Don’t downplay SaaS security. A ranking of the most dangerous software weaknesses. And much more!

Weak Development Team 53

Weak Development Team Government Infrastructure Architecture 53

Kaseya

AUGUST 2, 2022

A robust IT infrastructure is undoubtedly the lifeblood of an organization, regardless of size. Small and midsize businesses (SMBs) especially require a reliable and well-designed IT infrastructure to function efficiently and compete with larger companies. Maintaining cybersecurity is essential but challenging.

Survey 105

Survey SMB Cloud Technical Review 105

Cloudera

DECEMBER 13, 2021

On December 10th 2021, the Apache Software Foundation released version 2.15.0 of the Log4j Java logging library, fixing CVE-2021-44228 , a remote code execution vulnerability affecting Log4j 2.0-2.14. The post Cloudera Response to CVE-2021-44228 appeared first on Cloudera Blog.

Software Review 125

Software Review Technical Review Open Source Technical Support 125

Lacework

MAY 5, 2022

At this time, establishing server securing meant focusing on physical measures and preventing unauthorized individuals from accessing the hardware. These eras of cloud computing brought about a massive increase in security breaches and the intensification of criminalization of hackers. What Is Cloud Security?

Cloud 98

Cloud Development Team Review Software Review Systems Review 98

Tenable

AUGUST 4, 2022

Analyzing the Vulnerabilities Associated with the Top Malware Strains of 2021. International cybersecurity agencies issue a joint alert outlining the top malware strains of 2021. CVE-2021-34527. CVE-2021-40444. CVE-2021-43890. This blog post was published on August 4 and reflects VPR at that time.

Malware 74

Malware Windows SMB Groups 74

Tenable

FEBRUARY 3, 2023

Also, check out our ad-hoc poll on cloud security. Given that AI systems feed off of personal data, the International Association of Privacy Professionals (IAPP) looked at organizations’ maturity level in using AI responsibly and securely in its “ Privacy and AI Governance Report”. And much more! 1 - Amid ChatGPT furor, U.S.

ChatGPT 52

ChatGPT Artificial Intelligence Artificial Inteligence Technical Review 52

Xebia

FEBRUARY 19, 2021

We all know that the hardening of a system or implementing 2FA does not magically improves the security of an organisation. Also for the successful improvement of security in your organisation, a holistic approach is needed. Implementing and improving security demands your approach to cover both people, process and technology.

Agile 130

Agile Culture Technical Review Systems Review 130

Tenable

JULY 14, 2021

On July 9, SolarWinds published a security advisory for a significant security vulnerability in its Serv-U Managed File Transfer Server software, used for secure file transfers and file sharing. CVE-2021-35211. CVE-2021-35211 is a memory escape vulnerability in SolarWinds Serv-U Managed File Transfer Server.

Software Review 98

Software Review Systems Review Groups Research 98

Tenable

SEPTEMBER 16, 2022

Several global cybersecurity agencies publish a joint advisory detailing efforts by Iranian-government sponsored threat actors exploiting vulnerabilities to enable ransomware attacks. On September 14, the Cybersecurity and Infrastructure Security Agency along with the National Security Agency, U.S. CVE-2021-44228.

Systems Review 52

Systems Review Software Review Report Authentication 52

Palo Alto Networks

MARCH 29, 2021

Inclusion is a core value at Palo Alto Networks, and this year, in celebration of Women's History Month 2021, we are hearing from employees around the globe about gender equality in the tech and cybersecurity industries – along with some pretty amazing pictures that inspire and amplify the mission of International Women’s Day 2021 (IWD).

Network 98

Network Leadership Culture Technology 98

Tenable

JULY 21, 2021

Oracle addresses 231 CVEs in its third quarterly update of 2021 with 342 patches, including 49 critical updates. On July 20, Oracle released its Critical Patch Update (CPU) for July 2021 , the third quarterly update of the year. This CPU update contains fixes for 231 CVEs in 342 security updates across 26 Oracle product families.

Infrastructure 98

Infrastructure Construction Insurance Authentication 98

Tenable

SEPTEMBER 22, 2023

Department of Homeland Security in its “ Homeland Threat Assessment 2024 ” report. CISA launched the Known Exploited Vulnerabilities (KEV) catalog in November 2021, in order to highlight an important criteria to consider when prioritizing which bugs to fix first: whether a vulnerability has been exploited in the wild. So says the U.S.

Insurance 70

Insurance Trends IoT Software Review 70

Tenable

DECEMBER 2, 2022

Get the latest on Log4Shell’s global remediation status; the need for metaverse security rules; a shutdown of “pig butchering” domains; tips for secure IoT products; an informal poll about AD security; and more! . Cybersecurity and Infrastructure Security Agency (CISA). Log4j guidance from the U.S.

IoT 52

IoT Systems Review Guidelines Technical Review 52

Palo Alto Networks

MAY 5, 2021

Ensuring the underlying security of our 5G-dependent future is a generational challenge and Palo Alto Networks is committed to being at the forefront. We’re honored to announce our selection as a technology partner in the National Cybersecurity Center of Excellence (NCCoE) 5G Cybersecurity project.

Network 96

Network Firewall Government Architecture 96

Tenable

FEBRUARY 17, 2023

Find out why a study says cybersecurity pros will weather staff reductions better than all other employees. That’s according to the (ISC) 2 cybersecurity industry non-profit organization, which this week published the results of a survey of 1,000 C-level business executives from Germany, Japan, Singapore, the U.S. And much more!

Weak Development Team 52

Weak Development Team ChatGPT Infrastructure Report 52

Tenable

SEPTEMBER 14, 2021

Microsoft addresses 60 CVEs in its September 2021 Patch Tuesday release, along with patches for a critical vulnerability in its MSHTML (Trident) engine that was first disclosed in an out-of-band advisory on September 7. This month's Patch Tuesday release includes fixes for: Azure Open Management Infrastructure. 4 Critical. 0 Moderate.

Windows 87

Windows SMB Azure Storage 87

Lacework

SEPTEMBER 6, 2022

One of the only major changes in cybercriminal operations is who their victims are—today, instead of targeting individuals, they’re targeting critical infrastructure. So, why did this shift occur, and which types of critical infrastructure are most at risk? Critical infrastructure is organized into 16 different sectors.

Infrastructure 52

Infrastructure Industry Transportation Malware 52