By Joe Marshall of Cisco Talos and Paul Smith of Cisco IoT What is this? On December 11th, 2020, the U.S. government and the company SolarWinds disclosed a breach into their SolarWinds Orion Platform network management software. This attack was conducted by a sophisticated and likely nation-state based attacker. SolarWinds Orion is a commonly used network management software … [Read more...] about The SolarWinds Orion Breach, and What You Should Know
Breach
FireEye Breach Detection Guidance – Cisco Blogs
Cisco Blogs / Security / Threat Research / FireEye Breach Detection Guidance Cyber security firm FireEye recently disclosed an incident that was reported to have resulted in the inadvertent disclosure of various internally developed offensive security tools (OSTs) that were used across FireEye red-team engagements. Some of these tools appear to be based on … [Read more...] about FireEye Breach Detection Guidance – Cisco Blogs
(Live) Webinar – XDR and Beyond with Autonomous Breach Protection
Anyone paying attention to the cybersecurity technology market has heard the term XDR - Extended Detection and Response.XDR is a new technology approach that combines multiple protection technologies into a single platform. All the analyst firms are writing about it, and many of the top cybersecurity companies are actively moving into this space.Why is XDR receiving all the … [Read more...] about (Live) Webinar – XDR and Beyond with Autonomous Breach Protection
Former Uber Security Chief Charged Over Covering Up 2016 Data Breach
The federal prosecutors in the United States have charged Uber's former chief security officer, Joe Sullivan, for covering up a massive data breach that the ride-hailing company suffered in 2016.According to the press release published by the U.S. Department of Justice, Sullivan "took deliberate steps to conceal, deflect, and mislead the Federal Trade Commission about the … [Read more...] about Former Uber Security Chief Charged Over Covering Up 2016 Data Breach
Capital One Fined $80 Million for 2019 Data Breach Affecting 106 Million Users
A United States regulator has fined the credit card provider Capital One Financial Corp with $80 million over last year's data breach that exposed the personal information of more than 100 million credit card applicants of Americans.The fine was imposed by the Office of the Comptroller of the Currency (OCC), an independent bureau within the United States Department of the … [Read more...] about Capital One Fined $80 Million for 2019 Data Breach Affecting 106 Million Users
Company Detected Years-Long Breach Only After Hacker Maxed Out Servers’ Storage
What could be even worse than getting hacked?It's the "failure to detect intrusions" that always results in huge losses to the organizations.Utah-based technology company InfoTrax Systems is the latest example of such a security blunder, as the company was breached more than 20 times from May 2014 until March 2016.What's ironic is that the company detected the breach only after … [Read more...] about Company Detected Years-Long Breach Only After Hacker Maxed Out Servers’ Storage
Hackers Breach ZoneAlarm’s Forum Site — Outdated vBulletin to Blame
ZoneAlarm, an internet security software company owned by Israeli cybersecurity firm Check Point Technologies, has suffered a data breach exposing data of its discussion forum users, the company confirmed The Hacker News.With nearly 100 million downloads, ZoneAlarm offers antivirus software, firewall, and additional virus protection solutions to home PC users, small businesses, … [Read more...] about Hackers Breach ZoneAlarm’s Forum Site — Outdated vBulletin to Blame
Relentless Breach Defense Endpoint Protection Platform + Endpoint Detection and Response
As evasive and complex as today’s threats have become, it’s no wonder security professionals in organizations of all sizes are ripping out their legacy antivirus completely in favor of Endpoint Protection Platforms (EPP) and Endpoint Detection and Response (EDR) technologies. Endpoint Protection Platform (EPP) delivers next generation antivirus that stops today’s complex … [Read more...] about Relentless Breach Defense Endpoint Protection Platform + Endpoint Detection and Response
Leading Web Domain Name Registrars Disclose Data Breach
Another day, another massive data breach—this time affecting a leading web technology company, as well as both of its subsidiaries, from where millions of customers around the world have purchased domain names for their websites.The world's top domain registrars Web.com, Network Solutions, and Register.com disclosed a security breach that may have resulted in the theft of … [Read more...] about Leading Web Domain Name Registrars Disclose Data Breach
NordVPN Breach FAQ – What Happened and What’s At Stake?
NordVPN, one of the most popular and widely used VPN services out there, yesterday disclosed details of a security incident that apparently compromised one of its thousands of servers based in Finland.Earlier this week, a security researcher on Twitter disclosed that "NordVPN was compromised at some point," alleging that unknown attackers stole private encryption keys used to … [Read more...] about NordVPN Breach FAQ – What Happened and What’s At Stake?