Deloitte chooses Exabeam for XDR/SIEM capabilities in MXDR
Deloitte has chosen Exabeam for their XDR and SIEM capabilities of their new MXDR offering, which we reported on on more detail yesterday. Exabeam details why Deloitte chose them in a separate release.
Deloitte launched the MXDR suite earlier this week. It consists of the offerings of Zscaler, S... Read more
Google launches anti-phishing alerts in Google Drive
Google will now warn of phishing, malware and ransomware when opening files in Google Drive.
Google Drive integrates with numerous apps to open files in the cloud. Think of Google Docs for .docx's, Adobe Acrobat for .pdf's and Music Player for .mp3's. Although downloading a file has triggered a ... Read more
Deloitte launches Managed Extended Detect and Response platform
Deloitte has finally launched its latest threat detection and response platform, MXDR (Managed Extended Detect and Response). This SaaS platform is designed for "human-powered, flexible, technology-enabled security operations."
Essentially, clients will receive a "composable, unified, integrated... Read more
Data of half a million people at risk in hack on Red Cross
An enormous hack has hit the International Committee of the Red Cross (ICRC). The personal data of as many as 515,000 people has been stolen. The perpetrator of the attack is unknown at this time.
According to the IRCR, the hackers managed to steal personal information from databases of at least... Read more
Zoom was vulnerable to buffer overflows and memory leaks
Project Zero found two vulnerabilities in Zoom, which have since been patched. Clients of users were found to be susceptible to buffer overflows. Data from central Zoom servers was successfully leaked from outside the network.
The vulnerabilities were found by Natalie Silvanovich, a security res... Read more
‘Automation and DevSecOps ensure the fastest cloud migrations’
In the past year, cloud adoption has grown by 25 percent. Nearly three-quarters of IT organizations run the majority of their workloads in the cloud. The fastest growers are embracing DevSecOps and security automation. That's what Palo Alto Networks concludes in a recent survey.
Annually, Palo A... Read more
STG merges McAfee Enterprise and FireEye in new company called Trellix
Symphony Technology Group (STG) recently merged McAfee Enterprise and FireEye into Trellix, a newly founded company. According to STG, Trellix will offer improved XDR security solutions.
The newly formed security specialist should help companies embrace XDR as the basis for their security strate... Read more
Researchers Bypass MFA system Protecting Box Accounts
Varonis Threat Labs discovered a way to bypass multi-factor authentication (MFA) for Box accounts that use an SMS code for login verification.
Cybersecurity researchers this week revealed details of a bug in Box's multi-factor authentication (MFA) mechanism. Malicious actors could exploit the fa... Read more
Data breaches get bigger, do people still care? We need cyber resilience
There was a time when an enormous data breach would concern people. People were afraid when someone stole their credentials. That feeling seems to have disappeared. Data breaches are as ordinary as DDOS attacks. People don't seem to care anymore. It also means that it has become harder for cybercri... Read more
Microsoft says it observed malware that attacked Ukrainian government
The attack also targeted non-governmental organizations and IT vendors
Microsoft this week admitted that it had observed destructive malware in systems belonging to several Ukrainian government agencies and organisations that work closely with the Ukrainian government. These entities all suffere... Read more