‘Automation and DevSecOps ensure the fastest cloud migrations’
In the past year, cloud adoption has grown by 25 percent. Nearly three-quarters of IT organizations run the majority of their workloads in the cloud. The fastest growers are embracing DevSecOps and security automation. That's what Palo Alto Networks concludes in a recent survey.
Annually, Palo A... Read more
STG merges McAfee Enterprise and FireEye in new company called Trellix
Symphony Technology Group (STG) recently merged McAfee Enterprise and FireEye into Trellix, a newly founded company. According to STG, Trellix will offer improved XDR security solutions.
The newly formed security specialist should help companies embrace XDR as the basis for their security strate... Read more
Researchers Bypass MFA system Protecting Box Accounts
Varonis Threat Labs discovered a way to bypass multi-factor authentication (MFA) for Box accounts that use an SMS code for login verification.
Cybersecurity researchers this week revealed details of a bug in Box's multi-factor authentication (MFA) mechanism. Malicious actors could exploit the fa... Read more
Data breaches get bigger, do people still care? We need cyber resilience
There was a time when an enormous data breach would concern people. People were afraid when someone stole their credentials. That feeling seems to have disappeared. Data breaches are as ordinary as DDOS attacks. People don't seem to care anymore. It also means that it has become harder for cybercri... Read more
Microsoft says it observed malware that attacked Ukrainian government
The attack also targeted non-governmental organizations and IT vendors
Microsoft this week admitted that it had observed destructive malware in systems belonging to several Ukrainian government agencies and organisations that work closely with the Ukrainian government. These entities all suffere... Read more
REvil hacking group arrested by Russian intelligence agency
REvil has been busted. The Russian government launched a manhunt for members of the hacking group. The FSB, a Russian intelligence agency, announces that 14 members were arrested and charged.
The FSB searched dozens of homes and detained 14 people. The intelligence agency seized 426 million rubl... Read more
‘More external WordPress plugins with vulnerabilities in 2021’
In a recent study, Risk Based Security concludes that the number of third-party WordPress plugins with vulnerabilities has increased significantly in the past year.
According to the security specialists, 10,359 vulnerabilities were discovered in 2021 among providers of WordPress plugins. A total... Read more
Cyber attack takes down Ukrainian government websites
The attack warned Ukrainians to "be afraid and expect the worst"
Ukraine was the victim of a “massive” cyber-attack this week, with the websites of several government departments including the ministry of foreign affairs and the education ministry knocked out.
Ukrainian officials told Reu... Read more
‘Companies often struggle to implement zero trust policies’
Most companies consider implementing a zero trust policy, but struggle with its actual implementation.
In a survey by Fortinet, over half of the companies indicate difficulties translating a zero trust vision into practical measures and solutions. Especially the lack of consistent authentication... Read more
2022 is the year of API security, Salt Security plays an important role
APIs are tremendously useful and are in use almost everywhere these days. But how do you make sure that attackers can't abuse them? That's the question Salt Security took up in 2016. We spoke with co-founder and CEO Roey Eliyahu and also received a demo of Salt's platform.
APIs are getting a lot... Read more