Collaborate Disseminate
The Salt community has been aware of a critical vulnerability in Salt Master versions since late last week. It was informed that the vulnerability has a CVSS rating of 10.0, that Salt Masters should not be exposed to the internet, and that fixes would … Continue reading Critical Vulnerability in Salt Requires Immediate Patching
Guardicore’s open source breach and attack simulation platform Infection Monkey now maps its attack results to the MITRE ATT&CK framework, allowing users to quickly discover internal vulnerabilities and rapidly fix them.
read more
Continue reading New Version of Infection Monkey Maps to MITRE ATT&CK Framework
Endpoint security firm Malwarebytes has launched a new VPN offering targeting work from home and consumer markets, featuring AES 256 encryption, WireGuard VPN protocol, no logging, and virtual servers in more than 30 different countries.
read more
… Continue reading Malwarebytes Unveils New Privacy VPN Service
Randori, a firm that provides an automated red team attack platform, has raised $20 Million in a Series A funding round led by Harmony Partners, and supported by Accomplice, .406 Ventures and Legion Capital.
read more
Continue reading Automated Red Teaming Firm Randori Raises $20 Million
Cybereason Mobile MDR gives enterprises a managed solution that will detect and prevent suspicious activity on mobile devices, while through Cybereason Mobile it provides access to a team of iOS and Android analysts, 24x7x365, for efficient discovery, … Continue reading Cybereason Unveils New Mobile Device Security Offerings
April is a time for tax-related phishing scams, and we haven’t been let down this year despite the dominance of COVID-19-themed phishing campaigns. DMARC should stop phishing, right? Not unless the targeted domain itself is spoofed.
read more
Continue reading Tax Phishing Campaign Reminds of DMARC Limitations
Dramatic Increase in Company Compromises Correlates with Coronavirus-Sparked Lockdowns
At the end of March 2020, researchers detected a spike in the number of firms potentially compromised each week. Previously, the number in Finland per week was… Continue reading Spike in Company Compromises Correlates With Lockdowns
‘Double extortion’ is the term given to an evolving ransomware tactic: first steal confidential data, then encrypt the victim’s files. If the victim doesn’t pay the ransom, expose the data.
read more
Continue reading Double Extortion: Ransomware’s New Normal Combining Encryption with Data Theft
SafeBreach has raised a further $19 million to improve and expand its breach-and-attack simulation platform, which allows customers to assess their security posture against a continuous barrage of genuine, but safe, hacker behaviors.
read more
Continue reading Breach-and-Attack Simulation Firm SafeBreach Raises $19 Million